JP6252341B2 - Electronic information storage medium, information processing method, and information processing program - Google Patents

Description

  The present invention relates to a technical field of an electronic information storage medium such as an IC chip including a non-volatile memory having a data storage area for storing a record having a TLV structure and a buffer area for writing guarantee.

  2. Description of the Related Art Conventionally, in IC chips, a mechanism called “Transaction” has been used to cope with interruption of power supply due to extraction or the like during writing processing to a nonvolatile memory. A transaction refers to a mechanism that can take only a state before or after the start of a specific series of processing. This mechanism prevents the records stored in the data storage area of the nonvolatile memory from being incompletely internal. In Patent Document 1, data is written when an IC card is pulled out from an IC card reader / writer or an instantaneous power interruption occurs while data is being written to a nonvolatile memory write destination. Even if the write process fails, the write data is not destroyed.

  By the way, in an IC chip, when a record (data object) having a TLV (tag, tag, data length (length), and data value (value)) structure is written to a nonvolatile memory, a nonvolatile memory is used to ensure data consistency. The records stored in the memory and the record management information (number of stored records, record check code, etc.) are updated in one transaction. In this transaction, the write guarantee function stores the update record (updated record) in the write guarantee buffer area, updates the record in the data storage area, and commits the update during the transaction. It is configured. If the data length (record length) of the record for update (record to be written in the non-volatile memory) is less than the capacity of the buffer area, even if the update is completed in one transaction and the update is interrupted before committing, Consistency such as records and the number of records can be guaranteed.

Japanese Patent Laid-Open No. 2008-9521

  However, if the data length of the record for update exceeds the capacity of the buffer area, multiple commits are performed. Therefore, if the update is interrupted due to extraction during write processing, data consistency cannot be guaranteed. is there. For example, the data value before the update may be output from the middle, that is, unintended data (halfway data) may be output to the outside.

  Therefore, the present invention provides an electronic information storage medium, information processing capable of avoiding unintended data output to the outside even when the data length of the record for update exceeds the capacity of the buffer area It is an object to provide a method and an information processing program.

  In order to solve the above problem, the invention according to claim 1 is a data storage area for storing a record including at least data indicating a data value and data indicating a data length of the data value, and a buffer. A non-volatile memory having at least an area, and when updating a record in the data storage area with an update record, the data storage area is stored after all or part of the update record is stored in the buffer area. An electronic information storage medium comprising: a processor that updates the record and commits the update, wherein the processor stores a record in the data storage area when a data length of the record for update exceeds a capacity of the buffer area The data indicating the data length included in is updated to a value indicating that there is no data, and the update is committed After the commit by the first update means and the first update means, data indicating a data value corresponding to the capacity of the buffer area among all data included in the update record and included in the record in the data storage area The second update unit that updates the data other than the data indicating the data length and commits the update, and after the commit by the second update unit, is used for the update among all the data included in the update record. Update the remaining non-updated data included in the record in the data storage area with the remaining data that has not been updated, and update all the data included in the update record to update the update. Data used to indicate the data length included in the update record, the data included in the data storage area record Updating data indicating the, characterized in that it comprises a fourth updating means for committing the update, the.

  According to a second aspect of the present invention, in the electronic information storage medium according to the first aspect, a value indicating that there is no data is 0.

  According to a third aspect of the present invention, in the electronic information storage medium according to the first or second aspect, the third update means uses all the data indicating the data value included in the update record for updating. Until the data indicating the data value not used for updating is updated with the data indicating the data value not updated included in the record of the data storage area, and the update is repeatedly committed. To do.

  The invention according to claim 4 is a non-volatile memory having at least a data storage area for storing a record including at least data indicating a data value and data indicating a data length of the data value, and a buffer area And when updating a record in the data storage area with an update record, after all or part of the record in the data storage area is backed up in the buffer area, the record in the data storage area is updated, An information processing method executed by the processor in an electronic information storage medium comprising: a processor that commits an update, wherein a data length of the update record exceeds a capacity of the buffer area; The data indicating the data length included in the record is updated to a value indicating that there is no data. A first update step for committing the update, and data indicating a data value corresponding to the capacity of the buffer area among all data included in the update record after the commit in the first update step, and the data storage area A second update step for updating the data other than the data indicating the data length included in the record, and committing the update; and after the commit in the second update step, all the data included in the update record A third update step of updating the remaining unupdated data included in the record of the data storage area with the remaining data not used for update, and committing the update, and included in the record for update When all the data to be updated is used for updating, the data indicating the data length included in the update record, Updating data indicating the data length included in the record of the data storage area, characterized in that it comprises a fourth updating step of committing the update, the.

  The invention according to claim 5 is a non-volatile memory having at least a data storage area for storing a record including at least data indicating a data value and data indicating a data length of the data value, and a buffer area When updating the record in the data storage area with the update record, after storing all or a part of the update record in the buffer area, the record in the data storage area is updated and the update is performed. Data indicating the data length included in the record of the data storage area when the data length of the record for update exceeds the capacity of the buffer area, the processor in the electronic information storage medium comprising: Update to a value indicating that there is no data and commit the update, and the first update After the commit by the means, the data indicating the data value for the capacity of the buffer area among all the data included in the update record, and the data other than the data indicating the data length included in the record of the data storage area A second update unit that updates the data and commits the update, and after the commit by the second update unit, the remaining data that is not used for update among all the data included in the update record is stored in the data The third update means for updating the remaining unupdated data included in the record in the area and committing the update, and when all the data included in the update record are used for the update, The data indicating the data length included in the record is updated with the data indicating the data length included in the record, and the data Characterized in that to function as a fourth updating means for committing the new.

  According to the present invention, unintended data can be prevented from being output to the outside even when the data length of the update record exceeds the capacity of the buffer area.

1 is a diagram illustrating a schematic configuration example of an IC card 1. FIG. It is a flowchart which shows an example of the process at the time of command reception of CPU10. It is a figure which shows an example of the record of a data storage area, and an example of the record for an update. Records that are read when the data in the data storage area is updated when conventional processing is performed when the update record length exceeds the capacity of the buffer area, and when processing is interrupted before and after the commit FIG. When the processing of the present invention is performed when the update record length exceeds the capacity of the buffer area, data is read in the data storage area and when the process is interrupted before and after the commit. It is a figure which shows a record.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment when the present invention is applied to an IC card.

  First, with reference to FIG. 1, the configuration and functional overview of the IC card 1 according to the present embodiment will be described. FIG. 1 is a diagram illustrating a schematic configuration example of the IC card 1. The IC card 1 is used as a cash card, credit card, employee card or the like. Alternatively, the IC card 1 is incorporated into a communication device such as a smartphone or a mobile phone. The IC chip 1a may be configured by being directly incorporated on a circuit board of a communication device.

  An IC chip 1a is mounted on the IC card 1 as shown in FIG. The IC chip 1a is an example of an electronic information storage medium of the present invention. The IC chip 1a includes a CPU (Central Processing Unit) 10, a RAM (Random Access Memory) 11, a ROM (Read Only Memory) 12, a nonvolatile memory 13, and an I / O circuit 14. The I / O circuit 14 serves as an interface with the external terminal 2. When the IC card 1 is a contact IC card, the I / O circuit 14 is provided with, for example, eight terminals C1 to C8 defined by ISO / IEC7816. For example, the C1 terminal is a power supply terminal, the C2 terminal is a reset terminal, the C3 terminal is a clock terminal, the C5 terminal is a ground terminal, and the C7 terminal is a terminal that performs data communication with the external terminal 2. In this example, an example of a contact type IC card is shown. However, by approaching the external terminal 2, a non-contact type IC that operates by being supplied with power (voltage is applied) in a non-connected state using a magnetic field as energy. It may be a card (including an antenna and a modem circuit). Examples of the external terminal 2 include an IC card issuing machine, ATM, ticket gate, and authentication gate. Alternatively, when the IC card 1 is incorporated in a communication device, the external terminal 2 corresponds to a controller responsible for the function of the communication device.

  The CPU 10 is a processor (computer) that executes a program (including the information processing program of the present invention) stored in the ROM 12 or the nonvolatile memory 13. CPU10 performs the process mentioned later according to the memorize | stored program. As the nonvolatile memory 13, for example, a flash memory is applied. The nonvolatile memory 13 may be “Electrically Erasable Programmable Read-Only Memory”. The nonvolatile memory 13 has a data storage area, a write guarantee buffer area, and the like. In the data storage area, for example, a plurality of files having a hierarchical structure composed of MF (Master File), DF (Dedicated File), EF (Elementary File), etc. defined by ISO / IEC7816-4 are defined. . The MF is positioned at the highest level in the file structure in the data storage area, and the DF and EF are positioned in the lower hierarchy of the MF. The DF is provided for each application program, for example. The EF is a record file that stores a plurality of records (data objects) used in an application program stored in the DF, for example. The record includes data indicating a tag (Tag) which is an identifier of the record, data indicating a data length (Length) of a data value (Value), and data indicating a data value (Value). Note that a data error detection code (for example, CRC (Cyclic Redundancy Check)) corresponding to each page and the number of records are stored in the data storage area as record management information. A page refers to a minimum unit (for example, 128 bytes, 256 bytes, or 512 bytes) in which data is read and written.

  When the CPU 10 updates a record in the data storage area with an update record designated by a command (for example, a write command) received from the external terminal 2 via the I / O circuit 14, for example, It is assumed that after all or part of the update record (updated record) is stored in the buffer area, the record in the data storage area is updated and the update is committed.

  The CPU 10 functions as a first updating unit, a second updating unit, a third updating unit, and a fourth updating unit in the present invention. Specifically, when the data length of the update record (record data) specified by the command (hereinafter referred to as “update record length”) exceeds the capacity of the buffer area, the CPU 10 includes the update record (record data). The data indicating the tag (Tag) included in the data storage area record is updated with the data indicating the tag (Tag), and the data indicating the data length (Length) included in the record in the data storage area is updated. Update to a value (eg, 0) indicating that there is no, and commit the update (first commit).

  Here, the command is transmitted from the external terminal 2 as, for example, an APDU (Application Protocol Data Unit). A command sent as an APDU includes a CLA part, an INS part, a P1 part, a P2 part, an Lc part, a Data part, and a Le part. The CLA part and the INS part store information indicating the type of command. The P1 part and the P2 part store parameters in command processing. The Lc part stores the data length of the Data part (in this embodiment, the update record length). The Data section stores an update record (record data). The Le part stores information for checking a command. The commit is a process for confirming the update of the record. For example, the commit is a process for setting the update completion flag stored for each record to “1”. In other words, the commit can be said to be a process of reflecting the data stored in the buffer area to the data storage area and setting the update completion flag to “1”.

  After the first commit, the CPU 10 includes data indicating a data value (Value) corresponding to the capacity of the buffer area among all data included in the update record (that is, a part of data indicating the data value (Value)). , Update data other than data indicating the tag (Tag) and data length (Length) included in the record of the data storage area (for example, a part of data indicating the data value (Value)), and commit the update (2 Commit the second time). Then, after the second commit, the CPU 10 is the data indicating the remaining data value (Value) that is not used for the update among all the data included in the update record, and is updated in the record in the data storage area. Data indicating the remaining data value (Value) that has not been updated is updated, and the update is committed (third commit). Then, after the third commit, the CPU 10 indicates the data length (Length) included in the update record when all the data indicating the data value (Value) included in the update record is used for the update. The data is updated with data indicating the data length (Length) included in the record in the data storage area, and the update is committed (fourth commit). Note that after the second commit, the CPU 10 indicates data values (Values) that are not used for updating until all of the data values (Values) included in the update record are used for updating. Thus, updating the data indicating the data value (Value) that has not been updated included in the record in the data storage area and committing the update is repeated.

  Next, an example of processing when the CPU 10 receives a command in the IC card 1a will be described with reference to FIGS. FIG. 2 is a flowchart showing an example of processing when the CPU 10 receives a command. FIG. 3 is a diagram illustrating an example of a record in the data storage area and an example of an update record. In the example of FIG. 3, the data length of the record in the data storage area (hereinafter referred to as “stored record length”) is 25 bytes (FIG. 3A), and the update record length of the update record is 20 bytes. Yes (FIG. 3B). In the example of FIG. 3, the data included in each of the record in the data storage area and the record for update is represented by a hexadecimal number (h). For example, data indicating the data length (Length) included in the record in the data storage area is 17 (h), which is 23 in decimal. Therefore, the data length of the data indicating the data value (Value) included in the record in the data storage area is 23 bytes. On the other hand, data indicating the data length (Length) included in the update record is 12 (h), which is 18 in decimal. Therefore, the data length of the data indicating the data value (Value) included in the record in the data storage area is 18 bytes.

  The processing shown in FIG. 2 is started when the CPU 10 receives a command from the external terminal 2 via the I / O circuit 14, for example. When the processing shown in FIG. 2 is started, the CPU 10 determines whether or not the update record length of the update record designated by the received command exceeds the capacity of the buffer area (step S1). When the CPU 10 determines that the update record length does not exceed the capacity of the buffer area (step S1: NO), the CPU 10 proceeds to step S2. Note that the processing in steps S2 to S6 is the same as the conventional processing. On the other hand, if the CPU 10 determines that the update record length exceeds the capacity of the buffer area (step S1: YES), the CPU 10 proceeds to step S7.

  In step S2, the CPU 10 starts a transaction and stores an update record included in the received command in the buffer area. Next, the CPU 10 updates (overwrites) a record in the data storage area (that is, data indicating a tag (Tag), a data length (Length), and a data value (Value)) with an update record stored in the buffer area. (Data reflection)) (step S3). Next, the CPU 10 updates the record management information (step S4). In updating the record management information, for example, the CRC of the updated record is calculated and stored. Next, the CPU 10 ends the transaction (step S5), commits the update in step S3 and step S4 (step S6), and ends the process shown in FIG.

  Here, a case where the conventional process is performed when the update record length exceeds the capacity of the buffer area will be described. Fig. 4 shows how the data in the data storage area is updated when the conventional processing is performed when the update record length exceeds the capacity of the buffer area, and when the processing is interrupted before and after the commit. It is a figure which shows the record (read record) read. In the example of FIG. 4, the capacity of the write guarantee buffer area in the nonvolatile memory 13 is 16 bytes. In this case, out of all the data included in the record for update, of the data for the capacity of the buffer area from the beginning (that is, a part of the record to be updated), The data corresponding to the capacity of the buffer area is updated from the beginning of the data (FIG. 4 (2)). Then, the first commit is performed (FIG. 4 (3)). After that, of all the data included in the update record, the remaining data that is not used for update (that is, a part of the data indicating the data value (Value)) is updated in the data storage area record. The remaining remaining data is updated (FIG. 4 (4)), and the second commit is performed (FIG. 4 (5)). As described above, when the conventional process is performed, the data included in the read record when the process is interrupted before the completion of the second commit is halfway data as illustrated in FIG. That is, since the data indicating the data length (Length) included in the record has been committed to 12 (h), the data indicating the data value (Value) included in the record is the updated data and the data before the update. Data will be mixed. Such half-finished data cannot be determined abnormally by CRC (since commit is performed after CRC calculation), and therefore, is output as correct data.

  On the other hand, FIG. 5 shows how data in the data storage area is updated when the process of the present invention is performed when the update record length exceeds the capacity of the buffer area, and the process before and after the commit. It is a figure which shows the record read when interrupted. In the example of FIG. 5 as well, the capacity of the write guarantee buffer area in the nonvolatile memory 13 is 16 bytes. In this case, in step S7, the CPU 10 starts a transaction, and among all data included in the update record included in the received command, data indicating a tag (Tag) and a value indicating that there is no data (for example, , 00 (h)) (that is, a part of the record to be updated) is stored in the buffer area. Next, the CPU 10 updates the data indicating the tag (Tag) included in the data storage area record with the data indicating the tag (Tag) stored in the buffer area, and the data included in the data storage area record. The data indicating the length (Length) is updated (overwritten with 00 (h)) to, for example, 00 (h) (“value indicating no data” stored in the buffer area) (step S8, FIG. 5 (2)). )). Next, the CPU 10 ends the transaction (step S9), and commits the update at step S8 (first commit) (step S10, FIG. 5 (3)).

  Next, the CPU 10 determines whether or not the data length of the data indicating the unupdated data value (Value) exceeds the capacity of the buffer area (step S11). Here, the data indicating the unupdated data value (Value) is data that is not used for updating among the data indicating the data value (Value) included in the update record. When the CPU 10 determines that the data length of the data indicating the unupdated data value (Value) exceeds the capacity of the buffer area (step S11: YES), the CPU 10 proceeds to step S12. On the other hand, when the CPU 10 determines that the data length of the data indicating the unupdated data value (Value) does not exceed the capacity of the buffer area (step S11: NO), the CPU 10 proceeds to step S16.

  In step S12, the CPU 10 starts the transaction, and among the data indicating the data value (Value) that is not used for the update included in the update record, the data corresponding to the capacity of the buffer area (that is, the data value ( A part of data indicating Value) is stored in the buffer area. Next, the CPU 10 uses the data indicating the data value (Value) stored in the buffer area (remaining data not used for update), and the unupdated data value (Value) included in the record in the data storage area. The data shown is updated (step S13, FIG. 5 (4)). Next, the CPU 10 ends the transaction (step S14), commits the update in step S13 (second commit) (step S15, FIG. 5 (5)), and returns to step S11. The processes in steps S11 to S15 are repeated until all of the data indicating the data value (Value) included in the update record is used for the update.

  In step S <b> 16, the CPU 10 starts a transaction and stores data indicating a data value (Value) that is not used for the update included in the update record in the buffer area. Next, the CPU 10 updates the data indicating the unupdated data value (Value) included in the record of the data storage area with the data indicating the remaining data value (Value) stored in the buffer area (Step S17, FIG. 5 (6)). Next, the CPU 10 ends the transaction (step S18) and commits the update at step S17 (third commit) (step S19, FIG. 5 (7)).

  Next, in step S20, the CPU 10 starts a transaction and stores data indicating the data length (Length) included in the update record in the buffer area. Next, the CPU 10 updates the data indicating the data length (Length) included in the record of the data storage area with the data indicating the data length (Length) stored in the buffer area (step S21, FIG. 5 (8)). . Next, the CPU 10 updates the record management information as in step S4 (step S22). Next, the CPU 10 ends the transaction (step S23), and commits the update in step S20 (the fourth commit) (step S24, FIG. 5 (9)).

  As described above, when the processing of the present invention is performed, the data included in the read record when the processing is interrupted before the completion of the fourth commit is included in the record as shown in FIG. Since the data indicating the data length (Length) has been committed at 00 (h), there is no data indicating the data value (Value) included in the record. Therefore, halfway data is not output.

  As described above, according to the above embodiment, when the update record length exceeds the capacity of the buffer area, the data indicating the data length (Length) included in the record in the data storage area is replaced with a value indicating that there is no data. After updating to (for example, 0) and committing the update, the data indicating the data value (Value) included in the record in the data storage area is updated and committed, and the data value (Value) included in the update record is updated. When all of the data indicating is used for updating, the data indicating the data length (Length) included in the record in the data storage area is updated with the data indicating the data length (Length) included in the update record, Since the configuration is such that the update is committed, even if the update record length exceeds the capacity of the buffer area, unintended data (half-finished data) Output) to the outside can be avoided.

1 IC card 1a IC chip 2 external terminal 10 CPU
11 RAM
12 ROM
13 Non-volatile memory 14 I / O circuit

Claims (5)

A non-volatile memory having at least a data storage area for storing a record including data indicating at least a data value and data indicating a data length of the data value, and a buffer area;
When updating a record in the data storage area with an update record, after storing all or part of the update record in the buffer area, update the record in the data storage area and commit the update An electronic information storage medium comprising:
The processor is
If the data length of the record for update exceeds the capacity of the buffer area, the data indicating the data length included in the record in the data storage area is updated to a value indicating no data, and the update is committed First updating means for
Data indicating the data value corresponding to the capacity of the buffer area among all data included in the update record after committing by the first update means, and indicating the data length included in the record in the data storage area A second update means for updating the data other than and committing the update;
After the commit by the second update means, the remaining data not updated in the data storage area is updated with the remaining data not used for updating among all the data included in the update record. A third updating means for committing the update;
When all data included in the update record is used for update, the data indicating the data length included in the record in the data storage area is updated with data indicating the data length included in the update record. A fourth update means for committing the update;
An electronic information storage medium comprising:   The electronic information storage medium according to claim 1, wherein a value indicating that there is no data is 0.   The third updating means is a data indicating a data value that is not used for updating until all the data indicating the data value included in the update record is used for updating, and is stored in the record of the data storage area. The electronic information storage medium according to claim 1, wherein the data indicating the non-updated data value contained therein is updated and the update is committed repeatedly. A non-volatile memory having at least a data storage area for storing a record including data indicating at least a data value and data indicating a data length of the data value, and a buffer area;
When updating a record in the data storage area with an update record, after storing all or part of the update record in the buffer area, update the record in the data storage area and commit the update An information processing method executed by the processor in an electronic information storage medium comprising:
If the data length of the record for update exceeds the capacity of the buffer area, the data indicating the data length included in the record in the data storage area is updated to a value indicating no data, and the update is committed A first updating step,
Data indicating a data value corresponding to the capacity of the buffer area among all data included in the update record after commit in the first update step, and indicating the data length included in the record in the data storage area A second update step of updating the data other than and committing the update;
After the commit in the second update step, the remaining unupdated data included in the record in the data storage area is updated with the remaining data that is not used for update among all the data included in the update record. And a third update step for committing the update,
When all data included in the update record is used for update, the data indicating the data length included in the record in the data storage area is updated with data indicating the data length included in the update record. A fourth update step for committing the update;
An information processing method comprising: A non-volatile memory having at least a data storage area for storing a record including data indicating at least a data value and data indicating a data length of the data value, and a buffer area;
When updating a record in the data storage area with an update record, after storing all or part of the update record in the buffer area, update the record in the data storage area and commit the update A processor in an electronic information storage medium comprising:
If the data length of the record for update exceeds the capacity of the buffer area, the data indicating the data length included in the record in the data storage area is updated to a value indicating no data, and the update is committed First updating means for
Data indicating the data value corresponding to the capacity of the buffer area among all data included in the update record after committing by the first update means, and indicating the data length included in the record in the data storage area A second update means for updating the data other than and committing the update;
After the commit by the second update means, the remaining data not updated in the data storage area is updated with the remaining data not used for updating among all the data included in the update record. A third updating means for committing the update;
When all data included in the update record is used for update, the data indicating the data length included in the record in the data storage area is updated with data indicating the data length included in the update record. And an information processing program that functions as fourth update means for committing the update.

Images