JPH11259289A - Ic card, ic card connecting device, ic card system and ic card control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily and inexpensively facilitate a countermeasure even to the change of a program, and to ensure high security. SOLUTION: An IC card 2 generates certification data by operating a compression processing or an encipherment processing to stored program data so that it is not necessary to store the certification data in the IC card 2, and that it is possible to prevent the certification data from leaking to the outside, and that it is difficult to alter certification code data. Therefore, a program executing function for ensuring high security can be realized by making it extremely difficult to illegally execute the stored program data. Also, the storage of the program data is operated by using an easily updateable non-volatile memory such as an EEPROM 14 so that it is possible to easily and inexpensively facilitate a countermeasure even to the change of the program.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to an IC card, an IC
The present invention relates to a card connection device, an IC card system, and an IC card control method, and particularly relates to an IC having a rewritable memory.
IC card, IC card connection device, IC card system, and IC capable of ensuring card security
The present invention relates to a method for controlling a card.

[0002]

2. Description of the Related Art In an IC card requiring high security, an operating system (OS) is used.
System) is fixed by standards and specifications, and is stored in an IC card in the form of a mask ROM. In addition, the OS program is EE-compliant to more easily support custom products.
An IC card configured to be stored in a PROM is also known.

[0003]

However, in a configuration in which a program is stored in a mask ROM, a new mask ROM must be manufactured every time the program is changed, which requires time and cost for manufacturing a mask ROM chip. There was a problem that it would.

On the other hand, in an IC card of a type in which a program is stored in a rewritable EEPROM or the like,
Although the rewriting of the program is easy and the program can be flexibly changed, there is a problem that it is difficult to secure high security because the rewriting is easy.

Accordingly, an object of the present invention is to provide a program which can easily and at low cost respond to a program change, and which can ensure high security.
It is an object to provide a C card, an IC card connection device, an IC card system, and a method for controlling an IC card.

[0006]

According to another aspect of the present invention, there is provided a computer-readable storage medium storing a program storing means for storing program data in an updatable manner, and a program specific to the program data based on the program data. An original authentication data generation storage unit for generating and storing authentication data;
Authentication data generating means for generating authentication data by performing a predetermined operation on the original authentication data for program data corresponding to a program instructed to be executed from the outside of the program data stored in the program storage means And a determining means for determining whether or not the reference authentication data input from the outside and the authentication data match, and, based on the determination, when the reference authentication data and the authentication data do not match, Execution inhibiting means for inhibiting execution of the program.

A second aspect of the present invention is characterized in that, in the first aspect, the original authentication data generating means generates the original authentication data by compressing the program data. According to a third aspect of the present invention,
3. The configuration according to claim 1, wherein the authentication data generation unit generates and outputs random number data, and a predetermined encryption preset based on the random number data and the original authentication data. Encryption means for performing processing and generating the authentication data.

According to a fourth aspect of the present invention, in the configuration of the third aspect, the encryption unit includes a key data storage unit capable of storing a plurality of key data required for encryption, and a key instruction input from outside. Encryption processing means for performing the encryption processing using the key data corresponding to the data.

According to a fifth aspect of the present invention, in the configuration according to any one of the first to fourth aspects, when the program data input from the outside is stored in the program storage means, Is set as non-executable program data for which execution of the corresponding program is not permitted.

According to a sixth aspect of the present invention, in the configuration of the fifth aspect, the executable program setting means, when the original authentication data is generated for the non-executable program data, the non-executable program data Is set as executable program data.

According to a seventh aspect of the present invention, an IC connected to the IC card according to any one of the first to sixth aspects is provided.
A card connection device, wherein, among the program data stored in the program storage means, the program data corresponding to a program to be executed is specified, and a program execution for instructing the IC card to execute the program data is specified. Instruction means, original reference authentication data storage means for previously storing the original authentication data corresponding to the specified program as original reference authentication data, and the predetermined operation in the authentication data generating means for the original reference authentication data. It is characterized by comprising reference authentication data generation means for generating the reference authentication data by performing the same operation, and reference authentication data output means for outputting the reference authentication data to the determination means.

[0012] The structure of claim 8 is the same as that of claim 4.
An IC card connection device connected to a C card, wherein, among the program data stored in the program storage means, the program data corresponding to a program to be executed is specified. Program execution instructing means for instructing the execution, original reference authentication data storage means for previously storing the original authentication data corresponding to the specified program as original reference authentication data, and key data storage means for storing a plurality of the key data A key instruction data output unit that outputs the key instruction data to the encryption unit; and a key data corresponding to the key instruction data, based on the random number data and the original authentication data input from the IC card. Performs the same processing as the encryption processing means to generate the reference authentication data. Means, to said determination means, a reference authentication data output means for outputting the reference authentication data,
It is characterized by having.

According to a ninth aspect of the present invention, there is provided an IC card according to any one of the first to sixth aspects, and an IC card connection device according to the seventh aspect. According to a tenth aspect of the present invention, there is provided an IC card according to the fourth aspect, and a host device according to the eighth aspect.

According to a eleventh aspect of the present invention, in the control method of an IC card having storage means for storing program data in an updatable manner in advance, original authentication data unique to the program data based on the stored program data. Generating authentication data, generating authentication data by performing a predetermined operation on the original authentication data, and matching the input reference authentication data with the generated authentication data. A determination step of determining whether or not, based on the determination, when the reference authentication data and the authentication data match, an execution permission step of permitting execution of a program corresponding to the program data, It is characterized by having.

[0015]

Preferred embodiments of the present invention will now be described with reference to the drawings. [1] Schematic Configuration of IC Card System A schematic configuration block diagram of the IC card system of FIG. 1 is shown. The IC card system 1 includes an IC card 2 and an IC card connection device 3 that rewrites program data for the IC card 2 and performs various processes based on output data of the IC card 2.

The IC card connection device 3 includes an IC card reader / writer 3A for reading / writing data in the IC card 2, and an IC card connection device main body 3B for performing various processes.
And a display device 3C for displaying various information.

[2] Schematic Configuration of IC Card FIG. 2 shows a schematic configuration block diagram of the IC card. The IC card 2 includes a CPU 11 that controls the entire IC card 2.
And a coprocessor 12 capable of performing a power-residue operation necessary for the encryption processing, a ROM 13 storing a boot program and various fixed data, and electrically rewriting data, and storing program data and the like. It is configured to include an EEPROM 14 for storing updatable data and a RAM 15 for temporarily storing various data.

Further, the IC card 2 has a high potential side power supply terminal VCC and a low potential side power supply terminal GND for supplying power from the outside, a reset terminal RST for inputting a reset signal from the IC card connection device 3 side, I / O terminal for transmitting / receiving data to / from the IC card connection device 3
An I / O and a clock terminal CLK to which a system clock signal is input from the IC card connection device 3 are provided.

[3] File Structure in EEPROM Here, the file structure in the EEPROM 14 will be described with reference to FIGS. The EEPROM 14 is
When roughly classified, it is configured to include a system management area 21 and a data storage area 22.

[3.1] Configuration of System Management Area The system management area 21 is a program storage file area in which a program storage file 31 corresponding to various information on the actual program data storage area and storage status is stored. 25 and a key storage file 32 corresponding to various kinds of information about the encryption key used for the encryption process.
And a seed file area 27 in which a seed file 33 corresponding to information for generating random numbers is stored.

[3.1.1] Format of Program Storage File FIG. 4A shows the format of the program storage file. The program storage file 31 includes file number data 35 corresponding to the file number assigned to the program data, storage head address data 36 indicating the head address at which the program data corresponding to the file number data 35 is actually stored, The final address data 37 indicating the final address where the program data corresponding to the file number data 35 is actually stored, and the compressed data obtained by performing a predetermined compression process on the program data are stored in a compressed value indicating the storage address. It comprises address data 38 and an execution flag 39 indicating whether or not the program data corresponding to the file number data 35 is executable program data.

[3.1.2] Format of Key Storage File FIG. 4B shows the format of the key storage file. The key storage file 32 includes file number data 41 corresponding to the file number assigned to the encryption key data, and storage start address data 42 indicating the start address where the encryption key data corresponding to the file number data 41 is actually stored. And storage type final address data 43 indicating the last address at which the encryption key data corresponding to the file number data 41 is actually stored, and key type data 44 indicating the type of the encryption key data. I have.

[3.2] Configuration of Data Storage Area The data storage area 22 includes a program file area 46 in which a program file 45 corresponding to the program storage file 31 is stored, and encryption key data corresponding to the key storage file 32. 47, and an encryption key data area 48 in which encryption key data storing 47 is stored. The program file 45 includes program data 49 corresponding to an actual program and compressed value data 50 obtained by performing a predetermined compression process on the program data 49.

[4] Description of Operation Next, referring to FIGS. 5 to 9, the operation from the program data storage processing of the IC card 2 to the execution processing based on the program data stored in the IC card will be described. Will be mainly described.

FIG. 5 shows a main processing flowchart of the IC card 2. First, the CPU 11 of the IC card 2
A reception process for receiving data such as command data from the IC card connection device 3 via the / O port is performed (step S1).

Next, the CPU 11 determines whether or not the data received in the receiving process includes continuous data (step S2). If the determination in step S2 includes continuous data, the CPU 11 shifts to the processing in step S9 described below.

If the determination in step S2 does not include the continuous data, the CPU 11 determines whether or not the received data is execution command data (step S2).
3). Here, the execution command data is an EEPROM
14 is a command for designating a file number of program data already stored in the storage device 14 and in an executable state, and executing a program corresponding to the program data.

If it is determined in step S3 that the received data is execution command data, execution command processing described below is performed (step S4), and response processing (step S5) and transmission processing to the IC card connection device side are performed. Perform (Step S6) and end the process.

If the data received in step S3 is not the execution command data, the CPU 11
Determines whether the received data is executable command data (step S7). Here, the executable command data is an instruction for designating a file number of program data which is already stored in the EEPROM 14 but is not yet in an executable state to make the program data in an executable state. It is.

If it is determined in step S7 that the received data is executable command data, an executable command process described later is performed (step S8), a response process (step S5), and transmission to the IC card connection device side is performed. The process is performed (step S6), and the process ends.

If it is determined in step S7 that the received data is not executable command data, the CPU
No. 11 determines whether the received data is stored command data (step S9). Here, the storage command data is an instruction for causing the EEPROM 14 to store new program data.

If it is determined in step S9 that the received data is the storage line command data, a storage command process described below is performed (step S10), a response process (step S5), and a transmission process to the IC card connection device side. Is performed (step S6), and the process ends.

If it is determined in step S9 that the received data is not the stored command data, the CPU 11
Determines whether the received data is random number command data for requesting random number generation (step S11). Here, the random number command data means that a random number is generated and IC
This is a command for causing the card connection device 3 to output.

If it is determined in step S11 that the received data is random number command data, a random number generation command process described below is performed (step S12), a response process (step S5), and a transmission process to the IC card connection device side. Is performed (step S6), and the process ends.

If it is determined in step S11 that the received data is not random number command data, it is determined that there is a reception error in which the corresponding command data does not exist, error processing such as error notification is performed, and response processing ( Step S5) and the transmission process to the IC card connection device side are performed (step S6), and the process ends.

[4.1] Stored Command Processing Next, the stored command processing will be described with reference to FIGS. 6 and 7. First, before explaining the storage command processing, FIG.
The data format of the stored command data will be described with reference to FIG. In FIG. 6A, the number in parentheses is the number of bytes of the corresponding data.

The storage command data 51 is 1 [byte] indicating that the data is the storage command data 51.
Instruction data (instruction data) 52 and 2 [bytes] for specifying program data to be stored
File number data 53, length data 54 representing the length of program data to be stored, and program data 49 of 1 to 65535 [bytes] which are continuous data and are actually to be stored. Have been.

FIG. 7 shows a processing flowchart of the storage command processing. The CPU 11 determines whether the data received from the IC card connection device 3 is continuous data,
It is determined whether the data is the program data 49 (step S21). If it is determined in step S21 that the received data is not continuous data (step S; N
o) Since it is the head of the stored command data 51,
Whether the program data 49 can be stored in the program file area 46 corresponding to the file number corresponding to the file number data 53, that is, whether the area corresponding to the file number exists and the program data already exists in the area It is determined whether 49 is not stored (step S22).

If it is determined in step S22 that the area corresponding to the file number does not exist or the program data 49 is already stored in the area (step S22; No), the corresponding error processing is performed. And terminate the processing. In the determination in step S22, an area corresponding to the file number exists, and
If the program data 49 is not stored in the area, a storage start address is set (step S2).
3).

Then, the CPU 11 sets a storage address for storing the program data 49 received from the IC card connection device 3 (step S24), and stores the program data 49 in the set storage address as a part of the program file 45. Stored (step S2
5), the execution flag 39 of the corresponding program storage file 31 is turned off (= for example, “0”) (Step S)
26).

If it is determined in step S21 that the data received from the IC card connection device 3 is continuous data (step S21; Yes), the received data is data constituting the program data 49. The storage address for storing the data constituting the programmed program data 49 is set (step S2).
4) The data constituting the program data 49 is stored at the set storage address (step S25), and the execution flag 39 of the corresponding program storage file 31 is turned off (step S26).

When the data constituting all the program data 49 is received, the file number data 35 of the corresponding program storage file 31 and the start address of the program file area 46 where the program data 49 is actually stored are displayed. A response process for updating the storage head address data 36 and the final address data 37 indicating the final address in the program file area 46 where the program data 49 is actually stored is performed (step S5), and the program data 49 is updated.
Is received, and a transmission process for notifying the IC card connection device 3 of the storage is performed (step S6).

As described above, the IC card connection device 3
The program data 49 transmitted from the
14 are stored in the program file area 46. However, at this point, since the execution flag 39 of the program storage file 31 corresponding to the stored program data 49 is off, the program is a non-executable program that cannot be executed.

[4.2] Executable Command Processing Next, the executable command processing will be described with reference to FIG. 6 and FIG. Before describing the executable command processing, the data format of the executable command data will be described with reference to FIG. In FIG. 6B, the number in parentheses is the number of bytes of the corresponding data.

Executable command data 56 is 1 indicating that the data is executable command data 56.
[Byte] instruction data 57 and 2 [byte] file number data 58 for specifying the program data 49 to be made executable among the program data 49 stored in the program file area 46 of the EEPROM 14 And is provided.

FIG. 8 shows a flowchart of the executable command processing. First, the CPU 11 searches the program file 45 in the program file area 46 based on the program storage file 31 corresponding to the file number corresponding to the file number data 58 of the executable command data 56 received from the IC card connection device 3. To determine whether or not the program data 49 to be processed has already been stored in the program file area 46 corresponding to the executable command data 56 received from the IC card connection device 3 (step S1). S31).

If it is determined in step S31 that the program data 49 is not stored in the program file area 46 corresponding to the file number, or that the program data
Is stored (Step S31; No),
Since there is no processing target, corresponding error processing is performed (step S37), and the processing ends.

If it is determined in step S31 that the program data 49 to be processed has already been stored in the program file area 46 corresponding to the file number, the compressed value data 50 which should be obtained by compressing the program data is obtained. Of the compression start address in the program file area 46 for storing the
32).

Next, program compression is performed one address at a time (step S33), and whether or not the current address of the data to be compressed is the last address of the program data 49, that is, if the current data to be compressed is It is determined whether or not the data is final data (step S34).

If it is determined in step S34 that the current address of the data to be compressed is not the last address of the program data 49 (step S34; N
o) The process returns to step S33 to perform the compression process on the data at the next address.

If it is determined in step S34 that the current address of the data to be compressed is the last address of the program data 49, the obtained compressed value data is stored, and the storage address of the compressed data is stored in the program storage file. It is set as the compressed value storage address data 38 of step 31 (step S35), and the execution flag 39 of the program storage file 31 is turned on (= for example, “1”).

As a result, the program data 49 corresponding to the program storage file becomes executable program data. If the program data 49 is authenticated as legitimate program data in the program execution command processing described later, it can be executed. Become.

[4.3] Execution Command Processing Next, execution command processing will be described with reference to FIGS. 6 and 9. Before explaining the execution command processing, FIG.
The data format of the execution command data and the random number generation command will be described with reference to (c) and FIG. 6 (c) and 6 (d), the numbers in parentheses indicate the number of bytes of the corresponding data.

As shown in FIG. 6D, the execution command data 62 indicates that the data is the execution command data 62 for executing the program data.
[Byte] instruction data 63, 2 [byte] file number data 64 for specifying program data to be executed, and authentication data required for executing the program data 49 specified by the file number data 64 Key file number data 65 for specifying a key storage file 32 including information on an encryption key necessary to generate a key, length data representing the length of reference authentication data 67 described later,
And standard authentication data 67 of 8 to 128 [bytes].

In this case, the length of the reference authentication data 67 is generally 64 [bytes] when DES is used for the encryption method and 1024 when RAS is used for the encryption method.
[Byte] is used. Random number generation command data 59
As shown in FIG. 6C, the command data 60 of 1 [byte] indicating that the data is the random number generation command data 59 for generating a random number and the random number is To generate software
It is provided with 2 [byte] seed file number data 61 for specifying a seed file to be used.

FIG. 9 shows a processing flowchart of the execution command processing. First, the IC card connection device 3 transmits random number generation command data 59 to the CPU 11 before transmitting the execution command data 62. As a result, CPU1
1 reads the seed file 33 corresponding to the seed file number data 61 from the seed file area 27 of the EEPROM 14, generates a random number (step S12), and generates random number transmission data as a response process (step S5,
The random number data is transmitted to the IC card connection device 3 (step S6).

Next, the IC card connection device 3 transmits the execution command data 62 to the CPU 11. This allows CP
U11 refers to the program storage file 31 corresponding to the file number data of the received execution command data 62, and determines whether or not the execution flag 39 is turned on (step S41). If the execution flag 39 is off in the determination of step S41 (step S4
1; No), since the program data 49 corresponding to the file number data is in a non-executable state, a corresponding error process is performed (step S49), and the process ends.

If the execution flag 39 is ON in the determination in step S41 (step S41; Ye
s), the program file area 4 in the EEPROM 14
6 to determine whether the corresponding program file 45 exists (step S42).

If it is determined in step S42 that the corresponding program file 45 does not exist (step S42; No), error processing such as notification of the fact is performed (step S49), and the processing ends. Step S
42, the corresponding program file 45
Exists (step S42; Yes), the compressed value storage address data 3 of the program storage file 31
8, the stored compressed value data 50 is read (step S43), and the generated random number data is combined with the read compressed value data 50 to generate original authentication code data (step S44). As a method of the combination, a mere four arithmetic operation, a logical operation such as an exclusive OR operation, or the like can be considered.

As a result, even if the compressed value data 50 is the same, the original authentication code data is different, and it is difficult to obtain the compressed value data 50 even if the original authentication code data is analyzed. Next, the CPU 11 searches for the corresponding key storage file 32 based on the key file number data 65 of the execution command data 62, and determines whether or not the search was successful (step S45).

If it is determined in step S45 that the key storage file corresponding to the key file number data 65 cannot be searched (step S45; No), an encryption process described later cannot be performed, and a corresponding error The process (Step S39) is performed, and the process ends.

If it is determined in step S45 that the key storage file corresponding to the key file number data 65 can be searched (step S; Yes), the storage start address data 42, the storage end address data 43, and the key type data are added. Based on the encryption key data 47, the encryption key data 47 is read from the data area 48, and the original authentication code data is encrypted by the coprocessor 12 using the encryption key data 47 to generate authentication code data (step S4).
6).

More specifically, when the RSA encryption algorithm is used, the original authentication code data (= compressed value) is generated by the coprocessor 12 using the encryption key N and the encryption key e (d) included in the encryption key data 47. By performing a modular exponentiation operation on (data + random number data), authentication code data is obtained.

By the way, prior to the generation of the authentication code data on the IC card 2 side, the IC card connection device 3
Compressed value data (hereinafter referred to as reference compressed value data) obtained by compressing the program data 49 is obtained in advance. This reference compressed value data is equal to the compressed value data 50 when the program data stored in the EEPROM 14 of the IC card 2 is legitimate program data that has not been tampered with.

Then, the IC card connection device 3 generates original reference authentication code data by combining the random number data transmitted from the IC card 2 side. As the connection method, the same method as the connection method performed on the IC card 2 side is used. Further, when using the RSA encryption algorithm, the IC card connection device 3 uses the encryption key N and the encryption key e (d) corresponding to the key file corresponding to the key file number data in the execution command data to be transmitted. By performing a modular exponentiation operation on the reference authentication code data (= reference compressed value data + random number data), reference authentication code data is obtained.

The IC card connection device 3 transmits the reference authentication code data to the IC card 2 as the reference authentication data 67 of the execution command data 62. As a result, the CPU 11 compares the reference authentication code data 67 included in the execution command data 62 with the generated authentication code data by comparing them, and
It is determined whether 7 and the generated authentication code data match (step S47).

If it is determined in step S 47 that the reference authentication code data 67 does not match the generated authentication code data, the CPU 11
Since there is a possibility that the program data 49 stored in the server 14 is falsified and illegal, the corresponding error processing is performed (step S49), the processing is terminated, and the program is not executed.

If it is determined in step S47 that the reference authentication code data 67 matches the generated authentication code data, the program data 49 stored in the EEPROM 14 is authenticated as valid program data. The program corresponding to the program data is executed (step S48), response processing such as generation of transmission data (step S5), and transmission of the transmission data to the IC card connection device 3 (step S6) are performed, and the processing ends. .

[5] Modification of Embodiment In the above description, when the IC card connection device 3 transmits the reference authentication code data to the IC card, the execution command data is transmitted including the reference authentication code data. However, when the IC card 2 requests, the data can be transmitted as another data.

As a compression method for generating the original authentication code data (or the original reference authentication code data), a generally known one-way hash function such as MD4, MD5, SHA or the like can be used. It is. Furthermore, from the original authentication code data to the authentication code data (or from the original standard authentication code data to the standard authentication code data)
Although the encryption processing is performed as the arithmetic processing when generating the authentication code, any arithmetic processing can be applied as long as the authentication code data (or the reference authentication code data) cannot be easily generated.

The encryption processing is not limited to RSA, and other encryption processing such as DES and FEAL can be used. Further, in the above description, the random number generation is performed by software, but it is also possible to use a random number generator configured by hardware such as a random number generation IC. In this case, it is not necessary to use the seed file described above.

In the above description, the EEPROM is used as the memory for storing the program data.
Any storage device such as a RAM that is nonvolatile and can easily update data may be used.

[6] Effects of the Embodiment As described above, the original authentication data is generated by combining the compressed value data obtained by compressing the program data and the generated random number data, and is further converted to the original authentication data. Since the encryption processing is performed to generate the authentication data for actually performing the authentication, there is no need to store the authentication data in the IC card, so that the authentication data does not leak to the outside.

Further, since an encryption process that requires a complicated calculation is used to generate the authentication code data, it is difficult to tamper with the authentication code data. Therefore, it is possible to illegally execute the stored program data. It becomes very difficult to implement a program execution function that ensures high security.

On the other hand, if it is writing of regular program data, it can be executed with security assured.
Since it is possible to easily write the data in the ROM, it is possible to easily and quickly change or improve the program at a low cost.

[0076]

According to the present invention, the IC card performs authentication for actually performing authentication by performing predetermined processing such as compression processing and encryption processing and arithmetic processing on stored program data. Since the data is generated, it is not necessary to store the authentication data in the IC card, and the authentication data does not leak to the outside, so that high security can be ensured.

Further, since a predetermined operation requiring a complicated operation is used to generate the authentication code data required to execute the program corresponding to the program data, it is difficult to falsify the authentication code data. And therefore,
It is very difficult to illegally execute the stored program data, and a highly secure program execution function can be realized.

Furthermore, since the program data is stored using a program storage means such as an EEPROM which stores the program data in an updatable manner,
It is possible to cope with a change in the program easily and at low cost.

[Brief description of the drawings]

FIG. 1 is a schematic configuration diagram of an IC card system according to an embodiment.

FIG. 2 is a schematic configuration diagram of an IC card.

FIG. 3 is an explanatory diagram of a data storage state in an EEPROM.

FIG. 4 is an explanatory diagram of a data format of a program storage file and a key storage file.

FIG. 5 is a schematic processing flowchart of the embodiment.

FIG. 6 is an explanatory diagram of a data format of each command data.

FIG. 7 is a processing flowchart of a storage command process.

FIG. 8 is a processing flowchart of executable command processing.

FIG. 9 is a processing flowchart of an execution command process.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 IC card system 2 IC card 3 IC card connection device 11 CPU 12 coprocessor 13 ROM 14 EEPROM 15 RAM 21 system management area 22 data storage area 25 program storage file area 26 key storage file area 27 type file area 31 program storage file 32 Key storage file 33 kinds of files 35 File number data 36 Storage start address data 37 Storage end address data 38 Compressed value storage address data 39 Execution flag 41 File number data 42 Storage start address data 43 Storage end address data 44 Key type data 45 Program file 46 program file area 47 encryption key data 48 encryption key data area 49 program data 50 compressed value data 51 storage command Over data 56 executable command data 59 random number generation command data 60 executes the command data

Claims (11)

[Claims] 1. Program storage means for storing program data in an updatable manner, original authentication data generation storage means for generating and storing original authentication data unique to the program data based on the program data, and storing the program data Authentication data generating means for generating authentication data by performing a predetermined operation on the original authentication data for program data corresponding to a program instructed to be executed from the outside of the program data stored in the means; Determining means for determining whether or not the input standard authentication data and the authentication data match; and, based on the determination, when the standard authentication data does not match the authentication data, An IC card, comprising: execution prohibiting means for prohibiting execution. 2. The IC card according to claim 1, wherein said original authentication data generating means generates said original authentication data by compressing said program data. 3. The IC card according to claim 1, wherein the authentication data generating unit generates random number data and outputs the generated random number data, and the random number generating unit outputs the random number data based on the random number data and the original authentication data. An encryption means for performing a predetermined encryption process that has been set and generating the authentication data. 4. The IC card according to claim 3, wherein said encrypting means is a key data storing means capable of storing a plurality of key data required for encryption, and said key data corresponding to key instruction data inputted from outside. An encryption processing means for performing the encryption processing using key data. 5. The IC card according to claim 1, wherein, when the program data input from the outside is stored in the program storage means, the program data is stored in a corresponding program. An executable program setting means for setting as non-executable program data which does not permit execution of the program. 6. The IC card according to claim 5, wherein when the original authentication data is generated for the non-executable program data, the executable program setting means executes the non-executable program data. An IC card characterized by being set as: 7. An IC card connection device connected to the IC card according to claim 1, wherein the program data is executed from among the program data stored in the program storage means. Program execution instructing means for specifying the program data corresponding to the program to be executed, and instructing the IC card to execute the program data; and an original storing the original authentication data corresponding to the specified program in advance as original reference authentication data. Reference authentication data storage means; reference authentication data generation means for generating the reference authentication data by performing the same operation as the predetermined operation in the authentication data generation means on the original reference authentication data; and And reference authentication data output means for outputting the reference authentication data. C card connection device. 8. An IC card connection device connected to the IC card according to claim 4, wherein the program corresponding to a program to be executed among the program data stored in the program storage means. Program execution instructing means for specifying data and instructing the IC card to execute the data; original reference authentication data storage means for storing the original authentication data corresponding to the specified program in advance as original reference authentication data; Key data storage means for storing a plurality of key data; key instruction data output means for outputting the key instruction data to the encryption means; key data corresponding to the key instruction data; input from the IC card The same processing as the encryption processing means is performed based on the random number data and the original authentication data, and the reference authentication A reference authentication data generation means for generating over data, to said discriminating means, IC card connecting device, characterized in that it and a reference authentication data output means for outputting the reference authentication data. 9. An IC card system comprising: the IC card according to claim 1; and the IC card connection device according to claim 7. 10. An IC card system comprising: the IC card according to claim 4; and the IC card connection device according to claim 8. 11. A method of controlling an IC card having storage means for storing program data in an updatable manner in advance, wherein original authentication data for generating original authentication data unique to the program data based on the stored program data. A generating step; an authentication data generating step of generating authentication data by performing a predetermined operation on the original authentication data; and determining whether or not the input reference authentication data matches the generated authentication data. A determination step; and, based on the determination, when the reference authentication data matches the authentication data, an execution permission step of permitting execution of a program corresponding to the program data. IC card control method.