JPH1153263A - Memory management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a memory management system enhanced in security function. SOLUTION: In a memory incorporated in a data card, plural personal data included in a data area, management data corresponding to each personal data included in a management area, a block check code BCC entirely corresponding to the management data and personal data and a password number inserted into a prescribed position are stored in a compressed state. Each management data corresponds to each personal data stored in the data area, and includes the storage start address and end address of corresponding personal data and a company code that is proper to a company which uses a corresponding personal data and offers prescribed service. As for read of personal data, it becomes possible when an inputted password number is matched with a password number included in the memory and also a company code corresponding to the personal data is specified.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a memory management system for reading various types of personal data stored in a memory built in a card type housing or the like.

[0002]

2. Description of the Related Art Conventionally, magnetic stripes such as bank cash cards and various credit cards have a built-in magnetic stripe in which personal identification numbers of users are stored. When the password input by the user separately matches the password stored in the built-in magnetic stripe, it is determined that the holder of the magnetic card is a genuine user and various processing ( For example, in the case of a cash card, cash payment processing and transfer processing are permitted.

[0003] The above-mentioned magnetic card has a small data capacity that can be stored, so that it is not enough to store various personal data including a personal identification number and the like. As such, an IC card incorporating a semiconductor memory and a processor has been developed and put into practical use. In particular, semiconductor memories have been increasing in capacity and lowering costs in accordance with recent advances in manufacturing technology and the like, and relatively large-capacity memories are also built in IC cards.

[0004] The memory included in the above-mentioned IC card can store a lot of personal information in addition to the above-mentioned personal identification number. Data management, especially mutual security, is an issue. For example, when transaction data of a plurality of companies is stored as personal data in one IC card, it is necessary to devise a method of preventing the personal data corresponding to other companies from being freely read and written.

[0005] In particular, in the case of the above-described IC card, it is possible to prevent a personal computer corresponding to another company from being freely accessed by executing a predetermined security program by a built-in processor. However, if a data card without a processor is considered, such a security function cannot be provided, and it is convenient if the security function between a plurality of companies can be enhanced without using a processor.

[0006] The present invention has been made in view of the above points, and an object of the present invention is to provide a memory management system having an enhanced security function.

[0007]

In order to solve the above-mentioned problems, a memory management method according to the present invention stores a plurality of personal data in a memory built in a portable data storage device, and stores each personal data in the memory. , And a plurality of management data including a storage position and a first identification code corresponding to each personal data. When data is read from any of a plurality of personal data, it is necessary to designate a first identification code corresponding to the personal data to be read, and the first identification code is required. By specifying, it becomes possible to read out only the corresponding personal data, etc.,
It is not possible to read other personal data freely, and the security function can be enhanced. Further, a second identification code is stored separately from the first identification code corresponding to each of the personal data described above, and the second identification code is designated by the owner of the portable data storage device, and Only when the first identification code described above is designated,
If you read out the corresponding personal data,
Further, the security function can be enhanced.

It is preferable that the above-mentioned plurality of personal data, the plurality of management data corresponding thereto, or the second identification code be stored in a memory in a compressed state. The content of the compressed data stored in the memory is different from that of the data before the compression, and has an effect of performing a scrambling process. Therefore, it becomes more difficult to read the stored personal data.

Specifically, data is transmitted and received between the portable data storage device described above and an external data processing device in a non-contact manner or by making contact with the external data processing device. By specifying the first identification code, access to personal data becomes possible. Alternatively, the data processing device determines whether or not the input third identification code matches the second identification code stored in the memory.
By specifying the identification code of, personal data can be accessed. As described above, the access from the external data processing device to the personal data stored in the memory in the portable data storage device is performed by the first identification code or the second identification code.
Since it becomes possible only by specifying the identification code of, even if a plurality of personal data are stored, it is not possible to freely read and write to them, and it is not possible to read and write to a plurality of personal data stored in the memory. Security features can be enhanced.

[0010]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A data card as a portable data storage device according to an embodiment to which the memory management system of the present invention is applied will be specifically described below with reference to the drawings.

FIG. 1 is a diagram showing a configuration of a data card according to one embodiment. A data card 10 shown in FIG. 1 is used for inputting and outputting data to and from an external data processing device (to be described later) in a contactless manner, a memory 12 having a predetermined capacity for storing various data, and address designation for the memory 12. A memory control unit 14 that controls reading and writing of data,
The data read from the memory 12 is modulated and the antenna 1
6 and a transmission / reception unit 18 for demodulating a signal received by the antenna 16.

The data card 1 is stored in the memory 12 described above.
0 (corresponding to the second identification code) of a plurality of digits (for example, 4 digits) determined by the owner of 0, and a plurality of personal data (for example, necessary for a transaction between the owner and each of a plurality of companies). Personal data) and management data necessary for managing each personal data.

FIG. 2 is a diagram schematically showing data stored in the memory 12. Actually, the data shown in FIG. 2 is compressed by a predetermined method, dummy bits are added to the compressed data, and the data is adjusted so that the entire data matches the capacity of the memory 12. Is stored.

As shown in FIG. 2, the memory 12 stores a plurality of personal data included in the data area, management data corresponding to each personal data included in the management area, and the entirety of the management data and the personal data. The corresponding block check code BCC and the above-mentioned plural-digit password are stored.

The number of management data stored in the management area is
The maximum number is determined (for example, 16), and the number changes as the corresponding personal data increases or decreases. Each management data corresponds to each personal data stored in the data area. For each management data, a predetermined service is provided using the storage start address and the end address of the corresponding personal data and the corresponding personal data. The company code (corresponding to the first identification code) unique to the company to be executed is included.

Each of the personal data has a variable length, and includes various data necessary for a corresponding company to provide a predetermined service. For example, as the personal data, various data necessary for bank transactions, license data, commuter pass data for trains and the like can be considered. Since a fixed capacity is secured for the entire data area where personal data is stored, if the capacity of personal data corresponding to one company is large, the number of personal data stored in the data area is: In some cases, the maximum number of management data may not be reached. The block check code is for performing error detection on the entire management data and personal data. For example, a CRC (Cyclic Redundancy Check) code is used.

The personal identification number is a multi-digit ID number (corresponding to the second identification code) determined in advance by the owner of the data card 10, and each bit constituting the personal identification number data is stored in the memory 12. Is inserted in the position. Note that FIG.
In the example shown in (1), the case where the personal identification number data is added to the end of the storage area of the memory 12 is shown, but the positions where the bits of the personal identification number data are inserted may be dispersed. In particular, when the bits of the password data are dispersed, the password data cannot be read unless the distribution positions of these bits are exactly known. It is unlikely that a third party will know the password.

Next, an operation for reading necessary personal data from the memory 12 in the data card 10 will be described. FIG. 3 shows the memory 1 in the data card 10.
FIG. 3 is a diagram illustrating a configuration of a data processing device that performs a predetermined process based on personal data read from the data processing device 2;

The data processing device 20 shown in FIG. 3 performs a transmission / reception unit 24 for performing modulation / demodulation processing of various signals transmitted / received via the antenna 22 and reads out personal data stored in the memory 12 in the data card 10. And a processing unit 2 for performing predetermined processing based on the read personal data.
6, an operation unit 28 including various operation keys such as a numeric keypad, and a display unit 30 for displaying an operation status by a user (owner of the data card 10). The data processing device 20 performs different operations in accordance with the type of personal data to be read, such as an automatic deposit and withdrawal device (ATM) installed at a bank, an automatic ticket gate installed at a station, and the like. Equivalent to. For example, in the case of a data processing device 20 as an automatic depositing / dispensing device of a bank, the processing unit 26 reads out personal data such as transaction details of a customer who owns the data card 10, and performs a dispensing process, a depositing process, or the like. Perform transfer processing and the like. The host computer (not shown) connected to the bank's online network actually performs the deposit / withdrawal processing.
Reference numeral 6 broadly covers such data processing means.

FIG. 4 shows the memory 12 in the data card 10.
FIG. 7 is a diagram showing an operation procedure for reading personal data stored in a personal computer.

The processing section 26 in the data processing device 20 is in a state of waiting for input of a personal identification number (corresponding to the third identification code) from the user (owner of the data card 10) (step 100). When the customer sets the data card 10 at a predetermined position and presses the numeric keypad of the operation unit 28 to input a password, the processing unit 26 next executes all data stored in the memory 12 in the data card 10. (Compressed data) is read (step 101). As described above, the entire management data, personal data, block check data, and personal identification number data shown in FIG. 2 are compressed, and data of a predetermined length to which dummy bits are added is stored in the memory 12. Data of a predetermined length is stored in memory 1
2 is read.

Next, the processing section 26 decompresses (decompresses) the data after extracting the compressed data by removing the dummy bits from the read data having a predetermined length (step 102).
Further, password data included in a predetermined position of the decompressed data is extracted (step 103). When the password stored in the memory 12 is extracted in this way, the processing unit 26 next determines the extracted password and the password input by the user operating the operation unit 28. It is determined whether or not matches (step 104).
If they do not match, the data reading process ends without performing the subsequent processes.

If these two passwords match, the processing unit 26 removes the password included in the decompressed data from the decompressed data, and deletes the plurality of passwords contained in the management area shown in FIG. Then, the management data and a plurality of personal data are reproduced (step 105). At this time, the processing unit 26
Determines whether there is an error in each management data or each personal data based on the block check code, and if an error occurs, terminates the data reading process without performing subsequent processing, and an error occurs. If not, the subsequent processing is continued.

Next, the processing unit 26 determines whether or not there is a company code included in each of the plurality of management data reproduced in this manner that matches the company code of the company (step 106). If there is a match, the variable-length personal data specified by the start address and end address included in the management data is read (step 107), and a predetermined process is performed based on the read personal data (step 107). Step 108). If there is no company code included in each of the plurality of management data that matches the company code of the company, the processing unit 2
No. 6 terminates the data reading process without performing the subsequent processes.

As described above, the data card 1 of the present embodiment
0 stores a plurality of personal data and corresponding management data in the built-in memory 12, performs a predetermined compression process after inserting a personal identification number at a predetermined position of the data, and further sets a dummy bit. In addition, adjustment is made so that the entire length becomes a predetermined length. Therefore, the memory 12
When reading personal data from a personal computer, it is necessary to first extract the personal identification number inserted in the predetermined position after performing the decompression processing corresponding to the predetermined compression processing. It is possible to prevent data reading or unauthorized processing using this personal data (for example, unauthorized payment processing by an automatic deposit / withdrawal device of a bank). In addition, since the management data corresponding to each personal data stores a company code for each company, a single data card 10 stores a plurality of personal data necessary for transactions with a plurality of companies. Even in such a case, the data processing device 20 of each company can extract only the management data including the company code of the company and cannot read other personal data, so that the security function can be enhanced.

The present invention is not limited to the above-described embodiment, and various modifications can be made within the scope of the present invention. For example, in the above-described embodiment, the case where a plurality of personal data is stored in the memory 12 in the data card 10 has been described. The number of possible personal data is one, and the corresponding management data is also one.
In addition, when storing data in the memory 12, dummy data is added after performing predetermined data compression to adjust the entire data length to be constant. However, the original data (management) is performed without performing compression processing. (Data obtained by adding a personal identification number to data including data and personal data) may be directly stored in the memory 12.

In the above embodiment, the data card 10 has been described as an example of the portable data storage device. However, the shape and the like of the portable data storage device are not limited to the card type. Data card 1
Although the transmission and reception of data and the like between the data card 10 and the data processor 20 are performed in a non-contact manner, a plurality of electrical contacts are formed on the surface of the data card 10 and the data and the like are transmitted through these electrical contacts. May be transmitted and received.

Further, in the above-described embodiment, the case where data is read from the memory 12 in the data card 10 has been described. When writing data, the personal data corresponding to the company read in step 107 of FIG. 4 is changed, and then a block check code is calculated again, a password is inserted, the entire data is compressed, and a dummy is written. Data of a predetermined length obtained by adding bits may be written in the memory 12.

Further, in the above-described embodiment, the description has been made on the assumption that the personal identification number is first input by the user when reading out the personal data contained in the memory 12 in the data card 10, but this personal identification number is input. May be omitted. In this case, the processing of steps 100, 103, and 104 shown in FIG. 4 may be deleted. For example, when the above-mentioned data card 10 is used as a commuter pass for a train or the like, the data card 10 does not need to input a password every time it passes through an automatic ticket gate, and is equivalent to the data processor 20. The corresponding personal data is read out by the automatic ticket gate.

In the above-described embodiment, the description has been made on the assumption that the management data corresponding to each of the plurality of personal data includes the unique company code corresponding to the first identification code. When the company has multiple management codes, etc., these multiple management codes are
May be used as the identification code of That is,
The name of the company code, management code, or the like corresponding to the first identification code is not particularly limited as long as the personal data can be widely distinguished. The same applies to the password corresponding to the second identification code or the third identification code, and any name or data content may be used as long as the data is unique to each data card 10. Further, in the memory 12 in the data card 10, in addition to the case where transaction data or the like between one individual and a plurality of companies is stored as personal data, a memory between one group or one company and a plurality of companies is stored. May be stored as personal data.

[0031]

As described above, according to the present invention, when data is read from any of a plurality of personal data stored in the memory of the portable data storage device, the personal data is read. It is necessary to specify a first identification code corresponding to the personal data, and if the first identification code unique to each personal data is not known, reading of each personal data cannot be performed, and the security function of each personal data is improved. Can be. In addition, a second identification code is stored separately from the first identification code corresponding to each personal data described above, and the second identification code is designated by the owner of the portable data storage device, and If the reading of the corresponding personal data is performed only when the first identification code is specified, the security function can be further enhanced.

It is preferable that the plurality of personal data described above, the plurality of management data corresponding thereto, and the second identification code are stored in a compressed state in a memory.
Compressing the data and storing it in the memory has the effect of performing scramble processing on the original personal data and the like, and thus makes it more difficult to read the stored personal data.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a configuration of a data card according to an embodiment.

FIG. 2 is a diagram schematically showing data stored in a memory in a data card.

FIG. 3 is a diagram illustrating a configuration of a data processing device that performs a predetermined process based on personal data read from a memory in a data card.

FIG. 4 is a diagram showing an operation procedure for reading personal data stored in a memory in a data card.

[Explanation of symbols]

 Reference Signs List 10 data card 12 memory 14 memory control unit 16, 22 antenna 18, 24 transmission / reception unit 20 data processing device 26 processing unit 28 operation unit 30 display unit

Claims (8)

[Claims] 1. A memory management system for a portable data storage device having a memory, wherein the memory has a plurality of personal data and a first storage location corresponding to each of the plurality of personal data.
And a plurality of management data including an identification code, and when the first identification code is specified, the corresponding personal data can be specified. 2. The memory management system according to claim 1, wherein the memory stores a data string obtained by compressing source data including the plurality of personal data and the plurality of management data. 3. The memory management method according to claim 1, wherein the portable data storage device transmits and receives data to and from an external data processing device in a non-contact manner or by making contact with the portable data storage device. . 4. The memory according to claim 1, wherein a second identification code corresponding to the portable data storage device is stored in a predetermined position in the memory, wherein the second identification code and the first identification code are stored. A memory management method, wherein when both codes are specified, the corresponding personal data can be specified. 5. The memory management method according to claim 4, wherein the memory stores a data string obtained by compressing source data including the plurality of personal data and the plurality of management data. 6. The memory management method according to claim 4, wherein the portable data storage device transmits and receives data to and from an external data processing device in a non-contact manner or in a contact manner. . 7. The data processing device according to claim 3, wherein the data processing device reads out the corresponding storage location by designating the first identification code, and thereafter reads the personal data specified by the storage location. A memory management method characterized by performing access. 8. The data processing device according to claim 6, wherein the data processing device compares the input third identification code with the second identification code stored in the memory, and when the two match, A memory management method comprising: reading out a corresponding storage location by designating a first identification code; and subsequently accessing the personal data specified by the storage location.