JPS60205688A - Portable medium - Google Patents

Abstract

PURPOSE:To secure protection of information by deciding the type of instruction given from outside and executing the instruction only when propriety condition for execution of the instruction is satisfied. CONSTITUTION:When external instruction is given to an integrated circuit 2 through a terminal section 3, a control circuit 4 decides the type of instruction and makes a decision signal TP ''0'' or ''1'' according to the type of write or read. Selector circuits 14, 15 send bit pattern of permanent memories 12W, 13W to comparators 16, 17 when the signal TP is ''0'' respectively, and send bit pattern of permanent memories 12R, 13R to circuits 16, 17 when the signal TP is ''1''. Circuits 16, 17 compare these input and bit pattern from a temporary memory 11, and output selection possible signals S5, S6 to memories 5, 6 only when the two patterns coincide. Accordingly, propriety condition for execution of instruction can be designated according to type of processing function.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention relates to a portable medium, for example, a so-called IC card, which has a built-in integrated circuit.

[Technical background of the invention and its problems] Generally, so-called IC cards are used as transaction media in currency transaction devices, etc., but recently,
As this type of ID card, a so-called IC card has been developed and is being put into practical use.

This IC card consists of a microcomputer (hereinafter simply referred to as microcomputer) that performs calculations, a data memory (FROM) that stores personal identification numbers, transaction information, etc.
It also has a built-in integrated circuit consisting of an interface circuit that exchanges information with the outside of the card, and exchanges information with external devices outside the card via the interface circuit and terminal section. . Each function such as inputting, outputting, storing, and calculating information provided by the integrated circuit can be selectively executed by applying a command signal from outside the card via the terminal section.

By the way, inputting information on such an IC card,
In order to protect information, it is necessary to appropriately select and manage whether each function such as output, storage, calculation, etc. can be executed for each function type (for example, writing or reading information). However, it is difficult to achieve the above-mentioned type-specific management using a method similar to the single password verification method conventionally used for magnetic cards. In particular, when an IC card is issued and when it is used, the conditions for writing or reading information into the same storage area must be different.

[Object of the Invention] The present invention has been made in view of the above-mentioned circumstances, and its purpose is to establish conditions for execution of instructions for each type of function, such as input, output, storage, and calculation, depending on the importance of information. The object of the present invention is to provide a portable medium that can safely protect information.

[Summary of the Invention] In order to achieve the above object, the present invention determines the type of an instruction given from the outside, selects an executable condition for the instruction corresponding to the determined type, and applies the selected executable condition. It is configured to determine whether or not the conditions for execution are satisfied, and to execute the command only when the conditions for execution are satisfied.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In FIG. 1, reference numeral 1 denotes an IC card, which has an integrated circuit 2 built therein. Further, a terminal section 3 is provided at a predetermined portion on the surface of the IC card 1, and this terminal section 3 is electrically connected to the internal integrated circuit 2, and is connected to an external device outside the card via this terminal section 3. Information is exchanged with devices.

Each function such as input, output, storage, and calculation of information provided by the integrated circuit 2 is performed by giving a command signal in the form of a message from outside the card via the terminal section 3, or by giving a command signal to a specific terminal. This makes it possible to execute it selectively.

FIG. 2 shows the configuration of the integrated circuit 2, which includes a control circuit 4 mainly composed of a microcomputer that performs calculations, etc., and a first memory (for example, PROM) as an information storage means connected to the control circuit 4. ) 5, a second memory (for example, PROM) 6, and an interface circuit 7, and when exchanging information with the outside of the card, either the first or second memory 5.6 is selected by the control circuit 4. Information is written or read via the interface circuit 7 and control circuit 4.

Here, the first memory 5 writes fixed information such as the issuer PIN number of the card issuer and the user PIN number of the card user when issuing an IC card, and
For example, it is assumed that transaction information and the like are written into the memory 6 when the IC card is used, and information can be read from the first and second memories 5.6 both when the IC card is issued and when it is used.

Furthermore, when an IC card is issued, the issuer's personal identification number is verified, and when the IC card is used, the user's personal identification number is verified. Note that, if necessary, the issuer's personal identification number can be verified when the IC card is used.

Writing and reading of these information and verification of the password are executed by the control circuit 4 by inputting a command signal from outside the card via the terminal section 3.

FIG. 3 shows a circuit for controlling access to the first memory 5 or the second memory 6 according to the type of instruction under the above conditions, and this circuit is provided in the control circuit 4, for example. In the figure, the temporary memory 11 temporarily stores the execution state, for example, the verification result of the PIN number, in the form of a bit pattern (for example, the bit position corresponding to the matched PIN number is a 1" signal, and the others are as an "O" signal). be done. That is, for example, when writing information or continuously writing information, by inputting a verification command signal from outside the card via the terminal section 3 and inputting a password to be verified, the control circuit 4 accepts it and stores it in the first memory. 5, and the comparison result is temporarily stored in the temporary memory 11. Note that the verification command signal and the password are input using, for example, a card issuing machine, a card handling machine, or the like. In addition, permanent memory 12R,
In 12w, 13R, and 13w, conditions for whether or not the instruction can be executed are set corresponding to the type of the instruction. That is, for example, in the permanent memory 12R213R, the password necessary for reading the first and second memories 5 and 6 is stored in the form of a bit pattern (the bit position corresponding to the necessary password is a "1" signal, and the others are 0"). In this embodiment, the bit positions corresponding to the issuer's personal identification number and the user's personal identification number are stored in advance as signals (as signals "1"). Similarly, the permanent memory 12 contains the PIN number required for writing to the first memory 5 in the form of a bit pattern (the bit position corresponding to the required PIN number, in this example the issuer PIN number is ``1''). Signal, other PIN number, in this example the bit position corresponding to the user PIN number is 0”
(as a signal) is stored in advance. In addition, the permanent memory 13w contains a PIN number necessary for writing to the second memory 6 in the form of a bit pattern (the necessary PIN number, in this embodiment, corresponds to the user PIN number). The bit position corresponding to the ``0'' signal and other PIN numbers (in this embodiment, the issuer PIN number) is stored in advance. The selection circuits 14 and 15 select the instruction type determination signal TP output from the control circuit 4.
Permanent memory 12R, 13R or 12%l/, depending on
The bit pattern of 13w is sent to comparison circuits 16 and 17.

That is, when a command is input through the terminal section 3, the control circuit 4 determines the type of the input command, and if the input command is, for example, a negative type, the type determination signal TP is set to 0.
If it is a “0” signal read type, type determination signal TP
is the “1” signal. This causes the selection circuits 14 and 15 to
is the permanent memory 12w when the type determination signal TP is a "0" signal.

Compare the bit patterns of 13w with each circuit 16゜17
If the type determination signal TP is a "1" signal, the bit patterns of the permanent memories 12R and 13R are sent to the comparison circuit 1.
Send to 6.17. The comparison circuits 16 and 17 are the selection circuits 14
．． Compares the bit pattern sent from 15 with the bit pattern sent from temporary memory 11, and outputs selectable signal 86.86 to first and second memories 5.6 only when both bit patterns match. .

Therefore, the relevant command is executed only when the selectable signals Ss and Ss are output.
Moreover, since the required PIN number differs depending on the type of command, information can be written to the first memory 5 after verifying the issuer's PIN number, and information can be written to the second memory 6 after verifying the user's PIN number. Furthermore, after verifying one of the above-mentioned passwords, information can be read from the first and second memories 5.6.

With the configuration described above, it is possible to specify the conditions for execution of an instruction for each type of function, such as input, output, storage, and calculation, depending on the importance of information. This results in
For example, transferring information from a specific storage area or phase (e.g. issue phase) to another storage area or phase (e.g. operation phase) (e.g. reading a specific storage area written in the former in the latter) using the same IC. This can be done within the card, and not only can the information be safely protected, but also an IC card application system can be constructed flexibly and safely.

In the above embodiment, the execution state stored in the temporary memory 5 is the PIN verification state, but the present invention is not limited to this. For example, the execution state may be the state of the device in which the IC card is used. It can also be applied in cases. In this case, permanent memories 12R, 12w are used as in the previous embodiment.
, 13R.

In step 13w, executable conditions are set for each type of instruction. Further, the control circuit 4 determines the type of equipment in which the IC card is used, and stores the determination result in the temporary memory 11 in the form of a bit pattern. Then, a corresponding executable condition is selected according to the determination result of the type of instruction given from outside the card, and the selected executable condition and the temporary memory 1 are
1 and output the selectable signals Ss and Ss according to the comparison result.

Furthermore, the present invention can also be applied, for example, when the execution state is the state of the stored contents of the first and second memories 5.6.

In this case, as in the previous embodiment, the permanent memory 12R912
Executable conditions are set in w, 13R, and 13w for each type of instruction. Further, the control circuit 4 determines whether there is a write space (write area) in the first and second memories 5 and 6, and stores the determination result in the temporary memory 11 in the form of a bit pattern. Then, a corresponding executable condition is selected according to the determination result of the type of instruction given from outside the card, the selected executable condition is compared with the contents of the temporary memory 11, and selection is possible according to the comparison result. Signal Ss
.

What is necessary is to output Ss.

Furthermore, in the above embodiments, the case where the application is applied to an IC card used as an ID card of a currency transaction device has been described, but the application is not limited to this, for example, a shopping card, a shopping card, etc.
It can also be applied to IC cards used as other memory cards, such as cash cards and telephone bill cards.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to specify the conditions for execution of an instruction for each type of function, such as input, output, storage, and calculation, depending on the importance of information. This provides a portable medium in which information can be safely protected.

[Brief explanation of the drawing]

The drawings are for explaining one embodiment of the present invention; FIG. 1 is an external perspective view of an IC card, FIG. 2 is a configuration diagram of an integrated circuit, and FIG. 3 is a configuration diagram of an access control circuit. DESCRIPTION OF SYMBOLS 1... IC card, 2... Integrated circuit, 3... Terminal section, 4... Control circuit, 5.6... Memory, 7...
Interface circuit, 11...temporary memory, 12R,
12w. 13R, 13w... Permanent memory, 14.15... Selection circuit, 16.17... Comparison circuit. Figure 1 Figure 2 Figure 2 Figure 3

Claims (4)

[Claims] (1) An integrated circuit having at least information storage means and means for exchanging information with the outside; each of the means is a portable medium that can be selectively executed by instructions given from the outside; a setting means for setting a condition for execution of an instruction; a determining means for determining the type of instruction given from the outside; and a determining means for determining an execution possibility condition corresponding to the type of instruction determined by the determining means from the settings of the setting means. A control means that determines whether or not the executable condition is satisfied based on the selection means to select, and the execution condition and execution state selected by the selection means, and permits execution of the instruction only when the executable condition is satisfied. A portable medium comprising: (2) The portable medium according to claim 1, wherein the execution state is a verification state of password information. (3) The portable medium according to claim 1, wherein the execution state is a state of a device in which the portable medium is used. (4) The portable medium according to claim 1, wherein the execution state is a state of storage contents of a specific portion within the integrated circuit.