KR100550367B1 - Portable electronic medium - Google Patents

Abstract

According to the present invention, a substrate 2 to which wiring is performed, a memory 4 mounted on the substrate 2 by soldering to record data, and on which an authentication key is recorded, and at the same time recording data and an authentication key In one bare chip which has an internal memory 3b in which is recorded and a controller 3a for controlling the recording of data into the memory 4 or controlling the reproduction of the data recorded in the memory 4. And a memory control LSI (3) connected to the substrate (2) by encapsulation resin on the substrate (2) and connected by gold wire bonding to the substrate (2). (3a) determines whether the memory 4 is correct according to whether or not the authentication key recorded in the memory 4 matches the authentication key recorded in the internal memory 3b.

Description

Portable electronic medium {PORTABLE ELECTRONIC MEDIUM}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable electronic medium as a memory card in which data on which data is written and a control circuit for controlling the memory are separately mounted on one card.

In general, when a memory on which data is written and a control circuit for controlling the memory (control LSI) are separately mounted on one card (substrate), the memory and the control LSI are each connected by solder to the substrate. It is supposed to be.

Therefore, the memory can be easily exchanged and the control LSI can be separated and analyzed.

As a result, counterfeiting is possible in which only the memory is exchanged and the memory capacity is increased.

The present invention has been made in consideration of the above circumstances, and an object thereof is to prevent forgery due to the mounting of different memories by prohibiting the mounting of memories other than the memory corresponding to the control circuit.

Moreover, an object of this invention is to make analysis of the control circuit which controls a memory difficult.

A portable electronic medium of the present invention includes a substrate on which wiring is performed; A first memory mounted on the substrate to record data and to write an authentication key; The chip comprises a second memory in which data is recorded and an authentication key is recorded, and a controller which controls recording of data into the first memory or controls reproduction of data recorded in the first memory. And a control circuit mounted on and connected to the substrate, wherein the controller is further configured to determine whether or not the first memory is matched with an authentication key recorded in the first memory and an authentication key recorded in the second memory. It is to determine whether it is correct.

A portable electronic medium of the present invention includes a substrate on which wiring is performed; A first memory mounted on the substrate to write data; A second memory for recording data and simultaneously recording state information of the first memory, and a controller for controlling the recording of data into the first memory or controlling the reproduction of data recorded in the first memory. And a control circuit configured to be mounted on the substrate and connected to the substrate, wherein the controller determines whether the state of the first memory matches the state information of the first memory recorded in the second memory. It is determined whether the first memory is correct.

A portable electronic medium of the present invention includes a substrate on which wiring is performed; A first memory mounted on the substrate to record data and to record encrypted data encrypting an authentication key; A second memory in which the authentication key, the encryption key, and the decryption program are recorded, and a controller for controlling the recording of the data into the first memory or controlling the reproduction of the data recorded in the first memory while recording the data; And a control circuit mounted on the substrate and connected to the substrate, wherein the controller controls the encrypted data recorded in the first memory by an encryption key and a decryption program recorded in the second memory. By decrypting with an authentication key, it is determined whether or not the first memory is correct according to whether the decrypted authentication key matches the authentication key recorded in the second memory.

1 is a diagram showing an internal configuration of a memory card of the present invention.

2 is a diagram showing an internal configuration of a memory card.

3 is a diagram showing a cross-sectional configuration of the inside of the memory card.

4 is a diagram showing an internal configuration of a memory card.

5 shows a control block of a memory card;

6 and 8 are diagrams for explaining an example of recording an authentication key in the first embodiment.

Fig. 7 is a flowchart for explaining processing at startup of a memory card or processing at power supply voltage supply in the first embodiment.

Fig. 9 is a view for explaining an example of recording state information of a memory in the second embodiment.

10 is a flowchart for explaining an authentication process in the second embodiment.

Fig. 11 is a diagram showing a recording state of final music information of the previous processing in the memory of the memory card in the second embodiment.

FIG. 12 is a flowchart for explaining a recording process and an authentication process of memory state information in the second embodiment; FIG.

Fig. 13 is a diagram showing a recording example of memory state information of the internal memory in the second embodiment.

14 and 16 are diagrams for explaining recording examples of encrypted data, an authentication key, an encryption key, and a decryption program in the third embodiment.

Fig. 15 is a flowchart for explaining the authentication process in the third embodiment.

17 and 19 are diagrams for explaining a recording example of encrypted data, an authentication key, an encryption key, a decryption program, and an encryption program in the fourth embodiment.

18 is a flowchart for explaining an authentication process according to the fourth embodiment.

Fig. 20 is a diagram showing the overall configuration of the Internet access system in the fifth embodiment.

Fig. 21 is a diagram for explaining an internet access information registration service from a retail store to a memory card in the internet access system in the fifth embodiment.

EMBODIMENT OF THE INVENTION Hereinafter, the Example of this invention is described.

First, Figs. 1 to 3 show the configuration of a memory card (SD card) M as a portable electronic medium. FIG. 1 shows the internal structure of the memory card M, FIG. 2 shows the internal structure of the memory card M, and FIG. 3 shows the cross-sectional structure of the inside of the memory card M. As shown in FIG.                 

That is, the memory card M is a memory control LSI (control circuit, controller) 3, a memory (external memory, a first memory) 4, a chip component on a substrate 2 having an external connection terminal 1. (5) and other ICs 6 are mounted and housed in the case 7 as shown in FIG.

The external connection terminal 1 of the board | substrate 2 is hard gold plating in order to raise contact durability.

Soft gold plating suitable for gold wire bonding is provided on the surface 2a opposite to the surface on which the external connection terminal 1 of the substrate 2 is provided.

On the surface 2a, the memory control LSI 3 as a bare chip memory control chip is die-bonded, and the substrate 2 and the bare chip (memory control LSI 3) are connected by gold wire bonding. Thus, mounting is performed with an encapsulation resin 8. Thereafter, the TSOP type memory 4, the chip component 5, and other ICs 6 are solder mounted.

As described above, by bare chip mounting the memory control LSI 3 on the substrate 2, there is an effect that the analysis of the key data becomes difficult.

Next, the control circuit of the memory card M will be described with reference to FIG.

This memory card M has an external connection terminal 1 as a connection portion for exchanging data of an external device (not shown) as shown in FIG. 5, and an interface portion 9 connected to the external connection terminal 1. The memory control LSI 3 connected to the interface unit 9 and the memory 4 connected to the memory control LSI 3 to control recording and reproducing of data are configured. The interface unit 9 is constituted by the chip component 5 and other ICs 6.

The memory control LSI 3 is composed of a control unit 3a for controlling the whole, and an internal memory (second memory) 3b for recording data, in which a control program for the control unit 3a is recorded.

The memory card M is supplied with a power supply voltage when connected to an external device (not shown).

First embodiment

Next, in the above-described configuration, an embodiment in which the memory 4 is authenticated using an authentication key recorded in the internal memory 3b and the memory 4 in a state where rewriting is impossible is possible. Explain.

In this case, as shown in Fig. 6, a unique value as an authentication key is previously recorded in the internal memory 3b, which is also recorded as non-rewritable.

6, the same authentication key as the authentication key recorded in the internal memory 3b is recorded as non-rewritable as shown in FIG.

The memory 4 and the internal memory 3b each comprise a non-rewritable ROM unit and a rewritable ROM unit, and the authentication key is recorded in the non-rewritable ROM unit.

Next, in the above configuration, the processing at the start of the memory card M or at the time of supplying the power voltage from the external device will be described with reference to the flowchart shown in FIG.

That is, when the card is activated or when the power supply voltage is supplied from the external device, the controller 3a performs self-diagnosis (STl). As a result of this self-diagnosis, when the diagnosis result is OK (ST2), the control unit 3a reads the authentication key recorded in the memory 4 (ST3), and the authentication key recorded in the internal memory 3b. Are read (ST4), and they are compared (ST5).

As a result of this comparison, the control unit 3a performs authentication (authentication OK) that the memory 4 is correct when both authentication keys match (ST6), and enters the standby state (ST7).

If the diagnosis is NG in step 2 or if the authentication in step 6 is NG, the control unit 3a stops the processing (ST8).

The case where the authentication in step 6 is NG means that the memory 4 is not correct due to the mismatch of the authentication keys as a result of the comparison in step 5.

In the above example, the case where the memory 4 is authenticated when the card is activated or when the power supply voltage is supplied from the external device has been described. However, even when the memory 4 is authenticated for each access of the memory 4, the memory 4 is also authenticated. It can carry out similarly to the above.

The access processing to the memory 4 is for recording music information or programs supplied from the outside or reproducing the recorded music information or programs.                 

In addition, it is also possible to use the authentication key stored in the internal memory 3b for authentication between the external device and the card M in order to use for authentication with the memory 4. 8, the internal authentication key K1 used for authentication with the memory 4 in the internal memory 3b of the card M, and the external authentication key K2 used for authentication with an external device. It is also possible to remember.

Second embodiment

In the above configuration, the memory control LSI 3 records the state (process type) information of the memory 4 last time, and at the next memory 4 access, the memory ( An embodiment in which the memory 4 is authenticated according to whether or not the state of 4) is the same as the state information of the memory 4 recorded therein will be described.

In this case, the controller 3a writes state information of the memory 4 into the internal memory 3b as shown in FIG. 9 at the end of the processing in the memory card M. As shown in FIG. The state information of the memory 4 is an area (FAT: file allocation table) used during the previous processing, the total checksum (check value) of the memory 4, and the contents recorded in the memory 4 at the end of the previous processing. Checksums; As a result, the internal memory 3b has an area (FAT: file allocation table) used at the time of the previous processing, a full checksum of the memory 4, or a checksum of the contents recorded in the memory 4 at the end of the previous processing. Etc. are recorded.

The memory 4 is composed of a nonvolatile memory, and the state of the memory processed last time is maintained. The internal memory 3b is composed of a nonvolatile memory, and state information of the memory 4 is maintained.

Next, the authentication process at the time of performing the access process to the said memory 4 in the above structure is demonstrated, referring a flowchart shown in FIG.

The access processing to the memory 4 is recording of externally supplied music information or programs, reproduction of recorded music information or programs, and the like.

That is, the control part 3a confirms the recording state of the memory 4 at the time of accessing the memory 4 (ST11), and determines the area | region FAT used at the time of previous process (ST12). Next, the control part 3a compares the area | region FAT used at the time of the last time process determined with this with the area | region FAT used at the time of the last process recorded in the said internal memory 3b (ST13).

As a result of this comparison, the control unit 3a performs authentication (authentication OK) that the memory 4 is accurate when both of them match (ST14), and executes an access process to the memory 4 (ST14). . As this access process, for example, recording of data or reproduction (reading) of recorded data is performed.

After execution of this access process, the control part 3a writes (overwrites) the area | region FAT used by this access process to the said internal memory 3b (ST16).

Further, as a result of the comparison in step 13, the control section 3a stops the access process as NG when the two are inconsistent (ST17).

Although the above example has described FAT as the state information of the memory 4, the entire checksum (check value) of the memory 4 or the checksum (check value) of the contents recorded in the memory 4 at the end of the previous processing. The same can be done in the case of the above.                 

At the end of the previous processing, as shown in FIG. 11, the recording process and the authentication process of the memory state information in the case where the music information "A" is recorded in the address "AAAA" of the memory 4 with the length "BB". It demonstrates, referring the flowchart shown in FIG.

That is, the control part 3a calculates the checksum (test value) "CC" with respect to the said music information "A" (ST21).

Subsequently, the control unit 3a controls the recording start address " AAAA " of the memory 4, the length " BB " of the recording information, and the calculated checksum (check value) in the information ID previously assigned to the music information " A " By adding " CC ", memory state information is generated (ST22) and recorded in the internal memory 3b as shown in Fig. 13 (ST23).

The control unit 3a then checks the recording state of the memory 4 (ST25) the next time the access to the memory 4 is performed (ST24). At the end of the previous processing, the address "AAAA" of the memory 4 is reached. From this, it is determined that information of the length "BB" is recorded (ST26).

Next, the control part 3a calculates the checksum (test value) "CC" about the information of length "BB" from the address "AAAA" of the memory 4 (ST27).

The control section 3a judges the memory status information based on the determined address " AAAA ", the length " BB " and the calculated checksum (test value) " CC " (ST28). The correspondence with the memory state information at the time of the last processing read in 3b) is compared (ST29).

As a result of this comparison, the control unit 3a performs authentication (authentication OK) that the memory 4 is correct when both of them match (ST30), and executes an access process to the memory 4 (ST31). ).

As a result of the comparison in step 29, the control section 3a stops the access processing as the NG when the two are inconsistent (ST32).

Third embodiment

Next, in the above-described configuration, encrypted data of the authentication key recorded in the memory 4 in a state that cannot be rewritten, and authentication key and decryption recorded in the internal memory 3b in a state that cannot be rewritten. An embodiment in which the memory 4 is authenticated using a program and an encryption key will be described.

In this case, as shown in Fig. 14, encrypted data obtained by encrypting the authentication key with a unique encryption key is previously recorded in the memory 4, which is also recorded as non-rewritable.

Further, as shown in Fig. 14, the internal memory 3b decrypts the same authentication key as the authentication key before encryption of the encrypted data recorded in the memory 4, and the encrypted data recorded in the memory 4. The decryption program and the encryption key at the time of decrypting the encrypted data by this decryption program are recorded as non-rewritable.

The memory 4 and the internal memory 3b comprise a non-rewritable ROM unit and a rewritable ROM unit, and the authentication key is recorded in the non-rewritable ROM unit.

Next, in the above configuration, the authentication process of the memory 4 will be described with reference to the flowchart shown in FIG.

That is, the control part 3a reads the encrypted data recorded in the memory 4 (ST41). Subsequently, the controller 3a obtains an authentication key by decrypting the read encrypted data with an encryption key recorded in the internal memory 3b based on the decryption program recorded in the internal memory 3b (ST42). The control unit 3a also compares the obtained authentication key with the authentication key recorded in the internal memory 3b (ST43).

As a result of this comparison, the control unit 3a performs authentication (authentication OK) that the memory 4 is correct when both authentication keys match (ST44).

As a result of the comparison in step 23, the control unit 3a sets authentication as NG when the two are inconsistent (ST45).

In addition, it is also possible to use the authentication key stored in the internal memory 3b for authentication between the external device and the card M in order to use for authentication with the memory 4. Furthermore, as shown in Fig. 16, the internal authentication key K1 used for authentication with the memory 4 and the external authentication key K2 used for authentication with an external device are stored in the internal memory 3b of the card M. It is also possible to remember.

Fourth embodiment

Next, in the above configuration, when the received data from the external device is encrypted and recorded in the memory 4, authentication processing (steps 41 to 45) according to the third embodiment and the second embodiment are performed. An embodiment in which the memory 4 is authenticated using the authentication process (steps 11 to 14) by means of description will be described.

In this case, as shown in Fig. 17, encrypted data obtained by encrypting the authentication key with a unique encryption key is previously recorded in the memory 4, which is also recorded as non-rewritable.

In addition, as shown in Fig. 17, the internal memory 3b includes an authentication key identical to an authentication key before encryption of encrypted data recorded in the memory 4, an encryption program for encrypting received data from the external device; The decryption program for decrypting the encrypted data recorded in the memory 4, the encryption key when encrypting the received data by the encryption program and when decrypting the encrypted data by the decryption program, are recorded as non-rewritable. .

In addition, as shown in FIG. 17, the internal memory 3b includes an area (FAT: file allocation table) used in the previous processing, an entire checksum of the memory 4, or the memory 4 at the end of the previous processing. Checksums and the like of recorded contents are recorded.

The memory 4 and the internal memory 3b comprise a non-rewritable ROM unit and a rewritable ROM unit, and the authentication key is recorded in the non-rewritable ROM unit. The rewritable ROM section is composed of a nonvolatile memory, and the state of the memory processed previously is maintained.

Next, in the above configuration, the authentication processing at the time of receiving data from the external device will be described with reference to the flowchart shown in FIG.                 

That is, when the control unit 3a receives data from the external device (ST51), it performs the authentication process according to the third embodiment (ST52), and also performs the authentication process according to the second embodiment (ST53). .

As a result, when each authentication process is OK (ST54), the control part 3a encrypts the received data with the encryption key recorded in the internal memory 3b based on the encryption program recorded in the internal memory 3b. (ST55).

Subsequently, the control unit 3a writes the encrypted data into the memory 4 (ST56).

After the end of this recording, the controller 3a writes (overwrites) the state of the memory 4 to the internal memory 3b (ST57).

Moreover, the control part 3a stops a process, when any authentication process is NG (ST58).

Further, the same operation as described above is performed even when the encrypted data recorded in the memory 4 is decrypted and reproduced.

The data recorded in the memory 4 may be music information or a program.

In addition, it is also possible to use the authentication key stored in the internal memory 3b for authentication between the external device and the card M in order to use for authentication with the memory 4. Further, as shown in Fig. 19, the internal authentication key K1 used for authentication with the memory 4 in the internal memory 3b of the card M, and the external authentication key K2 used for authentication with an external device. It is also possible to remember.                 

Fifth Embodiment

Next, an example of use of the memory card M having the above authentication function will be described.

For example, an example in which the memory card M is used for the Internet connection system will be described with reference to FIGS. 20 and 21.

That is, Fig. 20 is a diagram showing the overall configuration of the Internet access system using the memory card M having the authentication function for checking the built-in memory.

In the figure, each of the electronic devices of the PC (personal computer) 11, the mobile phone, for example, the mobile phone 12, the electronic camera 13, and the TV device (TV device) 14 is a predetermined portable type. Card slot into which a stamp-sized memory card M having a hidden storage area, for example, a hidden storage area which cannot be directly accessed from the outside, and a communication interface such as a modem required for connection to the Internet 15 (not shown) ).

In the present embodiment, the memory 4 of the memory card M is connected to the Internet 15 from an electronic device (in which the card M) is mounted (in the card slot) (via the server of the Internet provider, i. Internet connection information 150 including a user ID, a user password, a mail account, a mail password, a DNS server address (DNS), an access point (connection line telephone number), and the like are registered so as to be able to connect to. The data format of the Internet connection information 150 registered in the memory 4 of this memory card M is various, such as the PC 11, the mobile phone 12, the electronic camera 13, the TV device 14, and the like. Regardless of the type of electronic device (device), it is unified in a predetermined format.                 

In addition, the PC 11 is automatically started when the memory card M is inserted into its own card slot, and reads Internet connection information 150 of a predetermined format from the memory 4 of the card M. The above-mentioned memory 4 which recorded (computer readable) the specific application program (Internet connection setting application program) 110 for automatic connection to 15 is mounted. At the time of activation of this memory card M, the authentication processing for checking the built-in memory according to the first, second and third embodiments described above is performed. In addition, when the authentication of the memory is OK, it is possible to perform recognition with the PC 11 as an external device by using the authentication key stored in the memory 3b in the memory card M. When the authentication is OK, the specific application program is started.

In addition, a recording medium in which the Internet connection setting application program (hereinafter referred to as an application) 110 is recorded (computer-recognized) in other types of electronic devices such as the mobile phone 12, the electronic camera 13, and the TV device 14, respectively. Is mounted. This recording medium is a ROM, a disk device, a flash memory, or the like. In addition, the application 110 may be downloaded via a communication line.

In this way, the user (internet connection setting application) 110 is mounted on an electronic device such as the PC 11, the mobile phone 12, the electronic camera 13, or the TV device 14, thereby allowing the user to access the Internet. The connection information 150 possesses a memory card M registered in the memory 4, and the card M is properly stored in the electronic device (PC 11, mobile phone 12, electronic camera 13). Or an electronic device such as a TV device 14], it is possible to simply connect to the Internet 15 from the device. Since it does not depend on the electronic device to be used here, a user can connect to the Internet 15 from either device by replacing and using one memory card M. FIG.

By the way, in this embodiment, there exists a store which performs the registration service of the Internet connection information 150 of the memory card M to the memory 4. The customer takes the memory card M at this store or purchases the memory card M at the store, and registers the Internet access information of the memory card M with the memory 4 at the store side. Will be done at. In Fig. 20, both the sales store 16 and the convenience store 17 perform an Internet access information registration service. Therefore, the retailer 16 has a PC 160 equipped with a recording medium (computer readable) on which the application for registering Internet connection information (Internet connection information registration application program) 180 is recorded. In addition, the convenience store 17 has not only an application (Internet connection information registration application) 180 for registering Internet connection information to the memory 4 of the memory card M, but also a memory card M and a mini disk (MD; mini). An information recording terminal 170 is provided which is equipped with a recording medium (computer readable) recording an application for downloading digital content to a disk or the like.

As a result of the registration service in the Internet access information registration service shops such as the retail store 16 and the convenience store 17, the number of users (the number of subscribers) who have contracted with the Internet provider (hereinafter abbreviated as the supplier) 18 is the corresponding provider. It can be counted by (18) and every Internet connection information registration service shop. Thus, each supplier 18 is a provider of this system (carrier-type recording medium accessing Internet access system) in a predetermined period of time, for example, on a monthly basis, and an Internet access information registration service store (distribution store 16, convenience store 17). Etc.] and the cash back 19 according to the number of the attendees.

Next, the Internet connection information registration service point in the system of FIG. 20, for example, the Internet connection information registration (recording) service of the memory card M to the memory 4 at the positive plate store 16 will be described with reference to FIG. do.

First, when the user's memory card M is mounted in the card slot of the PC 160 as shown by arrow a, the Internet connection information registration application 180 is activated. Then, the list screen (supplier list screen) 201 of a supplier is displayed on the display of the PC 160 (contracted with the company providing the system of FIG. 20).

If the user selects a desired supplier on the supplier list screen 201 or if the clerk of the store 16 selects a supplier that the user requires, the PC 160 determines a member's relationship with the selected supplier according to the application 180. A screen 202 showing the contents of the contract is displayed. On this screen 202, a confirmation button 202a is provided, and when the confirmation button 202a is pressed (if selected), the screen switches to the selection screen 203 of the payment method. If a payment method is selected here, it will switch to the mail account creation screen 204. Here, when the candidate of the mail account desired by the user is set, the PC 160 connects to the server 210 of the provider designated by the user (line) and connects the user's designated payment method and mail account to the server 210. As shown by the arrow b, confirmation is requested, and the screen 205 is switched to the online confirmation screen.                 

The server 210 of the custom provider checks whether the user has already been assigned to the other user in order from the first candidate with respect to the mail account desired by the user, and if not, grants the user the mail account. Decide If all the candidates have been granted, the mail account creation is requested from the server 210 to the PC 160 of the retail store 16 again.

When the server 210 determines the granting of the user's desired mail account, the server 210 further determines the user ID, user password, and mail password to be given to the user, and the information necessary for accessing the Internet including the DNS and the access point. Is transmitted to the PC 160 of the shop 16.

The PC 160 of the retail store 16 then provides Internet access information 150 in a predetermined format including a user ID, a user password, a mail password, a DNS, and an access point based on the information transmitted from the server 210 of the supplier. ), Encrypt the Internet connection information 150 with a media key Km described later according to a predetermined algorithm, and store the memory 4 of the memory card M mounted in the card slot of the PC 160. The recording operation starts on the screen), and the screen 206 is switched to the information recording screen.

When performing a write operation to the memory 4 of the memory card M, the authentication process of the above-described fourth embodiment is performed. In addition, when the authentication of the memory is OK, it is possible to perform recognition with the PC 11 as an external device by using the authentication key stored in the memory 3b in the memory card M. When these authentications are 0K, the recording operation is started.                 

When the PC 160 finishes recording the Internet access information 150 in the memory 4 of the memory card M, an inquiry screen for inquiring the user whether or not the information of the memory card M is password protected ( Switch to 207).

If password protection is required, the PC 160 assigns a password to the user. The PC 160 encrypts a user-specified password according to a predetermined algorithm and records it as a password in the memory card M. FIG. This encrypted password becomes a key for extracting the media key from the memory card M. FIG. When the PC 160 records the password 311 in the memory card 15, the series of Internet connection information recording processing, that is, user registration processing, is completed. In this case, the PC 160 switches to the screen 208 showing the user registration completion, and the contract count server 211 owned by the company (system provider) that developed the system to complete the user registration, for example, via the Internet. A notification is made as shown by the arrow c. On the other hand, if the password protection is not required, the PC 160 immediately switches to the user registration completion screen 208 and notifies the contract count server 211 to the contract count server 211 as shown by the arrow c. . This user registration completion notice also includes the information of the supplier contracted by the user.

The contract count server 211 counts (counts) the number of users who have contracted with each provider (the number of subscribers) for each provider and for each Internet access information registration service shop such as the retail store 16. Thus, when the user counting completion of the user registration is notified from the PC 160 of the retail store 16, the contract count server 211 counts up the number of attendees to the notified provider 1 and registers the Internet connection information for connecting to the supplier. The number of attendees handled by the shop (the sales store 16) that performs the service is counted up by one.

As described above, data for keying is recorded in the area where the memory exists as a forgery prevention of the memory card, and the key data is authenticated by the memory control LSI, and access to the memory is possible only when there is a match.

For this reason, even if the memory capacity is replaced with a large one, for example, the authentication of the memory control LSI becomes inconsistent, and thus the memory cannot be accessed.

Similarly, for one memory control LSI, even if several memories are used while turning, the memory cannot be accessed because authentication becomes inconsistent.

It is also effective to encrypt the key data so that the key data in the memory is not interpreted.

The present invention provides a memory comprising a memory for recording data, a control unit for controlling the recording of data into the memory or controlling the reproduction of data recorded in the memory, and a memory control LSI incorporating an internal memory used by the control unit. In the card, the control unit determines whether the memory is correct according to whether the authentication key recorded in the memory and the authentication key recorded in the internal memory match.

Claims (28)

delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete An authentication method for checking a portable electronic medium, the portable electronic medium A board to which wiring is performed, A first memory mounted on the substrate to write data; A second memory for recording data and a control unit for controlling the recording of data to the first memory and for controlling the reproduction of the data recorded in the first memory are configured as chips and mounted on the substrate and connected to the substrate. Control circuit, wherein the second memory is first memory state information, wherein the write start address at which the first memory has started storing data in a previous process, the length of the stored data, and the write start address and the data; Stores additional checksums for data defined by the length of- As comprising, the authentication method is When access is made to the first memory, determining, by the controller, a write start address at which the first memory has started storing data at the time of the previous processing and the length of the stored data; Calculating a checksum for the data defined by the write start address and the data length; Comparing the write start address, the length and the checksum of the data obtained in the determination step and the calculation step with the write start address, the length and the checksum respectively stored as the first memory state information in the second memory; Authenticating the first memory when the comparison start write address, the length of the data, and the checksum match each other; Authentication method for checking a portable electronic medium comprising a. 22. The method of claim 21, wherein the first memory is mounted on the substrate by soldering and the second memory is a bare chip mounted on the substrate. Way. 22. The method of claim 21 wherein the first and second memories are non-volatile memories. 22. The method of claim 21, wherein said first memory is a nonvolatile memory and said second memory comprises a nonvolatile memory portion in which said first memory status information is stored. 22. The portable electronic medium according to claim 21, wherein the first memory and the control circuit are mounted on one surface of the substrate, and the external connection terminal is hard gold plated on the other surface of the substrate. Way. 22. The method of claim 21, wherein the second memory stores a control program for controlling the controller. The first memory state information according to claim 21, wherein the first memory state information includes at least one of information indicating an area of the first memory used in a previous process, a check value used at the end of the previous process, and a check value of the entire first memory. And a portable electronic medium. 28. The method of claim 27 wherein the area of the first memory is defined by a starting address and a data length.

Images