JP2000066882A - Ic card, and program managing method for ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a program managing method for IC card which can limit the execution of a specific application program or only its partial functions by storing at least one execution condition under which respective functions of the application program are executed. SOLUTION: A call signal from a reader writer to an IC card is received (S101). It is decided (S102) whether or not the call signal contents are concerned in the setting of execution conditions. An execution essential condition check process for deciding whether or not functions of the application program corresponding to the call signal meet the execution essential conditions is performed (S103). Then a function selective executing process for selecting and executing one of executable functions is performed (S107). Further, a report on the absence of executable functions is set (S108) and a function execution condition setting process is performed (S109). Thus, the application program or only its functions are limited.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card and an IC card program management method, and more particularly, to an IC card and an IC card program whose execution can be restricted for each application program or function stored in the IC card. Regarding management methods.

[0002]

2. Description of the Related Art Because of its high security, IC cards are used for commuter passes, credit cards, electronic money, and the like. These are realized by storing an application program incorporating functions suitable for the purpose in an IC card. For example, in the case of an electronic card for electronic money, an application program having three functions of deposit, withdrawal, and balance inquiry is stored in the IC card.

Recently, a multipurpose IC storing a plurality of application programs in one IC card
Cards have appeared (Nikkei Microdevices 1997 August
Monthly issue page 49). For example, an IC in which a commuter pass application program and a credit card application program are stored in one IC card, and can be used for both commuter pass and credit card applications.
Card. By storing a plurality of application programs in one IC card, for example, even when transiting to different transportation means, the IC card can be used with one IC card, so that the convenience is improved. Further, the manufacturing cost of issuing an IC card for each application program can be reduced.

[0004] Further, IC cards to which new application programs and functions can be added later are also appearing.

[0005]

By the way, several methods for revoking an IC card have been proposed (Japanese Unexamined Patent Publication No.
50639, JP-A-8-263578,
JP-A-7-319967, JP-A-5-13650
No. 3). However, since these methods make the IC card itself unusable, there is a problem that all applications cannot be used for the multipurpose IC card. Therefore, a first object of the present invention is to provide an IC card capable of restricting execution of a specific application program in an IC card or only a part of its functions.
An object of the present invention is to provide a card program management method.

Further, when passing through a ticket gate of transportation, it is possible to activate, for example, whether to pass through a commuter pass function of the IC card, pass through a prepaid billing function, or settle charges with a function of debiting from a financial institution. When there are multiple application programs or their functions,
Conventionally, an executable application program or its function is notified to a user of an IC card, and an application program or its function to be executed is selected by the user. However, the method of allowing the user to select an application program to be executed or its function has a problem that the procedure processing time is long. Therefore, a second object of the present invention is to provide an IC card and an IC card program management method which enable automatic selection of an application program to be executed or its function.

Further, a third object of the present invention is to provide an IC card and an IC card which can prevent a condition for restricting execution of only a specific application program or a part of the function in the IC card from being unduly changed. An object of the present invention is to provide an IC card program management method.

[0008]

According to a first aspect of the present invention, a plurality of application programs and execution conditions presupposed to execute each application program and at least one application program and each function of each application program are defined. There is provided an IC card in which at least one of execution conditions presupposed to be executed is stored. Further, the present invention reads out the application program or the execution condition of the function stored in the IC card when the execution of the application program or the function stored in the IC card of the above configuration is requested. A program management method for an IC card, characterized in that it is determined whether or not an execution condition is satisfied, and that execution is possible only when the condition is satisfied. In the IC card and the IC card program management method according to the first aspect, the execution condition for each application program or its function is stored in the IC card, and the IC card itself or the reader / writer reads out the execution condition. To determine feasibility. This makes it possible to restrict the execution of a specific application program in the IC card or only a part of the function.

According to a second aspect, the present invention provides an I
The C card stores at least one of information for determining an execution priority when there are a plurality of executable application programs and information for determining an execution priority when there are a plurality of executable functions. To provide an IC card. In addition, the present invention provides a method for controlling the execution of an application program stored in an IC card having the above configuration or a function of the application program.
The execution condition of the application program or the function stored in the card is read out, and it is determined whether or not the execution condition is satisfied. There is provided an IC card program management method characterized by reading out stored information for determining an execution priority and enabling the highest priority application program or function to be executed based on the information. In the IC card and the IC card program management method according to the second aspect, the application program or information for determining the execution priority of each function is stored in the IC card, and the IC card itself or the reader / writer performs The information that determines the execution priority is read out to determine the highest priority application program or function, and only that can be executed. As a result, an application program to be executed or its function can be automatically selected, and the procedure processing time can be reduced.

According to a third aspect, the present invention provides an I
An IC card is provided, wherein a change flag defining change permission / prohibition of change of the execution condition or the information for determining the execution priority is stored in the C card.
Further, the present invention refers to a change flag stored in the IC card when the change of the information for determining the execution condition or the execution priority stored in the IC card having the above configuration is requested, and the change flag is set. Provided is a method for managing a program of an IC card, wherein a change can be made only when change is permitted. IC card and IC according to the third aspect
In the card program management method, the change flag is stored in the IC card, and the IC card itself or the reader / writer reads out the change flag and permits or prohibits the change of the information for determining the execution condition or the execution priority. Judge and allow changes only if permitted. This allows I
It is possible to prevent a condition that can restrict execution of only a specific application program in the C card or a part of the function from being improperly changed.

[0011]

Embodiments of the present invention will be described below in detail. Note that the present invention is not limited by this.

Generally, various processing requests are transmitted to an IC card by a dedicated device called a reader / writer. The IC card performs a security check on the processing request, and if it passes, executes the application program and its function stored in the storage device inside the IC card in response to the processing request.
Then, if necessary, the information is written into the storage device inside the IC card, and the information is transmitted to the reader / writer. Finally, the IC card transmits a processing end signal to the reader / writer, and ends the processing of the IC card. Further, the reader / writer receives the processing end signal and ends the processing.

FIG. 1 shows an IC according to an embodiment of the present invention.
It is a perspective view of a card. This IC card 1 has a plate 11 provided with an IC chip 12, a connection unit 13 for exchanging information with a reader / writer, and a power supply unit 14 for supplying power. The power supply unit 14
Means a power supply terminal in a contact IC card, a built-in battery and a power generation coil in a non-contact IC card, and the like.

FIG. 2 is a block diagram showing the configuration of the IC chip 12. As shown in FIG. This IC chip 12 is used for the storage device 1
2m and an arithmetic unit 12p, which are connected to the connection unit 13 by a data bus 15 and a power line 16
Is connected to the power supply unit 14. In the storage device 12m, a plurality of application programs, a management program for implementing the program management method of the present invention, and a condition table in which execution conditions of the application programs or some functions thereof are registered (FIGS. 5) and personal information of the user of the IC card 1 are stored.

FIGS. 3 to 5 are illustrations of the condition tables. The condition table is a table in which an application program name, a function of each application program, an execution condition of each function, that is, an execution essential condition or an execution priority function, and an execution priority are listed. The execution essential condition includes a registered content of a condition that must be satisfied in order to execute the function, a change flag by the user indicating whether or not the user is permitted to change the content. And a change flag by the service provider indicating whether the change of the content is permitted to the service provider. The execution priority function permits a user to register contents for registering a condition for preferentially executing the function when there is an executable function in addition to the function, and to change the content. The change flag by the user indicating whether or not the change has been performed, the change flag by the service provider indicating whether or not the change of the content is permitted to the service provider, and the execution priority function of the function An original flag indicating whether the function is a simple function or not, and an execution priority in which, when a plurality of application programs or their functions are executable, the priorities for executing them are registered.

In the condition tables shown in FIGS. 3 to 5, the execution essential condition and the execution priority function are set for each function of the application program. However, the execution essential condition and the execution priority function are set for each application program. May be.

FIG. 6 is a flowchart showing the main processing of the management program of the IC card 1. Step 10
In step 1, an interrogation signal from the reader / writer to the IC card 1 is received. In step 102, it is determined whether or not the content of the call signal is related to the setting of the execution condition. If not, the process proceeds to step 103, and if so, the process proceeds to step 109. In step 103, an execution essential condition check process is performed to determine whether the function of the application program corresponding to the call signal satisfies the execution essential condition. The execution essential condition check processing will be described later with reference to FIG. In step 104, it is checked whether or not step 103 has been executed for all the functions.
Returning to step 1, if executed, proceed to step 105. In step 105, it is checked whether or not step 103 has been executed for all the interrogation signals, and if not executed, the process returns to step 101;
Proceed to 06. In step 106, it is checked whether there is an executable function. If there is, the process proceeds to step 107, and if not, the process proceeds to step 108. Step 10
In step 7, a function selection execution process of selecting and executing one of the executable functions is performed. Then, the main process ends. This function selection execution processing will be described later with reference to FIG. In step 108, a message indicating that there is no executable function is transmitted. Then, the main process ends. In step 109, a function execution condition setting process is executed. Then, the main process ends. This function execution condition setting process will be described later with reference to FIG.

FIG. 7 shows an execution essential condition check process (10
It is a flowchart which shows 3). In step 201, one of the essential conditions for executing the function of the application program required by the interrogation signal is read from the storage device 12m of the IC chip 12. In step 202, I
From the storage device 12m or the reader / writer of the C chip 12, information necessary for determining the read execution essential condition is read. In step 203, it is determined whether the arithmetic unit 12p of the IC chip 12 satisfies the read execution essential condition. In step 204, if the read execution essential condition is satisfied, the process proceeds to step 205; otherwise, the process proceeds to step 207. If “invalid” is set in the content of the execution essential condition, it is assumed that the execution essential condition is not satisfied. In step 205, it is checked whether or not the determination in step 204 has been made for all of the execution essential conditions of the function of the application program required by the interrogation signal. If not, the process returns to step 201; In step 206, it is determined that the function of the application program required by the call signal can be executed. Then, the execution essential condition check processing ends. In step 207, it is determined that the function of the application program required by the call signal is not executable. Then, the execution essential condition check processing ends.

FIG. 8 is a flowchart showing the function selection execution processing (107). In step 301, one of the executable functions is noted from the storage device 12m of the IC chip 12, and one of the execution priority functions is read out. In step 302, the storage device 1 of the IC chip 12
Information necessary for calculating the read execution priority function is read from 2m or a reader / writer. Step 303
Then, the value of the execution priority function is calculated. Step 304
Then, it is checked whether or not the calculation of the value of step 303 has been performed for all of the execution priority functions of the function of interest. If not, the process returns to step 301; In step 305, the sum of the values of all the calculated execution priority functions is calculated. In step 306, it is checked whether the sum of step 305 has been calculated for all of the executable functions. If not, the process returns to step 301, focusing on another executable function. If yes, go to step 307. In step 307, it is checked whether there is a plurality of functions having the highest sum of the execution priority functions. If there is only one function, the process proceeds to step 308. If there is more than one, the process proceeds to step 309.
In step 308, the function having the highest sum of the execution priority functions is selected, and the process proceeds to step 310. In step 309, the function having the highest execution priority is selected from among the plurality of functions having the highest sum of the execution priority functions. Step 310
Now, execute the selected function.

FIG. 9 shows a function execution condition setting process (109).
It is a flowchart which shows. In step 401, a setting signal is received from an apparatus for setting execution conditions. In step 402, the function specified by the setting signal is I
It is checked whether or not the card exists in the C card 1, and if there is, the procedure proceeds to step 403, and if not, the procedure proceeds to step 410. In step 403, the change flag by the user of the function specified by the setting signal or the change flag by the service provider is checked. If the person who is going to set the execution condition is permitted to change, the process proceeds to step 404, and the change is performed. Step 41 if prohibited
Go to 0. In step 404, it is checked whether or not the function specified by the setting signal is an execution essential condition. If the function is an execution essential condition, the process proceeds to step 405. If not, the process proceeds to step 407. In step 405, it is checked whether or not the content to be newly set in the execution essential condition is inconsistent with the previously set unexecutable execution condition that cannot be changed.
Then, if there is a contradiction, go to step 410. In step 406, it is checked whether or not the content to be newly set in the execution essential condition is inconsistent with the settable execution essential condition that can be changed.
Then, if there is a contradiction, the contradictory execution essential condition is deleted and the flow proceeds to step 410.

In step 407, an execution essential condition or an execution priority function specified by the setting signal is stored in the IC chip 12.
Is set in the condition table of the storage device 12m. In step 408, when the execution priority function is set in step 407, the function is compared with the execution priority function of another function to find a function whose upper and lower relation is established as a function value, and performs upper and lower relation processing. Here, the fact that the upper and lower relations are established as function values means that the functions f ₁ and f ₂ satisfy f ₁ ≦ f ₂ with respect to an arbitrary input. The upper-lower relation processing means that when the upper-lower relation is established as a function value of the execution priority functions f ₁ and f ₂ of the functions A ₁ and A ₂ , the function A ₁ is always selected when the function is selected. This is the processing performed. The fact that the execution priority function satisfies f ₁ ≦ f ₂ indicates that the function A ₁ is more specialized than the function A ₂ . Therefore, even if such available both features, it functions A ₁ it is because it is considered to be close to the intended use, so that functions A ₁ in the vertical-related process is selected. This vertical relationship processing will be described later with reference to FIG. In step 409, an execution priority to be used when the selection cannot be made with the execution priority function value is given to all the functions. The execution priorities are numbered, for example, in the order of registration. Then, the function execution condition setting process ends.

In step 410, a non-executable signal is transmitted. Then, the function execution condition setting process ends.

FIG. 10 is a flowchart showing the vertical relation processing (408). In step 801, the execution priority function set in step 407 (this is set to f ₁ ) is compared with the execution priority function of another function (this is set to f ₂ ), and f ₁ ≦ f ₂ is set. Find function with the execution priority function f ₂ satisfying. In step 803, if there is an execution priority function f ₂ that satisfies f ₁ ≦ f ₂ , step 804
The process proceeds to step 805 if it does not exist.
In step 804, it registers the original flag corresponding to that non-original function with adding the function of the execution priority function f ₁ the execution priority function f _2. By performing this operation, if the original execution priority function is f ₁ ≦ f ₂ , the new execution priority function (sum) becomes f ₁ ≧ f ₂ , and in steps 308 and 309, the function value sum is calculated. since selecting, so the function of executing priority function f ₁ is chosen.
At step 805, steps 801 to 804 are performed for all other functions.

In step 806, step 407 is executed.
The execution priority function in set (referred to as f _1), compared with the execution priority function of another function (referred to as _{f 3), f 3 ≦ f} 1 execution priority function f ₂ satisfying Look for functions with. In step 807, if the execution priority function f ₃ satisfying f ₃ ≦ f ₁ were present the process proceeds to step 808, if not present, the sequence goes to step 809. Step 8
In 08, and registers the original flag corresponding to that non-original functions with addition of execution priority function f ₁ to the function of the execution priority function f _3. In step 809, steps 806 to 808 are performed for all other functions. Then, the vertical relationship processing ends.

FIG. 11 is a flowchart of the function registration process of the application program. Step 701
Then, the function of the new application program is stored in the storage device 12m of the IC chip 12. Step 7
In 02, all the execution essential conditions of the function of the new application program are recorded in the condition table of the storage device 12m. In step 703, one of the execution priority functions of the function of the new application program is recorded in the condition table of the storage device 12m. In step 704, the vertical relationship processing of FIG. 10 is performed. In step 705, the process returns to step 703 if any of the execution priority functions of the functions of the new application program, for which the steps 703 and 704 have not been executed, remains. If not, the process proceeds to step 706. In step 706, the execution priority is reset for all the functions. Then, the function registration process of the application program ends.

FIG. 12 is a flowchart of the function deleting process of the application program. Step 901
Then, the function of the application program to be deleted is deleted from the storage device 12m of the IC chip 12. In step 902, all the execution essential conditions of the function of the deleted application program are deleted from the condition table of the storage device 12m. In step 903, an execution priority function deletion process of deleting one of the execution priority functions of the function of the deleted application program from the condition table of the storage device 12m is executed. This execution priority function deletion processing will be described later with reference to FIG. In step 904, the process returns to step 903 if any of the execution priority functions of the functions of the deleted application program that have not been deleted remains. If not, the process proceeds to step 905. In step 905, the execution priority is reset for all the functions. Then, the function deleting process of the application program ends.

FIG. 13 is a flowchart showing the execution priority function deletion processing. In step 1001, the storage device to execute priority function for deletion (referred to as f ₁₎ 1
Delete from the 2m condition table. In step 1002, referring to the original flag of the deleted execution priority function f _1, if the original function proceeds to step 1003 to end the execution priority function deletion process if not original function. In step 1003, the storage device 12
examine either does not exist the same function f ₁ 'and f ₁ in the execution priority function of the remaining functions stored to m. In step 1004, if the function f ₁ ′ exists and is an original function, the process proceeds to step 1005. If the function f ₁ ′ does not exist or exists, but the function f ₁ ′ is not an original function, the process proceeds to step 1006. . Step 1
In 005, the function f ₁ ′ is deleted from the condition table.
In step 1006, the step unless exhaustively examined or not there is the same function f ₁ 'and f ₁ 1003
When the check has been completed, the execution priority function deletion processing ends.

In the above embodiment, the IC chip 12 of the IC card 1 determines the execution essential condition, determines the execution priority function, and selects the function. However, the determination may be performed on the reader / writer side. In the former method, it is not necessary to pass information in the IC card 1 to the reader / writer side, so that information leakage can be prevented. On the other hand, the latter method is strong against forgery of an IC card because the judgment is made by the reader / writer. It is preferable to appropriately use these two methods depending on the use and importance of the IC card.

In the above embodiment, for example, FIG.
There is "3% off from 10,000 yen" in the contents of the execution priority function of, which is called "f = 0.03 * x if x≥10000, f≥0 otherwise, x: usage amount" As described above, a function for calculating the discount amount may be used.
However, in this case, since the value range differs depending on the function, it is necessary to take a new evaluation criterion when selecting a function. For example, a function f having the same range for the functions A ₁ and A _2
1 and f ₂ , and if the function value is f ₁ ≦ f ₂ , A ₂
For example, processing such as adding one point to the function and finally selecting the function with the largest number of points can be considered.

Further, in the above embodiment, when there are a plurality of functions having the highest sum of the execution priority function values, the functions are selected according to the execution priority. However, the user may be asked to select the function. It is rare that there are a plurality of functions having the highest sum of the execution priority function values, and in many cases, the function can be selected based on the sum of the execution priority function values. In addition, the procedure processing time can be reduced as compared with the related art.

According to the above-described IC card 1, since the execution essential condition is set for each function of the application program, the execution can be restricted for each function. That is,
Only the execution of a specific application program or a specific function can be restricted. In addition, since an execution priority function and an execution priority are provided for each function of the application program, when there are a plurality of executable application programs and their functions, the selection of the application program to be executed and the functions can be automated, Procedure processing time can be reduced. Also, since a change flag is provided for each of the execution essential condition and the execution priority function, it is possible to prohibit an unintended person from changing the contents, thereby ensuring security.

Further, by properly combining the execution essential conditions, the service can be subdivided. In other words, when the service provider sets the necessary execution conditions and the execution priority function based on the preferences and requirements of the IC card user when registering the application program, the service according to the preferences and requirements of the IC card user can be provided. It is possible to provide a service at a low cost, because it can be provided and unnecessary service is provided.

[0033]

According to the IC card program management method of the present invention, the following effects can be obtained. (1) When a specific application program of an IC card or a function of a part of the IC card is restricted, the entire IC card has been conventionally invalidated. However, according to the present invention, only the application program or the function can be restricted. Can be used without wasting other application programs or functions. (2) In the case where there are a plurality of executable application programs or functions, selection by the user has conventionally been necessary, but according to the present invention, automatic selection can be performed, and the procedure processing time can be reduced. (3) When the information for determining the execution condition or the execution priority is to be changed, it is checked whether or not the change is possible by the change flag, so that the change of the contents by an unintended person can be prohibited, and the security can be ensured.

[Brief description of the drawings]

FIG. 1 is a perspective view of an IC card according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of an IC chip inside the IC card of FIG. 1;

FIG. 3 is an explanatory diagram of a configuration of a condition table stored in the IC chip of FIG. 2;

FIG. 4 is an explanatory diagram illustrating a continuation of a condition table stored in the IC chip of FIG. 2;

FIG. 5 is a diagram illustrating a further continuation of a condition table stored in the IC chip of FIG. 2;

FIG. 6 is a flowchart showing main processing of the IC card of FIG. 1;

FIG. 7 is a flowchart showing an essential condition check process of the IC card of FIG. 1;

FIG. 8 is a flowchart showing a function selection execution process of the IC card of FIG. 1;

FIG. 9 is a flowchart showing a function execution condition setting process of the IC card of FIG. 1;

FIG. 10 is a flowchart showing a vertical relation process of the IC card of FIG. 1;

FIG. 11 is a flowchart showing a function registration process of an application program of the IC card of FIG. 1;

FIG. 12 is a flowchart showing a function deleting process of an application program of the IC card of FIG. 1;

FIG. 13 is a flowchart showing an execution priority function deletion process of the IC card of FIG. 1;

[Explanation of symbols]

1: IC card, 11: plate, 12: IC chip,
12m storage device, 12p arithmetic device, 13 connection unit,
14 Power supply unit.

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Toshiro Sasaki 1099 Ozenji Temple, Aso-ku, Kawasaki City, Kanagawa Prefecture F-term in Hitachi, Ltd. Systems Development Laboratory 5B035 AA06 BB09 BB11 BC00 CA11 5B058 CA25 CA28 YA03 YA20 5B076 AB17 CA07

Claims (6)

[Claims] At least one of execution conditions presupposed to execute a plurality of application programs and each application program and execution conditions premised to execute each function of at least one application program and each application program is stored. An IC card, characterized in that: 2. When the execution of the application program or the function stored in the IC card of claim 1 is requested, the execution condition of the application program or the function stored in the IC card is read. A program management method for an IC card, comprising determining whether or not an execution condition is satisfied, and enabling execution only when the condition is satisfied. 3. The IC card according to claim 1, wherein
An IC card storing at least one of information for determining an execution priority when a plurality of executable application programs exist and information for determining an execution priority when a plurality of executable functions exist. 4. When the execution of the application program or the function stored in the IC card according to claim 3 is requested, the execution condition of the application program or the function stored in the IC card is read out. It is determined whether or not the execution conditions are satisfied. If there are a plurality of application programs or functions that are satisfied, the information that determines the execution priority stored in the IC card is read out, and based on the information, the information is determined. A program management method for an IC card, wherein a priority application program or function can be executed. 5. The IC card according to claim 1, wherein a change flag defining change permission / prohibition of change of the execution condition or the information for determining the execution priority is stored. card. 6. A request for changing execution conditions or execution priority information stored in the IC card according to claim 5, wherein the change flag is referred to by referring to a change flag stored in the IC card. A program management method for an IC card, wherein a change can be made only when a change is permitted.