JP2000172808A - Ic card and application managing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain an IC card where an application can be deleted and updated by setting application identifier areas and application state information areas individually by set areas for applications. SOLUTION: Communication data are inputted normally and a low-dead state (ST14) is entered; and an application is installed to enter an installation state (ST15) and registered to enter a registration state (ST16). Here, application update 101 or application deletion 102 is performed in a state (ST17) wherein the application is installed or a block state (ST18). Namely, when no application is installed, an application area can be secured and the application name can be registered in advance, so that access control over a provider-side application can be performed as to a common object.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card issuing system including an IC card having a nonvolatile memory and a terminal device for outputting an application to be installed in the nonvolatile memory of the IC card, and an application management method.

[0002]

2. Description of the Related Art In recent years, an environment (Java) for executing a program on a network such as the Internet has appeared, and has rapidly spread on the Internet boom. Therefore, the development of an IC card incorporating this environment is underway.

[0003] The compiler for the above environment generates byte code, which is an intermediate language, from source code. Each platform that provides the above operating environment has a virtual machine on which the bytecode is sequentially executed built. For this reason, even in the above IC card, a virtual machine (bytecode interpreter) is constructed on the card. However, at present, the hardware of the IC card is much smaller than the network computer.

In the above-mentioned IC card, an application in which an application is loaded (installed) in a nonvolatile memory and the loaded application is executed by a virtual machine has been developed.

[0005] As an example of an IC card incorporating the above-described environment, the concept of installing an application (applet) is described in "Java Card 2.0 API", but the specific method is completely described. Absent.

[0006] Also, "Visa Open Platform Card Specif
In “ication”, there is a description of a specific method of installing an application (applet). However, the concept of the start and end of the life cycle is described, but the specific method is not described.

[0007] Even when both are combined, there is no description about deletion or update of an application. In other words, you can add applications, but not delete or update them.

[0008] On the other hand, there is a market need to delete or update applications.

[0009]

As described above, in the prior art, there is no specific method for deleting or updating an application, and a memory space and an application name (number) allocated for an application whose life cycle has been completed are not provided. ) There was a problem that the AID could not be reused.

It is therefore an object of the present invention to provide an IC card capable of deleting and updating an application and an application management method.

[0011]

An IC card according to the present invention comprises: an IC card having a nonvolatile memory; and a terminal device for outputting an application to be installed in the nonvolatile memory of the IC card. The IC card includes first setting means for setting an application area in the nonvolatile memory, and an application identifier information area and an application state information area for each application area set by the first setting means. And second setting means for setting individually.

An IC card according to the present invention is an IC card issuing system comprising an IC card having a nonvolatile memory and a terminal device outputting an application to be installed in the nonvolatile memory of the IC card. The system includes a setting unit that sets an application area in the nonvolatile memory, and a registration unit that registers an application name before installing an application in the application area set by the setting unit.

An application management method according to the present invention comprises:
In an IC card issuing system including an IC card having a non-volatile memory and a terminal device outputting an application to be installed in the non-volatile memory of the IC card, when an application installed in the IC card is updated, The above-mentioned application is deleted and a new application is installed while retaining the authority of the application name and the memory area.

An application management method according to the present invention comprises:
In an IC card issuing system including an IC card having a non-volatile memory and a terminal device outputting an application to be installed in the non-volatile memory of the IC card, when the application installed on the IC card is deleted, the application is deleted. The memory space of the nonvolatile memory in which the application is installed is transferred to the issuer of the IC card.

[0015] The application management method of the present invention comprises:
In an IC card issuing system including an IC card having a nonvolatile memory and a terminal device outputting an application to be installed in the nonvolatile memory of the IC card, for each application area provided in the nonvolatile memory of the IC card, An application identifier information area and an application state information area are individually set.

An application management method according to the present invention comprises:
In an IC card issuing system including an IC card having a non-volatile memory and a terminal device outputting an application to be installed in the non-volatile memory of the IC card, an application name is registered in advance before the application is installed in the IC card. It is characterized by doing.

[0017]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 shows a schematic configuration of an IC card issuing system according to the present invention.

This IC card issuing system comprises a terminal device 11 and an IC card 12. Terminal device 1
1 is an arithmetic unit 111 that controls arithmetic and human input
And a reader / writer 11 that controls input and output with the IC card 12
2 are connected by a connection 113.

The arithmetic unit 111 has a processor for performing arithmetic operations, and has external input means including a human system. The request to the IC card 12 and the processing of the result status are performed here.

The reader / writer 112 receives a request from the arithmetic unit 111 and issues the request to the IC card 12 inserted in the card insertion slot 120. Similarly, it receives the status from the IC card 12 and reports the result to the arithmetic unit 111.

The IC card processing system of the present invention has the same configuration as the above-mentioned IC card issuing system.

The IC card 12 handled by the IC card processing system includes a standard card and a non-standard card.
There is a type, and in the case of a standard card, when installing an application, processing is performed using a work area (CAP) of a non-volatile memory described later. In the case of a non-standard card, the application is installed. In this case, processing is performed without preparing a work area (CAP) in the nonvolatile memory.

As shown in FIGS. 1 and 2, the IC card 12 has a contact 20 serving as a contact with the outside,
A processor 21 for performing control, a volatile memory (RAM) 22 for temporarily storing data, a non-volatile memory (EEPROM) 23 for storing data permanently, a coprocessor 24 for assisting the processor 21, a card operating system (COS) and a ROM 25 in which a card domain for executing loading / installing of an application and a virtual machine for interpreting bytecode of an application are mounted. The communication with the reader / writer 112 is performed through the contact 20. As the nonvolatile memory 23, a flash memory, an FRAM, or the like may be used.

Under the control of the processor 21, two types of memories, a RAM 22 and an EEPROM 23, are managed. In addition, there may be a co-processor 24 for performing an operation that generates a load, which performs an operation under the instruction of the processor 21.

Data is input from the contact 20 in FIG. 1 and is generally stored in the RAM 22. The data received here is analyzed by the processor 21,
It is processed. Here, the data that needs to be stored is written into the EEPROM 23 under the instruction of the processor 21, and the processing instructions are sent to the coprocessor 24 for those capable of performing special calculations. Further, large data or the like that cannot be stored in the RAM 22 may be temporarily written to another area of the EEPROM 23.

As shown in FIGS. 3 and 4, the EEPROM 23 has a system area 3 in which a card ID and the like are recorded.
1, a BCC area 32 for area check, a CB area 33 as a commit buffer area, a slot management table 34a for managing slots and a card data area 34 in which a shared table 34b indicating a permission state between applications is recorded. Each slot has a user application area 35 in which an application can be recorded. The BCC area 32 is an area for checking the correctness of the card data area 34 and the user application area 35.

The user application area 35 is composed of, for example, eight slots # 0 to # 7 as shown in FIG. 4, and a user application is recorded in each slot.

As shown in FIG. 5, the slot management table 34a recorded in the card data area 34 includes, for each slot, the status STS of the application recorded in the slot and the application name (number) recorded in the slot. AID, start position (address) TOP of slot in user application area 35, size S of slot in user application area 35
It is composed of ISE.

The start position (address) T for each slot
The OP and the size SIZE can be set when the card issuer is authorized by a card issuing machine (IC card issuing system).

As the state STS of the application,
"C" (Create) when setting the slot area based on application application in the IC card issuing system
e) is recorded, and “P” (Pr) is prepared at the preparation stage when the application is installed in the IC card processing system.
epared) is recorded, and "R" (R
registered) is recorded.

As shown in FIG. 6, in the shared table 34b recorded in the card data area 34, an application which permits reference to each application module is recorded. And the permitted application name AID.

In the above-mentioned IC card issuing system,
Processing when issuing the C card 12 will be described.

That is, when the issuer is specified in the terminal device 11, the card issuance and the card ID
, Slot size, etc., and an unrecorded IC card 12 is inserted into the card insertion slot 120 of the reader / writer 112. The above slot size is
It is set based on the application from the installer of the application.

As a result, the card ID set by the terminal device 11 is recorded in the system area 31 of the EEPROM 23, and the card data area 34 of the EEPROM 23 is set based on the slot size set by the terminal device 11.
The top position (address) TOP in the user application area 35 for each slot and the size SIZE in the user application area 35 are recorded in the slot management table 34a of each slot, and "C" indicating application is recorded in the corresponding application state STS. You.

The above-mentioned slot management is performed by the issuer.

In the above IC card processing system,
A process for loading and installing an application on the C card 12 will be described.

That is, in a state where the installer of the application is specified in the terminal device 11, the installation of the application, the application name AID, the permitted application for the module of each application, etc. are instructed, and the IC card issuing system is used. Issued IC card 12
Is inserted into the card insertion slot 120 of the reader / writer 112.

Thus, the application name AID set by the terminal device 11 is recorded in the slot management table 34a of the card data area 34 of the EEPROM 23 in correspondence with the currently applied slot, and the corresponding application status STS "P" indicating preparation is recorded.

In this state, the terminal device 11 sends the IC
When the application is loaded onto the card 12, the application is installed and recorded in the user application area 35 of the EEPROM 23 in the IC card 12.

At this time, the start position (address) in the user application area 35 recorded corresponding to the slot in the preparation state of the slot management table 34a.
The application is recorded based on the TOP. At this time, the size of the application is the size SIZ in the application area 35 recorded corresponding to the slot being prepared in the slot management table 34a.
It is defined based on E.

After the application is installed, "R" indicating recording is recorded in the application status STS of the corresponding slot in the slot management table 34a.

Next, the relationship between the card issuer and the application issuer in such a configuration will be described with reference to the flowchart of FIG.

In the present invention, the authority of the card manufacturer 201, the authority of the card issuer 202, and the authority of the application issuer 203 are clearly separated.

The card manufacturer 201 is the card issuer 2
02 is a person who manufactures the 1C card 12 in response to the request of the customer. The card manufacturer 201 provides an area for the card issuer 202 in the IC card 12, and gives data such as an application name AID and a transport key to the area.

The card issuer 202 is the IC card 12
He is responsible for all resources. IC card 1
2 and the authority to control the application space AID resource in the IC card 12.

The application publisher 203 is an IC
The person responsible for the operation of the application downloaded into the card 12 and the cycle management of the application.

In FIG. 7, the agent in the IC card 12 of the card issuer 202 is a CD (Card D).
omain), the agent in the IC card 12 for the application issuer 203 is set to SD (Security Domai).
n). The application issuer 203 applies to the card issuer 202 for the required memory space capacity and the application name AID for downloading the application into the IC card 12 (ST).
4). The card issuer 202 prepares a memory space in which the corresponding application can be stored, and also prepares an application name AID in the IC card 12 (ST3). Through this step, the card issuer 202 can manage the application downloaded into the IC card 12.
After this step, the memory space resource in which the corresponding application enters and the application name AID resource become the property of the application publisher 203.

The application issuer 203 can load an application into the IC card 12 using the terminal device 11 of the card issuer 202.
The application issuer 203 downloads an application into the IC card 12 and performs initialization, registration processing, and personalization.

Next, the life cycle of the application will be described with reference to the flowchart of FIG.

When deleting an application, the application publisher 203 has the following two options.

Application Update (update) Application Delete (delete) First, an unrecorded state (Not Available: ST11)
Ready to set application name from (Prepare
d: ST12), the program is loaded and updated (Update: ST13), communication data enters normally, and the data becomes loaded (Loaded: ST14).
The application is installed and enters an installed state (Installed: ST15), and the application is registered and enters a registered state (Registered: ST16). Here, the state that the application is included (Personaliz
ed: ST17) or block state (Blocked: ST)
At 18), an application update (update) 101 or an application deletion (delete) 102 is performed.
If it is an update, the process proceeds to step ST13, and if it is deleted, it is deleted (Delete: ST18) and the process returns to step ST11.
If the IC card 12 is pulled out of the reader / writer 112 during the operations of steps ST14, ST15 and ST16,
It becomes abort (abort) and returns to step ST13.

That is, application update (updat
e) When 101 is selected, the application can be deleted while retaining the application name A1D resource and the memory query resource transferred from the card issuer 202. Thereafter, a new application can be downloaded to the application name AID resource and the memory space resource. Application publisher 203
Can update the application while retaining the acquired resources.

Further, application deletion (delete) 1
When 02 is selected, the corresponding application is deleted, the corresponding application name AID becomes invalid, and the memory space resources become the property of the card issuer 202. At this time, the released resource is another application publisher 2
03 can be reused.

As described above, according to the embodiment of the present invention, when an application does not exist, an application area can be secured and an application name can be registered in advance. It can be performed.

Further, the card issuer can manage applications downloaded into the IC card.

Further, the application issuer can surely delete the application and add it later without holding the vested right without newly obtaining permission from the card issuer.

Further, the card issuer can download another application having another application name by reusing resources allocated to the deleted application.

[0059]

As described in detail above, according to the present invention,
IC that can delete and update applications
A card and application management method can be provided.

[Brief description of the drawings]

FIG. 1 is a diagram showing a schematic configuration of an IC card issuing system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a schematic configuration of an IC card.

FIG. 3 is a diagram showing a schematic configuration of an EEPROM.

FIG. 4 is a diagram showing a schematic configuration of a user application area of the EEPROM.

FIG. 5 is a diagram for explaining a configuration example of a slot management table.

FIG. 6 is a diagram for explaining a configuration example of a shared table.

FIG. 7 is a flowchart for explaining the relationship between a card issuer and an application issuer.

FIG. 8 is a flowchart for explaining the life cycle of an application.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 11 ... Terminal device 12 ... IC card 21 ... Processor (setting means, registration means) 22 ... Volatile memory (RAM) 23 ... Non-volatile memory (EEPROM) 112 ... Reader / writer

Claims (6)

[Claims] 1. An IC card having a non-volatile memory,
In an IC card issuing system including a terminal device for outputting an application to be installed in a nonvolatile memory of the IC card, the IC card includes: a first setting unit configured to set an application area in the nonvolatile memory; A second setting means for individually setting an application identifier information area and an application status information area for each application area set by the first setting means. 2. An IC card having a non-volatile memory;
In an IC card issuing system including a terminal device for outputting an application to be installed in a nonvolatile memory of the IC card, the IC card includes: setting means for setting an application area in the nonvolatile memory; Registration means for registering an application name before installing the application in the designated application area. 3. An IC card having a nonvolatile memory;
In an IC card issuing system including a terminal device for outputting an application to be installed in a nonvolatile memory of the IC card, when updating an application installed in the IC card, when updating the application name and the authority of the memory area before the update, An application management method, wherein the application is deleted and a new application is installed while the application is maintained. 4. An IC card having a nonvolatile memory;
In an IC card issuing system including a terminal device that outputs an application to be installed in a nonvolatile memory of the IC card, when the application installed in the IC card is deleted, the non-volatile memory in which the application to be deleted is installed An application management method, wherein a memory space of a memory is transferred to an issuer of the IC card. 5. An IC card having a nonvolatile memory,
In an IC card issuing system including a terminal device for outputting an application to be installed in a nonvolatile memory of the IC card, an application identifier information area and an application state information area are provided for each application area provided in the nonvolatile memory of the IC card. An application management method characterized by individually setting (1) and (2). 6. An IC card having a non-volatile memory,
In an IC card issuing system including a terminal device for outputting an application to be installed in a nonvolatile memory of the IC card, an application name is registered in advance before the application is installed in the IC card. Application management method.