JP2000194799A - Portable signal processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve convenience and safety by permitting data transfer as needed concerning an IC card having two completely independent signal processing modules. SOLUTION: When it is necessary to transfer data from a contact circuit part 16 to a non-contact circuit part 13, the data of a transfer object axes enciphered by an enciphering part 162 in the contact circuit part 16, signature data ate applied by a signature processing part 163, and these data are stored in a shard memory 19. These data are read out by the non-contact circuit part 13 as them data reception destination, the signature is verified by a signature processing part 133, it is confirmed them data ate surely transferred from the contact circuit part 16, the original data are restored by deciphering data in an enciphering part 132, and these data are stored in a memory 135 and used for ordinary processing in the non-contact circuit part 13 later.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card-type portable signal processing apparatus having a plurality of communication means such as a contact type and a non-contact type, and a plurality of signal processing means corresponding to the communication means. The present invention relates to a portable signal processing device capable of appropriately performing data transfer between the plurality of signal processing means and an external device while ensuring sufficient security.

[0002]

2. Description of the Related Art With the development of semiconductor technology and mounting technology, the development and use of so-called IC cards having a memory and an arithmetic processing circuit in the card are rapidly progressing. Such an IC
The card is roughly divided into a contact type IC card for transmitting and receiving signals between an external read / write device and an IC card via electrodes provided on the card surface, and a signal for transmitting signals using electromagnetic waves via an antenna coil. Non-contact type I to send and receive
There is a C card. The contact-type IC card can perform complicated arithmetic processing at high speed because power supply is stable, and can be applied to applications with high security. On the other hand, non-contact type IC cards are suitable for relatively simple processing such as permitting passage through gates because they are easy to handle. It's difficult to get things done fast.

In recent years, there has been a demand for a multifunctional card, and a card having both functions of a contact type IC card and a non-contact type IC card has been started to be used. As a system in which one card has both functions of a contact type IC card and a non-contact type IC card, a contact type IC card IC having a completely different configuration including a signal processing section is known.
I that operates in both the module and non-contact type with antenna
There are a method in which the signal processing device using the C chip is not shared, and a method in which the signal processing device is shared and only the interface unit is divided. In any of these systems, communication with an external read / write device is performed via an electrode provided at a predetermined position on the surface of the contact type IC card, and the card is used as a non-contact type IC card. This is performed via an antenna coil built in the inside. When the configuration of these cards is functionally captured from the outside, FIG.
It can be represented as shown in FIG.

[0004]

By the way, in such an IC card having both functions of a contact type IC card and a non-contact type IC card, if the same data is handled by both types of processing, The security level is substantially a low level of a non-contact type, and there is a disadvantage that high security as a contact type IC card cannot be maintained. Therefore, especially in an IC card having separate contact and non-contact modules each including a signal processing circuit and a storage circuit, the contact and non-contact modules are completely separated from each other, and the In many cases, the characteristics are maintained. However, in such a configuration, data transfer or the like cannot be performed at all between the two modules housed in the same card base. High usage form, 2
There is a problem that two modules cannot be complemented and used in a more secure form.

[0005] Therefore, an object of the present invention is to provide an I / O module having at least two signal processing modules having different communication means.
It is an object of the present invention to provide a portable signal processing device such as a C card, which can transfer data between signal processing modules as needed and has higher convenience and security.

[0006]

In order to solve the above-mentioned problems, a portable signal processing apparatus according to the present invention comprises a first communication means for communicating with an external device by a predetermined communication method, and a first communication means. Communicates via the first and performs the desired signal processing.
Signal processing means, and second communication means for performing communication by a predetermined communication method different from the external device and the first communication means,
A second signal processing unit that performs communication via the second communication unit and performs desired signal processing independent of the first signal processing unit; and a shared unit accessible by the first and second signal processing units. Memory means having an area; transfer data generation means provided in at least one of the first and second signal processing means for converting desired transfer target data into a predetermined form and generating transfer data; Data writing means provided in the signal processing means provided with the transfer data generating means, and writing the generated transfer data into the shared area of the memory means, and at least one of the first and second signal processing means Data reading means for reading the transfer data written in the shared area of the memory means, and signal processing means provided with the data reading means. And a raw data restoring means for restoring the original data to be transferred from the use data object.

Further, the portable signal processing device of the present invention communicates with an external device through a first communication means via a first communication means, and performs desired signal processing. A first signal processing means for performing communication, and a second signal processing means for performing communication by a predetermined communication method different from the external device and the first communication means.
Communication means, and second signal processing means for performing desired signal processing independent of the first signal processing means by performing communication via the second communication means, and first and second signal processing means Provided in at least one of the above, and provided in transfer data generation means for converting desired data to be transferred into a predetermined form to generate transfer data, and in signal processing means provided with the transfer data generation means And data output means for outputting the generated transfer data to the outside via the corresponding first or second communication means and at least one of the first and second signal processing means. Data input means for inputting transfer data output from the data output means, the data being input externally through the first or second communication means, and a signal processing means provided with the data input means It provided means, and a raw data restoring means for restoring the original data to be transferred from the transfer data.

The portable signal processing device of the present invention has first communication means for communicating with an external device by a predetermined communication method, and storage means for storing desired data. Performing a desired signal processing by referring to data stored in the storage unit based on communication via
Signal processing means, and second communication means for performing communication by a predetermined communication method different from the external device and the first communication means,
It has storage means for storing desired data, and refers to data stored in the storage means based on communication via the second communication means, and stores desired data independent of the first signal processing means. A second signal processing means for performing the signal processing of the first signal processing, and data stored in a storage means of the second signal processing means to the first signal processing means.
A data transfer means for transferring data to the first signal processing means, and an external device for performing communication via the first communication means, if necessary, Authentication means for performing authentication processing as to whether or not the communication apparatus is appropriate as an external device for performing predetermined processing by performing communication via the second communication means, wherein the first signal processing means outputs the first signal as a result of the authentication processing. When the external device that performs communication via the communication unit is suitable as the external device where the second signal processing unit performs communication via the second communication unit and performs a predetermined process, the external device that performs the transfer Based on the data stored in the storage unit of the second signal processing unit, communication is performed with an external device that performs communication via the first communication unit, and predetermined processing is performed.

In addition, the portable signal processing device of the present invention communicates with an external device by a predetermined communication method via a first communication means, and communicates via the first communication means to perform desired signal processing. A first signal processing means for performing communication, and a second signal processing means for performing communication by a predetermined communication method different from the external device and the first communication means.
Communication means, and second signal processing means for performing desired signal processing independent of the first signal processing means by performing communication via the second communication means, and first and second signal processing means A memory unit having a more accessible shared area, a transfer data generation unit provided in at least the second signal processing unit, for converting desired transfer target data into a predetermined form and generating transfer data, Data writing means for writing the generated transfer data to a shared area of the memory means provided in the signal processing means provided with the use data generation means, and at least the first signal processing means provided in the signal processing means; Data read means for reading the transfer data written in the shared area and signal processing means provided with the data read means are provided for the corresponding first data. Others via the second communication means, and a data sending means for sending to the external device.

[0010] Furthermore, the portable signal processing device of the present invention comprises:
A first communication unit that communicates with the external device by a predetermined communication method; a first signal processing unit that performs communication via the first communication unit to perform a desired signal processing; A second communication unit that performs communication according to a predetermined communication method different from the communication unit, and performs communication through the second communication unit;
Second signal processing means for performing desired signal processing independent of the first signal processing means; memory means having a shared area accessible by the first and second signal processing means; and at least a first signal Provided in the processing means, the corresponding first
Data input means for inputting transfer data, which is data externally input to the second signal processing means via the communication means, and in which desired transfer target data is converted into a predetermined form; A data writing means provided in the signal processing means provided with the data input means and for writing the input transfer data into a shared area of the memory means; and a data writing means provided in at least the second signal processing means. Data reading means for reading the transfer data written in the shared area, and original data restoration provided in the signal processing means provided with the data reading means for restoring the original data to be transferred from the read transfer data Means.

[0011]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS First Embodiment A first embodiment of a portable signal processing device according to the present invention will be described with reference to FIGS. FIG. 1 shows the first
FIG. 3 is a block diagram showing a configuration of an IC card 1 according to the embodiment. The IC card 1 has a non-contact interface (I /
F) section 11, contact interface (I / F) section 12, non-contact circuit section 13, contact circuit section 16, and shared memory 19
Having. The non-contact circuit unit 13 includes a signal processing unit 13.
1, encryption unit 132, signature processing unit 133, and memory 1
The contact circuit unit 16 includes a signal processing unit 161, an encryption unit 162, a signature processing unit 163, and a memory 165.

First, the configuration of each part of the IC card 1 will be described with reference to FIG. The non-contact I / F unit 11 is an IC
An interface circuit between the non-contact circuit unit 13 and the external read / write device 30a when the card 1 is used as a non-contact type card, for extracting an antenna coil and power supplied from the external device via the antenna coil. Rectifier circuit, constant voltage circuit, detection circuit for extracting data transmitted from the external device from the output signal of the antenna coil, amplifying circuit, and modulation circuit for transmitting data to the external device via the antenna coil Etc.

The contact I / F unit 12 is an interface circuit between the contact circuit unit 16 and the external read / write device 30b when the IC card 1 is used as a contact type card. 30b, etc., and an electrode for electrical connection. In the present embodiment, the eight electrodes are provided at predetermined positions based on the standard of the contact type IC card, and they are respectively a circuit power supply terminal, a signal power supply terminal, a ground terminal, a clock input terminal, and a reset terminal. , A data input / output terminal, and a reserve terminal (two).

The signal processing section 131 of the non-contact circuit section 13
According to a processing program stored in the memory 135 in advance, desired signal processing is performed while appropriately communicating with the external read / write device 30a via the non-contact I / F unit 11. At this time, the signal processing unit 131 refers to parameters, data, and the like set in the memory 135,
The desired signal processing is performed while appropriately storing data obtained as a result of the signal processing in the memory 135 as necessary. When it is necessary to transmit data to the contact circuit unit 16, the signal processing unit 131
The control unit 32 controls the signature processing unit 133 to encrypt the transfer target data, and controls the signature processing unit 133 to add the signature data to the encrypted data and store it in the shared memory 19. When it is necessary to receive data from the contact circuit section 16, the transfer data is read from the shared memory 19 and the signature processing section 1
The control unit 33 controls the signature data to verify that the data is certainly transferred from the contact circuit unit 16, and controls the encryption unit 132 to perform decryption to obtain the original transfer target data.

The encryption section 132 of the non-contact circuit section 13 uses a predetermined encryption key stored in the memory 135 for a desired data based on the control of the signal processing section 131 and uses a predetermined encryption key. Performs an encryption process. In addition, a desired encrypted data is decrypted by a predetermined method using an encryption key stored in the memory 135 to restore the original data.

The signature processing unit 133 of the non-contact circuit unit 13
Under the control of the signal processing unit 131, the signature data stored in the memory 135 is added to the desired data. In addition, for data having desired signature data, the signature data is verified, and it is checked whether the data is appropriate data.

The memory 135 of the non-contact circuit unit 13 stores programs executed by the signal processing unit 131 as described above,
Data such as parameters, encryption key data used by the encryption unit 132, signature data used by the signature processing unit 133, or input data associated with processing executed by the signal processing unit 131, temporary processing data, and final result data And the like are stored in the nonvolatile memory.

The signal processing unit 161 of the contact circuit unit 16 communicates with the external read / write device 30b via the contact I / F unit 12 according to a processing program stored in advance in the memory 165 as needed. Perform signal processing. At this time, the signal processing unit 161 refers to the parameters, data, and the like set in the memory 165, and stores the data and the like obtained as a result of the signal processing in the memory 165 as necessary. Is performed. When it is necessary to transmit data to the non-contact circuit unit 13, the signal processing unit 161 controls the encryption unit 162 to encrypt data to be transferred, and controls the signature processing unit 163. The signature data is added to the encrypted data and stored in the shared memory 19. When it is necessary to receive data from the non-contact circuit unit 13, the transfer data is read from the shared memory 19, and the signature processing unit 163 is controlled to verify the signature data. Confirm that the data has been transferred,
The data is decrypted by controlling the encryption unit 162 to obtain the original data to be transferred.

The encryption unit 162 of the contact circuit unit 16 uses a predetermined encryption key stored in the memory 165 for a desired data in a predetermined system under the control of the signal processing unit 161. Perform encryption processing. Further, the desired encrypted data is decrypted by a predetermined method using the same encryption key stored in the memory 165 to restore the original data.

The signature processing section 163 of the contact circuit section 16 adds the signature data stored in the memory 165 to desired data under the control of the signal processing section 161. In addition, for data having desired signature data, the signature data is verified, and it is checked whether the data is appropriate data.

The memory 165 of the contact circuit unit 16 stores data such as programs and parameters executed by the signal processing unit 161, encryption key data used by the encryption unit 162, and signature data used by the signature processing unit 163, as described above. Alternatively, it is a non-volatile memory that stores input data, temporary processing data, final result data, and the like associated with processing executed by the signal processing unit 161.

The shared memory 19 is a memory that can be accessed from both the non-contact circuit unit 13 and the contact circuit unit 16, and temporarily transfers data transferred between the non-contact circuit unit 13 and the contact circuit unit 16. This is a nonvolatile memory to be stored.

Next, the operation of the IC card 1 having such a configuration will be described with reference to FIG. FIG. 2 shows the non-contact circuit section 13 and the contact circuit section 16 of the IC card 1 shown in FIG.
FIG. 5 is a diagram schematically showing an operation in a case where data transfer is directly performed between the two. First, when the IC card 1 is normally used, and when the IC card 1 is used as a non-contact type IC card, the user brings the IC card 1 closer to, for example, an external read / write device 30a.
Then, in the IC card 1, the non-contact I / F unit 11
Power is supplied through the antenna coil of, and the non-contact circuit unit 13 is activated. Then, the signal processing unit 131 starts processing according to the program stored in the memory 135, and performs desired processing while appropriately communicating with the external read / write device 30a.

When the IC card 1 is normally used, and when the IC card 1 is used as a contact type IC card, the user inserts the IC card 1 into, for example, the external read / write device 30b. . Then, IC
Power is supplied to the card 1 via the power supply terminal of the contact I / F unit 12, and the contact circuit unit 16 is activated. Then, the signal processing unit 161 starts processing according to the program stored in the memory 165, and appropriately executes the external read / write.
A desired process is performed while communicating with the light device 30b.

The contact circuit section 16 is provided during normal processing as such a non-contact type IC card and a contact type IC card, or by a special instruction from the external read / write device 30a, 30b or the like. When it becomes necessary to transfer data between the non-contact circuit unit 13 and
As shown in FIG. 2, for example, in the contact circuit unit 16 that is the data transmission source, the data to be transferred is encrypted by the encryption unit 162, the signature processing unit 163 adds the signature data, and stored in the shared memory 19. This is read out by the non-contact circuit unit 13 which is the data receiving destination, and the signature is verified by the signature processing unit 133 to confirm that the data is certainly transferred from the contact circuit unit 16, and is decrypted by the encryption unit 132. Then, the original data is restored and stored in the memory 135, and is used, for example, in the subsequent normal processing in the non-contact circuit unit 13. The data transfer is performed by the non-contact circuit unit 13.
The same process is also performed for the contact circuit unit 16 from.

As described above, in the IC card 1, the use of the shared memory 19 allows the non-contact circuit section 13 and the contact circuit section 16, whose structures are substantially completely separated in the IC card, to be connected. , Data can be transferred. Then, the transfer of the data can be performed safely because the transfer data is encrypted or the signature data is added. Therefore, it is possible to provide a more convenient use mode for a highly secure IC card having a configuration in which the non-contact circuit section 13 and the contact circuit section 16 are separated, while maintaining the security. it can.

In the first embodiment, a message authentication code (MAC: Message Au
Thentication Code) may be added to ensure that the integrity of the transfer data can be verified and maintained. At this time, for example, a message authentication code (MAC) may be further added to the data to which the signature data has been added, or the message authentication code may be added to the encrypted data without adding the signature data. A code (MAC) may be added. These processes of encryption, addition of signature data, and addition of message authentication code (MAC) may be selectively performed in any combination.

Second Embodiment A portable signal processing apparatus according to a second embodiment of the present invention will be described with reference to FIGS. FIG.
FIG. 3 is a block diagram showing a configuration of an IC card 2 according to the embodiment. The IC card 2 has a non-contact interface (I /
F) section 11, a contact interface (I / F) section 12, a non-contact circuit section 13, and a contact circuit section 16. Also,
The non-contact circuit unit 13 includes a signal processing unit 131, an encryption unit 13
2. It has a signature processing unit 133 and a memory 135, and the contact circuit unit 16 has a signal processing unit 161, an encryption unit 162, a signature processing unit 163, and a memory 165.

As is clear from FIG. 3, the configuration of the IC card 2 is a configuration in which the shared memory 19 is not provided in the IC card 1 of the first embodiment. Regarding other components of the IC card 2, the first
It is the same as each corresponding component of the IC card 1 of the embodiment. Therefore, description of each component will be omitted.
In the IC card 1 according to the first embodiment, the non-contact circuit unit 13 and the contact circuit unit 16
Although data transfer could be performed within the C card 1, the non-contact circuit unit 13 and the contact circuit unit 16 have completely independent configurations in the IC card 2 of the second embodiment. Cannot transfer data. In other words, the independence of each circuit unit is higher than that of the IC card 1, and for example, data with high security handled by the contact circuit unit 16 is controlled more safely.

FIG. 4 is a diagram schematically showing an operation when data is transferred between the non-contact circuit section 13 and the contact circuit section 16 of the IC card 2 shown in FIG. The operation of the IC card 2 during normal use is the same as that of the IC card of the first embodiment.
The description is omitted because it is the same as the card 1. Also in the IC card 2 having such a configuration, there may be a case where data or the like processed by the non-contact circuit unit 13 or the contact circuit unit 16 is to be referred to or used by the other circuit unit. The operation of the IC card 2 at that time will be described with reference to FIG.

In the IC card 2, when it becomes necessary to transfer data between the contact circuit section 16 and the non-contact circuit section 13, as shown in FIG. The data to be transferred is encrypted by the encryption unit 162, the signature processing unit 163 adds the signature data, and outputs the data to the external read / write device 30 via the contact I / F unit 12. At this time, the output data is I
As input to the non-contact I / F unit 11 of the C card 2,
If necessary, control is performed such as instructing the external read / write device 30 on the data transfer destination.

The contact circuit section 16 is controlled by such control of the data transfer destination or by processing in the external read / write device 30 whose operation is previously set by communication with the non-contact circuit section 13 or the contact circuit section 16. When the output data is input to the non-contact I / F unit 11, the non-contact I / F unit 11 inputs the data to the non-contact circuit unit 13. The non-contact circuit unit 13 includes a normal non-contact circuit unit 13.
In the processing as described above, the signature processing unit 133 verifies the signature of the input data, detects that the data is data transferred from the contact circuit unit 16, and decrypts the input data by the encryption unit 132. Is restored and stored in the memory 135, for example, for use in subsequent processing. Note that data transfer is performed from the non-contact circuit unit 13 to the contact circuit unit 1.
6, the same processing is performed.

As described above, for example, even in the IC card 2 having no shared memory and in which the non-contact circuit section 13 and the contact circuit section 16 cannot directly transfer data, the IC card 2 can be appropriately controlled. Can be transferred. Then, the transfer of the data is performed via an external device. However, since the transfer data is encrypted and the signature data is added, the transfer can be performed safely. Therefore, even for an IC card with a very high security configuration in which the non-contact circuit section 13 and the contact circuit section 16 are completely separated, a more convenient usage form is maintained while maintaining the security. Can be provided.

Although the external read / write device 30 is shown as one device in FIG. 3, it may be a separate device corresponding to each of the non-contact type and contact type interfaces of the IC card 2, for example. The transmission of the data from the IC card 2 and the transfer of the data to the IC card 2 may be performed in different time zones.
Further, similarly to the first embodiment, a message authentication code (MAC) may be added to the transfer data so that the integrity of the transfer data can be surely verified and maintained.

Third Embodiment A portable signal processing apparatus according to a third embodiment of the present invention will be described with reference to FIGS. FIG.
FIG. 3 is a block diagram showing a configuration of an IC card 3 according to the embodiment. The IC card 3 has a contactless interface (I /
F) unit 11, contact interface (I / F) unit 12, non-contact circuit unit 13, contact circuit unit 16, and data transfer unit 2
Has zero. The non-contact circuit unit 13 includes the signal processing unit 1
31, an authentication processing unit 134 and a memory 135. The contact circuit unit 16 includes a signal processing unit 161, an authentication processing unit 164.
And a memory 165.

First, the configuration of the IC card 3 will be described with reference to FIG. The configuration of the IC card 3 is basically the same as that of the IC cards 1 and 2 of the first and second embodiments described above. Therefore, components having the same function are denoted by the same reference numerals, and description thereof is omitted. The authentication processing unit 134 of the non-contact circuit unit 13
Authentication processing for checking whether or not the external read / write device 30a connected via the non-contact I / F unit 11 is an appropriate device as a target to which the non-contact circuit unit 13 connects and transmits and receives data. I do. Authentication processing unit 1 of contact circuit unit 16
64, like the authentication processing unit 134, the contact I / F unit 12
An external read / write device 30b connected via
The contact circuit unit 16 performs an authentication process for checking whether or not the device is appropriate as a target to be connected and to transmit and receive data. Specifically, the authentication processing in the authentication processing unit 134 and the authentication processing unit 164 includes, for example, the above-described processing using encryption, processing using a signature, or P
IN collation may be used.

The data transfer section 20 transfers data between the non-contact circuit section 13 and the contact circuit section 16. The data transfer unit 20 is controlled by the signal processing unit 131 of the non-contact circuit unit 13 or the signal processing unit 161 of the contact circuit unit 16,
Desired data is transferred between the non-contact circuit section 13 and the contact circuit section 16. The data transfer unit 20 is configured to have a buffer formed of, for example, a nonvolatile memory, and can appropriately transfer data even if the non-contact circuit unit 13 and the contact circuit unit 16 are not simultaneously enabled. It has become.

Next, the operation of the IC card 3 will be described with reference to FIG. FIG. 6 shows the IC card 3 shown in FIG.
FIG. 4 is a diagram schematically showing an operation when data transfer is directly performed between the non-contact circuit unit 13 and the contact circuit unit 16.
Since the operation of the IC card 3 during normal use is the same as that of the IC cards 1 and 2 of the first and second embodiments,
Description is omitted. Here, for example, the contact I / F unit 1
The operation of the IC card 3 in the case where the contact circuit unit 16 and the external read / write device 30b cannot communicate with each other due to a defect of the IC card 3 will be described.

If the contact I / F unit 12 becomes defective, data stored in the contact circuit unit 16 cannot be used as it is, and it is necessary to transmit such data to an external processing device. For this purpose, the user operates the external read / write device 30a having a non-contact interface, which is substantially connected to the external device 30b that communicates with the contact circuit unit 16 and performs desired processing.
The IC card 3 and the external read / write device 30a are substantially connected by holding the card 3, for example. This allows
In the IC card 3, power is supplied via the antenna coil of the non-contact I / F unit 11, the non-contact circuit unit 13 is activated, and the signal processing unit 131 starts processing according to the program stored in the memory 135. I do.

First, based on an instruction from the signal processing unit 131, as shown in FIG. 6, the authentication processing unit 134 sends the external read / write device 30 through the non-contact I / F unit 11.
a, and whether the external read / write device 30a is an external device b that performs desired processing by communicating with the contact circuit unit 16 via the contact I / F unit 12, or the external device 30b. The authentication process of the external read / write device 30a is performed to determine whether or not the device is connected to the device. As a result, when it is determined that the external read / write device 30a is a valid device, the signal processing unit 131 of the non-contact circuit unit 13 transmits the signal to the data transfer unit 20 and the signal processing unit 16 of the contact circuit unit 16.
1, the desired data is read from the memory 165 of the contact circuit section 16 and output to the external read / write device 30a via the non-contact I / F section 11. In addition, non-contact I /
F section 11 is defective, and contact circuit section 1 is
6 is performed by the same processing.

As described above, in the IC card 3, even when the non-contact circuit section 13 and the contact circuit section 16 have different configurations, for example, any one of the circuits and the input / output I / F has a defect. In such a case, one data can be transferred to the other circuit and used for the subsequent processing. Therefore, while maintaining the independence of the two circuit units and maintaining the security of each data, it is possible to enhance the safety and convenience in handling each data.

As in the first and second embodiments, the transfer data is encrypted or the transfer data is added with signature data or a message authentication code (MAC) to reliably verify the integrity of the transfer data. -It may be possible to maintain.

Fourth Embodiment A fourth embodiment of the portable signal processing device according to the present invention will be described with reference to FIGS. FIG. 7 is a block diagram illustrating a configuration of the IC card 4 according to the fourth embodiment. The IC card 4 has a non-contact interface (I / F)
It has a unit 11, a contact interface (I / F) unit 12, a non-contact circuit unit 13, a contact circuit unit 16, and a shared memory 19. The non-contact circuit unit 13 has a signal processing unit 131 and a memory 135, and the contact circuit unit 16 has a signal processing unit 161, a signature processing unit 163, and a memory 165.

As is clear from FIG. 7, the configuration of the IC card 4 is included in the configuration of the IC card 1 of the first embodiment. Therefore, each component of the IC card 4 is denoted by the same reference numeral as the corresponding component of the IC card 1, and the description thereof is omitted. And IC card 4 and I
The difference between the C card 1 is that the encryption unit 132 and the signature processing unit 133 are not essential as the internal configuration of the non-contact circuit unit 13, and the encryption unit 162 is the internal configuration of the contact circuit unit 16.
Are not essential, and the processing contents of the signature processing unit 163 of the contact circuit unit 16 are different. The signature processing unit 163 b of the contact circuit unit 16 of the IC card 4
Performs signature processing that requires a complicated and enormous amount of calculation, such as A signature. Such arithmetic processing is a function that cannot be realized in the non-contact circuit unit 13 which has unstable power consumption and is limited.

The operation of the IC card 4 having such a configuration will be described with reference to FIGS. FIG. 8 is a first diagram schematically illustrating the operation of the IC card 4 illustrated in FIG. 7, and FIG. 9 is a second diagram schematically illustrating the operation of the IC card 4 illustrated in FIG. is there. The normal operation of the IC card 4 is the same as that of each of the above-described embodiments. 4 will be described with reference to an operation performed by the non-contact interface.

First, the operation of such an IC card 4 when data is transferred from an external device will be described with reference to FIG. For example, as a result of normal processing between the IC card 4 and the external read / write device 30a via the non-contact I / F unit 11, the user of the IC card 4 It is assumed that data with an RSA signature is transferred because of its high security, such as the accounting information of. In this case, the IC card 4
This information is transferred from the non-contact circuit section 13 to the contact circuit section 16 via the shared memory 19. The transfer method via the shared memory 19 is the same as that of the IC card 1 of the first embodiment. Then, the contact circuit unit 16 that has received such data performs verification using the RSA signature by the signature processing unit 163b, confirms the validity of the data, and writes the data into the memory 165. The subsequent processing is performed.

This processing will be described with specific examples. For example, the user of the IC card 4
Is used as a non-contact type IC card and payment processing of a predetermined amount is performed. This process is normally performed between the non-contact circuit unit 13 of the IC card 4 and the external read / write device 30a. As a result, the data indicating the billing process is subjected to the RSA signature process and the final Is input to the non-contact circuit unit 13. In the non-contact circuit section 13, input data is recorded in the shared memory 19 as appropriate.

Such individual payment processing is performed as appropriate, and each time the billing data is sequentially accumulated in the shared memory 19. Then, when the contact circuit section 16 of the IC card 4 is activated by some trigger, the contact circuit section 16 reads out the billing data from the shared memory 19,
The validity of the data is checked by the signature processing unit 163b, and if the data is valid, a process of substantially making a decision is performed.
Thereby, the decision making process can be performed with high security in the IC card 4.

Next, when data is transferred to an external device,
The operation of the C card 4 will be described with reference to FIG. For example, when data to be transmitted with high security by performing a signature process in the non-contact circuit unit 13 occurs,
The non-contact circuit unit 13 transfers the data to the contact circuit unit 16 via the shared memory 19. In the contact circuit unit 16, the data is subjected to an RSA signature process in the signature processing unit 163b, and the signed transfer data is transferred to the non-contact circuit unit 13 again via the shared memory 19. . The non-contact circuit unit 13 outputs the signed data to the external read / write device 30a via the non-contact I / F unit 11. As a result, in the external read / write device 30a, authentication processing is performed on the data, and when the data is determined to be appropriate, the data is used for desired information processing.

As described above, when the IC card 4 is used as a non-contact type IC card, data with an RSA signature can be used, and the reliability and security of the data to be handled can be improved.

Modifications Note that the present invention is not limited to the above-described embodiments, and any suitable various modifications are possible. For example, in each of the above-described embodiments, only the flow of data transmission and the authentication process for the accompanying data have been described. However, the types of these data, and the processes and operations for actually transferring the data are described. Is optional. Further, the present invention requires that a plurality of communication means be provided, but this does not require at least one of each of a contact type and a non-contact type as in the present embodiment. It is clear that a portable signal processing device having a plurality of communication means, even if it is a contact type or a non-contact type and has a plurality of communication means having different protocols, etc. Yes, and are within the scope of the present invention.

In the present embodiment, the present invention has been described by exemplifying a so-called IC card which is a card-shaped device, but the present invention is not limited to this. For example, the present invention may be implemented in a so-called tag form realized in various shapes, or may be implemented as a device about the size of a notebook. Further, the application range of the portable signal processing device of the present invention is not limited at all. The present invention may be applied to any object such as an application such as electronic money or a prepaid card, or a device for passing through a gate such as a commuter pass.

In each of the portable signal processing devices described above, the non-contact circuit section 13 and the contact circuit section 16 are formed on one chip even if they are formed on physically separate chips. And the configuration is not limited at all. May be used. In addition, the hardware configuration of the portable signal processing device, the type of communication protocol, and the like may be any configuration and any protocol.

[0054]

As described above, according to the present invention,
A portable signal processing device having at least two signal processing modules having different communication means, capable of transferring data between the signal processing modules as required, and having higher convenience and security. Can be provided.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an IC card according to a first embodiment of the present invention.

FIG. 2 is a diagram schematically showing an operation when data is directly transferred between a non-contact circuit unit and a contact circuit unit of the IC card shown in FIG. 1;

FIG. 3 is a block diagram illustrating a configuration of an IC card according to a second embodiment of the present invention.

FIG. 4 is a diagram schematically showing an operation when data transfer is performed between a non-contact circuit unit and a contact circuit unit of the IC card shown in FIG. 3;

FIG. 5 is a block diagram showing a configuration of an IC card according to a third embodiment of the present invention.

FIG. 6 is a diagram schematically showing an operation of the IC card shown in FIG. 5;

FIG. 7 is a block diagram illustrating a configuration of an IC card according to a fourth embodiment of the present invention.

FIG. 8 is a first diagram schematically showing an operation of the IC card shown in FIG. 7;

FIG. 9 is a second diagram schematically showing the operation of the IC card shown in FIG. 7;

FIG. 10 shows a contact type IC card and a non-contact type IC card.
FIG. 2 is a first diagram illustrating an example of a configuration of an IC card having both functions of the card.

FIG. 11 shows a contact type IC card and a non-contact type IC card.
FIG. 9 is a second diagram illustrating an example of the configuration of an IC card having both functions of the card.

FIG. 12 shows a contact type IC card and a non-contact type IC card.
It is the 3rd figure which shows the example of constitution of the IC card which possesses both functions of the card.

[Explanation of symbols]

 1, 2, 3, 4 ... IC card 11 ... non-contact I / F section 12 ... contact I / F section 13 ... non-contact circuit section 131 ... signal processing section 132 ... encryption section 133 ... signature processing section 134 ... authentication processing Section 135 Memory 16 Contact circuit section 161 Signal processing section 162 Encryption section 163 Signature processing section 164 Authentication processing section 165 Memory 19 Shared memory 20 Data transfer section 17 Memory 30 External device

Claims (15)

[Claims] A first communication unit that communicates with an external device by a predetermined communication method; a first signal processing unit that communicates via the first communication unit to perform a desired signal processing; A second communication unit that communicates with an external device using a predetermined communication method different from the first communication unit; and a communication unit that performs communication via the second communication unit and is independent of the first signal processing unit. Second signal processing means for performing the desired signal processing, memory means having a shared area accessible by the first signal processing means and the second signal processing means, the first signal processing means, A transfer data generation unit provided in at least one of the second signal processing units, for converting desired transfer target data into a predetermined form and generating transfer data; and the transfer data generation unit is provided. Have been A data writing unit that is provided in the signal processing unit and writes the generated transfer data to the shared area of the memory unit; and at least one of the first signal processing unit and the second signal processing unit. A data reading means for reading the transfer data written to the shared area of the memory means; and a signal processing means provided for the signal processing means provided with the data reading means, wherein A portable signal processing device having original data restoring means for restoring original data. 2. A first communication means for communicating with an external device according to a predetermined communication method, a first signal processing means for communicating via the first communication means and performing a desired signal processing, A second communication unit that communicates with an external device using a predetermined communication method different from the first communication unit; and a communication unit that performs communication via the second communication unit and is independent of the first signal processing unit. A second signal processing means for performing desired signal processing, and provided in at least one of the first signal processing means and the second signal processing means for converting desired transfer target data into a predetermined form. A transfer data generating means for converting and generating transfer data; provided in the signal processing means provided with the transfer data generating means, for transmitting the generated transfer data to the corresponding first communication. Means or said second Data output means for outputting to the outside via communication means; and at least one of the first signal processing means and the second signal processing means, the corresponding first communication means or the second communication Data input means for inputting the transfer data output from the data output means, the data being input from outside through the means, and being provided in the signal processing means provided with the data input means A portable signal processing device having original data restoring means for restoring original data to be transferred from the transfer data. 3. The first signal processing unit and the second signal processing unit each have key information related to a predetermined encryption process, and the transfer data generating unit is configured to transmit the data to be transferred. Is encrypted based on the key information of the signal processing unit provided with the transfer data generating unit to generate the transfer data.The original data restoring unit converts the transfer data into the original data. 3. The portable signal processing apparatus according to claim 1, wherein the portable signal processing apparatus decrypts the original data to be transferred based on the key information of the signal processing means provided with data restoration means. 4. The first signal processing means and the second signal processing means each have predetermined data capable of specifying the signal processing means. To the target data, the transfer data generation means is provided with the predetermined data of the signal processing means provided to generate the transfer data, the original data restoration means, the transfer data, The portable signal according to any one of claims 1 to 3, wherein verification is performed based on the predetermined data of the signal processing unit provided with the original data restoring unit, and appropriate original data to be transferred is restored. Processing equipment. 5. The portable signal processing device according to claim 4, wherein the predetermined data capable of specifying the signal processing means is signature data. 6. The predetermined data which can specify the signal processing means is a message authentication code.
3. The portable signal processing device according to claim 1. 7. A communication system comprising: a first communication unit for communicating with an external device according to a predetermined communication method; and a storage unit for storing desired data, and based on the communication via the first communication unit, First signal processing means for performing desired signal processing with reference to data stored in the storage means, and second communication for performing communication by a predetermined communication method different from that of the first communication means with an external device. Means for storing desired data, the first signal processing means referring to the data stored in the storage means based on communication via the second communication means. Second signal processing means for performing desired signal processing independent of the first signal processing means; and data transfer means for transferring data stored in the storage means of the second signal processing means to the first signal processing means. Provided in the first signal processing means. If necessary, an external device that performs communication through the first communication unit may be an external device in which the second signal processing unit performs communication through the second communication unit and performs predetermined processing. An authentication unit for performing an authentication process of whether or not the authentication is appropriate, wherein the first signal processing unit includes, as a result of the authentication process, an external device that performs communication via the first communication unit; If the signal processing means of the second signal processing means is suitable as an external device which performs communication through the second communication means and performs predetermined processing, the signal is stored in the storage means of the second signal processing means. Based on the data that has been communicated with the external device that communicates via the first communication means,
A portable signal processing device for performing the predetermined processing. 8. The first signal processing means includes: an external device that performs communication via the first communication means as a result of the authentication processing; and wherein the second signal processing means performs communication with the second communication means. If it is appropriate as an external device that performs communication and performs predetermined processing through the communication, the data stored in the storage unit of the second signal processing unit is transferred to the first device.
8. The portable signal processing device according to claim 7, wherein the portable signal processing device sends the signal to the external device that performs communication via the communication unit. 9. A first communication means for communicating with an external device by a predetermined communication method, a first signal processing means for communicating via the first communication means and performing a desired signal processing, A second communication unit that communicates with an external device using a predetermined communication method different from the first communication unit; and a communication unit that performs communication via the second communication unit and is independent of the first signal processing unit. Second signal processing means for performing the desired signal processing, memory means having a shared area accessible by the first signal processing means and the second signal processing means, at least the second signal processing means A transfer data generating means for converting desired data to be transferred into a predetermined form to generate transfer data; and a signal processing means provided with the transfer data generating means, Generated Data writing means for writing transmission data to the shared area of the memory means; data reading provided at least in the first signal processing means for reading the transfer data written to the shared area of the memory means Means, provided in the signal processing means provided with the data reading means, for transmitting the transfer data to an external device via the corresponding first communication means or the second communication means. A portable signal processing device having data transmission means. 10. A first communication means for communicating with an external device according to a predetermined communication method, a first signal processing means for communicating via the first communication means and performing a desired signal processing, A second communication unit that communicates with an external device using a predetermined communication method different from the first communication unit; and a communication unit that performs communication via the second communication unit and is independent of the first signal processing unit. Second signal processing means for performing desired signal processing, memory means having a shared area accessible by the first signal processing means and the second signal processing means, at least the first signal processing means And data which is externally input to the second signal processing means via the corresponding first communication means, and in which desired data to be transferred is converted into a predetermined form. Data is entered Data input means, provided in the signal processing means provided with the data input means, for writing the input transfer data into the shared area of the memory means, at least the second Data reading means provided in the signal processing means for reading the transfer data written in the shared area of the memory means; and the data reading means provided in the signal processing means provided with the data reading means. A portable signal processing device comprising: original data restoring means for restoring original data to be transferred from the transferred data. 11. The transfer data is data obtained by encrypting original data to be transferred by a predetermined encryption process, and at least the second signal processing means includes a key for decrypting the predetermined encryption process. The original data restoring unit according to claim 10, wherein the original data restoring unit decodes the transfer data based on the key information of the second signal processing unit, and restores the transfer target original data. Portable signal processing device. 12. The transfer data is data to which predetermined data capable of specifying the signal processing means of a transfer destination is added, and the original data restoring means converts the transfer data into the predetermined data. 12. The portable signal processing device according to claim 10, wherein verification is performed based on the data, and the original data to be transferred is appropriately restored. 13. The portable signal processing apparatus according to claim 12, wherein the predetermined data capable of specifying said signal processing means is signature data. 14. The portable signal processing device according to claim 12, wherein the predetermined data capable of specifying the signal processing means is a message authentication code. 15. One of the first communication means and the second communication means is a non-contact communication means for communicating with an external device in a non-contact manner by wireless communication, and the first communication means The portable signal processing device according to any one of claims 1 to 14, wherein the other of the means and the second communication means is a contact communication means for communicating with the external device in a contact manner via an electrode. .