JP2000259801A - Memory device for ic card with initialization function - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a memory device for an IC card capable of being reused while being provided with a secret protective function. SOLUTION: Operations to be enabled by respective identification codes are different depending on the plural identification codes. By permitting read and write to a memory part 5 by matching a first identification code A and enabling the initialization of the memory part 5 in addition to the read and write by matching a second identification code B, since the second identification code B is not used at the time of normally using the IC card, leakage does not occur and unauthorized initialization and reuse are not performed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a memory device for a reproducible IC card having a high security function and preventing forgery.

[0002]

2. Description of the Related Art As telephone cards, prepaid cards and various types of cards, IC cards with a built-in LSI are used because they have a high security function, a large storage capacity, and are electrically rewritable. In this IC card, access to the non-volatile memory is set as permission / inhibition by a security code as a security function. However, when the reuse of the IC card is considered, it is not enough to prevent forgery. is not.

FIG. 6 shows a conventional example. The input / output circuit 1 transmits an external command, address, or data to each block, and outputs read data. Control circuit 2
Identifies the command from the input / output circuit 1 and performs the following control on each block when detecting a permission flag d8 described later.

[0004] The memory unit 5 comprises a password code area 10 for storing a password and a data area 11 for storing data. The decoder circuit 3 selects an address of the memory unit 5. The writing circuit 4 writes data to the memory unit 5. The read circuit 6 reads data from the memory unit 5. The collation circuit 7 collates the personal identification code d5 read out from the memory unit 5 via the readout circuit 6 with a personal identification code d2 input from the outside, and outputs a collation result d7. The condition determination circuit 8 that identifies the collation result d7 and determines whether the access is permitted / prohibited is performed by the secret code d5.
And d2 match, the permission flag d8 is set to the control circuit 2
Output to

Therefore, when the passwords d5 and d2 match, a permission flag d8 is generated, and the memory unit 5 can be accessed via the control circuit 2 as described above.

[0006]

As described above, the conventional IC
In the card memory device, the security code is used every time the IC card is used normally. Therefore, there is a high possibility that the correct security code is leaked. If the security code is leaked, the memory unit 5 is initialized. There is a problem that it can be easily made and forged.

[0007] In order to prevent forgery, it was the most reliable method to prevent initialization. The present invention
It is an object of the present invention to provide an IC card memory device that can initialize a memory portion and reuse it, and can prevent forgery even if a secret code leaks during use.

[0008]

In the memory device for an IC card with an initialization function according to the present invention, the operation which can be performed by each of the plurality of security codes differs depending on the plurality of security codes, and the first security code is matched. Thus, reading and writing to the memory section are permitted, and the second password is made to match, thereby enabling initialization of the memory in addition to reading and writing.

According to the present invention, when the IC card is normally used, the second secret code for initialization is not used, so that the secret code is not leaked, and the IC card is incorrectly initialized and reused. , And can be reproduced.

[0010]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An I with initialization function according to claim 1.
The C-card memory device includes an input / output circuit that outputs an external command, address, and data to output read data, a decoder circuit that selects an address of the memory unit, and a write operation that writes data to the memory unit. A circuit, a memory unit capable of storing a plurality of personal identification codes, a readout circuit for reading data from the memory unit, and a first and a second personal identification code stored in the memory unit and an externally input personal identification code. A verification circuit for verifying the personal identification code;
A condition determination circuit for determining whether access is permitted / inhibited based on the comparison result, a control circuit for identifying a command from the input / output circuit and controlling each of the above-described units determined to be permitted by the condition determination circuit; And an initialization circuit for sending the data to a write circuit and initializing the memory unit. When the condition judgment circuit detects that the first password matches, the memory unit is accessed and read. And when the condition determination circuit detects that the second secret code matches, the initialization circuit executes the initialization of the memory unit.

According to a second aspect of the present invention, there is provided a memory device for an IC card with an initialization function according to the first aspect, wherein the memory section is configured to store condition data in addition to a plurality of personal identification codes, and the control circuit is provided externally. And the code input from the memory unit matches the first security code of the security code, and the memory unit can be accessed according to the setting contents of the condition data, and the second security code for initialization is It is characterized in that they match and can be initialized according to the setting contents of the condition data.

According to a third aspect of the present invention, there is provided a memory device for an IC card having an initialization function according to the first aspect, wherein the memory unit is configured to store reproduction number data in addition to a plurality of personal identification codes, and the control circuit includes: A code input from the outside matches the first security code of the security code, and the memory unit can be accessed in accordance with the set contents of the condition data, and a second security code for initialization is provided. Matches
When the number of times of initialization represented by the number-of-reproductions data read from the memory unit is within a specified range, initialization is performed and the number-of-reproductions data in the memory unit is updated.

According to a fourth aspect of the present invention, there is provided a memory device for an IC card with an initialization function according to the first aspect, wherein the memory section is configured to store identification data in addition to a plurality of personal identification codes, and the control circuit is provided with an external circuit. When the code inputted from the memory unit matches the first security code of the security code, access to the memory unit is enabled, the second security code for initialization matches, and the code is read from the memory unit. It is characterized in that initialization is possible by matching the identification code with the identification code of the device to be initialized.

According to a fifth aspect of the present invention, there is provided a memory device for an IC card having an initialization function according to the first aspect, wherein the memory unit stores condition data, reproduction count data, and identification data in addition to a plurality of passwords. The control circuit determines that the code input from the outside is the first of the passwords.
And the memory unit can be accessed in accordance with the set contents of the condition data, the set contents of the condition data can be initialized, and the second secret code for initialization matches. If the identification code read from the memory unit matches the identification code of the device to be initialized and the number of times of initialization represented by the number-of-reproductions data read from the memory unit is within a specified range, And updating the number-of-reproductions data in the memory unit.

Hereinafter, embodiments of an IC card memory device according to the present invention will be described with reference to FIGS. In addition,
The same blocks as those in FIG. 6 showing the conventional example are denoted by the same reference numerals and described. (Embodiment 1) FIG. 1 shows (Embodiment 1) of the present invention.

In this (Embodiment 1), a security code A and a security code B are provided as a security protection function for protecting data in the memory 5, and if the security codes do not match, the security code is transferred to the memory 5. Access is prohibited. Specifically, the password code area 1 of the memory unit 5
0, a single security code is conventionally written, but in this (Embodiment 1), the security code A is set in the first area 10a of the security code area 10, and the security code A is set in the second area 10b. The secret code B is set to be distinguished. If the control circuit 2 has released the security function,
The memory unit 5 can be arbitrarily rewritten.

The control circuit 2 is configured as follows.
The command is transmitted to the control circuit 2 via the input / output circuit 1, and the control circuit 2 identifies the command. When the IC card is used normally, the password A is matched. After the control circuit 2 identifies the command, the decoder circuit 3 selects the first area 10a of the memory unit 5 where the password A is stored.

Next, the secret code A is read from the memory unit 5 by the read circuit 6, and the secret code A
Send. The collation circuit 7 collates the personal identification code d2 input from the outside via the input / output circuit 1 with the personal identification code A read from the memory unit 5, and sends the collation result d7 to the condition determination circuit 8.

When the passwords match, the condition determination circuit 8 sends to the control circuit 2 a flag d8 'indicating access permission only for reading and writing. After the passwords A match in this manner, access to the data area 11 of the memory unit 5 is permitted, and data can be read and written. Data read from the memory unit 5 is output from the read circuit 6 to the outside via the input / output circuit 1.

In the case of a mismatch, access to the memory unit 5 is not permitted, and reading and writing of data remain prohibited. When the IC card is initialized and reused, the password B is matched. In this case,
After the control circuit 2 identifies the command, the decoder circuit 3 selects the area 10b of the memory section 5 where the password B is stored.

Next, the secret code B is read from the memory unit 5 by the read circuit 6, and the secret code d
Send 5 The collation circuit 7 collates the security code d2 input from the outside via the input / output circuit 1 with the security code B read from the memory unit 5, and sends the result to the condition determination circuit 7.

When the passwords match, the condition determination circuit 8 sends a flag d8 to the control circuit 2 to enable initialization of the memory in addition to reading and writing. The control circuit 2 that has detected the flag d8 sends a control signal d9 to the initialization circuit 9 to initialize the memory unit 5. Upon detecting the control signal d9, the initialization circuit 9 initializes the initial data (AL
L1) is sent to the writing circuit 4, and the writing circuit 4 initializes the memory unit 5. Initialized IC of the memory unit 5
The card can be reused by writing desired data.

(Embodiment 2) FIG. 2 shows (Embodiment 2) of the present invention. In this (Embodiment 2), a security code A, a security code B and condition data are set as a security protection function for protecting data in the memory unit 5. Specifically, the memory unit 5 includes first and second areas 10a,
A security code area 10 constituted by 10b, a data area 11, and a condition area 12 are provided, and the first and second areas 10a and 10b are (first embodiment).
Similarly, the password A and the password B are separately written. In the condition area 12, condition data designating permission / inhibition of access to the memory unit 5 is written.

The control circuit 2 is configured as follows.
A command is transmitted to the control circuit 2 via the input / output circuit 1, the command is identified by the control circuit 2, necessary control signals are sent to each unit, and each block operates. When the IC card is used normally, the matching of the password A and the setting of the condition area 12 are performed.

After the control circuit 2 identifies the command,
The decoder circuit 3 selects an area 10a of the memory unit 5 where the password A is stored. Next, the readout circuit 6 reads the password A from the memory unit 5 and sends the password A to the verification circuit 7. The collation circuit 7 collates the personal identification code d2 input from the outside via the input / output circuit 1 with the personal identification code A read from the memory unit 5, and the result d
7 is sent to the condition determination circuit 7.

A write command is sent to the control circuit 2 via the input / output circuit 1, the decoder circuit 3 selects the condition area 12, and data is sent to the write circuit 4 via the input / output circuit 1, Writes data in the memory unit 11. Next, the condition area 12 is
Is read by the read circuit 6, and the condition data is read and sent to the condition determination circuit 8 to determine whether or not the access is permitted. If the access is permitted, the permission flag d8 is sent to the control circuit 2.

When the passwords match and the condition code is in the permitted state, access to the memory unit 5 is permitted, and data can be read and written. If the passwords do not match, or if the condition data is in the “prohibited state”, access to the memory unit 5 is not permitted, and data reading and writing remain prohibited.

When the IC card is initialized and reused, the matching of the secret code B and the setting of the condition data are performed. After the control circuit 2 identifies the command, the decoder circuit 3
To select an area of the memory unit 5 where the security code B is stored. Next, the security code B is read out, and the collation circuit 7 is read.
To send the PIN code B. The collation circuit 7 includes a password code d2 input from the outside via the input / output circuit 1 and the memory unit 5
Is compared with the personal identification code B read out from the server, and the result is sent to the condition determination circuit 7. If the passwords match and the condition data is set to the permitted state, the condition determination circuit unit 8 sends a flag d8 indicating access permission to the control circuit 2. The control circuit 2 sends a control signal d9 to the initialization circuit 9 in order to initialize the memory unit 5. The initialization circuit 9 sends the initial data (ALL1) to the writing circuit 4, and the writing circuit 4 initializes the memory, so that the IC card can be used again.

(Embodiment 3) FIG. 3 shows (Embodiment 3) of the present invention. It has a security code A and a security code B as a security protection function for protecting data in the memory, and when accessing the memory, it is necessary to match the security code.

More specifically, the memory unit 5 includes first and second
A password code area 10 composed of areas 10a and 10b, a data area 11, and a reproduction count area 13 are provided, and the first and second areas 10a and 10b are described as (Embodiment 1). Similarly, the secret code A and the secret code B are separately written. In the reproduction count area 13, reproduction count data is written.

The control circuit 2 is configured as follows.
The command is transmitted to the control circuit 2 via the input / output circuit 1, and the control circuit 2 identifies the command, sends necessary control signals to each unit, and operates each block. When the IC card is used normally, the password A is matched. After the control circuit 2 identifies the command, the decoder circuit 3
To select an area in the memory unit 5 where the password A is stored. Next, the secret code A
And sends the password A to the matching circuit 7. The collation circuit 7 collates the personal identification code d2 input from the outside via the input / output circuit 1 with the personal identification code A read from the memory unit 5, and sends the result to the condition determination circuit 8.

When the passwords match, the condition determination circuit 8 sends a permission flag d8 to the control circuit 2, and the memory unit 5
Access is allowed, and data can be read and written. If the passwords do not match, access to the memory is not permitted, and reading and writing of data remain prohibited.

When the IC card is initialized and reused, the password B is matched. After the control circuit 2 identifies the command, the decoder circuit 3 selects an area in the memory section 5 where the security code B is stored. Next, the readout circuit 6 reads out the personal identification code B, and sends the personal identification code to the collation circuit 7. The security code d2 input from the outside via the input / output circuit 1 is sent to the verification circuit 7, and the verification circuit 7 collates the security code d5 read from the memory unit 5 with the security code d2 input from the outside. Then, the result is sent to the condition determination circuit 8.

Regarding the number of times of reproduction, the address of the number-of-times-of-reproduction area 13 is selected by the decoder circuit 3, and the data of the number of times of reproduction are read by the read circuit 6. The condition judging circuit 8 judges whether the code B matches and whether the number of times of reproduction does not exceed the limit, and sets a flag d8 indicating access permission.
To the control circuit 2. The control circuit 2 sends a control signal d9 to the initialization circuit 9 in order to initialize the memory. The initialization circuit 9 writes the initial data (ALL1) into the write circuit 4
And the write circuit 4 initializes the memory.

The storage of the number of reproductions is performed by adding 1 to the number of reproductions previously read from the read circuit 6 and sending the result to the writing circuit 4 to write the data in the area where the number of reproductions is stored.
By storing the number of times of reproduction in this way, an upper limit can be given to the number of times of reproduction, so that reproduction by forgery can be restricted, and failure can be prevented by not exceeding the guaranteed number of times of rewriting.

(Embodiment 4) FIG. 4 shows (Embodiment 4) of the present invention. In this (Embodiment 4), the security code A and the security code B need to match each other as a security function for protecting the data in the memory. Is required.

More specifically, the memory section 5 has first and second
A password code area 10 composed of areas 10a and 10b, a data area 11, and an identification area 14 are provided. The first and second areas 10a and 10b are the same as those in the first embodiment. PIN A and PIN B
Is written to distinguish. Identification data is written in the identification area 14.

The control circuit 2 is configured as follows.
The command is transmitted to the control circuit 2 via the input / output circuit 1. The control circuit 2 identifies the command, sends necessary control signals to each unit, and operates each block. When the IC card is used normally, the password A is matched. After the control circuit 2 identifies the command, the decoder circuit 3
Selects the area of the memory unit 5 where the password A is stored. Next, the readout circuit 6 reads the personal identification code A from the memory unit 5 and sends the personal identification code A to the collation circuit 7.

The collation circuit 7 collates the security code d2 input from the outside via the input / output circuit 1 with the security code A read from the memory unit 5, and sends the result to the condition judgment circuit 8. When the passwords match, the condition determination circuit 8 sends a flag d8 indicating access permission to the control circuit 2. Then, access to the memory unit 5 is permitted, and data can be read and written.

If the passwords do not match, access to the memory unit 5 is not permitted, and reading and writing of data are prohibited. When the IC card is initialized and reused, the code B is matched with the identification code of the device to be reproduced. After the control circuit 2 identifies the command, the decoder circuit 3 selects an area of the memory unit 5 where the password B is stored.

Next, the readout circuit 6 reads out the personal identification code B, and sends the personal identification code to the verification circuit 7. Matching circuit 7
Compares the personal identification code d2 input from the outside via the input / output circuit 1 with the personal identification code B read from the memory unit 13, and sends the result to the condition determination circuit 8. Then, in order to confirm the device to be initialized, the address of the identification area 14 is selected, and the identification code read by the read circuit 6 and the identification code d2 input from the outside via the input / output circuit 1 are compared with the matching circuit. 7 collates and the result is judged by the condition judgment circuit 8
Send to

The judgment circuit 8 sends a flag d8 for permitting initialization to the control circuit 2 when both the password B and the identification code match. The control circuit 2 sends a control signal d9 to the initialization circuit 9 in order to initialize the memory. The initialization circuit 9 sends the initial data (ALL1) to the writing circuit 4, and the writing circuit 4 initializes the memory. (Embodiment 5) FIG. 5 shows (Embodiment 5) of the present invention.

As a confidentiality protection function for protecting data in the memory unit 5, it is necessary to match a secret code and set condition data. To perform reproduction, it is necessary to match another secret code and set condition data. If necessary, it is possible to have an area for storing the number of times of reproduction, limit the number of times of reproduction, have an area for storing an identification code of a device capable of reproducing, and identify a device capable of reproducing.

More specifically, the memory section 5 includes first and second
A password code area 10, a data area 11, a condition area 12, a number-of-reproductions data 13, and an identification area 14 are provided. The first and second areas 10a, 10b are provided. In the same manner as in the first embodiment, a password A and a password B are separately written. In the condition area 12, condition data designating permission / inhibition of access to the memory unit 5 is written. Reproduction count data 13 Reproduction count data is written. Identification data is written in the identification area 14.

The control circuit 2 is configured as follows.
The command is transmitted to the control circuit 2 via the input / output circuit 1, and the control circuit 2 identifies the command, sends necessary control signals to each unit, and operates each block. When the IC card is used normally, the password A is matched. After the control circuit 2 identifies the command, the decoder circuit 3
Selects the area of the memory unit 5 where the password A is stored.

Next, the readout circuit 6 reads out the password A, and sends the password A to the verification circuit 7. The collation circuit 7 collates the security code d2 input from the outside via the input / output circuit 1 with the security code A read from the memory unit 14, and sends the result to the condition determination circuit 7. To set the condition code, write data permitting access to the condition area. A write command is sent to the control circuit 2 via the input / output circuit 1, the decoder circuit 3 selects an area of the condition data, and the data is sent to the write circuit 4 via the input / output circuit 1, and the write circuit 4 Writes data in the memory unit 14. Next, the condition data area is selected by the decoder circuit 3, the condition data is read by the read circuit 6, and is sent to the condition determination circuit 8 to determine whether the access is permitted or not. To the permission flag d8. When the passwords match and the condition code is in the permitted state, access to the memory unit 5 is permitted, and data can be read and written.

If the passwords do not match or the condition data is not in a permitted state, access to the memory unit 5 is not permitted, and reading and writing of data remain prohibited. When the IC card is initialized and reused, the matching of the secret code B, the setting of the condition data, and the matching of the identification code of the reproducing apparatus are detected.
After the control circuit 2 identifies the command, the decoder circuit 3 selects the area 10b in the memory unit 5 where the password B is stored. Next, the secret code B is read by the read circuit 6 connected to the memory unit 5, and the collation circuit 7 is read.
Send your PIN code to. The collation circuit 7 includes a password code d2 input from the outside via the input / output circuit 1 and the memory unit 14
The secret code B read out from the above is collated, and the result is sent to the condition determination circuit 8.

In order to confirm the reproducing apparatus, the address of the identification area is selected by the decoder circuit 3, and the identification code d5 read by the read circuit 6 and the identification code d2 input from the outside via the input / output circuit 1 are selected. Is compared by the matching circuit 7. The condition determination circuit 8 determines that the password code B
When the condition data is in the permitted state, the flag d8 for permitting the first reproduction is sent to the control circuit 2. The control circuit 2 sends a control signal d9 to the initialization circuit 9 in order to initialize the memory. The initialization circuit 9 sends the initial data (ALL1) to the writing circuit 4, and the writing circuit 4 initializes the memory. As for the number of times of reproduction, the decoder circuit 3 selects an address of the number of times of reproduction area, and the read circuit 6 reads data of the number of times of reproduction.

The condition determination circuit 8 determines whether the password B matches and whether the number of reproductions does not exceed the limit.
A flag d8 indicating access permission is sent to the control circuit 2. The control circuit 2 sends a control signal d9 to the initialization circuit 9 in order to initialize the memory. The initialization circuit 9 sends the initial data (ALL1) to the writing circuit 4, and
Performs memory initialization. The number of times of reproduction is stored by adding 1 to the number of times of reproduction previously read out by the readout circuit 6 and sending it to the write circuit 4 to write in the area where the number of times of reproduction is stored.

As described above, by storing the number of times of reproduction,
An upper limit can be given to the number of times of reproduction, and a failure can be prevented by restricting reproduction by forgery or not exceeding the guaranteed number of rewrites.

[0051]

As described above, the I with initialization function of the present invention
The memory device for the C card allows the access to the memory unit by matching the first PIN code, and initializes the memory unit by matching the second PIN code. When the IC card is used normally, the first PIN code is not used and the second PIN code for initialization is not used, so there is no risk of leakage, and the data is initialized and reused illegally. It is possible to reuse it while preventing it.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a memory device for an IC card according to a first embodiment of the present invention;

FIG. 2 is a configuration diagram of an IC card memory device according to a second embodiment of the present invention;

FIG. 3 is a configuration diagram of a memory device for an IC card according to a third embodiment of the present invention;

FIG. 4 is a configuration diagram of an IC card memory device according to (Embodiment 4) of the present invention;

FIG. 5 is a configuration diagram of a memory device for an IC card according to a fifth embodiment of the present invention.

FIG. 6 is a configuration diagram of a conventional memory device for an IC card.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 input / output circuit 2 control circuit 3 decoder section 4 write circuit 5 memory section 6 read circuit 7 verification circuit 8 condition determination circuit 9 initialization circuit

Claims (5)

[Claims] 1. An input / output circuit for outputting a read data by outputting a command, address or data from the outside, a decoder circuit for selecting an address of a memory unit, and a write circuit for writing data to the memory unit. A memory unit capable of storing a plurality of security codes, a readout circuit for reading data from the memory unit, a security code input from outside, and first and second security codes stored in the memory unit A control circuit for checking access permission / prohibition based on a result of the check; a control for identifying a command from the input / output circuit and controlling each of the above-described units that the condition determination circuit determines to be permitted And an initialization circuit that sends initialization data to the write circuit and initializes the memory unit. When the condition judgment circuit detects that the memory unit has been matched, access to the memory unit is permitted to be read, and when the condition judgment circuit detects that the second password code matches, the initialization circuit stores the memory unit in the memory unit. A memory device for an IC card with an initialization function configured to execute initialization. 2. The memory unit is configured to store condition data in addition to a plurality of personal identification codes, and the control circuit is configured to determine whether a code input from the outside corresponds to a first personal identification code of the personal identification codes. And the memory unit can be accessed according to the setting contents of the condition data, the second password for initialization matches, and the initialization can be performed according to the setting contents of the condition data. Item 1
A memory device for an IC card with an initialization function as described in the above. 3. The memory section is configured to store data of the number of times of reproduction in addition to a plurality of passwords, and the control circuit is configured to store a code input from the outside as a first password of the passwords. It is possible to access the memory unit in accordance with the set contents of the condition data, and the initial password represented by the reproduction number data read from the memory unit matches the second password code for initialization. 2. The memory device for an IC card with an initialization function according to claim 1, wherein the initialization is performed when the number of times of initialization is within a prescribed range, and the data of the number of times of reproduction is updated in a memory unit. 4. The memory unit is configured to store identification data in addition to a plurality of personal identification codes, and the control circuit controls the control circuit so that a code input from the outside matches the first personal identification code of the personal identification codes. Then, access to the memory unit is enabled, and the second secret code for initialization matches, and the initial code is read when the identification code read from the memory unit matches the identification code of the device to be initialized. The memory device for an IC card with an initialization function according to claim 1, wherein the memory device can be initialized. 5. The memory unit is configured to store condition data, number-of-reproductions data, and identification data in addition to a plurality of personal identification codes. The memory unit can be accessed according to the setting contents of the condition data, and the setting contents of the condition data can be initialized, and the second security code for initialization is identical. When the identification code read from the memory unit matches the identification code of the device to be initialized, and the number of times of initialization represented by the reproduction number data read from the memory unit is within a specified range. 2. The memory device for an IC card having an initialization function according to claim 1, wherein the memory device is initialized and the number-of-reproductions data in the memory unit is updated.