JP2002024785A - Ic card and reader/writer - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent unauthorized renewal of IC card data having extremely high security. SOLUTION: In this system using an IC card 2 with contacting/non-contacting external interfaces 21, 22, under the condition that simultaneous access by contacting and non-contacting is enabled, the IC card 2 allows rewriting data. A reader/writer is provided with both of contacting and non-contacting interfaces 11, 12, 13, 14, and allowed to have a function accessing to the IC card simultaneously by contacting and non-contacting.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card and a reader / writer having a contact and non-contact external interface.

[0002]

2. Description of the Related Art When an IC card is connected to an IC card terminal (reader / writer) capable of communicating with the IC card, a reader / writer is connected.
Receives and interprets the command sent from the writer, executes the processing, and returns the processing result as a response to the reader /
It is configured to return to the writer.

[0003] In an IC card in which a connection with a reader / writer is made through a contact terminal, security is low even when rewriting data such as an encryption key that requires very high security. As with other data, data is transmitted and received by a reader / writer for contact. Naturally, the data exchange between the IC card and the reader / writer is only through the I / O line, and there is no other method than using this. Although an IC card in which the connection with a reader / writer is performed in a non-contact manner has been proposed, it is mainly used for reading and writing data such as a commuter pass which requires convenience and requires high security. It is not used for rewriting data.

[0004]

In the conventional IC card system, for example, when the encryption key data contained in the IC card is leaked to a third party and the necessity of updating to another key data arises, Even when extremely high security data is updated, it cannot be determined by an IC card whether the data has been correctly updated by an authorized card issuer. In this case, there is a possibility that the data is updated to inconvenient data by a third party.

An object of the present invention is to solve the above-mentioned problem, and an object of the present invention is to prevent data of extremely high security from being illegally updated.

[0006]

In the system according to the present invention, the IC card has at least two types of interfaces, one for contact and the other for non-contact. The data in the IC card is updated by a contact-specific reader / writer. In addition, data such as commuter passes for which convenience is required is stored in a contactless dedicated reader /
The data in the IC card is read and written by the writer.

However, updating of data requiring extremely high security, such as updating of an encryption key or privacy-related personal information, should normally be rewritten only in a secure environment like a card issuer or a bank. However, if a third party illegally obtains the encryption key, the data may be updated by the third party.
Therefore, a reader / writer capable of simultaneous contact and contactless access, which is a special environment, simultaneously receives a data update instruction from the contactless mode (or contact mode) and data update information from the contact mode (or contactless mode). Or, when data update information from the contact mode (or the non-contact mode) is received while the data update command from the non-contact mode (or the contact mode) is valid, rewriting of data is permitted, and higher security is provided. Enables updating of data.

[0008]

Embodiments of the present invention will be described below. Normal security level data updates can be updated by commonly used readers / writers, but the present invention provides a means for updating data with a very high security level.

FIG. 1 is a conceptual diagram illustrating the system of the present invention, FIG. 2 is a block diagram illustrating the configuration of an IC card and a reader / writer of the present invention, and FIG. 3 is data stored in a nonvolatile memory of the IC card. FIG.

As shown in FIG. 1, a reader / writer 1 has a contact terminal 11 and an antenna 12, and an IC card 2 has a contact terminal 2
1, an IC card 2 having an antenna 22
Is connected to the reader / writer 1, the tip of the needle of the contact terminal 11 is electrically connected to the contact terminal 21, and transmission and reception between the antennas 12 and 22 can be performed at the same time.

In FIG. 2, the reader / writer 1 has a memory 16 for storing data, a control processing unit 15 composed of a computer and the like, and contact and non-contact interfaces 13 and 14. , Antenna 12
The user can access the IC card 2 through. The IC card 2 receives, interprets, and executes a command transmitted from the reader / writer through the contact terminal 21 and the antenna 22.
U23 and at least a non-volatile memory 24 for storing read / write data.

As shown in FIG. 3, in a non-volatile memory area A, ticket data such as a commuter pass requiring convenience is stored, and a non-contact mode or a contact terminal for exchanging data through an antenna. In the contact mode in which data is transmitted / received through the interface, data can be read and written. In the area B of the nonvolatile memory, electronic cash data or the like requiring relatively high security is stored, and the data can be accessed in the contact mode to update the data. In the area C of the non-volatile memory, data such as an encryption key requiring extremely high security and personal information related to privacy are stored, and a data update instruction from the non-contact mode (or contact mode) and a contact mode (or When data update information from contact mode (or non-contact mode) is received at the same time, or data update information from contact mode (or non-contact mode) is received while the data update command from non-contact mode (or contact mode) is valid Access becomes possible, and data is updated. In the above description, the non-contact mode and the contact mode are treated equally. However, it is more preferable that the data update command be in the non-contact mode and the data update information be in the contact mode from the viewpoint of preventing data leakage.

[0013]

As described above, according to the present invention, low security data requiring convenience can be accessed in the non-contact mode or contact mode, and in the case of data requiring relatively high security, In the case of data that can be accessed by the contact mode and requires extremely high security, a data update instruction from the non-contact mode (or contact mode) and data update information from the contact mode (or non-contact mode) are provided. Receive at the same time,
Alternatively, when the data update information from the contact mode (or the non-contact mode) is received while the data update command from the non-contact mode (or the contact mode) is valid, the data can be accessed. Unauthorized updating can be prevented.

[Brief description of the drawings]

FIG. 1 is a conceptual diagram illustrating a system of the present invention.

FIG. 2 is a block diagram illustrating a configuration of an IC card and a reader / writer.

FIG. 3 is a diagram illustrating data stored in a nonvolatile memory.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Reader / writer, 2 ... IC card, 11 ... Contact terminal, 12 ... Antenna, 13, 14 ... Interface, 1
5: control processing device, 16: memory, 21: contact terminal, 2
2. Antenna, 23 CPU, 24 nonvolatile memory.

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06K 19/077 G06K 19/00 K 19/10 LR

Claims (2)

[Claims] 1. A system using an IC card having a contact and non-contact external interface, wherein rewriting of data is permitted on condition that simultaneous access by contact and non-contact is possible. card. 2. A system using an IC card having a contact and non-contact external interface, having both contact and non-contact interfaces and having a function of simultaneously accessing the IC card in a contact and non-contact manner. A reader / writer characterized in that: