JP2002335579A - Information terminal and method for executing application - Google Patents

Abstract

PROBLEM TO BE SOLVED: To increase the number of applications executed by utilizing a secure token effectively. SOLUTION: An externally non-rewritable storage means, i.e., a secure token, stores information indicating the right to execute an application and individual user information of individual application which possibly causes disadvantage to a user and a service provider when it is tampered during execution of an application. Execution code of an application which possibly causes no disadvantage to a user and a service provider is stored in an externally rewritable storage means, i.e., the storage means of an information terminal even if it is tempered as long as the fact of tampering is clarified.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention is applied to an information terminal device having storage means for storing subscriber information for accessing a network such as a portable telephone. In the following, what stores subscriber information in a storage unit that is not rewritable from outside the device is called a secure token.

[0002]

2. Description of the Related Art Conventionally, when an application is stored in a secure token and a service is executed, the application is stored as personal information because personal information may be illegally leaked due to falsification of an information terminal device. An execution code for execution, information indicating a right to execute an application, and individual user information of each application are stored in one secure token.

Further, when using an application on a network using a mobile phone, the possibility of unauthorized tampering with the mobile phone based on an operation model in which a mobile phone manufacturer is certified as a mobile phone carrier is eliminated. Therefore, the storage device in the mobile phone stores an execution code for executing the application, information indicating a right to execute the application, and individual user information of each application.

[0004]

However, the spread of secure tokens such as IC cards or IC chips has led to the development of various applications.
It becomes impossible to store the execution codes of all applications, the information indicating the execution right, and the user-specific information of each application in the limited storage space in one secure token.

[0005] In a portable information terminal device such as a cellular phone, a method for storing authentication information for accessing a network, such as subscriber information, in a secure token has been proposed due to advantages such as change of the portable terminal device. There is a trend that the secure token stores execution codes of all applications, information indicating execution rights, and user-specific information of each application. In this case as well, it is impossible to store the execution codes of all the applications, the information indicating the execution right, and the user-specific information of each application in one limited secure token.

The present invention has been made in such a background, and stores information indicating a right to execute an application and user information possessed by an individual application in a secure token to execute the application. An object of the present invention is to provide an information terminal device and an application execution method capable of executing many applications by effectively using a secure token by storing a code in a storage device in the information terminal device.

[0007]

According to the present invention, the information stored in the secure token, which is storage means that cannot be rewritten from outside the apparatus, includes information indicating a right to execute the application and information held by each application. Stores information, such as individual user information, that may adversely affect users and service providers when tampered with during the execution of applications, and provides users and services if tampering becomes apparent even if tampered. By storing the execution code of the application that is less likely to cause a disadvantage to the user in the storage device of the information terminal device that is a rewritable storage device from the outside of the device, it is possible to execute more applications as a whole. Become.

For example, when a secure token having a capacity of 16 KB stores “executable code”, “rights information”, and “individual information” in a total of 3 KB, only five applications can be stored. ,
It is possible to store 15 applications having a total of 3 KB in which the sum of “right information” and “individual information” is 1 KB and the size of “execution code” is 2 KB in the storage device of the secure token and the information terminal device.

[0009] That is, a first aspect of the present invention is an information terminal device, which is characterized by a storage means rewritable from outside the apparatus and a storage means rewritable from outside the apparatus. Execution code for executing an application is written in the rewritable storage means, and information indicating a right to execute the application and information of each application are stored in the non-rewritable storage means. This is where the individual user information is written.

[0010] A second aspect of the present invention is an application execution method, which is characterized in that an execution code for executing an application is written in a rewritable storage means from the outside of the device, and the execution code is written to the outside of the device. The information indicating the right to execute the application and the individual user information possessed by each application are respectively written into the non-rewritable storage means, and the information indicating the right includes an electronic signature and a user identifier, and When execution of the execution code is specified by the user by an application execution request including an electronic signature and a user identifier, the right to execute the application written in the non-rewritable storage unit is set according to the execution code. Collating the digital signature of the user with reference to the information shown Ascertaining more whether the rights of the user, and performing the authentication request of the user identifier of the user to a server for providing a service by using the right when the user has the right,
When the server authenticates the validity of the user identifier, executing the service requested by the user in cooperation with the server, and when the user information of the user is changed due to execution of the service. And steps to change this.

[0011] Thus, many applications can be executed by effectively using the secure token.

[0012]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An information terminal device and an application execution method according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a diagram showing a storage device and an IC chip of an information terminal according to an embodiment of the present invention and their stored information. FIG.
FIG. 4 is a diagram showing contents of right information and individual information according to the embodiment of the present invention. FIG. 3 is a diagram showing a system configuration for explaining an application execution method according to the embodiment of the present invention. FIG. 4 is a sequence diagram showing the procedure of the application execution method according to the embodiment of the present invention.

A first aspect of the present invention is an information terminal device 1 shown in FIG. 1, which is characterized by a storage device 2 that can be rewritten from outside the device and a non-rewritable storage device from outside the device. An executable code # 1 to #n for executing an application is written in the storage device 2, and rights information # 1 to # 3 indicating a right to execute the application is stored in the IC chip 3. #N and individual information # 1 which is individual user information of each application.
#N are respectively written.

A second aspect of the present invention is the application execution method shown in FIG. 4, and the feature of the present invention is that, as shown in FIG. Executable code for executing #
1 to #n, and right information # 1 to #n indicating a right to execute an application on the IC chip 3 that cannot be rewritten from outside the device, and individual information # 1 to individual user information of each application. #N, each of the right information # 1 to #n includes an electronic signature and a user identifier as shown in FIG.
As shown in FIG. 4, when the execution of the execution code #i (i is any one of 1 to n) is designated by the user by an application execution request including a digital signature and a user identifier from the user, the execution code #i According to the IC
Checking the electronic signature of the user with reference to the right information #i written on the chip 3 to confirm whether the user has the right, and using the right when the user has the right. Making a request for authentication of the user identifier of the user to the server #i that provides the service, and executing the service requested by the user in cooperation with the server #i when the server #i authenticates the validity of the user identifier. And the step of changing the individual information #i of the user when the service is executed, if the individual information #i is changed.

Hereinafter, embodiments of the present invention will be described in more detail.

Here, a plurality of applications are integrated into an IC.
An example in which a secure token such as the chip 3 and the storage device 2 in the information terminal device 1 are stored and executed will be described. FIG. 1 shows a state in which an application is stored in the IC chip 3 and the storage device 2 of the information terminal device 1.

In this embodiment, an explanation will be given using an example in which the IC chip 3 is stored in the information terminal device 1. However, an external secure token is stored in the information terminal device 1 using a secure token read / write device built in the information terminal device 1. Can also be used.

FIG. 1 is a diagram in which a chip owner or a service provider stores an application in an IC chip 3 online or offline. In FIG. 1, # 1
N applications from #n to #n. Tamper resistant IC with relatively small memory capacity
In the chip 3, "rights information" indicating the right of the card owner to execute the application and "individual information" indicating the information managed by the individual application are stored for each application.

In the storage device 2 of the information terminal device 1,
“Execution code” which is a program for executing an application service is stored for each application.

FIG. 2 shows the contents of the database in "rights information" and "individual information". Since the "execution code" is the main program for executing the service, the contents of the database are not described. The contents of “right information” and “individual information” described in FIG. 2 will be described using electronic cash as an example. In the case of an electronic cash application, "user ID" is used as right information for executing the application.
"Data" and "digital signature data" for the execution code. As for the individual information used for each application, “AP usage value # 1” in FIG. 2 corresponds to “electronic cash balance data” and “AP usage value # 2” is stored as “use history”. Will be.

FIG. 3 illustrates the actual execution of the application stored in the IC chip 3 and the storage device 2 of the information terminal device 1. FIG. 4 illustrates a processing procedure between the “server”, the “information terminal device”, and the “IC chip” when the application is executed.

A user requests execution of application #i via information terminal device 1. The information terminal device 1 executes the execution code #i of the application #i. The execution code #i of the application #i makes a request for collation of the digital signature data in order to confirm the execution of the application #i to the IC chip 3. If the request is from a legitimate application execution code, the IC chip 3 gives the execution code #i an access right to the individual information in the IC chip 3.

If the request is an execution request from the falsified application #i, it is determined that the digital signature data is invalid, the processing is stopped, and an alert is issued. The legitimate execution code #i having the access right receives the right information #i from the IC chip 3. The execution code #i that has received the right information #i performs mutual authentication with the server #i. When the mutual authentication is completed, the service is executed in cooperation with the program on the server #i side. With the execution of the service, the execution code #i becomes I
The individual information #i stored in the C chip 3 is updated, and the process ends.

[0024]

As described above, according to the present invention,
Many applications can be executed using the secure token effectively.

[Brief description of the drawings]

FIG. 1 is a storage device and an IC of an information terminal according to an embodiment of the present invention.
The figure which shows a chip and its storage information.

FIG. 2 is a diagram showing contents of right information and individual information according to the embodiment of the present invention.

FIG. 3 is a diagram showing a system configuration for explaining an application execution method according to the embodiment of the present invention.

FIG. 4 is a sequence diagram showing a procedure of an application execution method according to the embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information terminal device 2 Storage device 3 IC chip

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Eiichi Niwano 2-3-1 Otemachi, Chiyoda-ku, Tokyo F-term (reference) in Nippon Telegraph and Telephone Corporation 5B058 CA26 KA02 KA04 KA31 KA31 YA20 5J104 AA07 AA09 KA01 KA07 LA06 MA03 NA35 NA42 PA02 PA12 5K067 AA34 AA35 DD17 EE02 HH22 HH23 HH24 KK15

Claims (2)

[Claims] 1. An apparatus comprising: a storage unit rewritable from outside the apparatus; and a storage unit rewritable from outside the apparatus, wherein execution code for executing an application is written in the rewritable storage unit. The information terminal device, wherein information indicating a right to execute an application and individual user information of each application are written in the non-rewritable storage unit. 2. An execution code for executing an application is written in a rewritable storage unit from outside the device, information indicating a right to execute the application in the rewritable storage unit from outside the device, and information of each application The information indicating the right includes an electronic signature and a user identifier, and the execution of the execution code is designated by the user according to an application execution request including the electronic signature and the user identifier from the user. Then, by referring to the information indicating the right to execute the application written in the non-rewritable storage unit in accordance with the execution code and collating the electronic signature of the user, the right of the user is obtained. Confirming whether the user has the right. Requesting a user identifier of the user to a server that provides a service using the right when performing the authentication, and cooperating with the server the service requested by the user when the server authenticates the user identifier. And executing a change of the user information of the user associated with the execution of the service when the user information is changed.