JP2002354546A - Integrated circuit and communication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an integrated circuit capable of providing various services by use of a stand-alone integrated circuit without being limited by storage capacitance of a memory built in the integrated circuit. SOLUTION: An IC21 has an antenna 49 and an analog part 47 which communicate with an IC- R/W device; and an I/F part 45 which communicates with a mobile communication function part in a mobile telephone device. The IC21 relays a communication between an IC- R/W device 11 and a mobile communication function part 20 via the analog part 47 and the I/F part 45 after a predetermined authentication.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an integrated circuit (IC:
Integrated circuit) and a communication device incorporating the integrated circuit.

[0002]

2. Description of the Related Art Currently, electronic commerce using IC devices such as IC cards is performed. An IC (integrated circuit) of such an IC device includes an interface that communicates with a transaction device installed in a store or the like, a memory that stores an application program that defines processing related to a service using the IC, and an application program. And a CPU for executing the program.

[0003]

However, in the IC of the above-described IC device, as described above,
The application program is stored in a memory built in the IC, and the storage capacity of the memory is limited from the viewpoint of miniaturization and cost reduction of the IC. Therefore, services that can be provided using a single IC are limited. There is a problem that there is.

[0004] The present invention has been made in view of the above problems,
An object of the present invention is to provide an integrated circuit and a communication device that can provide various services using a single integrated circuit without being limited by the storage capacity of a memory built in the integrated circuit.

[0005]

In order to solve the above-mentioned problems of the prior art and achieve the above object, an integrated circuit of the first invention is provided in a first communication device having a communication circuit. An integrated circuit, comprising: a first interface that communicates with a processing device that performs processing related to a predetermined service; a second interface that communicates with the communication circuit; and the second interface and the communication circuit. Access to the second communication device via the first communication device, and perform processing while communicating with the processing device via the first interface using a program or data stored in the second communication device. Control means for performing the control.

The operation of the integrated circuit according to the first invention is as follows. In the integrated circuit of the first invention, under a predetermined condition,
The control means accesses the second communication device via the second interface and the communication circuit. Then, the control means performs processing while communicating with the processing device via the first interface using a program or data stored in the second communication device. Thus, in the integrated circuit of the first invention, the second communication device can be used as a virtual memory and a device that virtually executes a program.

In the integrated circuit according to the first aspect of the present invention, preferably, when the second communication device stores and executes a program defining a process related to the service, the control means controls the second communication device. After performing mutual authentication with the communication device via the second interface and the communication circuit, the communication between the second communication device executing the program and the processing device via the communication circuit The communication is controlled to be relayed by the first interface and the second interface.

Further, in the integrated circuit according to the first aspect of the present invention, preferably, the control circuit is configured to control the second circuit based on an authentication request received from the communication circuit via the second interface.
The mutual authentication is performed by communicating with the communication device via the second interface and the communication circuit.

Preferably, the integrated circuit according to the first invention further includes a storage circuit for storing a program related to a service provided by using the integrated circuit, and the control unit includes the first interface. It is determined whether the program corresponding to the request received from the processing device via the storage circuit is stored in the storage circuit, if it is determined that the program is stored in the storage circuit, the storage The program read out from the circuit is executed, and according to the execution of the program, a process related to the service is performed while communicating with the processing device via the first interface.

In the integrated circuit according to the first aspect of the present invention, preferably, when the control means determines that the program is not stored in the storage circuit, the control section controls the second interface and the communication circuit. And transmitting a use request of the program to the second communication device.

A communication device according to a second aspect of the present invention is a communication device having a communication circuit and an integrated circuit, wherein the integrated circuit has a first interface for communicating with a processing device that performs a process related to a predetermined service. And a second interface for communicating with the communication circuit; and a program or data stored in the second communication device for accessing another communication device via the second interface and the communication circuit. And control means for performing processing while communicating with the processing device via the first interface using the first interface.

Further, in the communication device according to the second invention, preferably, the communication circuit has a storage circuit for storing a program or data, and the control means controls the storage circuit via the second interface. And performs processing while communicating with the processing device via the first interface using a program or data stored in the storage circuit.

Further, an integrated circuit according to a third aspect of the present invention is an integrated circuit provided in a first communication device having a communication circuit, wherein the interface performs communication with the communication circuit, and the communication circuit communicates via the interface. A control unit for performing mutual authentication with the second communication device via the interface and the communication circuit when receiving an authentication request from the circuit. In the integrated circuit according to the third aspect of the invention, preferably, the result of the mutual authentication is transmitted between the second communication device and a third communication device that performs a process related to a service using the integrated circuit. It is used to determine whether to perform communication and perform processing related to the service.

[0014] The integrated circuit according to the third invention preferably further comprises a storage circuit for storing a program relating to a service provided by using the integrated circuit, and wherein the control means is provided via the interface. It is determined whether or not the program corresponding to the request received from the communication circuit is stored in the storage circuit. If it is determined that the program is stored in the storage circuit, the program is read from the storage circuit. Executing the program, and in response to the execution of the program, performs a process related to the service while communicating with the third communication device via the interface and the communication circuit. Further, in the integrated circuit according to the third invention, preferably, when the control means determines that the program is not stored in the storage circuit, the control means transmits the second program via the interface and the communication circuit. A use request of the program is transmitted to the communication device.

A communication device according to a fourth aspect of the present invention is a communication device having a communication circuit and an integrated circuit, wherein the integrated circuit includes an interface for communicating with the communication circuit, and the communication circuit via the interface. And a control unit for performing mutual authentication with another communication device via the interface and the communication circuit when receiving an authentication request from the communication device.

[0016]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a communication system according to an embodiment of the present invention will be described. First Embodiment FIG. 1 is an overall configuration diagram of a communication system 1 of the present embodiment. As shown in FIG. 1, the communication system 1 includes, for example, a gateway 10, an IC_R / W device 11, an IC service providing device 12, a virtual IC storage area server device 13, and a mobile phone device 14. Mobile phone device 14 and virtual I
The communication with the C storage area server device 13 is performed via a wireless communication line 17 such as a mobile phone communication network, a gateway 10, and a network 18 such as the Internet. The mobile phone device 14 and the IC_R / W device 11 perform, for example, wireless communication. Further, the IC_R / W device 11 and the IC service providing device 12 perform communication via, for example, a dedicated transmission line. In addition, the mobile phone device 14
It has a portable communication function unit 20 and an IC 21. This embodiment is an embodiment corresponding to the first and second inventions. The IC_R / W device 11 shown in FIG. 1 corresponds to the processing device of the present invention. The mobile phone device 14 corresponds to the first communication device of the first invention and the communication device of the second invention. Also, the virtual IC storage area server device 13
Corresponds to the second communication device of the first invention and the other communication device of the second invention. Further, the IC_R / W device 11
It corresponds to the processing apparatus of the present invention.

First, an outline of an operation example of the communication system 1 shown in FIG. 1 will be described. FIG. 2 shows a communication system 1 shown in FIG.
FIG. 4 is a diagram for describing an outline of an operation example of FIG. User A
Visits the store 30 and finds that the IC_R / W device 11 and the IC 21
The mobile phone device 14 is located at a position where wireless communication is possible. Then, as shown in FIG. 2, first, in response to the operation of the mobile communication function unit 20 of the mobile phone device 14 by the user A, the mobile communication function unit 20 transmits the data via the wireless communication line 17, the gateway 10 and the network 18. , Virtual I
A virtual storage area use request (use request of the present invention) is transmitted to the C storage area server device 13 (in FIG. 2).

Next, mutual authentication is performed between the IC 21 of the portable telephone device 14 and the virtual IC storage area server device 13 (FIG. 2). When the mutual validity is verified by the mutual authentication, an application program selection instruction is transmitted from the portable communication function unit 20 to the virtual IC storage area server device 13 in response to the operation of the user A (FIG. 2). ), A virtual storage area use instruction is transmitted from the IC 21 to the IC_R / W device 11 (in FIG. 2). Next, via the portable communication function unit 20 and the IC 21, the IC
After performing communication between the _R / W device 11 and the virtual IC storage area server device 13 and performing mutual authentication, processes related to the service using the IC 21 are performed in cooperation (FIG. 2).
As described above, according to the communication system 1, the IC 21
When performing processing related to a service with the R / W device 11, the virtual IC storage area server device 13 executes an application program stored in the server device 13 after a predetermined authentication process, and executes the IC_R While performing communication with the / W device 11, processing related to the service is performed. Therefore, even if the storage capacity of the memory in the IC 21 is small, it is possible to provide a service using an application program having a large data amount.

Hereinafter, each component of the communication system 1 shown in FIG. 1 will be described in detail. [Gateway 10] The gateway 10 is a device that relays communication between the wireless communication line 17 such as a mobile phone and the network 18.

[IC_R / W device 11] The IC_R / W device 11 is installed in a service provider's store 30 or the like,
Data is exchanged with the IC 21 incorporated in the mobile phone device 14 in a contact manner or a non-contact manner, and the IC 21
Performs processing related to the service performed using. In the present embodiment, a case where data is transmitted and received between the IC_R / W device 11 and the IC 21 by a non-contact method (wireless method) will be exemplified. The IC_R / W device 11, as described later,
Communication with a virtual IC storage area server device 13 that stores and executes an application program that defines processing relating to the service via a mobile phone device 14;
In response to the execution of the application program by the virtual IC storage area server device 13, processing related to the service is performed in cooperation with the virtual IC storage area server device 13.
Examples of the services according to the present embodiment include services involving confidential processes such as personal (personal) authentication, electronic money, electronic commerce, and ticket issuance.

[IC Service Providing Device 12] The IC service providing device 12 communicates with the IC_R / W device 11
Data transmission / reception required for a service performed using C21 is performed.

[Virtual IC Storage Area Server Device 13] The virtual IC storage area server device 13
It functions as a virtual memory of C21, stores an application program related to a service performed using IC21, and executes the application program in response to an instruction from IC21. FIG. 3 is a functional block diagram of the virtual IC storage area server device 13. As shown in FIG. 3, the virtual IC storage area server device 13
AM 51, memory 52, control unit 53, and I / F unit 54
Having.

FIG. 4 is a functional block diagram of the SAM 51 shown in FIG. The SAM 51 is a tamper-resistant hardware or software module. SAM5
Reference numeral 1 denotes an authentication unit 61 and an encryption / decryption unit 6 as shown in FIG.
2. It has an IC control unit 63 and an IC-related processing unit 64. The authentication unit 61 performs mutual authentication with the IC 21 described later and mutual authentication with the IC_R / W device 11.

The encryption / decryption unit 62 includes, for example, a memory 52
And encrypts the application program registered (written) in the memory 52 and decrypts the application program read from the memory 52.

The IC control unit 63 controls, for example, communication with the IC 21. The IC-related processing unit 64
And performs processing related to a predetermined service.

The memory 52 is used as a virtual memory of the IC 21 and stores an application program related to a service using the IC 21. The memory 52 is shown in FIG.
As shown in FIG. 6, an IC virtual storage area 6 previously allocated to each user (mobile phone) by a registration process described later.
0a, 60b, 60c,... For example, IC
The virtual storage area 60a is allocated to the user A of the mobile phone device 14, the IC virtual storage area 60b is allocated to the user B, and the IC virtual storage area 60c is allocated to the user C. In the IC virtual storage area 60a, for example, as shown in FIG. 6, application programs 65a, 65b, and 65c registered by an application program registration process described later are stored. The application programs 65a, 65b, 65c are:
Each program is a program that defines a process related to a service provided using the IC 21. The memory 52 has a storage capacity of, for example, 2 k, 4 k or 8 k bytes.

The control unit 53 controls the processing of the virtual IC storage area server device 13 as a whole. FIG.
3 is a functional block diagram of FIG. As shown in FIG.
3 includes a portal unit 71, a user I / F unit 72, an AP (application program) execution unit 73, a SAM control unit 74, and a memory control unit 75. Portal 71
Realizes a portal function in response to access from the mobile phone device 14, for example, and displays a menu screen of a service that can be provided on the display unit of the mobile phone device 14, for example. The user I / F unit 72 controls a user I / F screen displayed on the display unit 34 of the mobile communication function unit 20. AP
The execution unit 73 executes the application program read from the memory 52. The SAM control unit 74 uses the SA
The processing using M51 is controlled. The memory control unit 75 includes:
It manages application programs stored in the memory 52. Specifically, the memory control unit 75 performs, for example, allocation of the IC virtual storage area 60a to the mobile phone device 14, registration of the application programs 65a, 65b, 65c to the IC virtual storage area 60a.

[Portable Telephone Device 14] As shown in FIG.
The mobile phone device 14 includes a mobile communication function unit 20 and an IC 2
One. Here, the portable communication function unit 20 corresponds to the communication circuit of the present invention, and the IC 21 corresponds to the integrated circuit of the present invention. <Portable Communication Function Unit 20> FIG. 8 is a functional block diagram of the portable communication function unit 20 shown in FIG. As shown in FIG.
The mobile communication function unit 20 includes, for example, a voice input / output unit 31, A
/ D / D / A conversion unit 32, DSP 33, display unit 34, operation unit 35, IC_I / F unit 36, memory 37, control unit 3
8, a baseband processing unit 39 and a radio unit 40.

The audio input / output unit 31 generates a speaker that outputs audio corresponding to the analog audio signal input from the A / D / D / A conversion unit 32, and generates an analog audio signal corresponding to the input audio. And a microphone for outputting to the A / D / D / A converter 32.

The A / D / D / A converter 32 includes a DSP 33
Is converted into an analog audio signal and output to the audio input / output unit 31. A / D
The D / A converter 32 converts an analog audio signal input from the audio input / output unit 31 into a digital audio signal,
Output to SP33.

The DSP 33 performs band compression processing of digital audio signals and the like. The display unit 34 is, for example, a liquid crystal display that displays an image according to the display signal input from the control unit 38. The operation unit 35 is an operation button or the like, and outputs an operation signal corresponding to an operation of the operation button by the user to the control unit 38. The IC_I / F unit 36 transmits and receives data to and from the IC 21 shown in FIG.
T (Universal Asynchronons)
ReceiverTransmitter), IC2
An interface such as USB or IEEE1394. The memory 37 stores programs and data necessary for processing in the control unit 38 and the baseband processing unit 39. The memory 37 includes, for example, the mobile communication function unit 20.
It may be fixed so that it cannot be attached to or detached from the
Alternatively, it may be detachably attached to the portable communication function unit 20 such as a memory card. The memory 37 has a storage capacity of, for example, 64 k or 1 Mbyte. The mobile communication function unit 20 includes, for example, the memory 3
7 stores a program that defines processing using the IC 21, and in accordance with an instruction from the IC 21, stores the program read from the memory 37 by the control unit 38 in the control unit 48 of the IC 21.
May be transmitted via the IC_I / F unit 36 and the I / F unit 45. In addition, the control unit 48 executes the read program, and executes the IC_I / F unit 36 and the I / F unit 4.
The processing related to the service may be performed by the control unit 38 and the control unit 48 in cooperation with each other via the control unit 5.

The control section 38 generally controls the processing of the portable communication function section 20, and is controlled by the control section 48 shown in FIG. The baseband processing unit 39 performs a baseband process. The wireless unit 40
Processing such as amplification and detection of data (signal) transmitted and received via the antenna 17 and generation of an IQ signal are performed.

<IC21> The IC21 is a tamper-resistant integrated circuit capable of preventing unauthorized monitoring and tampering of processing and data in the IC21 and data exchanged with the outside. The IC_R / W device 11 and the IC Processing related to various predetermined services provided using the service providing device 12 is performed. FIG. 9 shows the IC2 shown in FIG.
1 is a functional block diagram of FIG. As shown in FIG.
1 includes, for example, an I / F unit 45, a memory 46, an analog unit 47, and a control unit 48. Here, the I / F unit 45
Corresponds to the second interface of the present invention, the analog section 47 corresponds to the first interface of the present invention, and the control section 48 corresponds to the control means of the present invention. I / F 45
Is the IC_I / F unit 3 of the mobile communication function unit 20 shown in FIG.
6 is an interface for exchanging data with the H.6 in a wired or wireless manner. The memory 46 includes a control unit 48
The data and the program necessary for the processing are stored. The memory 46 may store an application program used for a part of various services provided by using the IC 21. Analog part 4
7 performs analog processing such as amplifying data (signal) transmitted and received to and from the IC_R / W device 11 via the antenna 49 in a wireless manner.

The control unit 48 controls the processing of the IC 21 as a whole. The control unit 48 is a portable communication function unit 2 shown in FIG.
In addition to being controlled by the control unit 38, the control unit 38 is controlled. The baseband processing unit 39 performs baseband processing of a signal transmitted and received between the wireless unit 40 and the baseband processing unit 39.

As shown in FIG. 10, the IC 21 includes a portable communication function unit 20, a wireless communication line 17, and a network 1
8 via the virtual IC storage area server device 1 shown in FIG.
3 uses an application program stored in the memory 52.

FIG. 11 shows processing between the IC 21, the portable communication function unit 20, and the virtual IC storage area server device 13 when the IC 21 uses an application program stored in the memory 52 of the virtual IC storage area server device 13. FIG. 4 is a diagram for explaining a sequence. FIG.
As shown in FIG. 1, the control unit 48 of the IC 21 transmits a memory access request to the control unit 38 of the portable communication function unit 20 (step ST200), and the control unit 38 controls the virtual IC storage area server device 13 accordingly. A memory access request is transmitted to the unit 53 (step ST201). Then, when permitting access from the IC 21 to the memory 52, the control unit 53 transmits a memory access permission notification to the control unit 38 of the portable communication function unit 20 (step ST202), and performs control in accordance therewith. The unit 38 transmits a memory access permission notification to the control unit 48 of the IC 21 (step ST203).

When receiving the memory access permission notification in step ST203, the control unit 48 of the IC 21 performs a memory access operation on the control unit 38 of the portable communication function unit 20 (step ST204). 38 is the control unit 53 of the virtual IC storage area server device 13
Performs a memory access operation (step ST20).
5). The control unit 53 accesses the memory 52 according to the memory access operation received from the control unit 38. Then, the control unit 53 of the virtual IC storage area server device 13
When the memory access is completed, a memory access acknowledgment is output to the control unit 38 of the mobile communication function unit 20 (step ST206), and the control unit 38 outputs a memory access acknowledgment to the control unit 48 of the IC 21 (step ST207).

The application program that defines the processing of the IC 21 is stored in the memory 37 of the portable communication function unit 20.
In the case where it is stored in the IC, as shown in FIG.
21 is a control unit 48 of the IC 21, an I / F unit 45,
The memory 37 via the _I / F unit 36 and the control unit 38
Access to. In this case, the control unit 48
7 may be executed, or the control unit 38 may execute the application program. In this case, the control unit 48
May pass the access right to the application program stored in the memory 37 to the control unit 38, or may access the application program while mutually transmitting and receiving commands between the control unit 48 and the control unit 38. Is also good. Thus, the portable communication function unit 20 and the IC
According to 21, the I / F unit 45 and the IC_I / F unit 36
The communication between each other becomes possible by providing.

Hereinafter, an operation example of the communication system 1 shown in FIG. 1 will be described. [First Operation Example] Hereinafter, the virtual IC storage area server device 1
Operation of the communication system 1 in the case where processing relating to a service using the IC 21 is performed using the application program stored in the application 3 and the service used by the user A is explicitly selected by the user A An example will be described.

FIG. 13 is a flowchart for explaining this. Hereinafter, each step shown in FIG. 13 will be described. Step ST1: The user A performs the mobile phone device 1 shown in FIG.
The operation unit 35 of the portable communication function unit 20 of FIG. 4 is operated, and in response to the operation, the control unit 38 shown in FIG. It is transmitted to the area server device 13.

Step ST2: Upon receiving the virtual storage area use request in step ST1, the virtual IC storage area server device 13 shown in FIG.
The SAM 51 generates an authentication request and transmits this to the mobile communication function unit 20.

Step ST3: When the portable communication function unit 20 shown in FIG. 8 receives the authentication request in step ST2, the control unit 38 generates an authentication request and sends the authentication request to the IC 21 via the IC_I / F unit 36. Send. I shown in FIG.
C21 sends an authentication request from the mobile communication function unit 20 to the I / O
It is received by the F unit 45.

Step ST4: Control section 48 of IC 21
Performs mutual authentication with the virtual IC storage area server device 13 via the mobile communication function unit 20 in response to the authentication request received in step ST3.

Step ST5: When mutual validity is verified by mutual authentication in step ST4, the control unit 53 of the virtual IC storage area server device 13 causes the display unit 34 of the portable communication function unit 20 to display the portable telephone device 14 Of the virtual storage area (contents of the service) corresponding to.

Step ST6: The user A performs step S
The service to be used is selected by operating the operation unit 35 based on the contents of the virtual storage area displayed at T5. As a result, the control unit 38 of the mobile communication function unit 20 generates an application selection instruction to instruct to select an application program corresponding to the selected service, and transmits this to the virtual IC storage area server device 13.

Step ST7: Portable communication function unit 2
The 0 control unit 38 generates a virtual storage area use instruction, and transmits this to the IC 21 via the IC_I / F unit 36.
The IC 21 shown in FIG. 9 receives the virtual storage area use instruction from the portable communication function unit 20 at the I / F unit 45.

Step ST8: The user A positions the portable telephone device 14 at a position where the IC 21 and the IC_R / W device 11 can communicate wirelessly.

Step ST9: In response to the application selection instruction in step ST6 and the virtual storage area use instruction in step ST7, the IC 21 and the portable communication function unit 2 are operated.
0, the IC_R / W device 11 and the virtual IC storage area server device 13 perform mutual authentication.

Step ST10: When mutual validity is verified by the mutual authentication in step ST9, the virtual I shown in FIG.
The control unit 53 of the C storage area server device 13 executes step S
The application program specified by the application selection instruction received at T6 is read from the memory 52 and started to be executed.

Step ST11: The virtual IC storage area server device 13 executing the application program,
The IC_R / W device 11 performs processing related to the service in cooperation with each other while performing communication via the portable communication function unit 20 and the IC 21.

Step ST12: When the processing of step ST11 ends, the virtual IC storage area server device 13
The use history of the virtual IC storage area server device 13 and the use history of the service are displayed on the display unit 34 of the mobile communication function unit 20.

[Second Operation Example] Hereinafter, a case will be described in which processing relating to a service using the IC 21 is performed using an application program stored in the virtual IC storage area server device 13, and the IC_R / W device 11 An operation example of the communication system 1 when automatically instructing the virtual IC storage area server device 13 to select a service will be described. FIG.
FIG. 4 is a flowchart for explaining the operation example.

Step ST31: The user A makes the IC 21
The mobile phone device 14 is located at a position where the mobile phone device and the IC_R / W device 11 can perform wireless communication.

Step ST32: IC_R / W device 11
Transmits to the IC 21 an application selection instruction for specifying an application program corresponding to a service performed using the IC_R / W device 11. The IC 21 illustrated in FIG. 9 receives an application selection instruction from the IC_R / W device 11 via the antenna 49 illustrated in FIG.

Step ST33: The control unit 48 of the IC 21 shown in FIG. 9 searches whether or not the application program specified by the application selection instruction received in step ST32 is stored in the memory 46. Then, when determining that the application program is stored in the memory 46, the control unit 48 proceeds to the process of step ST34, and otherwise, proceeds to the process of step ST36.

Step ST34: If it is determined in step ST33 that the application program is stored in the memory 46, the IC 21 and the IC_R / W device 1
1 performs mutual authentication.

Step ST35: When mutual validity is verified by the mutual authentication in step ST34, the control unit 48 of the IC 21 shown in FIG. This allows
While the IC 21 and the IC_R / W device 11 communicate with each other, the IC 21 and the IC_R / W device 11 cooperate to execute a process related to the service.

Step ST36: If it is determined in step ST33 that the application program is not stored in the memory 46, the IC 21 notifies the IC_R / W device 11 of no application via the antenna 49.

Step ST37: Also, the control unit 48 of the IC 21 generates a virtual storage area use request and sends it to the I / F.
The data is transmitted to the mobile communication function unit 20 via the unit 45.

Step ST38: The portable communication function unit 20 shown in FIG.
It is received by the C_I / F unit 36 and transmitted from the antenna 41 to the virtual IC storage area server device 13.

Step ST39: When the virtual IC storage area server device 13 shown in FIG. 3 receives the virtual storage area use request in step ST38, the SAM 51 generates an authentication request based on the control of the control unit 53, and The data is transmitted to the mobile communication function unit 20.

Step ST40: When the portable communication function unit 20 shown in FIG. 8 receives the authentication request in step ST39, the control unit 38 generates an authentication request and the IC_I / F unit 3
The authentication request is transmitted to the IC 21 via the IC card 6. The IC 21 shown in FIG. 9 receives the authentication request from the mobile communication function unit 20 at the I / F unit 45.

Step ST41: control section 48 of IC 21
Performs mutual authentication with the virtual IC storage area server device 13 via the mobile communication function unit 20 in response to the authentication request received in step ST40.

Step ST42: When mutual validity is verified by the mutual authentication in step ST41, the control unit 53 of the virtual IC storage area server device 13 generates a virtual storage area use instruction, and transmits this to the portable communication function unit. 20.

Step ST43: When receiving the virtual storage area use instruction in step ST42, the control section 38 of the portable communication function section 20 transmits this to the IC 21 via the IC_I / F section 36. The IC 21 shown in FIG. 9 sends a virtual storage area use instruction from the portable communication function unit 20 to the I / F
It is received by the unit 45.

Step ST44: IC_R / W device 11
Transmits an application selection instruction for specifying an application program corresponding to a service performed using the IC_R / W device 11 to the virtual IC storage area server device 13 via the IC 21 and the portable communication function unit 20.

Step ST45: Via the IC 21 and the portable communication function unit 20, the IC_R / W device 11 and the virtual I
The C storage area server device 13 performs mutual authentication.

Step ST46: When mutual validity is verified by the mutual authentication in step ST9, the virtual I shown in FIG.
The control unit 53 of the C storage area server device 13 executes step S
The application program specified by the application selection instruction received at T44 is read from the memory 52 and started to be executed.

Step ST47: The virtual IC storage area server device 13 executing the application program,
The IC_R / W device 11 performs processing related to the service in cooperation with each other while performing communication via the portable communication function unit 20 and the IC 21.

Step ST48: When the processing of step ST47 ends, the virtual IC storage area server device 13
The use history of the virtual IC storage area server device 13 and the use history of the service are displayed on the display unit 34 of the mobile communication function unit 20.

[Third Operation Example] Hereinafter, the virtual I shown in FIG.
An operation example of the communication system 1 when registering (securing) the IC virtual storage area 60a used by the IC 21 of the mobile phone device 14 in the storage area of the memory 52 of the C storage area server device 13 will be described. FIG. 15 is a flowchart for explaining the operation example. Step ST51: The user A operates the operation unit 35 of the mobile communication function unit 20 of the mobile phone device 14 shown in FIG. 8, and the control unit 38 shown in FIG. 8 generates a virtual storage area registration request in response to the operation. , This is the virtual IC storage area server device 1
Send to 3.

Step ST52: The control unit 53 of the virtual IC storage area server device 13 shown in FIG.
In response to the virtual storage area registration request received in 1, a registration form (registration screen) is displayed on the display unit 34 of the mobile communication function unit 20 shown in FIG.

Step ST53: The user A enters the display unit 3
According to the registration form of 4, the user inputs necessary information for the registration, such as his / her name, address, and e-mail address.
The input information is transmitted to the virtual IC via the antenna 41.
It is transmitted to the storage area server device 13.

Step ST 54: The control unit 53 of the virtual IC storage area server device 13 issues an ID and a one-time password to the portable telephone device 14 and transmits them to the portable communication function unit 20.

Step ST55: The virtual IC storage area The control unit 53 of the server device 13 stores, for example, the IC virtual storage area 60a shown in FIG. Temporarily.

Step ST56 The portable communication function unit 20 receives the I
The IC virtual storage area 60a is accessed using D and the one-time password.

Step ST57: Portable communication function unit 20
Make a password change. The changed password is managed by the control unit 53.

Step ST 58: In the virtual IC storage area server device 13 shown in FIG. 3, the SAM 51 generates an authentication request under the control of the control unit 53, and transmits this to the portable communication function unit 20.

Step ST59: When the portable communication function unit 20 shown in FIG. 8 receives the authentication request in step ST58, the control unit 38 generates an authentication request and the IC_I / F unit 3
The authentication request is transmitted to the IC 21 via the IC card 6. The IC 21 shown in FIG. 9 receives the authentication request from the mobile communication function unit 20 at the I / F unit 45.

Step ST60: Control section 48 of IC 21
Performs mutual authentication with the virtual IC storage area server device 13 via the mobile communication function unit 20 in response to the authentication request received in step ST59.

Step ST61: When mutual validity is verified in the mutual authentication in step ST60, the SAM 51 of the virtual IC storage area server device 13 receives the ID (individual data) of the IC 21 from the IC 21.

Step ST62: The SAM 51 of the virtual IC storage area server device 13 checks the ID of the IC 21 received in step ST61 and the ID issued in step ST54.
And the password received in step ST57 in FIG.
Is registered in association with the IC virtual storage area 60a shown in FIG.

Step ST63: The virtual IC storage area server device 13 notifies the portable communication function section 20 that the IC virtual storage area 60a has been allocated to the portable telephone device 14.

[Fourth Operation Example] Hereinafter, in the case where the application program 65a is registered in the IC virtual storage area 60a allocated to the portable telephone device 14 in the above-described third operation example according to the operation of the user A. An operation example will be described. FIG. 16 is a flowchart for explaining the operation example. Step ST71: The user A operates the operation unit 35 of the mobile communication function unit 20 of the mobile phone device 14 shown in FIG. 8, and in response to the operation, the control unit 38 shown in FIG. 8 generates an application registration request. To the virtual IC storage area server device 13.

Step ST72: When the virtual IC storage area server device 13 shown in FIG. 3 receives the application registration request in step ST71, the SAM 51 generates an authentication request based on the control of the control unit 53, and transmits this to the mobile communication. Transmit to the function unit 20.

Step ST73: When the portable communication function unit 20 shown in FIG. 8 receives the authentication request in step ST72, the control unit 38 generates an authentication request and the IC_I / F unit 3
The authentication request is transmitted to the IC 21 via the IC card 6. The IC 21 shown in FIG. 9 receives the authentication request from the mobile communication function unit 20 at the I / F unit 45.

Step ST74: Control unit 48 of IC 21
Performs mutual authentication with the virtual IC storage area server device 13 via the mobile communication function unit 20 in response to the authentication request received in step ST73.

Step ST75: When mutual validity is verified in the mutual authentication in step ST74, the control unit 53 of the virtual IC storage area server device 13 notifies the portable communication function unit 20 that preparation for application registration has been completed. Notice.

Step ST76: Portable communication function unit 20
Generates a relay instruction based on the notification in step ST75, and transmits this to the IC 21 via the IC_I / F unit 36. The IC 21 shown in FIG. 9 receives the relay instruction from the mobile communication function unit 20 at the I / F unit 45.

Step ST77: The user A enters the IC 21
The mobile phone device 14 is located at a position where the mobile phone device and the IC_R / W device 11 can perform wireless communication.

Step ST78: Via the IC 21 and the portable communication function unit 20, the IC_R / W device 11 and the virtual I
The C storage area server device 13 performs mutual authentication.

Step ST79: When mutual validity is verified by the mutual authentication in step ST78, the virtual IC storage area server device 13 and the IC_R / W device 11 communicate with each other via the portable communication function unit 20 and the IC 21. While performing, in cooperation with each other, the application program 65
The registration processing of a is performed. Specifically, IC_R / W device 1
1 sends the application program 65a to the virtual IC storage area server device 13, and writes the application program 65a to the memory 52 of the virtual IC storage area server device 13.

Step ST80: When the process of step ST79 is completed, the IC_R / W device 11 notifies the portable communication function unit 20 via the IC 21 that the application program registration process has been completed.

Step ST81: When the process of step ST79 ends, the virtual IC storage area server device 13
The portable communication function unit 20 is notified that the registration processing of the application program has been completed. Thereby, the portable communication function unit 20 ends the application program registration processing.

[Fifth Operation Example] Hereinafter, the IC_R / W device 11 automatically registers the application program 65a in the IC virtual storage area 60a allocated to the portable telephone device 14 in the above-described third operation example. An operation example in such a case will be described. FIG. 17 is a flowchart for explaining the operation example. Step ST91: The user A visits the store 30 and receives an IC
The mobile phone device 14 is located at a position where the _R / W device 11 and the IC 21 can perform wireless communication.

Step ST92: IC_R / W device 11
And the IC 21 perform mutual authentication.

Step ST93: When mutual validity is authenticated by the mutual authentication in step ST92, an application registration request is transmitted from the IC_R / W device 11 to the IC 21. The application registration request is received via the antenna 49 of the IC 21 shown in FIG.

Step ST94: The IC 21 transmits the application registration request received in step ST93 to the portable communication function unit 20 via the I / F unit 45 shown in FIG.

Steps ST95 to ST105: The processing of steps ST95 to ST105 shown in FIG. 17 is the same as the processing of steps ST71 to ST81 shown in FIG.

As described above, in the communication system 1, even if the storage capacity of the memory 46 of the IC 21 shown in FIGS. 1 and 9 is limited, application programs related to services performed using the IC 21 are stored in the virtual IC storage. By storing and executing the area server device 13, various services can be provided even using the IC 21 having a relatively small memory. In this case, there is no need to download the application program from the virtual IC storage area server device 13 to the IC 21. That is, I
C21 can use the virtual IC storage area server device 13 on the network 18 as a virtual memory, and
1, a plurality of services provided by using a plurality of application programs can be provided. Further, according to the communication system 1, mutual authentication between the IC 21 and the virtual IC storage area server device 13 and the IC_R / W device 1
After performing mutual authentication between the virtual IC storage area server apparatus 13 and the virtual IC storage area server apparatus 13, the virtual IC storage area server apparatus 13 and the IC_R / W apparatus 1 that execute an application program are executed.
In order to execute processing related to the service in cooperation with
So-called spoofing can be prevented.

The effects of the communication system 1 described above are realized by the configuration and operation of the IC 21 built in the portable telephone device 14 described above. Further, according to the IC 21 built in the mobile phone device 14, as shown in FIG.
By providing the I / F unit 45 for communicating with the portable communication function unit 20 in addition to the antenna 49 for communicating with the _R / W device 11, the portable communication function unit 20 and the IC 21 can mutually communicate with each other. It becomes possible to control. So, for example,
Under certain conditions, the mobile communication function unit 20 can disable the function of the IC 21 or the IC 21 can disable the function of the mobile communication function unit 20 to realize various controls from the viewpoint of service contents and security. it can.

Second Embodiment FIG. 18 is an overall configuration diagram of a communication system 101 according to this embodiment. As shown in FIG.
Has a gateway 10, an IC service providing device 112, a virtual IC storage area server device 113, and a mobile phone device 114, for example. Mobile phone device 114 and virtual I
The communication with the C storage area server device 113 is performed via the wireless communication line 17 such as a mobile phone communication network, the gateway 10, and the network 18 such as the Internet.
Also, the gateway 10 and the IC service providing device 112
The virtual IC storage area server device 113 is connected to the network 18. As shown in FIG. 18, the communication system 101 differs from the communication system 1 shown in FIG. 1 in that an IC service providing apparatus 112 is connected to the network 18. In the communication system 101, after the mobile phone device 114 and the IC service providing device 112 communicate with each other, the virtual IC storage area server device 13 that executes the application program and the IC service providing device 12 communicate with each other via the network 18 to communicate with each other. IC in cooperation with
The processing related to 121 is executed. This embodiment is an embodiment corresponding to the third and fourth inventions. The mobile phone device 114 corresponds to the first communication device of the third invention and the communication device of the fourth invention. Further, the virtual IC storage area server device 113 corresponds to the second communication device of the third invention and another communication device (first communication device) of the fourth invention. Further, the IC service providing device 112 corresponds to the third communication device of the third invention and the second communication device of the fourth invention.

Hereinafter, each component shown in FIG. 18 will be described. [IC Service Providing Apparatus 112] FIG. 19 is a functional block diagram of the IC service providing apparatus 112 shown in FIG. As shown in FIG. 19, the IC service providing device 112
Has, for example, an I / F unit 131, an authentication unit 132, and a control unit 133. The I / F unit 131 is connected to the network 18 shown in FIG. 18, and sends and receives requests and data via the network 18. Authentication unit 132
Performs mutual authentication with the virtual IC storage area server device 113. The control unit 133 controls the IC service providing apparatus 11
2 is controlled in a centralized manner.

[Virtual IC Storage Area Server Device 113] The virtual IC storage area server device 113
4 functions as a virtual memory of the IC 121,
And stores the application program related to the service performed using the application program, and executes the application program in response to an instruction from the IC 21. In response to the execution of the application program, the virtual IC storage area server device 113 communicates with the IC service providing device 112 via the network 18 without passing through the mobile phone device 114, and executes services in cooperation with each other. I do.

FIG. 20 is a functional block diagram of the virtual IC storage area server device 113 shown in FIG. As illustrated in FIG. 20, the virtual IC storage area server device 113 includes, for example, a SAM 151, a memory 152, a control unit 153, and an I / F unit 154.

The SAM 151 is a tamper-resistant hardware or software module. SAM1
Reference numeral 51 denotes mutual authentication with the IC 121, mutual authentication with the IC service providing apparatus 112, encryption of an application program registered (written) in the memory 152,
In addition, it decrypts the application program read from the memory 152 and the like.

The memory 152 is used as a virtual memory of the IC 121, and stores an application program related to a service using the IC 121. Memory 152
Has IC virtual storage areas 60 a, 60 b, 60 c,... Allocated in advance to each user (mobile phone device) by a registration process described later, as shown in FIG. 5. For example, the IC virtual storage area 60a is assigned to the user A of the mobile phone device 14, the IC virtual storage area 60b is assigned to the user B, and the IC virtual storage area 60c is assigned to the user C.
Assigned to. Also, the IC virtual storage area 60a
For example, as shown in FIG. 6, application programs 65a, 65b, and 65c registered by an application program registration process described below are stored. Application programs 65a, 65b, 6
5c is a program that defines processing relating to a service provided using the IC 21.

The control section 153 controls the processing of the virtual IC storage area server device 113 as a whole. Control unit 153
Executes the application program read from the memory 152, for example. The control unit 153 manages application programs stored in the memory 152. Specifically, the memory control unit 75 performs, for example, allocation of the IC virtual storage area 60a to the mobile phone device 114, registration of the application programs 65a, 65b, and 65c to the IC virtual storage area 60a.

[Portable Telephone Device 114] As shown in FIG. 18, the portable telephone device 114 has a portable communication function unit 120 and an IC 121. The portable communication function section 120 corresponds to the communication circuit of the present invention, and the IC 121 corresponds to the integrated circuit of the present invention. The portable communication function unit 120 has the same configuration as the portable communication function unit 20 of the first embodiment described with reference to FIG.

The IC 121 has internal processing and data,
And a tamper-resistant integrated circuit capable of monitoring and preventing tampering of data exchanged with the outside, and performing processes related to various predetermined services provided by using the IC service providing apparatus 112. . FIG.
FIG. 9 is a functional block diagram of the IC 121 shown in FIG. As shown in FIG. 21, the IC 121 includes, for example, an I / F unit 145,
It has a memory 146 and a control unit 148. I / F unit 1
45 corresponds to the interface of the present invention,
Corresponds to the control means of the present invention. I / F 145
Is an interface for transmitting and receiving data to and from the portable communication function unit 120 shown in FIG. 18 by a wired method or a wireless method. The memory 146 stores data and programs necessary for the processing of the control unit 148. Note that the memory 1
The application 46 may store an application program used for a part of various services provided by using the IC 21. The control unit 148 controls the IC1
The control unit 21 performs overall control of the processing, transmits and receives commands to and from the control unit 38 shown in FIG. 8, and performs predetermined control in cooperation with each other.

Hereinafter, an operation example of the communication system 101 shown in FIG. 18 will be described. [First Operation Example] Hereinafter, the virtual IC storage area server device 1
Communication system 101 in a case where a process related to a service using the IC 121 is performed using the application program stored in the storage device 13 and a service used by the user A is explicitly selected by the user A
An operation example will be described.

FIG. 22 is a flowchart for explaining this. Hereinafter, each step shown in FIG. 22 will be described. Step ST301: User A operates the operation unit 35 shown in FIG. 8 of the mobile communication function unit 120 of the mobile phone device 114, and in response to the operation, the control unit 38 shown in FIG. And network 1
8 to access the IC service providing apparatus 112.

Step ST302: The user A operates the operation unit 3
5 is operated, and in response to the operation, the control unit 38 transmits to the IC service providing apparatus 112 a use service selection instruction for selecting and using a service to be used.

Step ST303: The control unit 133 of the IC service providing apparatus 112 shown in FIG.
An application selection instruction that specifies an application program corresponding to the use service selection instruction received in 302 is generated and transmitted to the mobile communication function unit 120 of the mobile phone device 114.

Step ST304: Virtual I shown in FIG.
Control unit 153 of C storage area server device 113 generates a virtual storage area use request in response to the application selection instruction received in step ST303, and transmits this request to virtual IC storage area server apparatus 113 via network 18. .

Step ST305: Virtual I shown in FIG.
When the C storage area server device 113 receives the virtual storage area use request in step ST304, the SAM 151 generates an authentication request based on the control of the control unit 153, and transmits this to the portable communication function unit 120.

Step ST306: Portable communication function section 12
When the authentication request is received in step ST305, the control unit 38 generates an authentication request and transmits the authentication request to the IC 121 via the IC_I / F unit 36. The IC 121 shown in FIG. 21 receives an authentication request from the mobile communication function unit 120 at the I / F unit 145.

Step ST307: The control section 148 of the IC 121 performs mutual authentication with the virtual IC storage area server device 113 via the portable communication function section 120 in response to the authentication request received in step ST306.

Step ST308: Step ST307
When mutual validity is verified by the mutual authentication, the control unit 153 of the virtual IC storage area server device 113 causes the display unit 34 of the mobile communication function unit 120 to display the contents of the virtual storage area corresponding to the mobile phone device 114 ( Service contents).

Step ST309: The user A operates the operation unit 35 to select a service to be used based on the contents of the virtual storage area displayed in step ST308. As a result, the control unit 38 of the portable communication function unit 120 generates an application selection instruction for instructing to select an application program corresponding to the selected service, and transmits the application selection instruction to the virtual IC storage area server device 1
13 is transmitted.

Step ST310: Step ST309
In response to the application selection instruction, the IC service providing apparatus 112 and the virtual IC storage area server apparatus 113 perform mutual authentication via the network 18.

Step ST311: Step ST310
When mutual validity is authenticated by the mutual authentication, the control unit 153 of the virtual IC storage area server device 113 shown in FIG.
Reads the application program specified by the application selection instruction received in step ST309 from the memory 152 and starts execution.

Step ST312: Virtual IC storage area server device 113 executing application program
And the IC service providing apparatus 112 are connected to the network 1
8 to perform processing relating to the service while communicating with each other.

Step ST313: Step ST312
Is completed, the IC service providing apparatus 112
The portable communication function unit 120 is notified of the end of the application processing.

Step ST314: Step ST312
Is completed, the virtual IC storage area server device 11
3 is a usage history of the virtual IC storage area server device 113,
In addition, the use history of the service is displayed on the display unit 34 of the mobile communication function unit 120.

[Second Operation Example] Hereinafter, a case will be described in which processing relating to a service using the IC 121 is performed using an application program stored in the virtual IC storage area server device 113. An example of the operation of the communication system 1 when automatically instructing the service provided by itself to the virtual IC storage area server device 113 will be described. FIG. 23 is a flowchart for explaining the operation example.

Step ST320: The user A operates the operation unit 35 shown in FIG. 8 of the portable communication function unit 120 of the portable telephone device 114, and according to the operation, the control unit 3 shown in FIG.
8 accesses the IC service providing apparatus 112 via the wireless communication line 17, the gateway 10, and the network 18.

Step ST321: The user A operates the operation unit 3
5 is operated, and in response to the operation, the control unit 38 transmits to the IC service providing apparatus 112 a use service selection instruction for selecting and using a service to be used.

Step ST322: The control unit 133 of the IC service providing apparatus 112 shown in FIG.
An application selection instruction that specifies an application program corresponding to the use service selection instruction received in 302 is generated and transmitted to the mobile communication function unit 120 of the mobile phone device 114.

Step ST323: Portable communication function unit 12
0 transmits to the IC 121 an instruction to search for an application program indicated by the application selection instruction received in step ST322. The search instruction is received by I / F section 145 shown in FIG.

Step ST324: IC1 shown in FIG.
The control unit 148 of 21 searches whether or not the application program targeted for the search instruction in step ST323 is stored in the memory 146. Then, when determining that the application program is stored in memory 146, control unit 148 proceeds to the process of step ST325, and otherwise, proceeds to the process of step ST328.

Step ST325: Step ST324
When it is determined that the application program is stored in the memory 146, the IC 121 and the IC 121
The C service providing apparatus 112 performs mutual authentication.

Step ST326: Step ST325
Fig. 2
1 executes the application program read from the memory 146, and
And the IC service providing apparatus 112 cooperate with each other to perform processing related to the service.

Step ST327: Step ST326
Is completed, the control unit 133 of the IC service providing apparatus 112 shown in FIG. 19 generates an application end notification and transmits it to the mobile communication function unit 120 of the mobile phone device 114.

Step ST328: Step ST324
When it is determined that the application program is not stored in the memory 146 in the search for
The fourteen mobile communication function units 120 generate a virtual storage area use request and transmit it to the virtual IC storage area server device 113.

Step ST329: Virtual I shown in FIG.
Upon receiving the virtual storage area use request in step ST328, C storage area server device 113 causes SAM 151 to generate an authentication request based on the control of control unit 153, and transmits this to portable communication function unit 120.

Step ST330: Portable communication function section 12
When the authentication request is received in step ST329, the control unit 38 generates an authentication request and transmits the authentication request to the IC 121 via the IC_I / F unit 36. The IC 121 shown in FIG. 21 receives an authentication request from the mobile communication function unit 120 at the I / F unit 145.

Step ST331: The control section 148 of the IC 121 performs mutual authentication with the virtual IC storage area server device 113 via the portable communication function section 120 in response to the authentication request received in step ST330.

Step ST332: Step ST331
When mutual validity is verified by the mutual authentication, the control unit 153 of the virtual IC storage area server device 113 causes the display unit 34 of the mobile communication function unit 120 to display the contents of the virtual storage area corresponding to the mobile phone device 114 ( Service contents).

Step ST333: The user A selects a service to be used by operating the operation unit 35 based on the contents of the virtual storage area displayed in step ST332. As a result, the control unit 38 of the portable communication function unit 120 generates an application selection instruction for instructing to select an application program corresponding to the selected service, and transmits the application selection instruction to the virtual IC storage area server device 1
13 is transmitted.

Step ST334: Step ST333
In response to the application selection instruction, the IC service providing apparatus 112 and the virtual IC storage area server apparatus 113 perform mutual authentication via the network 18.

Step ST335: Step ST334
When mutual validity is authenticated by the mutual authentication, the control unit 153 of the virtual IC storage area server device 113 shown in FIG.
Reads the application program specified by the application selection instruction received in step ST333 from the memory 152 and starts execution.

Step ST336: The IC service providing apparatus 112 and the virtual IC storage area server apparatus 113 communicate with each other according to the execution of the application program, and perform processing related to the service in cooperation with each other.

Step ST337: Step ST336
Is completed, the IC service providing apparatus 112
The portable communication function unit 120 is notified of the end of the application processing.

Step ST338: Step ST336
Is completed, the virtual IC storage area server device 11
3 is a usage history of the virtual IC storage area server device 113,
In addition, the use history of the service is displayed on the display unit 34 of the mobile communication function unit 120.

[Third Operation Example] In the case where the IC virtual storage area 60a used by the IC 121 of the mobile phone 114 is registered (secured) in the storage area of the memory 152 of the virtual IC storage area server 113 shown in FIG. Communication system 10
The operation example 1 is basically the same as the case shown in FIG. 15 except that communication is performed between the IC 121, the portable communication function unit 120, and the virtual IC storage area server device 113.

[Fourth Operation Example] Hereinafter, in the case where the application program 65a is registered in the IC virtual storage area 60a allocated to the portable telephone device 114 in the above-described third operation example, the portable communication function unit 120 An operation example in the case where confirmation of a free area of the virtual storage area 60a is not performed will be described. FIG. 24 is a flowchart for explaining the operation example. Step ST341: User A operates the operation unit 35 shown in FIG. 8 of the mobile communication function unit 120 of the mobile phone device 114, and in response to the operation, the control unit 38 shown in FIG. 8 generates an application program registration request. , This is IC
This is transmitted to the service providing device 112.

Step ST342: Upon receiving the application registration request in step ST341, the IC service providing apparatus 112 displays the registration format of the application program on the display unit 34 of the portable communication function unit 120 shown in FIG.

Step ST343: The user A operates the operation unit 35 shown in FIG. 8 of the portable communication function unit 120 of the portable telephone device 114 to input information necessary for registering an application program. The information is transmitted to the IC service providing apparatus 112.

Step ST344: IC service providing apparatus 112 inquires of portable communication function section 120 about the registration destination of the application program.

Step ST345: Portable communication function section 12
0 designates the registration destination designation indicating the virtual IC storage area server device 113 (the IC virtual storage area 60a as necessary) for registering the application program in response to the inquiry received in step ST344.
12 is transmitted.

Step ST346: Mobile phone 114
The mobile communication function unit 120 generates an application registration request for requesting the virtual IC storage area server device 113 to register an application program, and transmits the application registration request to the virtual IC storage area server device 113.

Step ST347: Virtual I shown in FIG.
Upon receiving the application registration request in step ST346, C storage area server apparatus 113 controls section 153.
SAM 151 generates an authentication request based on the control of
This is transmitted to the portable communication function unit 120.

Step ST348: Portable communication function section 12
When the authentication request is received in step ST347, the control unit 38 generates an authentication request and transmits the authentication request to the IC 121 via the IC_I / F unit 36. The IC 121 shown in FIG. 21 receives an authentication request from the mobile communication function unit 120 at the I / F unit 145.

Step ST349: The control section 148 of the IC 121 performs mutual authentication with the virtual IC storage area server device 113 via the portable communication function section 120 in response to the authentication request received in step ST348.

Step ST350: Step ST349
When mutual validity is verified by the mutual authentication, the control unit 153 of the virtual IC storage area server device 113 notifies the portable communication function unit 12 that preparation for application registration has been completed.
Notify 0.

Step ST351: Portable communication function section 12
0 generates a registration start request for requesting to start registration of an application program based on the notification of step ST350, and transmits this to the IC service providing apparatus 112.

Step ST352: The IC service providing apparatus 112 and the virtual IC storage area server apparatus 113 perform mutual authentication.

Step ST353: Step ST352
When the mutual authenticity is verified by the mutual authentication, the IC service providing apparatus 112 and the virtual IC storage area server apparatus 113
Communicates with the application program 6
The registration processing of 5a is performed. Specifically, the application program 65a is transmitted from the IC service providing apparatus 112 to the virtual IC storage area server
The application program 65a is written to the memory 152 of the storage area server device 113.

Step ST354: Step ST353
Is completed, the IC service providing apparatus 112
The portable communication function unit 120 is notified via the IC 121 that the registration processing of the application program has been completed.

Step ST355: Step ST353
Is completed, the virtual IC storage area server device 11
3 notifies the portable communication function unit 120 that the registration processing of the application program has been completed. Thereby, the mobile communication function unit 120 ends the application program registration processing.

[Fifth Operation Example] Hereinafter, in the case where the application program 65a is registered in the IC virtual storage area 60a allocated to the portable telephone device 114 in the above-described third operation example, the portable communication function unit 120 An operation example in the case of confirming a free area of the virtual storage area 60a will be described. FIG. 25 is a flowchart for explaining the operation example. Steps ST361 to ST3 shown in FIG.
63 represents steps ST341 to ST343 shown in FIG.
This is the same processing as. Step ST3 shown in FIG.
The processing of 68 to ST377 is performed in step ST shown in FIG.
The processing is the same as the processing of 346 to ST355. FIG.
In the process shown in FIG. 5, the IC service providing apparatus 112 sends a registration destination inquiry to the mobile communication function unit 12 together with the memory capacity necessary for storing the application program to be registered.
0 (step ST364). Next, portable communication function section 120 searches whether or not there is a necessary free area in IC virtual storage area 60a of virtual IC storage area server device 113 (step ST365). If there is no free area, portable communication function section 120 notifies IC service providing apparatus 112 that there is no free area (step ST366). On the other hand, if there is an empty area, the mobile communication function unit 120 sends the virtual IC storage area server device 1
13, an application registration request is issued (step ST368), and a registration destination designation indicating the virtual IC storage area server device 113 is transmitted from the portable communication function unit 120 to the IC service providing device 112 (step ST3).
67).

As described above, the communication system 101
Now, the memory 1 of the IC 121 shown in FIGS.
Even if the storage capacity of the storage device 46 is limited, an application program related to a service performed using the IC 121 is stored in the virtual IC storage area
By executing the C storage area server device 113, various services can be provided using the IC 121 having a relatively small memory. Further, in this case, since communication based on the application program is performed between the IC service providing apparatus 112 and the virtual IC storage area server apparatus 113, the application program is downloaded from the virtual IC storage area server apparatus 113 to the IC 121. No need. That is, a single IC 121 can be used to provide a plurality of services performed using a plurality of application programs. Communication system 1
According to No. 01, after performing mutual authentication between the IC 121 and the virtual IC storage area server device 113 and between the IC service providing apparatus 112 and the virtual IC storage area server device 113, the application program is executed. Since the virtual IC storage area server device 113 and the IC service providing device 112 perform processing related to the service in cooperation with each other, so-called spoofing can be prevented.

The effect of the communication system 101 described above is realized by the configuration and operation of the IC 121 built in the portable telephone device 114 described above. According to the IC 121 incorporated in the mobile phone device 114, as shown in FIG. 21, the I / F unit 145 for communicating with the mobile communication function unit 120 is provided, so that the mobile communication function unit 120 and the IC1 are provided.
21 can mutually control the other party. Therefore, for example, under certain conditions, the mobile communication function unit 120 disables the function of the IC 121,
1 can invalidate the function of the mobile communication function unit 120, and various controls can be realized from the viewpoint of service contents and security.

The present invention is not limited to the above embodiment. In the embodiment described above, the mobile phone devices 14 and 114
Of the case where the ICs 21 and 121 are built in
A fixed-line telephone connected by a wire and a portable information terminal as a small information device (Personal Digital Assist)
The present invention is also applicable to a case where the ICs 21 and 121 are incorporated in a device having a function of connecting to a network by any of wired or wireless methods, such as a clock, a computer, and a computer. In addition, IC21, 121
May be built in the communication device in a detachable or non-detachable form, or an external storage medium such as an IC card containing the ICs 21 and 121 or a memory card may be stored in a mobile phone, a portable information terminal, or the like. May be configured to be detachable from a computer or the like.

[0166]

As described above, according to the present invention,
An integrated circuit and a communication device which can provide various services using a single integrated circuit without being limited by the storage capacity of a memory built in the integrated circuit can be provided.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of a communication system according to a first embodiment of the present invention.

FIG. 2 is a diagram for explaining an outline of an operation example of the communication system shown in FIG. 1;

FIG. 3 is a functional block diagram of a virtual IC storage area server device shown in FIG. 1;

FIG. 4 is a functional block diagram of the SAM shown in FIG. 3;

FIG. 5 is a diagram for explaining a storage area of a memory 52 shown in FIG. 3;

FIG. 6 is a diagram for explaining an application program stored in an IC virtual storage area shown in FIG. 5;

FIG. 7 is a functional block diagram of a control unit shown in FIG. 3;

FIG. 8 is a functional block diagram of a portable communication function unit of the portable telephone device shown in FIG. 1;

FIG. 9 is a functional block diagram of an IC of the mobile phone device shown in FIG. 1;

FIG. 10 is a diagram for explaining a case where the IC shown in FIG. 1 uses a memory of a virtual IC storage area server device.

FIG. 11 is a diagram for explaining a control flow in the case shown in FIG. 10;

FIG. 12 is a diagram for explaining a case where the IC shown in FIG. 1 uses a memory of a mobile communication function unit.

13 illustrates a case where a process related to a service using an IC is performed using an application program stored in the virtual IC storage area server device illustrated in FIG. 1; It is a flowchart for demonstrating the operation example of the communication system when the service to be used is explicitly selected.

FIG. 14 is a diagram illustrating a case where a process related to a service using an IC is performed using an application program stored in the virtual IC storage area server device illustrated in FIG. 1, and an IC_R / W device selects the process; 9 is a flowchart illustrating an operation example of a communication system when a service is automatically instructed to a virtual IC storage area server device.

15 is an operation example of a communication system in a case where an IC virtual storage area used by an IC of a mobile phone device is registered (secured) in a storage area of a memory of a virtual IC storage area server device illustrated in FIG. 3; It is a flowchart for explaining.

FIG. 16 is a flowchart for explaining an operation example in the case where an application program is registered in the IC virtual storage area allocated to the mobile phone device in the third operation example in response to the operation of the user A; It is.

FIG. 17 is a diagram showing an example of the IC virtual storage area allocated to the mobile phone device 14 in the third operation example described above.
5 is a flowchart for explaining an operation example when an IC_R / W device automatically registers an application program.

FIG. 18 is an overall configuration diagram of a communication system according to a second embodiment of the present invention.

FIG. 19 is a functional block diagram of the IC service providing apparatus shown in FIG. 18;

FIG. 20 is a functional block diagram of the virtual IC storage area server device shown in FIG. 18;

FIG. 21 is a functional block diagram of the IC shown in FIG. 18;

22 illustrates a case where a process related to a service using an IC is performed using an application program stored in the virtual IC storage area server device illustrated in FIG. 18; It is a flowchart for demonstrating the operation example of the communication system when the service to be used is explicitly selected.

23 illustrates a case where a service relating to a service using an IC is performed using an application program stored in the virtual IC storage area server device illustrated in FIG. 11 is a flowchart illustrating an operation example of a communication system when automatically providing a service to be provided to a virtual IC storage area server device.

FIG. 24 is a diagram illustrating a case where an application program is registered in the IC virtual storage area allocated to the mobile phone device according to the third embodiment, and the mobile communication function unit does not check a free area of the IC virtual storage area; It is a flowchart for demonstrating the operation example in the case.

FIG. 25 is a diagram illustrating a case where an application program is registered in the IC virtual storage area allocated to the mobile phone device in the third operation example, and the mobile communication function unit checks a free area of the IC virtual storage area; It is a flowchart for demonstrating the operation example in the case.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Communication system, 10 ... Gateway, 11 ... IC_
R / W device, 12 IC service providing device, 13 virtual IC storage area server device, 14 mobile phone device, 17
Wireless communication line, 18 network, 20 mobile communication function unit, 21 IC, 31 voice input / output unit, 32 A / D
D / A conversion unit, 33 DSP, display unit, 35
Operation unit, 36: IC_I / F unit, 37: memory, 38:
Control unit, 39: baseband processing unit, 40: radio unit, 4
DESCRIPTION OF SYMBOLS 1 ... Antenna, 45 ... I / F part, 46 ... Memory, 47 ...
Analog section, 48 control section, 49 antenna, 51 S
AM, 52: memory, 53: control unit, 54: I / F unit,
61: authentication unit, 62: encryption / decryption unit, 63: IC control unit, 64: IC-related processing unit, 60a, 60b, 60c ...
IC virtual storage area, 65a, 65b, 65c: application program, 71: portal unit, 72: user I / F unit, 73: AP execution unit, 74: SAM control unit, 7
5: memory control unit, 101: communication system, 112: I
C service providing device, 113: virtual IC storage area server device, 114: portable telephone device, 120: portable communication function unit, 121: IC, 145: I / F unit, 146: memory, 147: analog unit, 148: control Department

Continued on the front page F term (reference) 5B058 CA15 CA23 KA01 KA04 YA20 5K067 BB04 EE02 FF02 5K101 LL00 LL12 MM07 NN05 NN21 NN25 PP03

Claims (20)

[Claims] An integrated circuit provided in a first communication device having a communication circuit, wherein the first interface communicates with a processing device that performs processing related to a predetermined service, and the communication circuit communicates with the communication circuit. A second interface to be performed; and a second communication device is accessed via the second interface and the communication circuit, and the first communication device is connected to the first communication device by using a program or data stored in the second communication device. And a control unit for performing processing while communicating with the processing device via the interface. 2. When the second communication device stores and executes a program that defines processing relating to the service, the control means controls the second communication device with the second communication device.
After performing mutual authentication via the interface and the communication circuit, communication between the second communication device that executes the program and the processing device via the communication circuit is performed by the first interface and the communication device. The integrated circuit according to claim 1, further comprising controlling the second interface to relay. 3. The control means communicates with a second communication device via the second interface and the communication circuit based on an authentication request received from the communication circuit via the second interface. The integrated circuit according to claim 1, wherein the mutual authentication is performed by performing communication. 4. A storage circuit for storing a program related to a service provided by using the integrated circuit, wherein the control means responds to a request received from the processing device via the first interface. Determining whether the program is stored in the storage circuit, and when determining that the program is stored in the storage circuit, executing the program read from the storage circuit, 2. The integrated circuit according to claim 1, wherein the processing related to the service is performed while communicating with the processing device via the first interface in response to the execution of. 5. When the control means determines that the program is not stored in the storage circuit, the control means sends the program to the second communication device via the second interface and the communication circuit. The integrated circuit according to claim 4, wherein the request for using the program is transmitted. 6. The first communication device is a portable communication device, the communication circuit is a wireless communication circuit performing communication using a wireless communication network, and the second communication device is connected to a network. 2. The integrated circuit according to claim 1, wherein the control circuit communicates with the second communication device via the second interface, the communication circuit, the wireless communication network, and the network. 3. 7. The integrated circuit according to claim 1, wherein the integrated circuit is a tamper-resistant circuit. 8. A communication device having a communication circuit and an integrated circuit, wherein the integrated circuit communicates with a processing device that performs a process related to a predetermined service, and a first interface that communicates with the communication circuit. A second interface, accessing another communication device via the second interface and the communication circuit, and using the program or data stored in the other communication device to connect the first interface And a control unit for performing processing while communicating with the processing device via the communication device. 9. The communication circuit has a storage circuit for storing a program or data, and the control means accesses the storage circuit via the second interface, and is stored in the storage circuit. The communication device according to claim 8, wherein the communication device performs processing while communicating with the processing device via the first interface using a program or data stored in the communication device. 10. When the other communication device stores and executes a program that defines processing related to the service, the control unit controls the second interface and the communication with the other communication device. After performing mutual authentication via a circuit, control is performed such that the first interface and the second interface relay communication between the another communication device and the processing device via the communication circuit. The communication device according to claim 8. 11. The communication circuit, further comprising control means for controlling processing of the communication circuit, wherein the control means of the communication circuit and the control means of the integrated circuit are connected via the second interface. The communication device according to claim 8, wherein the communication device performs communication and performs processing in cooperation. 12. An integrated circuit provided in a first communication device having a communication circuit, comprising: an interface for communicating with the communication circuit; and receiving an authentication request from the communication circuit via the interface. An integrated circuit comprising: an interface and control means for performing mutual authentication with a second communication device via the communication circuit. 13. A process related to the service by performing communication between the second communication device and a third communication device performing a process related to a service using the integrated circuit based on a result of the mutual authentication. 13. The integrated circuit according to claim 12, which is used to determine whether to perform. 14. A storage circuit for storing a program relating to a service provided by using the integrated circuit, wherein the control means controls the program corresponding to a request received from the communication circuit via the interface. It is determined whether or not is stored in the storage circuit, and if it is determined that the program is stored in the storage circuit, the program read from the storage circuit is executed, and execution of the program is performed. 14. A process according to the service is performed while communicating with the third communication device via the interface and the communication circuit accordingly.
An integrated circuit according to claim 1. 15. The control means, when judging that the program is not stored in the storage circuit, transmits the second program via the interface and the communication circuit.
The integrated circuit according to claim 14, wherein a request to use the program is transmitted to the communication device. 16. The first communication device is a portable communication device, the communication circuit is a wireless communication circuit for performing communication using a wireless communication network, the second communication device and the third communication device. 14. The communication device according to claim 13, wherein the communication device is connected to a network, and the control unit communicates with the second communication device via the interface, the communication circuit, the wireless communication network, and the network. Integrated circuit. 17. The integrated circuit according to claim 12, which is a tamper-resistant circuit. 18. A communication device having a communication circuit and an integrated circuit, the integrated circuit comprising: an interface for communicating with the communication circuit; and an interface for receiving an authentication request from the communication circuit via the interface. And a control unit for performing mutual authentication with another communication device via the communication circuit. 19. A communication between the first communication device, which is the other communication device, and a second communication device that performs a process related to a service using the integrated circuit, based on a result of the mutual authentication. 19. The communication device according to claim 18, wherein the communication device is used to determine whether to perform a process related to the service. 20. The communication circuit includes a storage circuit for storing a program or data, and the control means accesses the storage circuit via the interface, and stores the program or data stored in the storage circuit. 20. The communication device according to claim 19, wherein the communication device performs processing while communicating with the second communication device via the interface and the communication circuit using data.