JP2003076954A - Ic card using a plurality of operating systems, ic card processor and its method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card loaded with a plurality of IC card operating systems (OSs), an IC card processor capable of using the IC card and an IC card processing method. SOLUTION: An OS base part for controlling input/output to/from an external device, a plurality of IC card OSs for allowing the IC card to execute an application program for providing a prescribed function while referring to the OS base part and managing the program and an OS loader for decoding a command inputted from the external device, identifies an IC card OS capable of executing the command and starting the IC card OS are stored in a memory of the IC card. The external device transmits a command including the information of the IC card OS to the IC card, the IC card receives the command under the control of the OS base part and the OS loader decodes the information of the IC card OS included in the command, starts the IC card OS and allow the IC card to execute the command through the IC card OS.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card equipped with a plurality of OSs, an IC card processing apparatus and a processing method using the IC card.

[0002]

2. Description of the Related Art With the progress of integrated circuit technology, CP
An IC card with a built-in U and memory has been put into practical use, and is drawing attention. It is expected to be used in various fields because of its high security and multi-functionality.

The IC chip of a recent IC card generally includes a CPU, a memory, a circuit dedicated to encryption processing, and the like. The memory is typically a read-only memory (ROM), a rewritable non-volatile memory such as an EEPROM or FRAM, and a random memory.
Includes access memory (RAM).

Until now, most of the time, a dedicated machine language program for realizing a specific function was stored in a ROM and stored in an IC card. For example, in ROM, I
The operating system (OS) of the C card, various OS level programs, and application programs for providing services are stored, and the personal data of the user is stored in the EEPROM. Recently, an IC card having a configuration in which an interpreter called a multi-application card OS is resident has appeared. In an IC card equipped with such an interpreter, a program written in a programming language is recorded in a rewritable non-volatile memory, so that after the OS is mounted on the card,
Application programs can be added even after issuing the card, and unnecessary programs can be deleted. MU is a typical multi-application OS
There are LTOS, JavaCard, and Windows for SmartCard. In this type of IC card, an OS kernel is stored in a ROM, and various OS-level programs, application programs for providing services, and user's personal data are often stored in a rewritable nonvolatile memory. OS
The level program may be stored in the ROM.

Until now, due to the processing capacity of the OS and the capacity of the IC card built-in memory, multi-application O
S has only an interpreter corresponding to one type of programming language. Therefore, an IC card equipped with a predetermined multi-application OS can use only an allocation program created in a programming language belonging to the OS. For example, the application installed in the MULTOS IC card is a MEL language (MULTOS Executable Langu
age), JavaCard uses the Java language, and Windows for SmartCard only supports applications written in the Virtual Basic language.

FIG. 1 is a block diagram showing an exemplary configuration of an IC card and an IC card processing device using a multi-application OS. The IC card processing device 1 is
It has an IC card 10, a terminal device 20, for example, a read / write device, and a host computer 30. The terminal device 20 is a terminal device of the host computer 30 that manages the IC card 10, and performs various processes on the IC card 10 based on an instruction from the host computer 30.

As shown in FIG. 1, the IC card 10 has a C
It has a PU 11, an interface (I / F) 12, a cryptographic processor 13, a random access memory (RAM) 14, a read-only memory (ROM) 15, and a rewritable nonvolatile memory EEPROM 16. The function of each component will be described in detail in the following description of the embodiments of the present invention.

The software having the configuration shown in FIG. 2 is mounted on the IC card having such hardware. FIG. 2 shows an IC card of a conventional multi-application OS containing one OS (hereinafter, single OSI
It is a schematic diagram showing an example of a software configuration in a C card).

The core of this hierarchical structure is the kernel section 21 of the OS stored in the ROM 15. OS kernel unit 21
Manages the hardware resources of the IC card and provides an interface for accessing the hardware of the IC card from an upper layer program. Further, the OS kernel unit 21 controls the operation of the upper layer program.

In FIG. 2, a processing module, which is OS level software, is arranged above the OS kernel section 21. The processing module enables various functions of the OS kernel to be conveniently used by upper-layer application programs. These processing modules are EEPROM1
6 or recorded in the ROM 15. Here, E
A description will be given by taking as an example what is recorded in the EPROM 16.

Examples of such a processing module include an interpreter for processing a programming language, a program loader for adding or updating a program, an application programming interface, a cryptographic processing library, and the like. For convenience of explanation, here, various processing modules other than the interpreter are referred to as the module 23.
And The OS kernel 21, interpreter 22, and other various OS level processing modules 23 are combined,
It becomes the OS of the IC card. Various application programs that provide specific services are arranged above the processing module 23. Here, it is assumed that the application 1 and the application 2 are arranged.

FIG. 3 is a flow chart showing a procedure for processing a command received from the outside in the IC card having the software configuration shown in FIG. Here, processing of a command for executing the application 1 in the IC card and a command for downloading the application to the IC card will be described as an example. host·
A command is sent from the computer 30 and the I / F 12
When it receives it, the command is interpreted by the OS and its contents are confirmed (step 31).

If the command is a command for executing the application 1 already existing in the IC card, the file manager processing module uses the address information of the application 1 included in the command and stores it in the EEPROM 16 of the IC card. The application 1 is searched (step 32). If found, application 1 is executed (step 3
3) That is, the application 1 is read into the RAM 14 or directly referred to in the EEPROM 16, and the CPU 11 sequentially executes the procedure described in the application 1.

If the command is a command for downloading the application 2 to the IC card, the OS
The program loader processing module is operated and writes the constituent components of the application 2 transmitted following the load command in the designated area of the EEPROM 16 while performing the authentication processing (step 34).

As a result of the authentication processing, if the command does not belong to the installed OS, the processing of the command is rejected (step 35).

[0016]

As described above, 1
If only one OS is installed on a single IC card,
The use of the IC card is restricted, and
Only applications written in the programming language corresponding to the OS of the card can be used. If you want to use an application created in a programming language that does not support the OS, an OS that can run those applications.
It is necessary to hold a plurality of IC cards equipped with and to use them properly according to need. For example, the applications that can be installed in the MULTOS IC card are Java Card and Windows for Smar.
Since it cannot be used with an IC card equipped with tCard, you will have three types of cards. Furthermore, if a user wants to use a new application, it is necessary to load the application into the IC card under the control of the IC card OS. No, the cardholder cannot install the application in the different language on his or her own IC card. It is expected that IC cards will be rapidly popularized and used for various purposes, and a large number of applications written in different languages will appear. Therefore, a single OS IC card becomes a problem in pursuing convenience.

If multiple OSs can be mounted on one card, an interpreter of different programming languages can be installed on one I
It becomes possible to use many applications created in different programming languages by storing them in a C card with one card. In order to mount a plurality of OSs on a single card, a large capacity memory is required first. Currently, the capacity of the ROM that is often used in IC cards is about 32 to 64 kbytes, and that of the EEPROM is about 16 kbytes, or
The mainstream is about 32 kbytes. On the other hand, the size of the OS kernel is about several kbytes to 20 kbytes, and the size of a typical application is also about several kbytes. Therefore, at the present time, a plurality of O
It is difficult to mount S and a plurality of applications at the same time due to the limited memory capacity. However, as the capacity of the IC card built-in memory evolves, the capacity of the IC card memory will increase in the near future, and it is expected that software of a larger size can be stored in the IC card. For example, a 64 kbyte EEPROM may soon be put into practical use. Therefore, in order to mount a plurality of OSs on a single card, the limitation of memory capacity may not be a problem.

However, when a plurality of OSs are mounted on one IC card, there is a difficulty in programming technology. For example, based on the software of the IC card of the single OS shown in FIG. 3, the structure of the software of the plurality of OSs can be changed to the ROM 15 and the EEPROM 16 of the IC card.
To place and operate it? Further, the IC card, for example, after receiving a command, identifies the OS to be used from a plurality of OSs, smoothly switches the OS, and how to handle the OS to which the application belongs. However, there is a problem such as whether to perform processing such as loading, adding, or executing a desired application program only according to the instruction of the cardholder.

The present invention has been made in view of such problems, and an object of the present invention is to provide a plurality of IC cards O.
IC card with S, I with multiple OSs
An object is to provide an IC card processing device and a processing method using a C card.

[0020]

In order to achieve the above object, an IC card according to the present invention is an IC card having a CPU, a memory, and an interface for inputting / outputting with an external device. Includes at least a basic part (OS basic part) of an operating system that controls input / output with the external device, and an application program that provides a predetermined function of the IC card with reference to the OS basic part. A plurality of IC card OSs to be executed and managed, and an OS loader that decodes a command input from an external device via the interface, identifies an IC card OS capable of executing the command, and activates the IC card OS are stored. A command from an external device is received via the interface under the control of the OS basic unit, and the OS loader receives the command. Decoded, and starts to identify the executable IC card OS of the command, the IC card O
The command is executed by S.

[0021] Preferably, the command input from the external device includes information on the IC card OS capable of executing the command.

In order to achieve the above object, in the IC card processing device according to the present invention, the IC card is a CP.
U, a memory, and an interface for inputting / outputting with an external device, wherein the memory has at least a basic unit (OS basic unit) of an operating system for controlling input / output with the external device, and A plurality of IC card OSs that execute and manage application programs that provide IC card specific functions while referring to the OS basic part
And an OS loader that decodes a command input from an external device through the interface and identifies and activates an IC card OS that can execute the command,
The external device transmits a command including information of the IC card OS to which the external device belongs to, the IC card receives the command via the interface under the control of the OS basic unit, and the OS loader receives the command. The information of the IC card OS included in the command is decoded, the IC card OS is activated, and the command is executed via the IC card OS.

In order to achieve the above object, the IC card processing method according to the present invention comprises a CPU, a memory,
OS having an external device and an interface for input / output,
A method of processing an IC card equipped with a basic unit, a plurality of IC card OSs, and an OS loader, wherein the external device transmits a command including information of an IC card OS to which the external device belongs, to the IC card. The command is received via the interface under the control of the OS basic unit, and the OS loader receives the IC included in the command.
The information of the card OS is decoded, the IC card OS is identified and activated, and the command is executed by the IC card OS.

By providing the OS loader, the OS loader receives a command sent from the external device to the IC card under the control of the OS basic unit, decodes the OS information contained in the command, and uses the IC card OS to be used. Is identified, the OS is switched to that OS, and processing such as application loading and execution can be performed depending on the card OS to be used. Cardholders can use multiple cards
It is possible to conveniently and smoothly select the card OS and load or execute the application without having to be aware of the existence of S or in what programming language the application was written.

[0025]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below with reference to the accompanying drawings. IC Card and IC Card Processing Device The IC card and the IC card processing device according to this embodiment are the IC card 10 and the IC shown in FIG.
It has the same configuration as the card processing device 1, and hereinafter, this embodiment will be described with reference to FIG.

As described above, the IC card processing device 1 has the IC card 10, the terminal device 20, for example, the read / write device, and the host computer 30. The terminal device 20 manages the IC card 10 based on an instruction from the host computer 30 that manages the IC card 10.
Various processing is performed on the. In this embodiment, the IC card 10 is issued and managed by an IC card issuing company, and is installed with a plurality of OSs and respective OS level software, and a plurality of OSs carried by the IC card owner. Is an IC card using. A contact type IC card will be described as an example of the IC card. As shown in FIG. 1, the IC card 10 includes, for example, a CPU 11, an interface (I / F) 12, a cryptographic processor 13, a random access memory (RAM) 14, a read-only memory (ROM) 15, and a rewritable memory. It has a nonvolatile memory EEPROM 16.

The CPU 11 appropriately communicates with the terminal device 20 via the I / F 12 according to an application stored in the EEPROM 16 based on a command from the terminal device 20 or a command set in the IC card in advance. While performing the desired processing, for example,
It authenticates the owner and the IC card, pays the price, and diagnoses the IC card. Data temporarily generated when the CPU 11 performs processing is stored in the RAM 14.

When the IC card 10 is attached to the terminal device 20 via the I / F 12, the power and clock are supplied and signals are transmitted / received to / from the terminal device 20. That is, the I / F 12 outputs the signal received from the terminal device 20 to the CPU 11, and also transmits the signal input from the CPU 11 to the terminal device 20.

The cryptographic processor 13 is a dedicated cryptographic processing circuit. The cryptographic processor 13 generates random numbers and performs cryptographic operations such as RSA.

RAM 14, ROM 15, and EEP
The ROM 16 constitutes the memory system of the IC card 10. Each function will be described with the software configuration of the IC card described below.

A plurality of O's having such hardware
The IC card having S has the software configuration shown in FIG. FIG. 4 is a conceptual diagram showing an example of a software configuration of an IC card of a multi-application OS accommodating a plurality of OSs according to the present invention (hereinafter referred to as a multi-OS IC card).

Similar to the above-mentioned single OS IC card, the kernel part 41 of the OS stored in the ROM 15 is at the core of the software hierarchical structure in the IC card of the multi-OS. The OS kernel unit 41 is designed corresponding to the hardware of the IC card 10 and manages its hardware resources. The OS kernel unit 41 controls the interface (I / F) 12 of the IC card 10 to input / output data to / from an external device. Further, the OS kernel unit 41 provides an interface for accessing the hardware of the IC card from the upper layer program. Based on the above functions, the OS panel 41 controls the operation of each upper layer program. OS stored in ROM15
The kernel part 41 is installed by the IC card manufacturer before the IC card is issued and cannot be rewritten.

In this embodiment, as shown in FIG. 4, the OS loader 42 is provided above the OS kernel 41.
Are arranged in the EEPROM 16. OS loader 42
Under the control of the OS kernel 41, decrypts the content of the command received from the external device via the I / F 12, and identifies and selects the OS to be used by the command or the application added to the command.

On the upper layer of the OS loader 42 are processing module parts of a plurality of OSs mounted on the IC card. This portion is also recorded in the EEPROM 16. Each IC card OS is composed of the OS kernel 41 and a plurality of processing modules of each OS. The processing module of each OS is the OS
The kernel functions are provided so that upper-layer application programs can conveniently use them. In terms of processing speed, capacity, and security, it is desirable to write these OS level software in machine language. Examples of such a processing module include an interpreter for processing a programming language, a command interpreter for processing a command, a program loader for externally adding or updating a program, an application programming interface, a cryptographic processing library, and the like. For convenience of explanation, here, various processing modules other than the interpreter are referred to as 1
Expressed in one module. Further, as an example of the embodiment of the present invention, a case where two OSs (described as OSa and OSb) are mounted will be described as an example. The two OSs have an interpreter a43 and a processing module a44, and an interpreter b45 and a processing module b46, respectively.

The OS loader 42 recognizes the OS to which it belongs from the content of the received command, and the O of the corresponding interpreter or the like.
Starts S-level software and processes commands and applications. By arranging the OS loader 42 and the processing modules 43, 44, 45, 46 of each OS in the rewritable EEPROM 16, it is possible to add or delete the OS. In that case, the contents of the OS loader 42 are appropriately modified. Thus, the newly added OS can be easily identified and selected.

Application programs for providing various services are arranged above the processing modules. As shown in FIG. 4, application 1 (47), application 2 (48), OSb belonging to OSa
The application 3 (49) and the application 4 (50) belonging to the are arranged.

As described above, an interpreter is required to execute the application program written in the programming language. The interpreter sequentially converts the source code of the application program into executable code. If necessary, the necessary processing module is called, the system data of the IC card is used, and the predetermined function of the IC card is realized while accessing the hardware of the IC card. Note that there are some applications that operate in the machine language of the CPU of the IC chip and are not programming language applications. In that case, it is not necessary to operate the interpreter.

There are various application programs depending on the service provided by the IC card, and such application programs are usually installed in the IC card before issuing the card. In an IC card that uses a multi-application OS,
Even after issuing the IC card, the program can be added and updated.

Next, the configuration of the OS loader 42 is shown in FIGS.
Will be described with reference to. The OS loader 42 is a program that can be executed at the OS kernel level. For example, as shown in FIG. 5, it is arranged at the head of the EEPROM 16. FIG. 5 shows an IC using a plurality of OSs according to the embodiment of the present invention.
It is a figure which shows an example of arrangement | positioning in EEPROM16 of the OS loader of a card. In FIG. 5, the EEPROM 1
The capacity of 6 is 64 kbytes, and the address on the left side is displayed in hexadecimal notation in units of blocks (1 block = 16 bytes). The size of the OS loader 42 is 1 kbyte or less, all the processing modules of OSa are referred to as OSa system software, all the processing modules of OSb are referred to as OSb system software, and each size is 2 kbytes or less.

The OS loader 42 includes the contents shown in FIG. FIG. 6 is a diagram showing an example of the contents of the OS loader of the IC card using a plurality of OSs according to the embodiment of the present invention. The OS loader 42 has a command decoding unit which is a program for decoding the command received from the I / F 12. The command decoding unit 61 interprets the received command, and the IC card O attached to the command
Identify S information. The information of each OS mounted on the IC card is registered as the OS loader 42 as a constant. In this embodiment, for example, the first OS is the OS
a, recorded location is EEPROM, address is 004
It is registered as 1H. Similarly, the second OS is OSb, and the recorded location is EEPRO.
M and the address are registered as 00C1H.

The OS loader 42 identifies and selects the OS to which the command belongs, based on the OS information included in the received command. FIG. 7 is a diagram showing a format of a command received by an IC card using a plurality of OSs according to the present invention. The command header has a command header including a control code, and the command header includes an IC card OS identifier that is data for identifying an OS that can execute the command, and a command type code that indicates the operation content of the command. There is. According to the type code,
For example, it can be found that an operation such as loading or executing an application is performed. The body of the command has an address of an application or data operated by the command, and if necessary, data to be operated by the command is also added. Under the control of the OS kernel 41, the OS loader 42 receives the command received from the I / F 12, identifies the OS to which the command belongs from the OS identifier in the command header, and boots it. The booted OS obtains the command type by the command interpreter, writes data to the specified address, or executes processing such as executing an application at the specified address. The above is a description of the hardware and software configurations of the IC card 10 in the IC card processing apparatus 1.

When the IC card 10 having such a hardware configuration and software configuration is mounted on the terminal device 20, the IC card 10 is activated by receiving a power supply and a clock signal from the terminal device 20 via the I / F 12. . Then, the IC card 10 performs processing based on the command from the host computer 30 via the terminal device 20. The terminal device 20 is, for example, a terminal device normally used in a store or the like, and is connected to a host computer 30 of an IC card manufacturing company or a service providing company via a communication line, and the host computer 30. Transfers communication data between the IC card 10 and the IC card 10 attached.

The IC card 10 is loaded into the terminal device 20 and activated, and then the authentication process of the IC card itself, that is, the process of determining whether or not the IC card 10 can be processed by the IC card processing device 1 is performed. After that, it is checked whether the owner is a legitimate owner. When the IC card 10 is certified, the IC card 10 can communicate with the host computer 30 via the terminal device 20. While the host computer 30 and the IC card 10 sequentially perform communication, the instruction to the IC card 10 transmitted from the host computer 30 is executed.

Processing of IC Card of Multi-OS Using the IC card processing apparatus 1 described above, a process of processing the IC card 10 of multi-OS having the above hardware and software configuration will be described with reference to FIG. . FIG. 8 shows that the IC card 10 using a plurality of OSs according to the embodiment of the present invention is an IC to be used by the OS loader.
6 is a flowchart showing a process of identifying, selecting, and activating a card OS. When the IC card 10 is attached to the terminal device 20, the IC card 10 is activated (step S
81). That is, the OS kernel 41 is read into the RAM 14 (or directly referred to in the ROM 15), and data input / output with the host computer 30 via the terminal device 20, authentication processing of the IC card 10, encryption processing, etc. Control movements. The OS loader 42 is also the RAM 14
Is read into the RAM 14 and is made resident in the RAM 14 while the IC card 10 is attached to the terminal device 20. Each time the IC card 10 receives a command from the host computer 30 via the terminal device 20, the OS loader 42 performs the identification process of the OS to be used by the command.

Next, authentication processing is performed between the IC card 10 and the terminal device 20 under the control of the OS kernel 41 (step S82). For example, if the IC card owner inputs the password and is found to be a legitimate owner and the IC card is an IC card that can be processed by the processing apparatus 1, the owner of the host computer 30 desires. Wait for specification of processing to be performed.

Next, when the owner of the IC card 10 inputs from the terminal device 20 and specifies that an operation for the service provided by the host computer 30 is performed (for example, download, execution, etc.), the host computer 30 performs the operation. To send to the IC card, the terminal device 2
The IC card 10 receives the command via 0 (step S83).

When the IC card 10 receives the command, the OS kernel 41 calls the OS loader 42, and the OS
The loader 42 interprets the command (step S
84) That is, the OS identifier in the command header is read to identify the OS to which the command belongs.

Next, I registered in the OS loader 42
The OS corresponding to the OS identifier is searched from the list of OSs mounted on the C card 10, and the storage location and detailed address of the OS are specified (step S85).

Next, the necessary system software of the OS stored in the specified location is read into the RAM 14 (or directly executed in the EEPROM 16),
A processing module such as an interpreter of the OS is operated (step S86).

The control of the command processing shifts to the booted OS, and the subsequent processing is controlled by the OS (step S
87). The OS continues to decode the command by the command interpreter, determines the command type from the command type code, obtains the address for operating the command,
If necessary, write data is also obtained. A specific example of command processing by the IC card OS will be described with reference to FIGS. 9 and 10. After the processing of the command by the IC card OS is completed, the software of the OS is withdrawn from the RAM 14 and the control returns to the OS kernel 41 to wait for the reception of the next command (step S88). The above is the multi-O by the OS loader 42 in the IC card processing device 1.
It is a description of a process of identifying, selecting, and starting the OS of the IC card 10 of S.

The conventional single OS IC shown in FIG.
In order to compare the processing flow of load and execution commands in the card, the multi-OS IC card 1 described above
The processing for commands in which 0 is the same is shown in FIGS. 9 and 10. FIG. 9 is a flowchart of the processing of the IC card when a command for loading an application is received using the multi-OS IC card according to the present invention.

When a command is sent from the host computer 30 under the control of the OS kernel 41, the OS loader 4
2 interprets the command, and identifies the OS to be used by the command from the OS identifier in the command head (step 91).

When the OS is OSa, the system software of OSa is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command is processed under the control of OSa (step 92).

The OSa decodes the command by the command interpreter and discriminates the command type from the command type code (step 93). The command is IC
When it is confirmed that the command is to download the application 1 to the card 10, the program loader of OSa is activated, and the EEP is performed while authenticating the constituent components of the application 1 transmitted following the load command.
Writing to the designated area of the ROM 16 (step 9
4).

When the OS is OSb, the system software of OSb is read into the RAM 14 (or executed directly in the EEPROM 16), and thereafter, the command processing is performed under the control of OSb (step 95).

The OSb decodes the command by the command interpreter and discriminates the command type from the command type code (step 96). The command is IC
When it is confirmed that the command is to download the application 3 to the card 10, the program loader of OSb is operated, and the EEP is performed while authenticating the constituent components of the application 3 transmitted following the load command.
Writing to the designated area of the ROM 16 (step 9
7). O after writing the application program
Sa or OSb is retired from RAM 14 and OS
The processing of a or OSb ends.

FIG. 10 shows the I of the multi-OS according to the present invention.
13 is a flowchart of processing of an IC card when a command to execute an application is received using the C card.

When a command is sent from the host computer 30 under the control of the OS kernel 41, the OS loader 4
2 interprets the command, and identifies the OS to be used by the command from the OS identifier at the head of the command (step 101).

When the OS is OSa, the system software of OSa is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command processing is performed under the control of OSa (step 102).

The OSa decodes the command by the command interpreter and discriminates the command type from the command type code (step 103). The command is IC
When it is confirmed that the command is to execute the application 2 existing in the card 10, the address where the application 2 is recorded is obtained from the command content. continue,
IC card 10 by the file manager of OSa
The application 2 is searched in the EEPROM 16 (step 104). Once found, application 2
Is executed (step 105). That is, the application 2 is loaded into the RAM 14 (or the EEPROM is
16), and the CPU 11 sequentially executes the procedure described in the application 2.

When the OS is OSb, the system software of OSb is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command processing is performed under the control of OSb (step 106).

The OSb decodes the command by the command interpreter and discriminates the command type from the command type code (step 107). When it is confirmed that the command is a command for executing the application 4 already existing in the IC card 10, the address at which the application 4 is recorded is obtained from the content of the command. Then, the file manager of the OSb searches the EEPROM 16 of the IC card 10 for the application 4 (step 108). If found, the application 4 is executed (step 109). That is, the application 4 is read into the RAM 14 (or the EEP
The ROM 16 executes the procedure directly, and the CPU 11 sequentially executes the procedure described in the application 4.

After executing the application 2 or the application 4, the OSa or OSb is in the RAM.
14 is removed, and the processing of OSa or OSb ends.

The present invention is not limited to the embodiments described above, and various modifications can be made. In the above-described embodiment, as shown in FIG. 4, the OS loader 42 and the processing modules 43, 44, 45, 4 of each OS.
6 is stored in the EEPROM 16, these programs or a part thereof may be stored in the ROM. In that case, the contents of the OS and the OS loader 42 mounted on the IC card are decided in advance, and the ROM is issued before the IC card issuance.
Once installed, the OS installed cannot be modified.
In the above method, the case where two OSs are mounted has been described as an example, but it is obvious that two or more OSs can be mounted in the present invention.

Further, in the present embodiment, the present invention has been described by exemplifying the contact type IC card. However, a terminal may not be provided as the interface (I / F) 12, and a non-contact type IC card configured to be electromagnetically connected to an external device using a coil may be used.

[0066]

According to the present invention, a plurality of OSs can be mounted on one IC card, the application of the IC card can be greatly expanded, and the convenience of using the IC card is excellent. By providing the OS loader, the OS to which the command belongs is identified and selected each time the command is received.
Since the application is processed under the control of the OS to which the command belongs, the owner of the IC card can use the IC card without having to be aware of the OS to be used within the range of the OS mounted on the card. It is a versatile and convenient multi-application IC card that can process multiple languages on one OS. In addition, since the OS loader and the processing module of the OS are recorded in the rewritable EEPROM and the OS loader can be modified, a new OS can be added, and an unnecessary OS can be deleted. The IC card has excellent flexibility in use.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an IC card processing device according to the present invention.

FIG. 2 is a conceptual diagram showing a software configuration of a conventional IC card.

FIG. 3 is a flowchart showing a process of processing a command using the conventional IC card having the software configuration shown in FIG.

FIG. 4 is a conceptual diagram showing a software configuration of an IC card using a plurality of OSs according to the present invention.

FIG. 5 shows an OS loader of an IC card using a plurality of OSs according to the present invention and system software of each OS is EEPR.
It is a figure which shows arrangement | positioning in OM.

FIG. 6 is a diagram showing a schematic content of an OS loader of an IC card using a plurality of OSs according to the present invention.

FIG. 7 is a schematic diagram showing a format of a command received by an IC card using a plurality of OSs according to the present invention.

FIG. 8 is a flowchart showing the steps of identifying, selecting, and activating the IC card OS by the OS loader of the IC card using a plurality of OSs according to the present invention.

FIG. 9 is a flowchart showing a process of loading an application program on an IC card in the IC card using a plurality of OSs according to the present invention.

FIG. 10 is a flowchart showing a process of executing an application already existing in the IC card in the IC card using a plurality of OSs according to the present invention.

[Explanation of symbols]

1 ... IC card processing device 10 ... IC card 11 ... CPU 12 ... Interface (I / F) 13 ... Cryptographic processor 14 ... RAM 15 ... ROM 16 ... Rewritable non-volatile memory (EEPROM) 20 ... Terminal device 21 ... OS kernel 22 ... Interpreter 23 ... Processing module 24 ... Application 1 25 ... Application 2 30 ... Host computer 41 ... OS kernel 42 ... OS loader 43 ... Interpreter a 44 ... Processing module a 45 ... Interpreter b 46 ... Processing module b 47 ... Application 1 48 ... Application 2 49 ... Application 3 50 ... Application 4

Claims (4)

[Claims] 1. An IC card having a CPU, a memory, and an interface for inputting / outputting with an external device, wherein the memory has at least a basic operating system for controlling input / output with the external device. Section (OS basic section), a plurality of IC card OSs that execute and manage application programs that provide predetermined functions of the IC card with reference to the OS basic section, and input from an external device via the interface And an OS loader that decodes the executed command and identifies and activates the IC card OS that can execute the command, and receives a command from an external device via the interface under the control of the OS basic unit. Then, the OS loader decodes the command, and the IC that can execute the command
An IC card that identifies and activates the card OS and causes the IC card OS to execute the command. 2. The IC card according to claim 1, wherein the command input from the external device includes information on an IC card OS capable of executing the command. 3. An I having an external device for processing an IC card and an IC card for inputting / outputting data to / from the external device.
A C card processing device, wherein the IC card has a CPU, a memory, and an interface for inputting / outputting with an external device, and the memory has at least an operating system for controlling input / output with the external device. Basic part of system (OS
With reference to the OS basic part, a plurality of IC card OSs for executing and managing an application program that provides a predetermined function of the IC card, and a command input from an external device via the interface. An OS loader that decodes and identifies and starts an IC card OS capable of executing the command is stored. The external device transmits a command including information of the IC card OS to which the external device belongs to the IC card, and the IC card The command is received via the interface under the control of the OS basic unit, the OS loader decodes the information of the IC card OS included in the command, activates the IC card OS, and An IC card processing device that executes the command via the card OS. 4. An OS basic unit and a plurality of ICs having a CPU, a memory, and an interface for inputting / outputting with an external device.
A method of processing an IC card equipped with a card OS and an OS loader, wherein the external device transmits a command including information of an IC card OS to which the external device belongs to the IC card, and the IC card controls the OS basic unit. Upon receiving the command via the interface below, the OS loader decodes the information of the IC card OS contained in the command, identifies and activates the IC card OS,
An IC card processing method for causing the C card OS to execute the command.