JP2003288214A - Information processing apparatus and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing apparatus capable of using limited resources effectively. <P>SOLUTION: The information processing apparatus includes a communications interface 11 which receives the input of an initializing command consisting of machine language codes transferred from a host device, and a central processing unit 12 which performs the process of initializing circuits within the apparatus according to the initializing command transferred from the host device via the communications interface. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing device such as an IC card.

[0002]

2. Description of the Related Art As a conventional technique of the present invention, Japanese Patent Laid-Open No. 2000
-148942 gazette (publication date: 2000 (200
0) May 30).

This publication discloses a plurality of types of application programs described in an interpreter type language, and an IC card 1 incorporating an interpreter (program) for executing these application programs.

According to the present invention, by incorporating an interpreter, there is an advantage that it is possible to execute a plurality of types of application programs described in an interpreter type language.

However, generally, in a small information processing device such as an IC card, it is desirable that resources such as a memory are extremely small and redundant data is not stored inside as much as possible.

That is, in an information processing device such as an IC card having limited resources, it is important to effectively use these resources.

[0007]

In the conventional small-sized information processing apparatus, it is important to effectively utilize limited resources.

An object of the present invention is to provide an information processing device which can effectively utilize limited resources.

[0009]

In order to solve the above-mentioned problems, an information processing apparatus of the present invention comprises a communication interface for receiving an input of an initialization command composed of a machine language code transferred from a memory and a host device, and the communication. And a central processing unit for performing initialization processing on the memory by being directly controlled by the host apparatus based on the initialization command transferred from the host apparatus via an interface. To do.

In order to solve the above-mentioned problems, an information processing method of the present invention is an information processing method in an information processing apparatus having a memory in which initial setting data is stored, in which a machine language code transferred from a host device is used. And a communication step of receiving an input of an initialization command, and the initialization is performed on the memory by being directly controlled by the host device based on the initialization command transferred from the host device via the communication interface. It is characterized by including an initial setting step for performing processing.

[0011]

DETAILED DESCRIPTION OF THE INVENTION An embodiment of the present invention will be described with reference to FIGS.

FIG. 1 shows an IC which is an information processing apparatus of the present invention.
It is a block diagram of the system to which the card 1 is applied.

The IC card 1 is a card reader / writer 2
Data communication processing can be performed by either contact / non-contact method.

The terminal device 3 is connected to a host computer (not shown) which is a host device.

The card reader / writer 2 is connected to the terminal device 3 via a bus, and the terminal device 3 is capable of communicating data with the IC card 1 via the card reader / writer 2 and supplied from the host computer. The initial setting command enables the initial setting process for the data in the IC card 1.

The host computer, the terminal device 3, the card reader / writer 2, and the IC card 1 are in a host-slave relationship.

Further, the terminal device 3 is a key input device 4 used as a peripheral device when a user inputs a command,
A printer 5 for printing data processed by the terminal device 3,
Similarly, a CR that visualizes the data processed by the terminal device 3.
A T (Cathode Ray Tube) display 6 is connected.

Next, the circuit block of the IC card 1 will be described with reference to FIG.

FIG. 2 is a circuit block diagram of the IC card 1.

The communication interface 11 is an interface for communicating data with the card reader / writer 2 using a predetermined communication protocol.

The communication interface 11 has a CP
U (Central Processing Unit) 12
Connected with.

The CPU 12 has a data memory 13 for temporarily storing commands for controlling the IC card 1, a working memory 14 for temporarily storing commands read from the data memory 13, and is executed in the IC card 1. The program memory 15 stores an application program.

According to the present invention, the IC card 1 is set by the initial setting command described in the machine language code which can be executed by the terminal device 3 as the host for the IC card 1 without the CPU 12 compiling. It is intended to set the initial stage to be usable, for example, issue processing / initial failure analysis processing.

Next, the operation of the present invention will be described with reference to FIGS.

FIG. 3 is a flow chart showing the operation of the information processing apparatus of the present invention.

FIG. 4 is a format diagram of an example of commands used in the present invention.

FIG. 5 is a diagram showing a memory map of the data memory 13.

As shown in FIG. 4, the terminal device 3 is an IC
A part transmitted to the card 1 is encrypted.

The command format 20 includes a command header 21 from the beginning, followed by an encrypted machine code 22 and a MAC 23 (Message Authentication Code) 2.
It consists of three.

The flowchart of FIG. 3 comprises a total of 7 steps, steps S2 to S7.

Step S1 is the starting step of this flowchart.

Step S2 is a command receiving step. The command is transferred from the terminal device 3 to the CPU 12 via the card reader / writer 2 and the communication interface 11.

In the command transferred from the terminal device 3, the data part is an ISO 78 called secure messaging.
Encryption is performed by a method according to the regulations of 164-4.

The step S3 is the format 20 of FIG.
This is a step for authenticating whether or not the command is transmitted from the legitimate terminal device 3 based on whether the MAC 23 shown in FIG.

Since the command is encrypted by the secure messaging as described above, the command is authenticated according to this method.

In this step, the correctness of the MAC 23 is judged using the data stored in the data memory 13.

Here, FIG. 5 is used to explain the contents of the data stored in the data memory 13.

The memory map 30 shown in FIG.
A system area 31 for storing system data as management information for managing the entire card, and an encryption key 3 for decrypting the encrypted machine language data 22 subsequently to the system area 31.
2 is stored in the storage area, the MAC key 33 is stored in the storage area, and the data 34 is stored in the storage area.

Whether the MAC 23 is correct or not is determined by calculating the MAC value using the MAC key 33, the data 34, and the initial value as parameters, and comparing the result with the MAC 23 of FIG.

MAC obtained by calculation with the value of MAC23
If it matches the value of M, the M transmitted with the command
AC23 is determined to be a regular MAC.

If the MAC 23 is correct, it means that the command has been transmitted from the authorized terminal device.

In this step, when the CPU 12 determines that the command is not a regular command (YE
S), the process proceeds to step S4, and if it is not determined that the command is a regular command (NO), the process proceeds to step S6.

In step S4, the encrypted machine language data 22
Is a step of decoding by the CPU 12.

At this time, the CPU 12 according to the decryption program for deciphering and decrypting the encryption from the application programs and the encryption key 32 stored in the data memory 13 according to the encrypted machine language data 2
Decrypt 2. After the process of step S4 is completed, the process proceeds to step S5.

In step S5, the initial setting command is executed according to the decrypted machine language data.

The initial setting command is an initial defect analysis command in the IC card 1, a issuing command for enabling the IC card 1, and the like, and is an APDU (Application Protocol).
Data Unit) The one defined in the protocol is used.

These initial setting commands are for the IC card 1
Is a command that is executed only once in the initial stage of distributing.

The initial failure analysis command is a command for analyzing a failure such as physical destruction of the IC card 1, for example, destruction of a storage element constituting a memory due to static electricity. Device 3
To the terminal device which is the host device.
It is determined whether or not the C card 1 can be used.

Of course, when the terminal device determines that the IC card 1 cannot be used, it is discarded.

The issuing command is a command for performing the above-mentioned issuing process. Specifically, a key for controlling the access right to the internal information of the IC card 1 is set.

When a key is set for the IC card 1, a comparison is made with a key obtained from a host computer (not shown) via the terminal device 3, and if this is not authenticated, the information in the IC card 1 is added to the terminal device 3. Can not access.

When the IC card 1 itself is physically destroyed or the expiration date set by a provider such as a credit company or a bank is reached, the information of the IC card 1 itself is invalidated and the life cycle ends. The initialization command is never used again for the same card.

When the command is normally executed in this way, the process proceeds to the next step S6. Step S
Reference numeral 6 denotes a step of executing a normal end process, which performs a process of notifying the terminal device 3 that all commands and the process have been completed normally.

If the process of step S6 is completed normally, the process proceeds to the end step of step S8.

In step S3, the MAC 23
If the MAC 23 is not judged to be correct (NO) after authenticating whether or not the command is transmitted from the legitimate terminal device 3 from the right or wrong of (NO), the process proceeds to step S7.

A step S7 notifies the terminal device 3 of error information indicating that the MAC 23 is incorrect. The terminal device 3 uses the CRT display 6 based on this error information.
An error message indicating that access to the terminal device 3 is prohibited is displayed above.

After the processing of step S7 ends, the processing shifts to the ending processing of step S8.

As described above, in the present invention,
In the life cycle of the IC card, an initialization command that is executed only once is described in a machine language code that can be executed by the CPU 12 without performing special processing such as compilation, and initialization is performed.

Therefore, these initial setting commands are
Since the memory capacity used for this command can be saved more than when it is stored in the memory which is a resource in the card, the resources such as the data memory in the IC card can be effectively used by the amount of the memory capacity.

Further, according to the present invention, it is possible to carry out the initial setting in the card of high security specification which is provided so that the data recorded inside is not altered.

[0061]

According to the present invention, it is possible to provide an information processing apparatus capable of effectively utilizing limited resources.

[Brief description of drawings]

FIG. 1 is a block diagram of a system to which an information processing apparatus of the present invention is applied.

FIG. 2 is a circuit block diagram of the IC card 1.

FIG. 3 is a flowchart showing the operation of the information processing apparatus of the present invention.

FIG. 4 is a format diagram of an example of a command used in the present invention.

FIG. 5 is a diagram showing mapping of the data memory 13.

[Explanation of symbols]

1 ... IC card 2 ... Card reader / writer 3 ... Terminal device 11 ... Communication interface 12 ... CPU 13 ... Data memory 14 ... Working memory 15 ... Program memory 21 ... Command header 22 ... Encrypted machine language data 23 ... MAC

Claims (7)

[Claims] 1. A communication interface for receiving an input of an initialization command consisting of a memory and a machine language code transferred from a host device, and based on the initialization command transferred from the host device via the communication interface, An information processing apparatus comprising a central processing unit for performing initial setting processing on the memory by being directly controlled by a host apparatus. 2. The machine language code is encrypted and input to the communication interface, and the decryption means is provided to authenticate and decrypt the machine interface code, and the central processing unit uses the decrypted machine language code.
The information processing apparatus according to claim 1, wherein initial failure setting processing of a circuit in the apparatus is performed. 3. A communication interface that receives a command consisting of a machine language code transferred from a host device, and is directly controlled by the host device based on the command transferred from the host device via the communication interface. An information processing device, comprising: a central processing unit that performs an initial failure analysis process of a circuit in the device. 4. The machine language code is encrypted and input to the communication interface, and the decryption means is provided for authenticating and decrypting the communication interface. The central processing unit uses the decrypted machine language code,
The information processing apparatus according to claim 1, wherein initial failure analysis processing of a circuit in the apparatus is performed. 5. A communication interface for receiving a command consisting of a machine language code transferred from a host device, a memory for storing data, and a command transferred from the host device via the communication interface, An information processing apparatus comprising a central processing unit for issuing key information for restricting an access right to data in the memory by being directly controlled by the host apparatus. 6. The machine language code is encrypted and is input to the communication interface. The decryption means is provided for authenticating and decrypting the machine interface code, and the central processing unit is based on the decrypted machine language code. 2. The information processing apparatus according to claim 1, wherein key information for restricting an access right to the data in the memory is issued. 7. An information processing method in an information processing apparatus having a memory for storing initial setting data, comprising a communication step of receiving an input of an initial setting command composed of a machine language code transferred from a host apparatus, An initial setting step of performing an initial setting process on the memory by being directly controlled by the host device based on the initial setting command transferred from the host device via a communication interface. Information processing method.