JP2003323598A - Ic card having updating function - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card eliminating the need for a complicated process in an external terminal and capable of easily updating an application in a state maintaining securing. <P>SOLUTION: The IC card is provided with a rewritable nonvolatile memory and an IC chip with a CPU, and it is used by loading an application in the nonvolatile memory. An updated application 12 is written with respect to a loaded application 11 before updating, authentication of updating is carried out between the applications before and after updating, access to a data area of the application before updating by the updated application is permitted under the condition where the authentication of updating has been carried out properly, and information of the application before updating other than the data area is deleted. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention is an IC capable of updating an application without causing a security problem.
Regarding cards.

[0002]

2. Description of the Related Art In an IC card that loads and executes an application having a program and data in the card,
Various functions such as electronic money, credit, and points can be realized as a multi-application IC card by loading a plurality of applications. With such an IC card, it is possible to load a new application in order to change or expand the function of the application once loaded in the card.

[0003]

However, when a new application is loaded, the data of the application used so far cannot be used. Therefore, it is possible to take over the data of the application you want to update by reading it with an external terminal (reader / writer), setting it in a new application, and then writing it in the IC card. There was a security issue to get to.

[0004]

SUMMARY OF THE INVENTION The present invention is intended to solve the above problems and provides an IC card which does not require complicated processing in an external terminal and can easily update an application while maintaining security. The purpose is to do. Therefore, the present invention is an IC card that includes a rewritable non-volatile memory and an IC chip with a CPU and uses an application loaded in the non-volatile memory. And a means for authenticating the update between the pre-update application and the post-update application, and permitting the post-update application to access the data area of the pre-update application, provided that the update authentication is established. , And control means for deleting information other than the data area of the pre-update application. Further, the present invention is characterized in that the control means deletes the written application after the update, provided that the authentication of the update by the authentication means is not established. Further, the present invention is characterized in that the authentication means authenticates the update by utilizing the code information of the pre-update application.

[0005]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is an explanatory diagram when an application is added to the IC card, and FIG. 2 is an explanatory diagram for updating the application in the IC card. In this embodiment, a rewritable nonvolatile memory, an IC with a CPU
The target is an IC card equipped with a chip (not shown).

In FIG. 1, the memory 10 in the IC card is shown.
Indicates a non-volatile memory area, and the CPU can read / write information in this area. Reference numeral 11 denotes an application 1 that has already been loaded and should be updated, and has a code section 11a in which a program is described and a data section 11b containing secret information and the like. Reference numeral 12 denotes a new version of the application 2 additionally written to update the function of the application 1, and the code part 12a,
It has a data section 12b. Here, if the added application 2 can freely access the data part of the application 1, it becomes possible to illegally rewrite the data or take out the data to the outside of the card, which is a security problem.

Therefore, in this embodiment, when updating an application, as shown in FIG. 2A, the application 1 and the added application 2 are added.
Authenticate updates with and. In this process, for example, in the control program (OS) in the IC card, the authentication code obtained by calculating the hash value from the data of the code part of the application 1 and the authentication code of the application 2 are compared to determine whether they match. Whether the authentication is established or not is determined by. When the authentication is established, the OS gives the application 2 an access right to the data section 11b of the application 1. As a result, the application 2 can access the data section 11b and the data section 12b.

If the application 2 can access the data part of the application 1, code information (program) other than the data part of the application 1 is not required. Therefore, as shown in FIG. 1
Delete 1a. The data section 11b and the data section 12b are used as the data section of the application 2.

If the update authentication is unsuccessful, it means that an unauthorized application 2 has been written, so the OS deletes the application 2 from the card.

FIG. 3 is a diagram for explaining the update processing flow of the present invention. First, the updated application is written (step S1), and update authentication is performed between the pre-update application and the post-update application (step S).
2). Next, it is determined whether or not the authentication is established (step S3), and when the authentication is established, the application after update is permitted to access the data area of the application before update (step S4), and the data area other than the data area of the application before update is obtained. The information is deleted (step S5). If the authentication is not established in step S3, the written application after the update is deleted (step S
6).

[0011]

As described above, according to the present invention, a new IC card can be handed over without reading the data from the application used so far to the outside of the IC card, which causes a security problem. In addition, since the external terminal does not need to perform processing such as setting data for a new application on the external terminal side, the application can be easily updated while maintaining security.

[Brief description of drawings]

FIG. 1 is an explanatory diagram when an application is added to an IC card.

FIG. 2 is an explanatory diagram for updating an application in an IC card.

FIG. 3 is a diagram illustrating an update processing flow.

[Explanation of symbols]

10 ... Memory in IC card, 11 ... Application before update, 12 ... Application after update.

Claims (3)

[Claims] 1. An IC card having a rewritable non-volatile memory and an IC chip with a CPU, wherein an application is loaded into a non-volatile memory for use, and an application after update is loaded with respect to an application before update. Writing means, authentication means for authenticating the update between the pre-update application and the post-update application, and access to the data area of the pre-update application by the post-update application, provided that the update authentication is established, An IC card having an update function, comprising: a control unit that deletes information other than the data area of the pre-update application. 2. The control means deletes the written post-update application on condition that the authentication of the update by the authentication means is not established.
The listed IC card. 3. The IC card according to claim 1, wherein the authentication unit authenticates the update by using code information of the application before update.