JP2004164261A - Ic card and command processing method in the ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce the number of times for command issuing, and to reduce processing time in an IC card which successively executes a plurality of applications. <P>SOLUTION: The IC card is characterized by being provided with a multicast command storing a processing command, a management table managing an application which can be executed by the IC card, a control shifting means which sequentially selects a plurality of applications which execute the processing command and shifts the control of the execution of the processing command to the application, a response-retaining area, which temporally retains each execution result data of the plurality of applications, and a response transmitting means which transmits the execution result data retained, in the response retaining area to a terminal device; and a command processing method which enables one processing command to be executed in the plurality of applications, based on the multicast command. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an IC card capable of executing a plurality of application programs (hereinafter, simply referred to as applications), and more particularly, to a method of processing commands in a plurality of applications executed continuously.
[0002]
[Prior art]
Conventionally, an IC card such as JavaCard (registered trademark) or Multitos that can execute a plurality of application programs has an AID of 5 to 16 provided by a registration system in accordance with ISO7816-4 so that there is no duplication in Japan and the world. An application is uniquely specified by attaching a unique identifier of a byte, an application is selected by the AID, and then a subsequent process is instructed.
[0003]
For example, in order to perform credit payment processing and point addition processing, first, a terminal device transmits a command “SELECT FILE xxxx” (xxxx is AID indicating a credit application) to an IC card, and the IC card When an application is selected and then an authentication command or a payment command is transmitted from the terminal device to the IC card, the IC card moves the execution control of those commands to the selected credit application.
[0004]
In ISO7816-4, the command execution control moves to the selected application. Therefore, in order to perform the point addition processing following the credit payment processing, a new point application is selected again, and the point addition is performed. Commands must be sent from the terminal to the card.
[0005]
In other words, even if the same command is to be processed by a plurality of applications consecutively, if the application is different, each time the application selection command must be transmitted and the execution control must be transferred to the selected application. Must.
[0006]
In the near future, an IC card will be connected to a network, particularly the Internet, through various devices such as a mobile phone, a personal digital assistant (PDA), and an information home appliance, and will be a standard protocol of the Internet, TCP. / IP (for details of the protocol, see Non-Patent Document 1), communication is expected to be performed. In addition to the conventional technology, the IC card responds to the request of the terminal device and is mounted on the IC card. The application starts to connect to the Internet.
[0007]
However, since the lower layer (ISO7816-3) of the ISO standard used for the IC card is a half-duplex communication protocol, it is not assumed that transmission is started from the IC card side. It is a mechanism that always receives a command from the terminal device side and returns a processing result inside the IC card to the terminal device.
[0008]
When transmitting from the IC card to the network, first, the terminal device periodically inquires of the IC card whether or not to transmit (whether or not to communicate with the network) (polling), and the IC card responds accordingly. A method of starting communication has been proposed for IETF (Internet Engineering Task Force) (for example, see Non-Patent Document 2).
[0009]
[Non-patent document 1]
Postel, J.M. , "Transmission Control Protocol", RFC 793, September 1981 [Non-Patent Document 2]
Mobile-Mind, Inc., “IP and ARP over ISO 7816”, [online], January 2001, [searched on October 12, 2002], Internet <URL: http: // www. scdk. com / draft-guttery-ip7816-01. txt>
[0010]
However, in the polling method, for example, in the case of an IC card capable of executing ten applications, it is necessary to issue a polling to each application, and therefore, a selection command is issued ten times to process the polling command. In addition, the polling command needs to be transmitted ten times, which causes a problem that communication cost and processing time are required.
[0011]
[Problems to be solved by the invention]
The present invention has been made in view of the above problems, and has as its object to reduce the number of command issuances and the processing time in an IC card capable of continuously executing a plurality of applications.
[0012]
[Means for Solving the Problems]
In order to achieve the above object, a first aspect of the present invention receives a processing command from a terminal device, executes the processing command in an application program, and transmits execution result data of the processing command to the terminal device. In the IC card, a multicast command for storing processing commands executed by a plurality of application programs, a management table for managing application programs executable by the IC card, and a plurality of application programs for executing the processing commands are sequentially selected. A control moving means for sequentially designating the plurality of selected application programs and transferring control of the execution of the processing command to the application program; A response holding area for temporarily holding result data, and a response sending unit for sending to the terminal device execution result data to be held in the response holding area after all of the execution of the processing commands by the plurality of application programs are completed. It is provided.
[0013]
According to a second aspect of the present invention, in the IC card according to the first aspect described above, the control transfer means uses a class byte in the multicast command and command identification information called an instruction type to execute a plurality of application programs. This is to distinguish a multicast command to be executed from a normal command to be executed in a specific application program.
[0014]
According to a third aspect of the present invention, in the IC card according to the first or second aspect described above, the management table is provided with application identification information capable of uniquely specifying an application program, and the control moving means is configured to perform the predetermined operation. According to the rules, the application identification information sequentially selects a plurality of application programs that match the specification information specifying the application program stored in the multicast command, and sequentially shifts the control of the processing command execution. is there.
[0015]
According to a fourth aspect of the present invention, there is provided a command processing method in an IC card for receiving a processing command from a terminal device, executing the processing command in an application program, and transmitting execution result data of the processing command to the terminal device. Storing an application program executable in the IC card in a management table; transmitting, by the terminal device, a multicast command storing processing commands to be executed by the plurality of application programs to the IC card; Sequentially selecting a plurality of application programs to be continuously executed based on the application command, and transferring control of the processing command execution to the selected application program; Ram temporarily holds execution result data in a response holding area, and after the execution of all processing commands by the plurality of application programs is completed, execution result data held in the response holding area to the terminal device. And a transmitting step.
[0016]
According to a fifth aspect of the present invention, in the command method for an IC card according to the fourth aspect, the processing command is a processing command for confirming whether there is a communication start request for a plurality of application programs. According to the processing command, each application program performs a step of temporarily storing the presence or absence of a communication start request in the response storage area.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, the present invention will be described based on an illustrated embodiment. FIG. 1 is a schematic configuration diagram of the inside of an IC card according to the present invention. The IC card 1 includes an I / O control unit 2, a CPU 3, a storage unit 4, a program storage unit 5, and a work memory 6.
[0018]
The I / O control unit 2 is an interface for the IC card 1 to communicate with the IC card reader / writer 7.
[0019]
The CPU 3 executes various applications recorded in the program storage unit 5. When executing the application, the storage unit 4 and the working memory 6 are used as needed.
[0020]
The storage means 4 is an EEPROM (Electrically Erasable Programmable Read-Only Memory) which is actually a nonvolatile memory, and is used to store and hold various data. The storage unit 4 has an area for storing the application management table 8 in a part thereof.
[0021]
The management table 8 is used by an OS or a card manager (a kind of application for selecting, installing, deleting, and managing memory of an application, which may be incorporated in a part of the OS) for managing the application. The AID for each application is stored.
[0022]
The program storage unit 5 stores an OS and an application main body corresponding to an AID executable by the CPU 3. There is a ROM (Read Only Memory) that records an application in advance when an OS or a card is manufactured, or an EEPROM that can load and use an application.
[0023]
The program storage unit 5 stores the control moving unit 9 and the response transmitting unit 10. The control moving unit 9 and the response transmitting unit 10 are a part of the OS or the card manager, or an application that cooperates closely with the OS or the card manager.
[0024]
The control moving means 9 sequentially selects a plurality of applications that execute the same command received from the terminal device, and moves the execution control of the command to the application.
[0025]
In the plurality of applications, the order in which the applications are selected and the execution control is moved may be the order of storage in the management table 8, the order of a table for setting a priority order separately prepared, or the order of the currently selected application. The highest priority may be given.
[0026]
Each application temporarily stores the result of executing the command in the response holding area. The response transmitting unit 10 transmits the execution result held in the response holding area to the terminal device after the execution of the same command by all of the plurality of applications is completed.
[0027]
Here, a command executed by the IC card 1 and a response to the command will be described.
[0028]
FIG. 2 shows the structure of an APDU command sent from the terminal device to the IC card 1 specified by ISO7816-4.
[0029]
The CLA at the beginning of the APDU command is called a class byte, and indicates whether or not the content of the command conforms to ISO7816-4. INS indicates a type of command called a command code. And P2 represent parameters given to the command, and Lc represents the length of data.
[0030]
The APDU command can use a plurality of structures in addition to the format shown in FIG. 2, such as omitting Lc and below, and adding or not adding a reply length from the IC card called Le after the data portion. is there.
[0031]
FIG. 3 shows the structure of response data sent from the IC card 1 to the terminal device specified by ISO 7816-4.
[0032]
The response data includes a processing result of the application and a 2-byte status word (SW1, SW2), and is transmitted from the application to the terminal device via the OS.
[0033]
In the present invention, the structure and coding conform to the APDU command of ISO7816-4, but define a multicast command that is semantically expanded such that the command is a command executed by a plurality of applications. FIG. 4 shows the structure of the multicast command.
[0034]
As the multicast command, for example, the CLA stores “0xD0 (0x is a hexadecimal notation; the same applies hereinafter)”, the INS stores “0x00”, and the command to be executed by the application (hereinafter referred to as a processing command) in the data section. Is defined by
[0035]
Furthermore, two types of multicast commands can be defined depending on whether the multicast command uses P1 or P2.
[0036]
For example, by setting the value of P2 to “0x00” and storing the normal APDU command itself in the data part, all the applications stored in the management table 8 execute the APDU command.
[0037]
By omitting header information such as CLA and INS from the APDU command stored in the data part of the multicast command and storing only the data part of the normal APDU command, it is also possible to reduce the traffic.
[0038]
When the length of the AID is stored in P2, that is, when the value of P2 is other than “0x00”, the AID is stored at the beginning of the processing command in the data part of the multicast command, and the AID stored in the management table 8 is All applications that partially match the AID with the length specified by the AID length from the beginning of the processing command execute the processing command.
[0039]
FIG. 5 shows the structure of a response holding area for collectively transmitting the results of execution of processing commands by a plurality of applications using a multicast command.
[0040]
In the response holding area, a set of an AID length, an AID, a processing result of the application, and a SW are set in order to distinguish each application in a response area in ISO7816-4 that stores a command execution result. And sequentially store them. If a distinction can be made for each application, information other than the AID may be used.
[0041]
In the following, a procedure for selecting an application and executing a processing command will be described with reference to the flowchart of FIG. 6, taking as an example a case where the IC card 1 capable of executing a plurality of applications performs payment processing and point addition processing continuously. .
[0042]
FIG. 7 shows an example of the management table 8 that manages a plurality of applications that realize two tasks of credit processing and entry / exit management in the IC card 1.
[0043]
FIG. 7 shows a credit card settlement function (AID is “0x01 02 03 04 05 01”), a point management function (AID is “0x01 02 03 04 05 02”), and an entry / exit management (AID is “0x05 06 07 08 09”). 0A ”) can be executed by the IC card 1.
[0044]
FIG. 7 shows that the payment function of the credit card and the point management function are set to “0x01 02” so as to indicate that a plurality of related applications are continuously executed, such as adding points according to the amount of money paid by the credit card. 03 04
It also shows that the first five digits of the AID "05" are made common.
[0045]
In addition, entry / exit management (AID is “0x05 06 07 08 09 0A”) is one application, but is a function of authentication processing for opening and closing some door gates and a function of storing records of which doors were opened and closed and when. And so on.
[0046]
The IC card 1 receives power supply from the terminal device, activates the OS unit, and waits until an APDU command is received. In the following description, the process in which the APDU command reaches the IC card is a process of a network device such as a terminal device, and thus the description is omitted.
[0047]
When the IC card 1 receives the APDU command, the control moving means 9 determines whether or not the command is a multicast command by referring to the CLA and the INS.
[0048]
When the received APDU command is not a multicast command but a normal APDU command, the control moving means 9 determines whether the INS is a selection command (SELECT FILE: the actual value is “0xA4”).
[0049]
The selection command for selecting the payment function of the credit card includes, as shown in FIG. 8A, a selection command for INS and "0x04 00" for P1 and P2 indicating that an application is to be selected using an AID in the data portion. The AID “0x01 02 03 04 05 01” of the payment function is an APDU command in which the length of the data portion, that is, the length of the AID “6 bytes” is stored in Lc.
[0050]
Next, when INS is a selection command, the control transfer means 9 refers to the management table 8 based on P1, P2, Lc, and AID “0x01 02 03 04 05 01” stored in the data section, Check whether the payment function exists.
[0051]
If the payment function is present in the management table 8, the control moving means 9 selects the payment function, marks it as selected, and then transfers control to the selected payment function.
[0052]
The payment function returns its own processing result (for example, a code indicating “selection OK”) to the OS, and the OS transmits a response of the payment function to the terminal device, and returns to a command reception waiting state.
[0053]
When the received APDU command is the multicast command shown in FIG. 8B, the value of P2 is “0x05”, indicating that the AID is stored at the head of the data portion. , 5 bytes of AID “0x01 02 03 04 05” stored at the head of the data section and the processing command “DEBIT 100yen” are extracted.
[0054]
The control transfer means 9 searches the management table 8 using 5 bytes of “0x01 02 03 04 05”, and first selects a payment function whose first five digits are “0x01 02 03 04 05”, and Then, a processing command “DEBIT 100yen” is passed to the selected payment function, and control is transferred.
[0055]
The payment function performs a payment process of 100 yen according to the received processing command “DEBIT 100yen”, and sets the AID length, the AID, and a code such as “payment completed” (here, Null “0x00”), A set of SWs is stored in the response holding area. The response holding area at this time is shown in FIG.
[0056]
After the settlement function is completed, the control moving means 9 searches the management table 8 again, selects the point management whose first five digits are “0x01 02 03 04 05”, attaches a mark of selection, and The processing command “DEBIT 100yen” is passed to the selected point management, and the control is transferred.
[0057]
In the point management, for example, 10% of the payment amount of 100 yen, that is, 10 points is added by the received processing command “DEBIT 100yen”, and the AID length, the AID, for example, the point balance 10 (“0x0A”), and the SW are added. One set is stored in the response holding area. FIG. 9B shows the response holding area at this time.
[0058]
Further, after the point management is completed, the control moving means 9 searches the management table 8 again to find an application having an AID whose first five digits are “0x01 02 03 04 05”, but the entry / exit management is “0x05 06”. Since it is “07 08 09”, it means that all the applications that execute the processing command “DEBIT 100yen” have ended, so the end of the search is notified to the response transmission unit 10.
[0059]
The response transmitting unit 10 transmits the response holding area in the state of FIG. 9B holding the processing results of the settlement processing and the point management to the terminal device via the OS.
[0060]
Conventionally, by using the multicast command, the control moving means 9 and the response transmitting means 10, four times of “selection of payment function”, “execution of payment function”, “selection of point management”, and “point addition” are conventionally performed. Command processing can be performed by processing two commands, “select an application” and “execute multiple applications sequentially”.
[0061]
Further, as a different embodiment, a log stored in the IC card 1 in a server for entry / exit management after a certain period of time has elapsed after the IC card 1 having the IP address and the TCP / IP communication protocol is mounted. An operation for starting communication for storing the information will be described.
[0062]
As described above, since communication cannot be started from the IC card 1 side, the terminal device performs polling at a fixed interval (for example, a command that sets Lc to “0x00”, stores nothing in the data section, and does nothing). Is performed) to confirm whether the IC card 1 performs communication.
[0063]
The terminal device transmits “0xD0 00 00 00 00 00” storing the CLA and INS indicating the multicast command and the polling command to the IC card 1 in order to perform polling for a plurality of applications at once. I do.
[0064]
The IC card 1 determines that the received selected APDU command is a multicast command, and the value of Lc is “0x00”. Therefore, the control transfer unit 9 determines that the APDU command is a polling command for a plurality of applications. I do.
[0065]
Since P2 is “0x00”, the control transfer unit 9 attempts polling for all applications stored in the management table 8.
[0066]
First, the payment function, which is the first application stored in the management table 8, is selected, marked as selected, and control is transferred to the selected payment function.
[0067]
If the payment function does not need to perform communication, the payment function stores the AID length, its own AID, and, for example, SW1 and SW2, “0x900” in the response holding area, and returns control.
[0068]
After the settlement function returns a response, the control transfer unit 9 selects the point management, which is the next application in the management table 8, attaches the selected mark, and transfers control to the selected point management.
[0069]
If the point management does not need to perform communication, the point management stores the AID length, its own AID, and, for example, SW1 and SW2 in the response holding area in the response holding area, as in the settlement function, and performs control. return.
[0070]
After the point management returns a response, the control moving unit 9 further selects the entry / exit management, which is the next application in the management table 8, attaches the selected mark, and transfers the control to the selected entry / exit management. .
[0071]
The entry / exit management checks the current time, and if a certain time has elapsed since the previous communication, the AID length, its own AID, and, for example, SW1 and SW2 are set to “0x91”.
00 ”is stored in the response holding area, and control is returned.
[0072]
Further, the control transfer means 9 searches the management table 8 again after the entry / exit management returns the control. However, since there is no next application in the management table 8, all the polling applications are terminated. Is notified to the response transmission means 10.
[0073]
The response transmitting unit 10 transmits the response holding area to the terminal device via the OS.
[0074]
The terminal device receives the response, detects that the AID “0x05 06 07 08 09 0A” that has returned “0x91 00” has issued a request to start communication, and issues a command to the entry / exit management of the AID. Is issued, and the subsequent processing can be continued.
[0075]
As described above, the present invention has been described in detail based on the embodiments. However, the IC card and the command processing method in the IC card according to the present invention are not limited to the above-described embodiments, and the gist of the present invention is as follows. Of course, various changes can be made without departing from the scope of the present invention.
[0076]
【The invention's effect】
As described above, according to the IC card and the command processing method in the IC card according to the present invention, a single received command is continuously executed in all applications or some applications that can be executed by the IC card. Therefore, the number of application selections and the number of communication times can be reduced.
[0077]
In addition, by transmitting the command execution results of each application to the terminal device at a time, the number of times of communication and the amount of communication can be reduced.
[0078]
Also, while maintaining compatibility with ISO7816-3, it is possible to confirm whether or not there is a communication start request by polling once with respect to communication start from the IC card side. , It is possible to reduce the number of polls for each application.
[Brief description of the drawings]
FIG. 1 is a schematic structural view of the inside of an IC card of the present invention.
FIG. 2 is an explanatory diagram showing a configuration of an APDU command in ISO7816-4.
FIG. 3 is an explanatory diagram showing a configuration of a response in ISO7816-4.
FIG. 4 is an explanatory diagram showing a configuration of a multicast command of the present invention.
FIG. 5 is an explanatory diagram showing the structure of a response holding area according to the present invention.
FIG. 6 is a flowchart showing a command processing method in the IC card of the present invention.
FIG. 7 is an example of a management table according to the present invention.
FIG. 8 is an example of a multicast command of the present invention.
FIG. 9 is an example of a response holding area according to the present invention.
[Explanation of symbols]
1 IC card 2 I / O control unit 3 CPU
Reference Signs List 4 storage means 5 program storage section 6 working memory 7 IC card reader / writer 8 management table 9 control moving means 10 response transmission means

Claims (5)

An IC card for receiving a processing command from a terminal device, executing the processing command in an application program, and transmitting execution result data of the processing command to the terminal device,
A multicast command for storing processing commands executed by a plurality of application programs;
A management table for managing application programs executable by the IC card;
Control moving means for sequentially selecting a plurality of application programs for executing the processing command, and transferring control of the processing command execution to the application program;
A response holding area for temporarily holding execution result data of each of the plurality of application programs that have executed the processing command,
Response transmission means for transmitting, to the terminal device, execution result data held in the response holding area after all of the execution of the processing commands by the plurality of application programs are completed,
An IC card comprising: The IC card according to claim 1,
The control moving means,
Class bytes in the multicast command, and command identification information called instruction type, to identify a multicast command to be executed in a plurality of application programs and a normal command to be executed in a specific application program,
An IC card, characterized in that: The IC card according to claim 1 or 2,
The management table is
With application identification information that can uniquely identify the application program,
The control moving means,
According to a predetermined rule, the application identification information sequentially selects a plurality of application programs that match the specification information specifying the application program stored in the multicast command, and sequentially shifts control of processing command execution.
An IC card, characterized in that: A method of processing a command in an IC card that receives a processing command from a terminal device, executes the processing command in an application program, and transmits execution result data of the processing command to the terminal device,
Storing an application program executable in the IC card in a management table;
Transmitting a multicast command, which stores processing commands to be executed by a plurality of application programs, to the IC card,
A step of sequentially selecting a plurality of application programs to be continuously executed based on the multicast command, and moving control of the processing command execution to the selected application program;
Each application program that has executed the processing command, temporarily holding the execution result data in the response holding area,
After all of the execution of the processing commands by the plurality of application programs are completed, transmitting execution result data held in the response holding area to the terminal device,
A command processing method in an IC card, comprising: A command processing method for an IC card according to claim 4, wherein
The processing command is:
A processing command for checking whether there is a communication start request for a plurality of application programs,
According to the processing command, each application program temporarily holds the presence or absence of a communication start request in a response holding area,
A command processing method in an IC card, comprising:

Images