JP2004334747A - Portable electronic device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable electronic device capable of preventing re-writing of common data after referring to by operating only one application in the same session and thereby prohibiting a plurality of applications from operating in the same session. <P>SOLUTION: In an IC card (portable electronic device) supporting at least two applications, only the applications corresponding to a command initially input after outputting of initial response data are validated till when the IC card is inactivated. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention outputs, for example, initial response data to the outside when activated by a reset signal input from the outside, and then executes a predetermined process corresponding to the command when a command is input from the outside. More particularly, the present invention relates to a portable electronic device called an IC card which outputs the processing result to the outside, and particularly to a portable electronic device in which at least two or more applications are registered.
[0002]
[Prior art]
Generally, this type of IC card has a writable and rewritable nonvolatile memory and a control element such as a CPU for controlling these, and inputs and outputs data to and from the outside. Institutions, government agencies, medical institutions, the telecommunications industry, etc.), and those that support multiple applications are becoming increasingly used.
[0003]
[Problems to be solved by the invention]
Conventionally, in an IC card supporting a plurality of applications, a plurality of applications can coexist and operate during the same session (between activation and deactivation). Therefore, when accessing data shared by each application, for example, after one application refers to the data, the other application rewrites the data, so that the data is not unified during the session, There is a risk of malfunction.
[0004]
Therefore, the present invention provides a portable device that can operate only one application during the same session, thereby preventing a plurality of applications from operating during the same session and preventing shared data and the like from being rewritten after reference. An object is to provide an electronic device.
[0005]
[Means for Solving the Problems]
The portable electronic device of the present invention outputs the initial response data to the outside when activated, and executes a predetermined process corresponding to the command when a command is input from the outside, and outputs the processing result. In the portable electronic device that outputs to the outside and at least two or more applications are registered, only the application corresponding to the command first input after the output of the initial response data is performed by the portable electronic device. It is characterized in that it has means for making it effective until deactivated.
[0006]
Further, the portable electronic device of the present invention outputs the initial response data to the outside when activated, and executes a predetermined process corresponding to the command when the command is input from the outside to execute the process. In a portable electronic device in which at least two or more applications are registered, when a command is input after the output of the initial response data, an application indicating whether there is an operation application is provided. Flag confirming means for confirming a flag, and as a result of the confirmation by the flag confirming means, when the application flag is in an unset state, it is determined whether or not the input command corresponds to a command of an application registered in advance. Command check means to be checked As a result, when the input command corresponds to a command of an application registered in advance, first processing means for setting the application flag to a set state and executing processing of the corresponding command; When the application flag is in a set state as a result of the confirmation by the means, a command confirmation means for confirming whether or not the input command is registered in the set application, and a result of the confirmation by the command confirmation means And second processing means for executing processing of a corresponding command when the input command is registered in the set application.
[0007]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration example of an IC card system that handles an IC card as a portable electronic device according to the present embodiment. In this IC card system, the IC card 101 is connected to a terminal device 103 such as a personal computer via a card reader / writer 102, and can communicate with a host computer 104 connected to the terminal device 103.
[0008]
FIG. 2 shows an example of the configuration of the IC card 101. A control element 201 such as a CPU as control means for controlling the entire control, a non-volatile data memory 202 as rewritable storage means, and a working device. The communication unit 205 includes a memory 203, a program memory 204, and a communication unit 205 for performing communication with the card reader / writer 102. The communication unit 205 includes one IC chip (or a plurality of IC chips). This IC chip is embedded in an IC card, and in the case of a contact type, is electrically connected to the card reader / writer 102 via a contact portion (communication section 205) on the surface of the IC card.
[0009]
The data memory 202 is used for storing various data, and is composed of a writable and rewritable nonvolatile memory such as an EEPROM.
The working memory 203 is a working memory for temporarily storing processing data and the like when the control element 201 performs processing, and is composed of, for example, a RAM.
The program memory 204 is configured by, for example, a mask ROM, and stores a control program of the control element 201, various application programs, and the like.
The communication unit 205 is for communicating with the card reader / writer 102 as an external device, and is a contact portion provided on the surface of the IC card in the case of a contact type, and includes an antenna in the case of a non-contact type. It is a wireless communication unit.
[0010]
FIG. 3 shows a configuration of the program memory 204. The program memory 204 includes a program area 301 in which a control program of the control element 201 and a plurality of application programs are stored, a command control table (CCT) of a plurality of applications, for example, a command control table 302 of a first application, And the respective areas of the command control table 303 of the second application.
[0011]
FIG. 4 shows a configuration example of the command control tables 302 and 303. In the command control tables 302 and 303, the instruction code (CLA / INS) of the command message and the address (program storage address) of the program area 301 in which the corresponding program is stored are registered. FIG. 4A shows the command control table 302 of the first application, and FIG. 4B shows the command control table 303 of the second application.
[0012]
FIG. 5 shows a configuration of the operation application flag. The operation application flag is provided in the working memory 203. When the operation application is not set, data of all "0" is set as shown in FIG. 5A, and when the operation application is set, information (application name) which can identify the application as shown in FIG. 5B Is set.
[0013]
FIG. 6 shows a configuration example of a command message input to the IC card 101. This command message is composed of, for example, an instruction code (CLA / INS) and parameter data (P1 / P2 / Lc / Data / Le). There are some command messages that do not exist for the Le and Data parts.
[0014]
Next, the operation of the IC card 101 in the above configuration will be described with reference to the flowchart shown in FIG.
When the reset signal (RST signal) from the card reader / writer 102 is turned off (step S1), the control element 201 outputs initial response data (ATR) to the card reader / writer 102 (step S2), and waits for a command reception. The state is reached (step S3).
[0015]
When a command is received from the card reader / writer 102 in the command reception waiting state, the control element 201 checks the operation application flag in the working memory 203 (step S4).
As a result of this confirmation, when the operation application flag is not set, the control element 201 stores the command code (CLA / INS) of the input command in the command control table of each application registered in the program memory 204 in advance. It is checked whether the instruction code is a registered instruction code (CLA / INS) (steps S5 to S7). This check is performed on the command control tables of all the registered applications, in this example, the command control tables 302 and 303.
[0016]
When all the command control tables 302 and 303 are searched and no command is found, that is, the command code (CLA / INS) of the input command is registered in the command control tables 302 and 303 of each application. If the command code does not match the command code (CLA / INS), the control element 201 outputs a status indicating that the command is undefined to the card reader / writer 102 (step S8), and ends the process.
[0017]
When a command is found by searching all the command control tables 302 and 303, that is, the instruction code (CLA / INS) of the input command is registered in the command control tables 302 and 303 of each application. If it matches the instruction code (CLA / INS), the control element 201 sets the operation application flag in the working memory 203 (step S9). In this case, information (application name) that can identify the application in which the command is found is set.
[0018]
Next, the control element 201 executes a process for the input command (step S10). That is, the program stored in the program storage destination address corresponding to the instruction code (CLA / INS) that matches the instruction code (CLA / INS) of the input command in the command control tables 302 and 303 is executed. After executing the command, the control element 201 outputs the status of the command execution result to the card reader / writer 102 (step S11), and returns to the command reception waiting state (step S3).
[0019]
When the command is received again from the card reader / writer 102 in the command reception waiting state, the control element 201 checks the operation application flag in the working memory 203 (step S4). In this case, since the operation application flag is set, the control element 201 checks whether the instruction code (CLA / INS) of the input command is registered in the command control table of the application having the set content. It is checked whether or not it is (step S12).
[0020]
As a result of this check, if a command is found, the control element 201 executes processing for the input command (step S10), and after executing the command, outputs the status of the command execution result to the card reader / writer 102 (step S10). S11), and returns to the command waiting state (step S3).
[0021]
As a result of the check in step S12, if the command is not registered in the command control table of the application having the set content, the control element 201 outputs a status indicating that the command is undefined to the card reader / writer 102 ( Step S13), end the process.
[0022]
As described above, only the application corresponding to the command input first after the output of the initial response data can be made effective until the IC card is deactivated, so that the same session (from activation to deactivation) During the period), only one application operates. As a result, a plurality of applications cannot operate during the same session, and it is possible to prevent shared data and the like from being rewritten after reference.
[0023]
【The invention's effect】
As described above in detail, according to the present invention, only one application operates during the same session, whereby a plurality of applications cannot operate during the same session, and the shared data or the like is rewritten after the reference. It is possible to provide a portable electronic device capable of preventing such a situation.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an IC card system for handling an IC card according to an embodiment of the present invention.
FIG. 2 is a block diagram schematically showing a configuration of an IC card.
FIG. 3 is a schematic diagram schematically showing a configuration of a program memory.
FIG. 4 is a schematic diagram schematically showing a configuration of a command control table of an application.
FIG. 5 is a diagram showing a configuration of an operation application flag.
FIG. 6 is a diagram showing a configuration example of a command message input to an IC card.
FIG. 7 is a flowchart illustrating the operation of the IC card.
[Explanation of symbols]
101: IC card (portable electronic device), 102: card reader / writer, 103: terminal device, 104: host computer, 201: control element, 202: data memory, 203: working memory, 204: program memory, 205: Communication unit, 301: program area, 302: command control table of the first application, 303: command control table of the second application.

Claims (3)

When activated, it outputs initial response data to the outside, and when a command is input from outside, executes a predetermined process corresponding to the command and outputs the processing result to the outside. In a portable electronic device in which one or more applications are registered,
A portable electronic device comprising means for validating only an application corresponding to a command input first after the output of the initial response data until the portable electronic device is deactivated. If the command input after the output of the initial response data does not correspond to all registered applications, the application is not determined until commands corresponding to all registered applications are input. The portable electronic device according to claim 1, wherein: When activated, it outputs initial response data to the outside, and when a command is input from outside, executes a predetermined process corresponding to the command and outputs the processing result to the outside. In a portable electronic device in which one or more applications are registered,
When a command is input after the output of the initial response data, a flag confirmation unit that confirms an application flag indicating whether or not there is an operation application,
As a result of the check by the flag check unit, when the application flag is in an unset state, a command check unit that checks whether the input command corresponds to a command of an application registered in advance,
As a result of the check by the command check means, if the input command corresponds to a command of an application registered in advance, the application flag is set to a set state, and the processing of the corresponding command is executed. Processing means;
As a result of the confirmation by the flag confirmation unit, when the application flag is in a set state, a command confirmation unit that confirms whether the input command is registered in the set application,
If the input command is registered in the set application as a result of the confirmation by the command confirmation unit, a second processing unit that executes processing of the corresponding command;
A portable electronic device comprising:

Images