JP2006011816A - Memory card, data processing program and data processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a memory card that can write/read data to/from a nonvolatile memory safely without using a dedicated command between an external device and a controller in the memory card. <P>SOLUTION: The memory card 100 comprises the nonvolatile memory 110 and the controller 101. The controller 101 has means for ensuring a memory area for receiving an instruction from an external device 127 in a specific address in the nonvolatile memory 110, and means for storing the specific address in the nonvolatile memory 110, and reads the instruction from the external device stored in the ensured memory area. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a memory card, a data processing program, and a data processing method for executing a program such as an encryption process in response to an instruction from an external device.

  Conventionally, a memory card including a nonvolatile memory and a controller can exchange data with an external device via the controller and store the data in the nonvolatile memory. Further, by providing the controller, the safety of recording / reading data to / from the nonvolatile memory can be improved (for example, Patent Document 1).

  When a command is issued from the external device to the memory card, the driver of the external device has a dedicated file management command for handling the memory card. The driver of the external device uses this dedicated command to instruct the memory card controller. Was sent.

  In Patent Document 1, a dedicated command is provided between an external device and a controller in the memory card even when realizing a memory card capable of recording / reading data to / from a flash memory while enhancing safety.

JP 2003-256282 A

  In the configuration disclosed in Patent Document 1, when the memory card has a new function (program), the driver of the external device needs to have a new dedicated command in order to use the new function. Therefore, every time the function of the memory card changes, the driver of the external device also needs an interface corresponding to the new function.

  Conventionally, with the configuration of a memory card, only a controller and a non-volatile memory can be seen (recognized) from an external device, and an IC card functional unit cannot be seen. Therefore, the command of the external device is only for the controller in the memory card, it does not have a command for the IC card function unit, and the external device cannot send the command to the IC card function unit.

  An object of the present invention is to realize a memory card capable of writing / reading data to / from a nonvolatile memory with improved safety without providing a dedicated command between an external device and a controller in the memory card.

  In order to achieve the above object, a memory card of the present invention includes a nonvolatile memory and a controller, and the controller secures a memory area for receiving an instruction from an external device at a specific address in the nonvolatile memory; Means for storing a specific address in the non-volatile memory, and reads a command stored in the memory area of the reserved specific address every predetermined time.

  In order to achieve the above object, a memory card of the present invention stores a program executed by the memory card and has a non-volatile memory having a command transmission area for transmitting a command received from an external device to execute the program, A controller that reads instructions from the instruction transmission area and executes the program.

  Furthermore, a folder creation means for creating a command transmission folder in the nonvolatile memory, an address storage means for storing the address of the created command transmission folder, and a command from an external device is read from the command transmission folder Read / write means for writing a response to the command.

  In addition, the memory card of the present invention stores a program for encrypting data and encrypted data, and has a non-volatile memory having a command transmission area for transmitting a command received from an external device to execute the program, and command transmission A controller that reads an instruction from the area and encrypts the data, and an IC card functional unit that encrypts and stores a key used for encrypting the data using a storage key according to the instruction from the controller.

  A step of creating a command transmission folder for transmitting a command received from the external device in the memory card in a data processing program for executing the program from the external device to a memory card storing a predetermined program; Writing a command from an external device into the created command transmission folder, reading a command from the external device written in the command transmission folder, and executing the program according to the read command Is provided.

  In a data processing method for connecting a memory card storing a predetermined program to an external device and executing the program, an instruction transmission folder for transmitting a command from the external device to the memory card is created, and the external device transmits the command The command is written in the folder for reading, the memory card reads the command from the external device written in the folder for command transmission, and the memory card executes the program according to the read command.

  According to the present invention, it is possible to safely write / read data to / from the nonvolatile memory using an existing interface without providing a dedicated command between the external device and the memory card.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The data processing method using the memory card according to the present invention will be described by taking the case of e-mail processing as an example.

  FIG. 2 is a diagram showing the configuration of the entire system using electronic mail using the memory card according to the present invention. The memory card 100 is connected to a client terminal 200, and the client terminal 200 is connected to a mail server 210 via a communication network (for example, a telephone network, a dedicated network, the Internet) 220.

  FIG. 1 is a block diagram showing an embodiment of a memory card according to the present invention. The memory card 100 includes a controller 101, a nonvolatile memory 110, and an IC card function unit 114.

  The controller 101 includes an arithmetic processing unit 102, an encryption processing unit A104, an authentication processing unit A105, a buffer RAM 108, a mail key generation unit 109, and an instruction transmission address storage unit 125. The instruction transmission address storage unit 125 stores the address of the instruction transmission folder 124 in the nonvolatile memory 110 that receives an instruction from the external device 127. Furthermore, it has the external connection part 103 connected with the external apparatus 127, the memory connection part 106 connected with the non-volatile memory 110, and the IC card connection part 107 connected with the IC card functional unit 114.

  The non-volatile memory 110 includes a personal authentication program 111, a mailer program 112, mail data 113, and a command transmission folder 124 for receiving commands from the external device 127 using a memory interface.

  The IC card function unit 114 is a unit having an IC card function and has tamper resistance, so that the inside cannot be observed easily. In other words, in the IC card, the secret data stored inside is very difficult to read illegally by various attacks such as current analysis, physical analysis and failure analysis. Yes. In this configuration, highly confidential data is stored, and internal data cannot be accessed unless a specific procedure (verification using an authentication password or key data) is performed.

  The IC card function unit 114 includes an arithmetic processing unit 126, a connection unit 115 connected to the IC card connection unit 107 of the controller 101, an encryption processing unit B116, an authentication processing unit B117, and a storage unit 118. The storage unit 118 is provided with directories 119a to 119d, and a secret key 120, a public key list 121, a storage key list 122, and a mail key list 123 are stored in each directory.

  FIG. 3 is a diagram illustrating an example of the public key list 121 stored in the directory 119b in the storage unit 118 included in the IC card function unit 114. The mail address 300 of the other party as the mail destination and the public key 301 of the other party are stored in association with each other.

  FIG. 4 is a diagram illustrating an example of the storage key list 122 stored in the directory 119c in the storage unit 118 included in the IC card function unit 114. The storage key 401 is used for encrypting and storing a mail key used for encrypting a mail text in the IC card functional unit. A storage key 401 is stored in association with each folder 400 in order to change and manage the contents for each folder for sorting and storing mail. Further, copy control information 402 for restricting reading or rewriting of data stored in the folder in units of folders is stored in association with each folder 400 together with a storage key 401.

  FIG. 5 is a diagram showing an example of the mail key list 123 stored in the directory 119d in the storage unit 118 included in the IC card function unit 114. A mail key 501 used for encrypting the mail text is stored in association with the mail destination and the sender's mail address 500. The mail key 501 is encrypted with the storage key 401 and stored.

  FIG. 6 is a diagram illustrating a specific example of a telegram configuration exchanged between the controller 101 in the memory card and the IC card function unit 114. As shown in FIG. 6, the messages include a mail key delivery message a600 at the time of mail transmission, a mail key delivery response message a603, a mail key delivery message b605 at the time of mail reception, a mail key delivery response message b607, There are a read request message a 609 and a read request response message a 611 at the time of mail reading, and each has a configuration in which information data is added to a message identification code or a message identification code.

  The mail key delivery message a600 at the time of transmission is a message for sending the mail key 501 used for encrypting the mail and the mail address as the mail destination from the controller 101 to the IC card function unit 114. For the message identification code 620 indicating the mail key delivery message a600, the mail address 621 as the mail destination and the session key 2 generated by the mutual authentication performed between the controller 101 and the IC card function unit 114 are used. The encrypted mail key 622 and signature data 623 for ensuring the authenticity of the information added to the mail key delivery message a600 are added.

  The mail key delivery response message a603 corresponding thereto is a message sent from the IC card function unit 114 to the controller 101 as a response to the mail key delivery message a600. In addition to the message identification code 630 indicating the mail key delivery response message a 603, the mail key 631 encrypted using the session key 2 and the mail key 501 encrypted using the public key 301, and the mail key delivery response message a 603 The signature data 632 for ensuring the authenticity of the information added to is added.

  The mail key delivery message b605 at the time of reception is a message for sending the mail key 501 used for encrypting the mail and the mail address as the mail sender from the controller 101 to the IC card function unit 114. For the message identification code 640 indicating the mail key delivery message b 605, the mail address 641 as the mail sender and the session key 2 generated by the mutual authentication performed between the controller 101 and the IC card function unit 114 are used. The encrypted mail key 642 and signature data 643 for ensuring the authenticity of the information added to the mail key delivery message b605 are added.

  The mail key delivery response message b607 corresponding thereto is a message sent from the IC card function unit 114 to the controller 101 as a response to the mail key delivery message b605. The configuration is such that the signature data 651 for ensuring the authenticity of the mail key delivery response message b607 is added to the message identification code 650 indicating the mail key delivery response message b607.

  The read request message 609 is used for reading the encrypted mail data stored in the memory card 100 and the mail key used for encrypting the mail data from the controller 101 to the IC card functional unit 114. It is a telegram. A configuration in which an e-mail address 661 encrypted using the session key 2 and signature data 662 for ensuring the authenticity of the read request message 609 are added to the message identification code 660 indicating the read request message 609. There is no.

  A read request response message 611 corresponding to this is a message sent from the IC card function unit 114 to the controller 101 as a response to the read request message 609. The message identification code 670 indicating the read request response message 611, the mail key 671 encrypted using the session key 2, and the signature data 672 for ensuring the authenticity of the information added to the read request response message 611. Is added.

  The signature data added to each message 600, 603, 605, 607, 609, 611 is used to ensure the credibility of the information added to each message, and there is little risk of falsification. May be omitted.

  Next, the operation when this embodiment is applied to an e-mail will be described with reference to FIGS. FIG. 7 is a flowchart showing the order in which the memory card 100 is connected to the client terminal 200 and data is exchanged between the client terminal 200 and the memory card 100. As the client terminal 200, various types of information processing apparatuses such as a PDA, a mobile phone, other portable information processing apparatuses, and an information processing apparatus dedicated to this system can be employed.

  It should be noted that, after the user connects the memory card 100 to the client terminal 200 or after the mailer program 112 is started, the exchange of data between the client terminal 200 and the memory card 100 is stopped, or the mailer program 112 is In some cases, the process may be terminated, and the process may be terminated even at a step in the middle of the flow illustrated in FIG. However, this halfway termination is not shown and will not be described.

  In step S <b> 700, the memory card 100 is connected to the client terminal 200 via the external connection unit 103. In step S <b> 701, the client terminal 200 displays data stored in the nonvolatile memory 110 in the memory card 100. An attribute is assigned to each data stored in the nonvolatile memory 110 in advance. The “hidden file” attribute is assigned to data that needs to be secured. Thereby, the client terminal 200 determines the attribute given to the data and does not display the data given the “hidden file” attribute. The memory card 100 sets data other than the personal authentication program 111 stored in the nonvolatile memory 110 as a “hidden file” attribute. As a result, the client terminal 200 displays only the personal authentication program 111 as data information in the memory card. FIG. 8 shows a specific example of the display.

  In step S <b> 702, the user executes the personal authentication program 111 from the client terminal 200. Passwords, biometrics, etc. are used as personal authentication. In step S703, personal authentication is performed between the client terminal 200 and the user. If the authentication is successful, in step S704, the data having the “hidden file” attribute stored in the nonvolatile memory 110 is set as the “accessible” attribute. As a result, the client terminal 200 displays the mailer program 112 and the mail data 113 as data having the “accessible” attribute as data information in the memory card. FIG. 9 shows a specific example of the display.

  In step S <b> 705, the user executes the mailer program 112 from the client terminal 200. In step S <b> 706, the activated mailer program performs initialization processing, and creates a folder 113 necessary for mail processing in the nonvolatile memory 110 in the memory card 100.

  The mailer program 112 also creates a folder 124 for exchanging commands from the mailer program 112 to the memory card 100 and responses to the commands from the memory card 100 to the mailer program 112. Accordingly, the controller 101 in the memory card 100 creates the folder 124 in the nonvolatile memory 110 and stores the address of the folder 124 in the instruction transmission address storage unit 125. At this time, for example, when a folder is created with a specific folder name, the controller 101 in the memory card 100 may store the address of the folder. In this embodiment, a folder for exchanging commands from the mailer program and responses to commands from the memory card is called a command transmission folder 124. Thereafter, the user starts mail processing using the executed mailer program.

  10 and 11 are flowcharts showing a specific example of a processing procedure when a user transmits an email using a mailer program.

  In step S1000, the user creates a mail using the mailer program 112, and executes transmission in step S1001. In step S1002, the mailer program 112 writes data instructing execution of mutual authentication to the instruction transmission folder 124. The controller 101 in the memory card 100 periodically monitors the address of the instruction transmission folder 124. When a command from the mailer program 112 is written in the command transmission folder, the content is interpreted as a command to execute mutual authentication. In step S1003, the mailer program 112 and the controller 101 communicate with each other. Perform authentication. When the mutual authentication is successful, the common session key 1 that is different for each session is held between the mailer program 112 and the controller 101.

  When the mailer program 112 holds the session key 1, the mail data to be transmitted is encrypted using the session key 1 in step S1004, and stored in the specific address area 113 in the nonvolatile memory 110 in step S1005. .

  On the other hand, the controller 101 holds the session key 1 when the mutual authentication is successful, monitors a specific address area 113 in the nonvolatile memory 110 in which the encrypted mail data is stored, and stores the mail data. If it has been confirmed, decryption is performed using the session key 1 on the buffer RAM 108 in the controller 101 in step S1006.

  At this time, if it cannot be confirmed that the mail data is stored in the specific address area 113 in the nonvolatile memory 110, the mailer program 112 sends the data for instructing the command transmission folder 124 to encrypt the mail. And the controller 101 may periodically transmit the instruction by monitoring the address of the instruction transmission folder 124.

  When the controller 101 decrypts the mail data using the session key 1, the controller 101 obtains a destination mail address from the mail data. Thereafter, in step S1007, the controller 101 uses the key generation unit 109 to generate a mail key for encrypting mail data. The mail data is encrypted using the mail key generated in step S1008.

  In step S1009, the controller 101 requests mutual authentication from the IC card function unit 114 and executes it. If the mutual authentication is successful, a common session key 2 that is different for each session is held between the controller 101 and the IC card function unit 114.

  When the controller 101 holds the session key 2, the mail key is encrypted using the session key 2 in step S1010. In step S1011, the encrypted mail key is transmitted to the IC card function unit 114 using the mail key delivery message a600 together with the mail address. At this time, as data to be added to the message 600, data obtained by encrypting the mail key data and the mail address using the session key 2 may be added.

  When receiving the mail key delivery message a600, the IC card function unit 114 searches and acquires the public key A associated with the mail address from the public key list 121 in step S1012. In step S 1100, the data added to the message 600 is decrypted using the session key 2.

  In step S1101, the decrypted mail key is encrypted using the public key A. In step S1102, the storage key list 122 is searched for and acquired from the corresponding folder name. In step S1103, the same decrypted mail key is encrypted with a storage key, and in step S1104, it is added to the mail key list 123 and stored.

  In step S 1105, the mail key encrypted using the public key A is encrypted using the session key 2. In step S1106, the mail key delivery response message a603 is used to transmit the mail key encrypted with the public key A and further encrypted with the session key 2 to the controller 101.

  In step S 1107, the controller 101 stores the mail data encrypted with the mail key in the mail data in the nonvolatile memory 110. In step S1108, when the mail key delivery response message a603 is received from the IC card function unit 114, the data added to the message 603 is decrypted using the session key 2.

  At this time, a plurality of folders may be created in the mail data, and the mail data may be sorted and stored using information in the mail data such as the mail sender or destination. For example, the reception folder 901 and the transmission folder 902 shown in FIG.

  In step S1109, the controller 101 encrypts the mail key encrypted using the public key A and the mail data encrypted using the mail key, using the session key 1. In step S 1110, the mail key and mail data encrypted using the session key 1 are stored in a specific address area in the nonvolatile memory 110.

  In step S1111, the mailer program 112 monitors the instruction transmission folder 124 and confirms that the mail key encrypted using the session key 1 and the mail data are stored. Decrypt the encrypted mail key and mail data. In step S1112, the mail data with the mail key added is sent to the mail server 210.

  FIG. 12 is a flowchart illustrating a specific example of a processing procedure when a user receives an email using a mailer program.

  In steps S1200 and S1201, the session key 1 is acquired between the mailer program 112 and the controller 101 by the same operation as in FIG.

  In step S <b> 1202, the user executes reception from the mailer program 112, and the mailer program 112 receives mail from the mail server 210. At this time, when a mail in which the mail key and mail data are encrypted is received, the mail key and mail data are encrypted using the session key 1 in step S1203. In step S1204, the data is stored in a specific address area in the nonvolatile memory 110.

  When the controller 101 monitors the instruction transmission folder 124 and confirms that the mail key and mail data encrypted using the session key 1 are stored, the controller 101 stores the session key on the buffer RAM 108 in step S1205. 1 is used for decryption. From the decrypted mail data, the mail address that becomes the sender is obtained from the mail data.

  In step S1206, the controller 101 requests mutual authentication to the IC card function unit 114, and executes mutual authentication between them. If the mutual authentication is successful, a common session key 2 that is different for each session is held between the controller 101 and the IC card function unit 114.

  In step S1207, the controller 101 encrypts the mail key using the session key 2. In step S1208, the encrypted mail key is transmitted to the IC card function unit 114 using the mail key delivery message b605 together with the mail address. At this time, as data to be added to the message 605, data obtained by encrypting the mail key data and the mail address using the session key 2 may be added.

  In step S1209, the IC card functional unit 114 receives the mail key delivery message b605, and decrypts the data added to the message 605 using the session key 2.

  In step S1210, the storage key list 122 is searched for and acquired from the corresponding folder name. In step S1211, the decrypted mail key is encrypted with a storage key, and in step S1212, the mail key list 123 is added and stored.

  In step S1213, a mail key delivery response message b607 for notifying the controller 101 of completion of mail key storage is transmitted.

  When the controller 101 receives the mail key delivery response message b607 from the IC card function unit 114 in step S1214, the controller 101 stores the mail data encrypted with the mail key in the mail data in the nonvolatile memory 110. At this time, a plurality of folders may be created in the mail data, and the mail data may be sorted and stored using information in the mail data such as the sender or destination of the mail.

  In step S1215, the controller 101 stores data notifying completion of mail reception in a specific address area. The mailer program 112 monitors the instruction transmission folder 124, and when the controller 101 confirms that the notification of mail reception completion has been stored from the controller 101, the mail reception process is terminated.

  FIG. 13 is a flowchart illustrating a specific example of a processing procedure when a user browses an email using a mailer program.

  In steps S1300 and S1301, the session key 1 is acquired between the mailer program 112 and the controller 101 by the same operation as in FIG.

  In step S1302, mail data to be read from mail data stored in the nonvolatile memory 110 is stored in a specific address area.

  When the controller 101 monitors the instruction transmission folder 124 and confirms that the mail data is stored, in step S1303, the controller 101 requests mutual authentication from the IC card function unit 114, and executes mutual authentication between them. . If the mutual authentication is successful, a common session key 2 that is different for each session is held between the controller 101 and the IC card function unit 114.

  In step S1304, the controller 101 encrypts the mail address of the mail data to be browsed using the session key 2 and transmits it to the IC card function unit 114 using the read request message 609.

  In step S1305, the IC card functional unit 114 receives the read request message 609, decrypts the mail address added to the message 609, and searches for and acquires the associated mail key 501.

  In step S1306, a storage key is searched and acquired from the folder name associated with the mail address, and the mail key 501 is decrypted using the acquired storage key 401. At this time, in step S1307, the copy control information 402 associated with the storage key 401 is determined. If the copy control information 402 can be read, the mail key 501 is decrypted using the secret key 120 in step S1308.

  In step S1309, the IC card functional unit 114 encrypts the mail key 501 using the session key 2. In step S 1310, the encrypted mail key 501 is sent to the controller 101 using the read request response message 611.

  The controller 101 receives the read request response message 611 from the IC card function unit 114, decrypts the received mail key 501 using the session key 2 in step S1311, and then transmits the mail key 501 and mail data. The copy control information is encrypted using the session key 1. In step S1312, the encrypted mail key 501 and mail data are stored in a specific address area in the nonvolatile memory 110.

  The mailer program 112 monitors the instruction transmission folder 124 and confirms that the encrypted mail key and mail data are stored. In step S1313, the mailer program 112 uses the encrypted mail key and mail data as the session key 1. To decrypt.

  In step S1314, the copy control information is determined. If the copy control information can be read, the mail data is decrypted using the mail key. In step S1315, the decrypted mail data is displayed.

  FIG. 14 is a block diagram showing another embodiment of the memory card 100 according to the present invention.

  As a method for transmitting a command between the memory card 100 and the mailer program 112, a command for transmitting a command, which is different from the configuration of the memory card 100 shown in FIG. The storage unit 1400 is provided. The client terminal 200 has a driver that writes a command to the command transmission storage unit 1400.

  FIG. 15 is a diagram showing a configuration example of the memory card 100 for loading the client terminal 200 with a driver for writing a command to the command transmission storage unit 1400 in FIG. The memory card 100 includes a driver 1501 that writes a command to the command transmission storage unit 1400 and a driver load program 1500 that loads the driver 1501 to the client terminal 200 in the nonvolatile memory 110. When the user executes the personal authentication program 111 from the client terminal 200 in step S702 of FIG. 7, the controller 101 executes the driver load program 1500, and the driver load program 1500 is non-volatile. The driver 1501 in the memory 110 is loaded into the client terminal 200.

  FIG. 16 is a diagram illustrating a configuration example of the mailer program 112 when the mailer program 112 issues an instruction to the controller 101 in the memory card 100. The mailer program 112 includes an authentication processing unit 1600 that performs authentication processing with the controller 101 of the memory card 100, an encryption processing unit 1601 for encrypting data to be transmitted to the memory card 100, and the command transmission in the memory card 100. A command transmission unit 1602 for transmitting a command to the storage unit 1400 and a response acquisition unit 1603 for the mailer program 112 to periodically acquire a response from the memory card 100 are provided.

  FIG. 17 is a diagram illustrating a configuration example of the driver 1501 that writes an instruction to the instruction transmission storage unit 1400 when the driver 1501 loaded in the client terminal 200 issues an instruction to the controller 101 in the memory card. is there. The driver 1501 includes an authentication processing unit 1700 that performs authentication processing with the controller 101 of the memory card 100, an encryption processing unit 1701 for encrypting data to be transmitted to the memory card 100, and the command transmission in the memory card 100. A command transmission unit 1702 for transmitting a command to the storage unit 1400 and a response acquisition unit 1703 for the mailer program 112 to periodically acquire a response from the memory card 100 are provided.

  According to this embodiment, even if the client terminal 200 does not have a driver for writing a command to the command transmission storage unit 1400, the driver 1501 stored in the memory card 100 is acquired and a new command is issued. Can do.

  In the above embodiment, the case where the memory card of the present invention is used for electronic mail has been described as an example. However, this is only an example for explaining the present invention, and it is used for viewing and editing a document file using a document viewer and a document editing program, or an image file using an image viewer and an image editing program. Needless to say, the present invention can also be applied to browsing and editing.

The block diagram which shows one Example of the memory card concerning this invention. The block diagram of the whole system of the electronic mail utilization using the memory card of FIG. The figure which shows the example of the public key list | wrist 121 in FIG. The figure which shows the example of the storage key list | wrist 122 in FIG. The figure which shows the example of the mail key list | wrist 123 in FIG. The figure which shows an example of the message | telegram structure between the controller 101 and IC card functional unit 114 in FIG. 3 is a flowchart showing data processing between the client terminal 200 and the memory card 100 in FIG. 2. The figure which shows an example of the display of the data stored in the memory card of FIG. The figure which shows an example of the display of the data stored in the memory card of FIG. FIG. 3 is an example of a flowchart for sending mail in FIG. 2. FIG. 3 is an example of a flowchart for sending mail in FIG. 2. An example of a flowchart in the case of receiving mail in FIG. An example of the flowchart in the case of browsing a mail in FIG. The block diagram which shows the other Example of the memory card based on this invention. The figure which shows the structural example of the memory card for loading the driver 1501 to a client terminal in relation to FIG. The figure which shows the structural example of the mailer program 112 in FIG. FIG. 16 is a diagram illustrating a configuration example of a driver 1501 in FIG. 15.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Memory card, 101 ... Controller, 102 ... Operation processing part, 104 ... Encryption processing part A, 109 ... Key generation part, 110 ... Non-volatile memory, 112 ... Mailer program, 114 ... IC card functional unit, 116 ... Encryption processing Part B, 118: storage unit, 124: instruction transmission folder, 125: instruction transmission address storage unit, 126 ... arithmetic processing unit, 127 ... external device, 200 ... client terminal, 1400 ... instruction transmission storage unit, 1501 ... driver.

Claims (13)

In a memory card with a non-volatile memory and a controller,
The controller includes means for securing a memory area for receiving a command from an external device at a specific address in the nonvolatile memory, and means for storing the specific address in the nonvolatile memory for a predetermined time. A memory card, wherein the instruction stored in the memory area of the reserved specific address is read for each time. The memory card according to claim 1,
The memory card, wherein the controller writes a response to the command received from the external device in the memory area of the specific address. The memory card according to claim 1,
An IC card function unit that processes data according to a command from the controller,
The IC card functional unit writes a response to a command received from the external device into the memory area of the specific address. In a memory card that executes a predetermined function by an instruction from an external device,
A non-volatile memory having a command transmission area for storing a program executed by the memory card and transmitting a command received from an external device to execute the program;
A memory card comprising: a controller that reads out an instruction from the instruction transmission area and executes the program. In a memory card that executes a predetermined function by an instruction from an external device,
A non-volatile memory that stores a program executed by the memory card and has a command transmission folder that transmits a command from an external device and a response to the command to execute the program,
Folder creation means for creating the instruction transmission folder in the nonvolatile memory, address storage means for storing the address of the created instruction transmission folder, instructions from an external device from the instruction transmission folder A controller having read / write means for reading and writing a response to the command;
A memory card comprising: In a memory card that executes a predetermined function by an instruction from an external device,
A non-volatile memory for storing a program executed by the memory card;
A command transmission storage unit that transmits a command from an external device and a response to the command to execute the program, and a read / write command that reads a command from the external device and writes a response to the command from the command transmission storage unit A controller having writing means;
A memory card comprising: In a memory card that encrypts data according to instructions from an external device,
A nonvolatile memory that stores a program for encrypting data and the encrypted data, and has a command transmission area for transmitting a command received from an external device to execute the program;
A controller that reads instructions from the instruction transmission area and encrypts data;
A memory card comprising: an IC card functional unit that stores a key used for encrypting data by using a storage key in accordance with an instruction from the controller. The memory card according to claim 7,
The controller includes key generation means for generating a key used for encrypting data, and data encryption processing means for encrypting data using the key,
The IC card functional unit includes a key encryption processing unit that encrypts a key used for encrypting data using a storage key, and a key storage unit that stores a key encrypted using the storage key. A memory card comprising: In a data processing program for causing a memory card storing a predetermined program to execute the program from an external device,
Creating a command transmission folder for transmitting commands received from an external device in the memory card;
Writing a command from an external device in the created command transmission folder;
Reading a command from an external device written in the command transmission folder;
Executing the program according to the read instruction;
A data processing program comprising: The data processing program according to claim 9, wherein
Storing the address of the created instruction transmission folder in the memory card; and writing a response to the instruction from the external device in the instruction transmission folder;
The external device reads the response;
A data processing program comprising: In a data processing method of connecting a memory card storing a predetermined program to an external device and executing the program,
Create a command transmission folder that transmits commands to the memory card from the external device,
The external device writes a command to the command transmission folder,
The memory card reads the command from the external device written in the command transmission folder,
The memory card executes the program according to the read instruction,
A data processing method. The data processing method according to claim 11, wherein
The memory card stores an address of the created instruction transmission folder, writes a response to the instruction from the external device in the instruction transmission folder,
The external device reads the response.
A data processing method. The data processing method according to claim 11, wherein
The program encrypts data, and
Generate a key to use to encrypt the data,
Encrypt the data using the above key,
Encrypt the key used to encrypt the data using the storage key,
Storing the key encrypted using the storage key in the IC card functional unit in the memory card;
A data processing method.

Images