JP2006058920A - Multi-application ic card for controlling inter-application message processing and program for ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a multi-application IC card for easily setting the detail control contents of inter-application message processing (indicating that, for example, message processing is available only between applications belonging to the same type of business) and a program for an IC card. <P>SOLUTION: Control information for setting the control contents of inter-application message processing is included in the ADF information of an application 40 mounted on a multi-application IC card. In executing the inter-application message processing, a message manager mounted on the multi-application IC card controls the inter-application message processing based on the contents of the control information. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a multi-application IC card for mounting a plurality of applications in a memory, and more particularly to a technique for controlling message processing between applications mounted on a multi-application IC card.

  With recent increases in memory density, multi-application IC cards have begun to spread. A multi-application IC card is an IC card in which a plurality of applications can be mounted in a rewritable memory. A multi-application operating system (Operating System, which performs basic processing on a ROM (Read Only Memory) provided in the IC chip. One or a plurality of rewritable memories such as ROM (Electrically Erasable Programmable Read Only Memory (hereinafter referred to as EEPROM)) that can be electrically erased and rewritten, which is also provided in the IC chip. Implement the application.

  By installing multiple applications on a single multi-application IC card, the convenience of the multi-application IC card is improved, but on the other hand, any problem can be created by mounting any application on a single multi-application IC card. To do. One of the problems is message processing between applications mounted on a multi-application IC card.

  For example, a function of authenticating a PIN (Personal Identification Number) for authenticating a cardholder is not shared by each application mounted on a multi-application IC card, but only one in a multi-application IC card. It is desirable to have both. If each application mounted on the multi-application IC card has the PIN authentication function, the memory required for mounting the application increases.

In order to solve such a problem, Patent Document 1 discloses a multi-application IC card that securely performs message processing between applications mounted in the multi-application IC card.
Japanese Patent Laid-Open No. 2001-527474

  With the contents disclosed in Patent Document 1, it is possible to realize a multi-application IC card that can securely execute message processing between applications. However, Patent Document 1 merely discloses a structure (for example, a memory) of a multi-application IC card necessary for securely executing message processing between the applications, and controls message processing between the applications. The content cannot be set in detail.

  For example, some applications installed on a multi-application IC card prohibit message processing from other applications, and you want to allow message processing between applications only between applications belonging to a specific industry. In some cases.

  The detailed contents related to such message processing control are easy to realize on a multi-application IC card if the application to be mounted in advance is known and fixed, but a new unknown application can be added. In the case of addition, since the interrelationship with other applications is unclear, it is very difficult to realize the detailed contents on the multi-application IC card.

  In view of the above problems, the present invention is a multi-application IC card capable of mounting a plurality of applications in a memory. Detailed control contents of message processing between applications (message processing can be performed only between applications belonging to the same industry, etc.) It is an object of the present invention to provide a multi-application IC card and an IC card program.

  In the multi-application IC card according to the first invention for solving the above-mentioned problem, each application mounted on the multi-application IC card has control information which is information for controlling message processing between applications, and the control It features a message manager that controls message processing between applications based on information. Since each application has the control information, detailed conditions for message processing between applications can be set by the control information.

  Further, in the second invention, the control information includes a group number that is information for grouping applications, and the message manager includes means for permitting message processing only between applications having the same group number. It is characterized by having.

  In the third invention, the control information includes a logical number indicating an access condition for the application, and the message manager includes means for controlling message processing based on the size of the logical number. It is characterized by that.

  When the control information includes the group number, if the group number is determined for each industry, message processing between applications can be performed only between industries. Further, since the control information includes the logical number, it is possible to easily set the contents of control of message processing between applications.

  Further, the fourth invention is a message between a first application which is mounted in a memory of a multi-application IC card and sends a message, and a second application which is also mounted in the memory and receives a message. An IC card program for controlling processing, the step of obtaining the control information of the first and second applications, the step of comparing the control information of the first and second applications, and the control An IC card program comprising a step of controlling message processing based on an information comparison result.

  Further, a fifth invention is the IC card program according to the fourth invention, wherein the control information includes the group number, and the step of comparing the control information is performed by the first and second applications. A program for an IC card, comprising a procedure for comparing each of the group numbers.

  Furthermore, a sixth invention is the IC card program according to the fourth invention or the fifth invention, wherein the control information includes the logical number, and the step of comparing the control information includes the first information A program for an IC card comprising a procedure for comparing the magnitudes of the respective logical numbers of the second application.

  The multi-application IC card described in the first to third inventions can be realized by mounting the IC card program described in the fourth to sixth inventions on the multi-application IC card.

  According to the present invention described so far, in a multi-application IC card capable of mounting a plurality of applications in a memory, since the application has the control information, detailed contents of message processing between the applications using the control information Can be set. By mounting the message manager in the memory, the multi-application IC card can control message processing between the applications based on the control information. Further, since the control information includes the group number, the applications mounted on the multi-application IC card can be grouped for each business type. In addition, since the control information includes the logical number, detailed contents of message processing between the applications can be easily set.

(Description of multi-application IC card)
Embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram for explaining the hierarchical structure of a multi-application IC card to which the present invention is applied. As shown in FIG. 1, the hierarchical structure of the multi-application IC card according to the present embodiment is a three-layer structure including a hardware layer 1, an OS layer 2, and an application layer 3.

  In FIG. 1, the hardware layer 1 is an IC chip 10, a multi-application OS 20 is mounted on the ROM of the IC chip 10 as the OS layer 2, and a plurality of applications 40 and a message manager application 30 are installed on the EEPROM of the IC chip 10 as the application layer 3. (Hereinafter abbreviated as Message Manager) is implemented.

  The application 40 is software designed for a certain use. Usually, the application 40 mounted on the EEPROM is generally described in an intermediate language supported by the multi-application OS 20. For example, when used as a credit card, a credit application standardized by a credit company is mounted on the EEPROM.

  The application 40 mounted on the EEPROM has an ADF (Application Definition File) serving as an entry point for the application 40. FIG. 2 is a diagram for explaining data included in the ADF. The ADF has data, and the data includes an application identifier 50 (Application IDentifer, hereinafter referred to as AID) that is information for identifying an application, and control information 51 that defines message processing between applications.

  The AID 50 is information for identifying the application 40, and a DF name (DF Name) standardized by the ISO 7816 standard corresponds to the AID 50.

  The control information 51 is 2-byte information, and it is possible to finely set the control content of message processing between applications of the application 40 indicated by the AID 50 by the control information 51. Here, the message is composed of command information and data, and the application 40 that transmits the message creates a message including data to be processed, and delivers the message to the designated application 40 via the message manager 30. . When the designated application 40 processes the message, it acquires command information and data from the delivered message, and executes processing corresponding to the command information.

  FIG. 3 is a diagram for explaining the control information 51. The upper byte of the control information 51 is a group number 51a which is information indicating the group of the application 40, and the lower byte of the control information is a logical number 51b which means an access condition for the application 40.

  The group number 51 a is information used for grouping a plurality of applications 40 mounted on the EEPROM, and the applications 40 are grouped by the group number 51 a of the control information 51. Applications 40 having the same group number 51a are determined to be applications 40 belonging to the same group (for example, industry), and message processing between applications is permitted only between applications belonging to the same group, that is, between applications having the same group number 51a. Is done.

  The logical number 51b is information indicating an access condition for the application 40. FIG. 4 is a diagram for explaining control of message processing between applications using the logical number 51b. As shown in FIG. 4, message processing can be entrusted from an application 40a having a logical number 51b of “1” to an application 40b having a logical number 51b of “2”, but an application having a logical number 51b of “2”. Message processing cannot be entrusted to the application 40a whose logical number 51b is "1" from 40b. Similarly, the message processing can be entrusted from the application 40b whose logical number 51b is “2” to the application 40c whose logical number 51b is “3”, but the logical number 51b is changed from the application 40c whose logical number 51b is “3”. Message processing cannot be entrusted to the application 40b that is “2”.

  In this way, message processing can be delegated to another application 40 having a logical number 51b larger than the logical number 51b of the application 40 entrusting message processing, but to other applications 40 having a small logical number 51b. Message processing cannot be outsourced.

  The message manager 30 is an IC card program that controls message processing between applications based on the control information 51 of the application 51b described above. The message manager 30 is a program that controls message processing between applications with reference to the control information 51 of the application 40 described above, and plays a middleware role between the multi-application OS 20 and the application 40. When the application 40 requests the other application 40 to perform message processing, the message processing is transmitted to the other application 40 via the message manager 30.

  FIG. 5 is a diagram for explaining the operation of the message manager 30. FIG. 5 is a diagram for explaining an operation when entrusting message processing from the application A to the application B via the message manager 30.

  When entrusting message processing from the application A to the application B, the AID 50 of the application B is transmitted from the application A to the message manager 30 in addition to the message entrusting the processing (T1).

  The message manager 30 acquires the control information 51 from the ADF 50 of the application B, and confirms that the group number 51a of the acquired control information 51 is equal to the group number 51a of the application A (T2). If the group numbers 51a of the applications A and B are equal, the logical number 51b is then compared (T3).

  If the group numbers 51a of the applications A and B are equal and the logical number 51b of the application B is larger than the logical number 51b of the application A, the message manager 30 transmits a message to the application B (T4). The transmitted message is processed by the application B (T5). The result of processing the message is returned from the application B to the message manager 30 (T6), and the processing result is returned from the message manager 30 to the application A (T7).

(IC card program)
From here, the IC card program according to the present invention will be described. In the above-described multi-application IC card, the IC card program according to the present invention is mounted on the EEPROM as the message manager 30.

  FIG. 6 is a flowchart showing an operation procedure of the IC card program according to the present embodiment, that is, the message manager 30. The first step S1 is a step in which the application 40 entrusting message processing sends an AID 50 of the application entrusting message processing to the message manager 30 and a message entrusting processing.

  The next step S2 is a step of acquiring the control information 51 of the application 40 indicated by the AID 50 transmitted by the message manager 30. When acquiring the control information 51, the message manager 30 compares the group number 51a of the application 40 entrusted with the message processing with the group number 51a included in the acquired control information 51 (step S3). If the group number 51a included in the acquired control information 51 matches the group number 51a of the application 40 that has commissioned message processing, the process proceeds to step S4. If not, the process proceeds to step S6, and the message processing commission is stopped. .

  In step 4, the message manager 30 compares the logical number 51b of the application 40 entrusted with the message processing with the logical number 51b included in the control information 51 acquired in step S2. If the logical number 51b included in the acquired control information 51 is larger than the logical number 51b of the application 40 that has entrusted message processing, the process proceeds to step 5, and if it is smaller, the process proceeds to step 6 to cancel the entrustment for message processing.

  In step 5, the message manager 30 entrusts message processing to the application 40 specified by the transmitted AID 50. In step 5, the procedure of the method for controlling message processing between applications ends.

The figure explaining the hierarchical structure of a multi application IC card. The figure explaining the information which ADF has. The figure explaining control information. The figure explaining control of the message processing based on a logical number. The figure explaining operation | movement of a message manager. The flowchart which showed the operation | movement procedure of the program for IC cards.

Explanation of symbols

10 IC chip 20 Multi-application OS
30 Message Manager 40 Application 50 AID
51 Control information 51a Group number 51b Logical number

Claims (6)

In a multi-application IC card that can mount multiple applications in a rewritable memory,
Each of the applications mounted on the multi-application IC card has control information that is information for controlling message processing between applications for each application,
A multi-application IC card comprising a message manager that controls message processing between the applications based on the control information.   The control information includes a group number which is information for grouping the applications, and the message manager includes means for allowing message processing only between applications having the same group number. Item 4. The multi-application IC card according to Item 1.   The control information includes a logical number indicating an access condition for the application, and the message manager includes means for controlling message processing based on the size of the logical number. The multi-application IC card according to claim 2.   IC card program that controls message processing between a first application that is mounted on a memory of a multi-application IC card and that sends a message and a second application that is also mounted on the memory and receives a message A step of acquiring the control information of each of the first and second applications, a step of comparing the control information of the first and second applications, and a message based on a comparison result of the control information A program for an IC card including a step of controlling processing.   5. The IC card program according to claim 4, wherein the control information includes the group number, and the step of comparing the control information compares the group numbers of the first and second applications. A program for an IC card including a procedure. 6. The IC card program according to claim 4, wherein the control information includes a logical number, and the step of comparing the control information includes the logical numbers of the first and second applications. The program for IC cards characterized by including the procedure which compares the magnitude of.

Images