JP2006098830A - Apparatus and method for information management, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To flexibly select a cipher key to be used to control a non-contact IC chip. <P>SOLUTION: The cipher key needed to access a region formed in a memory of the non-contact IC chip is managed by a SAM 2. For example, when a plurality of sets of cipher keys for accessing respective regions having the same format are managed, a selection device 51 selects one key set designated with key set select information sent from outside and a selecting device 52 selects one cipher key designated with cipher key identification information out of cipher keys included in the key set selected by the selecting device 51. The cipher key selected by the selecting device 52 is used to cipher information for cipher information generation. The present invention is applicable to a device managing a cipher key used to control the non-contact IC chip. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information management apparatus, method, and program, and more particularly, to an information management apparatus, method, and program that enable flexible selection of an encryption key used to control an IC chip.

  In recent years, electronic money has been charged to a contactless IC chip such as FeliCa (registered trademark) embedded in a credit card or mobile phone, and the charged electronic money is used to pay for the purchase of the product. It is becoming popular.

  When paying the price, the user can quickly pay the price because the user simply holds his / her credit card or mobile phone over a terminal (reader / writer) installed in the store.

  Such an electronic money system has a configuration as shown in FIG. 1, for example.

  The server side of the electronic money system includes a server apparatus 1 and a SAM (Secure Application Module) 2, and the client side includes a client apparatus 3 and an R / W (reader / writer) 4. The server device 1 and the client device 3 are connected via a network 5.

  In the example of FIG. 1, the mobile phone 6 with the non-contact IC chip 13 built in is close to the R / W 4 on the client side, and is connected to the client device 3 via short-range communication using electromagnetic induction. ing.

  The server application 11 installed in the server device 1 communicates with the client application 12 installed in the client device 3 and generates a command (executed by the non-contact IC chip 13) in response to a request from the client application 12. Command) to be output to SAM2. Further, when an encrypted command is supplied from the SAM 2, the server application 11 transmits it to the client application 12 via the network 5.

  The SAM 2 is a tamper-resistant device, and performs encryption processing and management of keys used in the encryption processing. The SAM 2 encrypts the command supplied from the server application 11 and outputs the encrypted command to the server application 11. The SAM 2 and the non-contact IC chip 13 have a common key, and encrypted communication is realized between the SAM 2 and the non-contact IC chip 13 by transmitting and receiving information encrypted with the key.

  The client application 12 of the client device 3 transmits a predetermined request to the server application 11 of the server device 1, and when a command is transmitted from the server application 11, the command is transmitted via the R / W 4 to the non-contact IC chip 13. To send and execute.

  The non-contact IC chip 13 decrypts the encryption applied to the command transmitted from the SAM 2 via the R / W 4 or the like and executes it. When the content of the command is rewriting of electronic money, this command includes information on the amount of money to be rewritten.

  For example, in the electronic money system having such a configuration, when paying for a product purchased by the user of the mobile phone 6 using the electronic money stored in the contactless IC chip 13, the client application 12 of the client device 3 is used. Is sent to the server application 11 of the server device 1, and a command for requesting the contactless IC chip 13 to read out the balance of the electronic money by the server application 11 that has received the request. Read command) is generated.

  The Read command generated by the server application 11 is encrypted by the SAM 2 and then contactless IC via the server application 11 of the server device 1, the network 5, the client application 12 of the client device 3, and the R / W 4. After being transmitted to the chip 13 and decoded by the non-contact IC chip 13, it is executed. The balance read by executing the Read command is encrypted by the non-contact IC chip 13, and then, as a response to the server application 11, the R / W 4, the client application 12 of the client device 3, the network 5 , And the server application 11 of the server device 1. In the SAM 2, the encryption applied to the balance transmitted from the non-contact IC chip 13 is decrypted, and the decrypted balance is transmitted to the server application 11.

  Accordingly, the server application 11 can check the current electronic money balance stored in the non-contact IC chip 13.

  When the balance is confirmed, the server application 11 of the server device 1 issues a command (Write command) for requesting the contactless IC chip 13 to rewrite the balance of electronic money (rewrite to the balance reduced by the price of the product). Generated.

  The write command generated by the server application 11 is encrypted by the SAM 2 and then the server application 11 of the server device 1, the network 5, and the client application 12 of the client device 3 in the same manner as the previously transmitted Read command. And is transmitted to the non-contact IC chip 13 via the R / W 4 and is decrypted in the non-contact IC chip 13 and then executed. This Write command includes information indicating how much the balance will be. As a result, the balance of electronic money stored in the non-contact IC chip 13 is reduced by the price of the product.

  For example, after processing such as a message notifying that the balance reduction has been completed is transmitted from the non-contact IC chip 13 to the server application 11, a series of processing ends. By such a series of processes, payment for the price of the product is realized.

  From the server-client system having such a configuration, the client device 3 is provided in addition to the payment of the price of the product as described above, for example, management of points issued by a store or ticket gate of a train station. If it is, payment of the boarding fee is realized. Also in the case of point management and boarding fee payment, basically the same processing as in the case of payment of the above-mentioned price is performed by each device in FIG.

  A server-client system configured as shown in FIG. 1 is disclosed in Patent Document 1.

  FIG. 2 is a diagram showing an example of encryption keys managed by the SAM 2 and the non-contact IC chip 13 in FIG.

  The area formed in the non-contact IC chip 13 (memory of the non-contact IC chip 13) includes, for example, three concept areas of system, area, and service. As shown in FIG. Each area is hierarchically formed in that order. That is, one or more areas are formed in the system, and one or more services are formed in each area.

  A key is set in each area of the system, the area, and the service, and only the SAM having a key (corresponding key) common to the key can access each area of the contactless IC chip 13. Yes (you can run commands and write information to each area).

  In the example of FIG. 2, the memory of the non-contact IC chip 13 has an area 1 as an area formed under one system, and two services 1 and 2 as services under the area 1. Has been. Encryption keys 1 to 4 are set for the system, area 1, service 1, and service 2, respectively.

  In the example of FIG. 2, the SAM 2 manages a correspondence table indicating correspondence between areas (encryption key identification information) formed on the non-contact IC chip 13 and encryption keys necessary for accessing each area. is doing. For example, when the server application 11 is requested to access the service 2 of the contactless IC chip 13, the SAM 2 selects the encryption key 4 corresponding to the access destination based on the managed correspondence table.

  The SAM 2 also includes parameter information such as a command to be transmitted to the non-contact IC chip 13 (when the command is writing of electronic money, information on the amount of money to be written in the memory (service 2 area) of the non-contact IC chip 13. ) Or the like is supplied from the server application 11, the information supplied from the server application 11 is encrypted using the encryption key 4 selected according to the access destination, and encrypted. The information is output to the server application 11. It is also possible to encrypt only the parameter information instead of encrypting the entire command including the parameter information.

  Information encrypted with the encryption key 4 is transmitted from the server application 11 to the contactless IC chip 13 and decrypted using the encryption key 4 managed by the contactless IC chip 13. When the command is writing of electronic money, the amount specified by the decrypted parameter information is written to the service 2 of the non-contact IC chip 13, thereby realizing access to the service 2.

  As described above, the SAM 2 manages a correspondence table that can uniquely identify the encryption key according to the access destination requested by the server application 11.

  FIG. 3 is a block diagram illustrating a functional configuration example of the SAM 2.

Based on the encryption key identification information supplied from the server application 11, the encryption device is selected by the selection device 21, and the encryption key selected by the selection device 21 is used to generate the encryption information generation information by the encryption processing logic 22. Encryption is performed. In FIG. 3, the encryption key identification information is information for specifying an access destination (service 2 in the above case), and the encryption information generation information is information supplied from the server application 11 to be encrypted. is there. The encryption information is encryption information generation information that has been encrypted. This encrypted information is transmitted from the server application 11 to the contactless IC chip 13 and decrypted by the contactless IC chip 13.
JP 2003-141063 A

  By the way, in this way, in the SAM 2, since one encryption key is uniquely selected in response to a request from the server application 11, there is a problem that the encryption key cannot be selected flexibly. was there.

  Therefore, for example, there is a demand for information to be encrypted with different encryption keys during the test operation and during the normal operation after the test operation. I can't respond. Specifically, as shown in FIG. 3, assuming that only a correspondence table in which one encryption key is uniquely specified for one access destination request is prepared in SAM2, In any case of normal operation, for example, when the server application 11 requests the service 2 as an access destination, the same encryption key 4 is selected.

  For this reason, in the past, when changing the encryption key used for test operation and normal operation, it was necessary to use a different SAM for each operation or replace the encryption key itself managed by SAM. .

  For example, during a test operation, the encryption key 1 ′ is used for an access request to the system, the encryption key 2 ′ is used for an access request to the area 1, and the encryption key 3 ′ is used for an access request to the service 1. The SAM having the correspondence table for selecting the encryption key 4 ′ is used for the access request to the service 2, and the SAM having the correspondence table as shown in FIG. It is possible to select different encryption keys even when the access destination is the same (in this case, if the access destination is the same in the service 2, the encryption key 4 ′ is used in the test operation). Is selected, and the encryption key 4 is selected in normal operation). However, changing the SAM for each operation is complicated.

  The present invention has been made in view of such a situation, and makes it possible to flexibly select an encryption key used for controlling an IC chip.

  An information management apparatus according to the present invention is an information management apparatus that manages a plurality of key sets, which is a set of key information used to access each area formed in a memory of an IC chip, and uses predetermined key information. Based on designation from the server that controls the IC chip to be controlled using the encrypted information, a predetermined key set and a predetermined key formed in the memory of the IC chip to be controlled included in the predetermined key set Information that is obtained by encrypting the information supplied from the server using the predetermined key information selected by the selecting means, and selecting means for selecting the predetermined key information used for accessing the area Providing means for providing to the server.

  The plurality of key sets can be made up of a set of key information used to access an area of the same format.

  The information management method of the present invention is an information management method for managing a plurality of key sets, which is a set of key information used for accessing each area formed in a memory of an IC chip, and is based on predetermined key information. Based on designation from the server that controls the IC chip to be controlled using the encrypted information, a predetermined key set and a predetermined key formed in the memory of the IC chip to be controlled included in the predetermined key set A selection step of selecting predetermined key information used to access the area of the information, and the information supplied from the server is encrypted using the predetermined key information selected by the processing of the selection step Providing the information to the server.

  The program of the present invention is a program for causing a computer to execute a process for managing a plurality of key sets, which is a set of key information used to access each area formed in a memory of an IC chip, Based on the designation from the server that controls the IC chip to be controlled using the information encrypted by the information, it is formed in a predetermined key set and the memory of the IC chip to be controlled included in the predetermined key set. A selection step of selecting predetermined key information used for accessing the predetermined area, and encrypting the information supplied from the server using the predetermined key information selected by the processing of the selection step, Providing the information to the server.

  In the information management apparatus, method, and program of the present invention, a predetermined key set, a predetermined key set, and a predetermined key set based on designation from a server that controls the IC chip to be controlled using information encrypted by the predetermined key information, And predetermined key information used for accessing a predetermined area formed in the memory of the IC chip to be controlled, included in the key set. Further, information supplied from the server is encrypted using predetermined key information, and the encrypted information is provided to the server.

  According to the present invention, the encryption key used for controlling the IC chip can be flexibly selected.

  Embodiments of the present invention will be described below. The correspondence relationship between the invention described in this specification and the embodiments of the invention is exemplified as follows. This description is intended to assure that embodiments supporting the claimed invention are described in this specification. Therefore, although there is an embodiment which is described in the embodiment of the invention but is not described here as corresponding to the invention, it means that the embodiment is not It does not mean that it does not correspond to the invention. Conversely, even if an embodiment is described herein as corresponding to an invention, that means that the embodiment does not correspond to an invention other than the invention. Absent.

  Further, this description does not mean all the inventions described in this specification. In other words, this description is for the invention described in the present specification and not claimed in this application, i.e., the existence of an invention that will be filed in the future or added by amendment. There is no denial.

  The information management apparatus according to claim 1 is an information management apparatus that manages a plurality of key sets that are sets of key information used to access each area formed in a memory of an IC chip (for example, FIG. 4). SAM2) based on designation from a server (for example, server application 11 in FIG. 4) that controls the IC chip to be controlled using information encrypted with predetermined key information (for example, in FIG. 7). (Based on key set specification by key set selection information and key information specification by encryption key identification information), formed in a predetermined key set and the memory of the IC chip to be controlled included in the predetermined key set Selection means (for example, the selection device 52 in FIG. 7) for selecting the predetermined key information used to access the predetermined area, and information (for example, in FIG. 7) supplied from the server (For example, encryption information generation information) is encrypted using the predetermined key information selected by the selection means, and the encrypted information (for example, the encryption information of FIG. 7) is provided to the server (for example, And cryptographic processing logic 53) of FIG.

  The information management method according to claim 3 is an information management method for managing a plurality of key sets, which are sets of key information used for accessing each area formed in a memory of an IC chip, Based on the designation from the server (for example, the server application 11 in FIG. 4) that controls the IC chip to be controlled using the information encrypted by the key information (for example, the key set by the key set selection information in FIG. 7). A predetermined key set and a predetermined area formed in the memory of the IC chip to be controlled included in the predetermined key set are accessed based on the designation and designation of the key information by the encryption key identification information) A selection step (for example, steps S12 and S13 in FIG. 9) for selecting the predetermined key information used for the purpose, and information supplied from the server (for example, encryption information in FIG. 7). Providing step (for example, encryption information) is encrypted using the predetermined key information selected by the processing of the selection step, and the encrypted information (for example, encryption information in FIG. 7) is provided to the server (for example, Step S14) of FIG. 9 is included.

  Also in the program according to claim 4, the embodiment (however, an example) to which each step corresponds is the same as the information management method according to claim 3.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 4 is a block diagram showing a configuration example of a server-client system to which the present invention is applied.

  The server-client system shown in FIG. 4 has basically the same configuration as the electronic money system shown in FIG. The same components as those in FIG. 1 are denoted by the same reference numerals.

  In the example of FIG. 4, the server side includes the server device 1 and the SAM 2, and the client side includes the client device 3 and the R / W 4. The server device 1 and the client device 3 are connected via a network 5.

  In the example of FIG. 4, the client-side R / W 4 includes a cellular phone 6-1 in which a non-contact IC chip 13-1 is incorporated, and a card 6-2 in which a non-contact IC chip 13-2 is incorporated. (For example, a card such as Suica (registered trademark)) is in close proximity, and is connected to the client device 3 via short-range communication using electromagnetic induction.

  The server application 11 mounted on the server device 1 communicates with the client application 12 mounted on the client device 3, and generates a command (non-contact IC chip 13-1) generated in response to a request from the client application 12. , 13-2 and the like) are output to SAM2. Further, when the encrypted information is supplied from the SAM 2, the server application 11 transmits it to the client application 12 of the client device 3 via the network 5.

  The SAM 2 is a tamper-resistant device, and performs encryption processing and management of keys used in the encryption processing. The SAM 2 encrypts information supplied from the server application 11 and outputs the encrypted information to the server application 11.

  The client application 12 of the client device 3 transmits a predetermined request to the server application 11 of the server device 1, and transmits the information transmitted from the server application 11 via the R / W 4 or the contactless IC chip 13-1. If the transmitted information is a command, it is executed.

  When a command is transmitted from the SAM 2 via the R / W 4 or the like, the non-contact IC chips 13-1 and 13-2 decrypt the applied encryption and execute the command. When the content of the command is rewriting of electronic money (when it is a Write command), the command includes information on the amount of money to be rewritten as parameter information.

  The non-contact IC chips 13-1 and 13-2 have a flash memory, in which various information such as electronic money information is stored. In the non-contact IC chips 13-1 and 13-2 (memory of the non-contact IC chips 13-1 and 13-2), as described above, the system, area, and service areas are hierarchically formed in that order. An encryption key is set in each area.

  Here, management of encryption keys used to access the respective areas of the non-contact IC chips 13-1 and 13-2 will be described.

  FIG. 5 is a diagram showing an example of encryption key management by the SAM 2 of FIG.

  As shown in FIG. 5, the SAM 2 is a cipher for accessing each area formed in the non-contact IC chips 13-1 to 13-n including the non-contact IC chips 13-1 and 13-2 in FIG. I manage my keys.

  In the example of FIG. 5, the non-contact IC chip 13-1 has a system, area 1, service 1, and service 2 areas formed hierarchically (area 1 is the area in the system Service 1 and 2 are formed in 1), respectively. Also, encryption keys 1-1 to 1-4 are set in the areas of the system, area 1, service 1, and service 2 of the non-contact IC chip 13-1.

  Similarly, in the non-contact IC chip 13-2, the areas of the system, area 1, service 1, and service 2 are hierarchically formed. Encryption keys 2-1 to 2-4 are set in the respective areas of the system, area 1, service 1, and service 2 of the non-contact IC chip 13-2.

  That is, in the non-contact IC chips 13-1 and 13-2, an area of the same format including the system, area 1, service 1, and service 2 is formed, but the encryption key set in the same area is Different for each chip.

  In the example of FIG. 5, an area having the same format as the non-contact IC chip 13-1 or the like is formed in the chips after the non-contact IC chip 13-2, and different encryption keys are set in the same area. . For example, encryption keys n-1 to n-4 are respectively set for the system, area 1, service 1, and service 2 formed in the non-contact IC chip 13-n.

  Therefore, for example, even when accessing the same service 2, the encryption key 1-4 is required when the contactless IC chip 13-1 is targeted, and the encryption key 2 when the contactless IC chip 13-2 is targeted. -4 is required, and as shown in FIG. 2, depending on the correspondence table in which one encryption key is uniquely associated with one area, the SAM 2 may be a target contactless IC. The encryption key necessary for the chip cannot be selected in response to a request from the server application 11.

  Therefore, as shown on the right side of FIG. 5, the SAM 2 has n correspondence tables of encryption key identification information (access destination area) and encryption keys (n is an integer of 2 or more), that is, the non-contact IC chip 13. A correspondence table for each of -1 to 13-n is managed as key sets 1 to n.

  The key set 1 is a set of encryption keys for accessing the area of the contactless IC chip 13-1, and the encryption key 1-used for accessing each of the system, area 1, service 1, and service 2. 1 to 1-4.

  Similarly, the key set 2 is a set of encryption keys for accessing the area of the contactless IC chip 13-2, and is used for accessing each of the system, area 1, service 1, and service 2. It consists of keys 2-1 to 2-4.

  The key set n is a set of encryption keys for accessing the area of the contactless IC chip 13-n, and the encryption key n− used for accessing the system, area 1, service 1, and service 2 respectively. 1 to n-4.

  As described above, in the example of FIG. 5, the non-contact IC chips 13-1 to 13-n are all formed with the same format area, but the encryption key types set in the same area are different. Therefore, the SAM 2 manages a set of encryption keys for accessing each non-contact IC chip area as a key set.

  As a result, the server application 11 in FIG. 4 can specify the encryption key used for encrypting the command to be executed by the target non-contact IC chip by the key set and the encryption key identification information.

  In addition, even when the SAM 2 targets a non-contact IC chip in which an area of the same format is formed, a different encryption key is selected for each non-contact IC chip according to the designation from the server application 11, Command encryption can be performed. That is, the SAM 2 can flexibly select an encryption key.

  The processing of the SAM 2 for selecting the encryption key according to the designation by the server application 11 will be described later with reference to a flowchart. Hereinafter, when there is no need to individually distinguish the non-contact IC chips 13-1 and 13-2, they are collectively referred to as non-contact IC chips 13.

  FIG. 6 is a block diagram illustrating a hardware configuration example of the SAM 2 in FIG.

  A CPU (Central Processing Unit) 31 executes various processes according to a program stored in a ROM (Read Only Memory) 32 or a program loaded from a storage unit 37 to a RAM (Random Access Memory) 33. The RAM 33 also stores data necessary for the CPU 31 to execute various processes as appropriate.

  The CPU 31, ROM 32, and RAM 33 are connected to each other via a bus 34. An input / output interface 35 is also connected to the bus 34.

  Connected to the input / output interface 35 are an input unit 36 such as a keyboard and a mouse, a storage unit 37 configured by a hard disk, and a communication unit 38 that performs communication processing with the server device 1. The storage unit 37 stores a plurality of key sets and the like.

  A drive 39 is also connected to the input / output interface 35 as necessary. A removable medium 40 including a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory is appropriately installed in the drive 39, and a computer program read therefrom is installed in the storage unit 37 as necessary.

  FIG. 7 is a block diagram illustrating a functional configuration example of the SAM 2 of FIG. At least a part of the functional units of the SAM 2 shown in FIG. 7 is realized by the CPU 31 shown in FIG. 6 executing a predetermined program.

  The SAM 2 includes a selection device 51, a selection device 52, and a cryptographic processing logic 53. As shown in FIG. 7, in addition to a plurality of key sets, the SAM 2 manages key set selection information, which is information for designating a key set, and a correspondence table indicating the correspondence between the key sets.

  The selection device 51 selects the key set designated by the key set selection information supplied from the server application 11 by referring to the correspondence table between the key set selection information and the key set, and the key set representing the selected key set The identification information is output to the selection device 52.

  The key set selection information does not directly specify the key sets 1 to n like the key set information 1, key set information 2,..., Key set information n shown in the correspondence table of FIG. The type of the non-contact IC chip 13 to be controlled by the server application 11, the communication path between the non-contact IC chip 13 and the SAM 2 (for example, the Internet, a mobile communication network, etc.), and the time at which the non-contact IC chip 13 is processed The key set may be designated by various types of information.

  Further, for example, when the administrator of the SAM 2 presets information specifying a key set to be preferentially selected as key set selection information, the server application 11 gives the key set selection information to the SAM 2 one by one. It may not be possible.

  The selection device 52 selects a key set identified by the key set identification information supplied from the selection device 51, and is designated by the encryption key identification information supplied from the server application 11 from the selected key set. Select the encryption key to be used.

  This encryption key identification information is information indicating which area of the non-contact IC chip 13 is used for what purpose, for example, a code corresponding to a system, area, service, It can be a type of right ticket. Here, the right ticket is information issued from the server application 11 when a new area is formed in the non-contact IC chip 13, and is information corresponding to each area on a one-to-one basis.

  The encryption key selected by the selection device 52 is output to the encryption processing logic 53.

  The encryption processing logic 53 encrypts the encryption information generation information such as a command to be encrypted supplied from the server application 11 by using the encryption key supplied from the selection device 52, and encrypts it. The generated encryption information generation information is transmitted to the server application 11 as encryption information.

  Next, operations of the server application 11 and the SAM 2 will be described with reference to flowcharts.

  First, the processing of the server application 11 in FIG. 4 for transmitting various information to the SAM 2 in order to obtain a command to be executed by the non-contact IC chip 13 will be described with reference to the flowchart in FIG.

  In step S1, the server application 11 transmits key set selection information to the SAM 2 (selection device 51) according to the non-contact IC chip 13 to be controlled.

  For example, when the non-contact IC chip 13-1 is to be controlled, information such that the key set 1 is selected by the selection device 51 (for example, “key set information 1” in the correspondence table of FIG. 7) is the key set selection. Sent as information.

  In step S2, the server application 11 transmits the encryption key identification information to the SAM 2 (selecting device 52) according to the access destination area among the areas formed in the non-contact IC chip 13 to be controlled.

  For example, when the non-contact IC chip 13 to be controlled is the non-contact IC chip 13-1, when the access destination area is a system formed on the non-contact IC chip 13-1, information indicating "system" Is transmitted as encryption key identification information, and when the access destination area is area 1, information representing "area 1" is transmitted as encryption key identification information. Similarly, when the access destination area is service 1, information representing “service 1” is transmitted as encryption key identification information, and when the access destination area is service 2, information representing “service 2” is encrypted. Sent as key identification information.

  In step S3, for example, the server application 11 transmits information on the entire command including parameter information to the SAM 2 (encryption processing logic 53) as encryption information generation information, and ends the processing.

  When the encrypted information generation information transmitted here is encrypted and returned from the SAM 2 as encrypted information, the server application 11 transmits the encrypted information to the non-contact IC chip 13 and decrypts it, and then sends a command. Is executed.

  Next, processing of the SAM 2 for selecting an encryption key will be described with reference to the flowchart of FIG. This process is performed when the process of FIG. 8 is performed and key set selection information, encryption key identification information, and encryption information generation information are transmitted from the server application 11.

  In step S11, the selection device 51 of the SAM 2 receives the key set selection information transmitted from the server application 11, and the selection device 52 receives the encryption key identification information transmitted from the server application 11. Also, the cryptographic processing logic 53 receives the cryptographic information generation information transmitted from the server application 11.

  In step S12, the selection device 51 selects the key set designated by the key set selection information received in step S11 with reference to the correspondence table, and outputs key set identification information representing the selected key set to the selection device 52. To do.

  For example, when “key set information 1” is transmitted from the server application 11 as key set designation information, “key set 1” is selected based on the correspondence table of FIG. 7, and a key set representing “key set 1” is displayed. The identification information is output to the selection device 52.

  In step S13, the selection device 52 selects a key set identified by the key set identification information supplied from the selection device 51, and designates from the selected key set by the encryption key identification information received in step S11. The encryption key to be selected. The encryption key selected by the selection device 52 is output to the encryption processing logic 53.

  For example, when information indicating “key set 1” is supplied from the selection device 51 as key set identification information and information indicating “service 2” is transmitted from the server application 11 as encryption key identification information, the key set identification information “Key set 1” identified by the “key set 1” is selected, and “encryption key 1-4” specified by the encryption key identification information is selected from the encryption keys 1-1 to 1-4 included in “key set 1”. Selected.

  In step S <b> 14, the cryptographic processing logic 53 encrypts the cryptographic information generation information transmitted from the server application 11 using the cryptographic key supplied from the selection device 52, and converts the obtained cryptographic information into the server application 11. Send to.

  For example, the command to be executed by the non-contact IC chip 13-1 transmitted as the encryption generation information is encrypted by the “encryption key 1-4” supplied from the selection device 52, and the encrypted command is It is transmitted to the server application 11 as encrypted information.

  As described above, by preparing a plurality of sets of encryption keys for accessing each area of the same format in the SAM 2, it is possible to specify a predetermined key set from the prepared ones, For example, even when it is desired to change the encryption key for each operation for the contactless IC chip 13 of the same format, such a change can be easily made by changing the designated key set. That is, it is possible to save the trouble of using a different SAM 2 for each operation or changing the encryption key for each operation.

  In the above description, the information selected by the SAM 2 in response to a request from the server application 11 is the encryption key. However, other than that, various information associated with the area formed in the non-contact IC chip 13 is used. It is also possible that the information (information that can be uniquely identified by designating an area) is selected by the SAM 2 and transmitted to the server application 11. For example, the above-described right ticket or the like can be selected.

  In the above description, the case where the IC chip to be controlled is a non-contact type IC chip has been described. Similarly, a contact type IC chip or an IC having both a non-contact type and a contact type function is provided. It is also possible to control the chip.

  The series of processes described above can be executed by hardware, but can also be executed by software.

  When a series of processing is executed by software, a program constituting the software may execute various functions by installing a computer incorporated in dedicated hardware or various programs. For example, it is installed from a network or a recording medium into a general-purpose personal computer or the like.

  As shown in FIG. 6, the recording medium is distributed to provide a program to the user separately from the apparatus main body, and includes a magnetic disk (including a flexible disk) on which the program is recorded, an optical disk (CD- ROM (Compact Disk-Read Only Memory), DVD (Digital Versatile Disk) is included), magneto-optical disk (MD (registered trademark) (including Mini-Disk) is included), or removable media 40 composed of semiconductor memory, etc. In addition, it is configured by a ROM 32 in which a program is recorded and a hard disk included in the storage unit 37 provided to the user in a state of being incorporated in the apparatus main body in advance.

  In the present specification, each step includes not only processing performed in time series according to the described order but also processing executed in parallel or individually, although not necessarily performed in time series.

  Further, in this specification, the system represents the entire apparatus composed of a plurality of apparatuses.

It is a block diagram which shows the structural example of the conventional electronic money system. It is a figure which shows the example of the encryption key managed by SAM and non-contact IC chip of FIG. It is a block diagram which shows the function structural example of SAM of FIG. It is a block diagram which shows the structural example of the server client system to which this invention is applied. FIG. 5 is a diagram showing an example of encryption key management by the SAM of FIG. 4. FIG. 5 is a block diagram illustrating a hardware configuration example of the SAM of FIG. 4. FIG. 5 is a block diagram illustrating a functional configuration example of the SAM in FIG. 4. It is a flowchart explaining the transmission process of a server application. It is a flowchart explaining the encryption key selection process of SAM.

Explanation of symbols

  1 server device, 2 SAM, 3 client device, 4 R / W, 5 network, 6-1 mobile phone, 6-2 card, 11 server application, 12 client application, 13-1, 13-2 contactless IC chip, 51 selection device, 52 selection device, 53 cryptographic processing logic

Claims (4)

In an information management device that manages a plurality of key sets, which are sets of key information used to access each area formed in the memory of an IC (Integrated Circuit) chip,
Based on the designation from the server that controls the IC chip to be controlled using information encrypted with the predetermined key information, the predetermined IC set and the IC chip to be controlled included in the predetermined key set Selection means for selecting the predetermined key information used to access a predetermined area formed in the memory of
And providing means for encrypting information supplied from the server using the predetermined key information selected by the selection means and providing the encrypted information to the server. apparatus. The information management apparatus according to claim 1, wherein the plurality of key sets include a set of key information used to access an area having the same format. In an information management method for managing a plurality of key sets, which is a set of key information used for accessing each area formed in a memory of an IC (Integrated Circuit) chip,
Based on the designation from the server that controls the IC chip to be controlled using information encrypted with the predetermined key information, the predetermined IC set and the IC chip to be controlled included in the predetermined key set A selection step of selecting the predetermined key information used to access a predetermined area formed in the memory;
And a step of encrypting information supplied from the server using the predetermined key information selected by the processing of the selection step, and providing the encrypted information to the server. Information management method. In a program for causing a computer to execute a process for managing a plurality of key sets, which is a set of key information used to access each area formed in an IC (Integrated Circuit) chip memory,
Based on the designation from the server that controls the IC chip to be controlled using information encrypted with the predetermined key information, the predetermined IC set and the IC chip to be controlled included in the predetermined key set A selection step of selecting the predetermined key information used to access a predetermined area formed in the memory;
And a step of encrypting information supplied from the server using the predetermined key information selected by the processing of the selection step, and providing the encrypted information to the server. program.

Images