JP2007115187A - Portable electronic device and ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable electronic device and IC card capable of preventing, for example, runaway of a program resulting from disturbance so that important data stored inside can be prevented from being leaked and altered by restricting executable program modules or accessible data in each phase (use stage). <P>SOLUTION: In the IC card capable of switching phases (stages to be used), among an initialization phase, an issuing phase and an operation phase, restricts executable program modules or accessible data in each phase (use stage). <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention incorporates an IC (Integrated Circuit) chip having control elements such as a writable and rewritable nonvolatile memory and a CPU (Central Processing Unit), and performs various processes based on commands supplied from the outside. The present invention relates to a portable electronic device such as an IC card that executes and outputs the result to the outside, and an IC card.

  Recently, as a portable electronic device, an EEPROM as a nonvolatile memory, a RAM as a volatile memory, a CPU as a control element for accessing (reading or writing data, etc.) the memory, and the CPU Built-in IC chip with ROM that stores operation programs, etc., and means for executing processing corresponding to commands supplied from an external device (IC card reader / writer) and outputting the result to the external device IC cards are used in various industries.

This type of IC card can usually be switched between an initialization phase, an issuance phase, an operation phase, and a phase (a stage in which it is used), and a program for controlling card operation is composed of a plurality of program modules. However, it does not limit the program modules that can be executed for each phase.
JP 2001-56848 A

  As described above, the program modules that can be executed for each phase are not limited in the past, so that, for example, program runaway due to disturbance occurs, preventing the leakage or falsification of important data stored inside There is a problem that can not be.

  Therefore, the present invention prevents, for example, a program runaway due to a disturbance by limiting which program module can be executed in which phase (use stage) or which data can be accessed. An object of the present invention is to provide a portable electronic device and an IC card that can prevent leakage or falsification of important data stored therein.

  The portable electronic device of the present invention is a portable electronic device that recognizes a stage in which the portable electronic device is used and restricts its operation, and a program for controlling the operation of the portable electronic device includes a plurality of programs. Each of the plurality of program modules is associated with pre-registered program module executable stage information, and the program associated with the program module before the execution of the program module is started. Whether or not the program module can be executed is determined by comparing the module executable stage information with the recognition result of the stage where the portable electronic device is currently used.

  The portable electronic device of the present invention is a portable electronic device that recognizes a stage in which the portable electronic device is used and restricts its operation, and a plurality of programs that control the operation of the portable electronic device. First storage means storing a program composed of modules, and information on program module executable stages registered in advance and associated with a plurality of program modules stored in the first storage means are stored. Second storage means, information on the program module executable stage associated with the program module stored in the second storage means before starting execution of the program module, and the portable electronic device now Whether the program module can be executed by comparing with the recognition result at the stage where the And it includes an execution availability determination means for determining for.

  The IC card of the present invention is an IC card that recognizes the stage in which the IC card is used and restricts its operation, and stores a program composed of a plurality of program modules that control the operation of the IC card. First storage means and second storage means for storing information on program module executable stages that are associated with a plurality of program modules stored in the first storage means and registered in advance. And information on the program module executable stage associated with the program module stored in the second storage means and the recognition result at the stage where the IC card is currently used before starting execution of the program module. Executability determination means for determining whether or not the program module can be executed by comparing And IC modules, and an IC card body that houses the IC module.

  According to the present invention, it is possible to prevent program runaway due to disturbance, for example, by restricting which program module can be executed in which phase (use stage) or which data can be accessed. It is possible to provide a portable electronic device and an IC card that can prevent leakage or falsification of important data stored inside.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration example of an IC card system that handles an IC card as a portable electronic device according to the present invention. In this IC card system, the IC card 11 can be connected to a terminal device 13 such as a personal computer via a card reader / writer 12, and a keyboard 14, a CRT display unit 15, and a printer 16 are connected to the terminal device 13. Composed.

  FIG. 2 shows the configuration of the IC card 11 for communicating with the CPU 101 as the control element, the data memory 102 as the storage means, the working memory 103, the program memory 104, and the card reader / writer 12. The communication unit 105 is configured. Of these, the portion within the broken line (CPU 101, data memory 102, working memory 103, program memory 104) is composed of one (or a plurality) of IC chips 106, and further, this IC chip 106 and communication unit 105. Are integrated into an IC module and embedded in the IC card main body 11a.

The IC chip 103 includes a CPU 104 as a control element, a data memory 105 as a storage means, a working memory 106, and a program memory 107. The IC chip 103 is integrated into an IC module while being connected to the communication unit 102, It is embedded in the card body 11a.
The CPU 101 is a control unit that performs various types of determination processing, determination processing, and data processing such as writing to and reading from a memory.

  The data memory 102 is used for storing various types of data such as application data, and includes, for example, an erasable (rewritable) nonvolatile memory such as an EEPROM (electrically erasable and programmable read only memory). ing.

  The working memory 103 is a working memory for temporarily storing processing data when the CPU 101 performs processing. For example, the working memory 103 includes a volatile memory such as a RAM (Random Access Memory).

  The program memory 104 is composed of a non-rewritable fixed memory such as a mask ROM (read only memory), for example, and stores an operation program of the CPU 101 and the like.

  When the IC card 11 is a non-contact (wireless) IC card, the communication unit 105 is configured as an antenna unit, and receives the modulated wave transmitted from the card reader / writer 12 in a non-contact manner or transmits the modulated wave to the outside. Or to send. Further, a power supply and a clock for supplying to the internal circuit are generated from the modulated wave received by the communication unit 105. In the case of a contact type IC card, it is configured as a contact portion, and a power source and a clock are obtained by contacting with an IC card terminal portion (not shown) provided in the card reader / writer 12.

  FIG. 3 shows the configuration of program modules stored in the program memory 104 (or the data memory 102 in some cases). 301 is a program module constituting a program for controlling the operation of the IC card 11, 302 is information on a program module executable stage associated with the program module 301 registered in advance, for example, the program module 301 can be executed. This is permission phase information indicating a permitted phase, and a plurality of program modules 301 having such a configuration are stored, and processing such as command transmission / reception is performed by combining these.

  FIG. 4 shows the configuration of data stored in the data memory 102 (or the program memory 104 in some cases). 401 is various data, 402 is pre-registered accessible stage information, for example, permission phase information indicating a permitted phase in which the data can be accessed, and a plurality of such data 401 are stored. By combining these, processing such as command transmission / reception is performed, and processing such as data reading and writing is performed.

  FIG. 5 shows a memory map of the data memory 102. Reference numeral 501 denotes phase information indicating a current phase (stage) in which the IC card 11 stored in a specific area is used, and 502 denotes another area (data storage area). Note that the phase information 501 is rewritten to the next phase at the end of the processing in the previous phase, for example.

Next, the program module phase information check process will be described with reference to the flowchart shown in FIG.
When the process is started, the CPU 101 acquires the current phase information 501 of the IC card 11 from the data memory 102 (step S1), and then acquires the permitted phase information 302 of the program module from the program memory 104 (step S2). .

  Next, the CPU 101 compares the phase information 501 acquired in step S1 with the permitted phase information 302 acquired in step S2, thereby checking whether or not the phase is permitted (step S3). If the current phase (both phase information matches), the processing of the program module 301 is started (step S4). If the phase is not permitted (both phase information does not match), the CPU 101 is halted ( HALT) (step S5), and the process ends.

Next, data phase information check processing will be described with reference to the flowchart shown in FIG.
When the process is started, the CPU 101 acquires the current phase information 501 of the IC card 11 from the data memory 102 (step S11), and then acquires the permitted phase information 402 of the data to be accessed from the data memory 102 (step S12). ).

  Next, the CPU 101 compares the phase information 501 acquired in step S11 with the permitted phase information 402 acquired in step S12 to check whether the phase is permitted (step S13). In the case of the current phase (both phase information matches), the access processing for the data 401 is started (step S14). HALT) (step S15), and the process ends.

Next, referring to the flowchart shown in FIG. 8, the processing when the check processing of each phase information of the program module and data is performed in series will be described.
When the process is started, the CPU 101 acquires the current phase information 501 of the IC card 11 from the data memory 102 (step S21), and then acquires the permitted phase information 302 of the program module from the program memory 104 (step S22). .

  Next, the CPU 101 compares the phase information 501 acquired in step S21 with the permitted phase information 302 acquired in step S22 to check whether the phase is permitted (step S23). If the current phase (both phase information matches), the processing of the program module 301 is started (step S24). If the phase is not permitted (both phase information does not match), the CPU 101 is halted ( HALT) (step S25).

  In the program module processing of step S24, for example, when referring to the data in the data memory 102, the CPU 101 acquires the current phase information 501 of the IC card 11 from the data memory 102 (step S26), and then the data memory The permission phase information 402 of the data accessed from 102 is acquired (step S27).

  Next, the CPU 101 checks whether or not the phase is permitted by comparing the phase information 501 acquired in step S26 with the permitted phase information 402 acquired in step S27 (step S28). If the current phase (both phase information matches), the access processing for the data 401 is started (step S29). If the phase is not permitted (both phase information does not match), the CPU 101 is halted ( HALT) (step S30), and the process ends.

  In this way, in an IC card that can switch between an initialization phase, an issuance phase, an operation phase, and a phase (a stage to be used), which program module can be executed in which phase (a stage of use), Alternatively, by restricting which data can be accessed (for example, during the initialization phase and issue phase, but not during the operation phase), for example, preventing program runaway due to disturbance In addition, it is possible to prevent leakage or falsification of important data stored inside.

  In the above-described embodiment, the case where the present invention is applied to an IC card as a portable electronic device has been described. However, the present invention is not limited to this, and for example, a portable terminal device called PDA, a cellular phone, etc. However, it is not limited to the card type, and may be a booklet type, a block type, or a tag type.

1 is a block diagram schematically showing a configuration of an IC card system using an IC card as a portable electronic device according to an embodiment of the present invention. The schematic diagram which shows the structure of an IC card roughly. The schematic diagram which shows the structure of the program module stored in the program memory. The schematic diagram which shows the structure of the data stored in the data memory. The schematic diagram which shows the memory map of a data memory. The flowchart explaining the check process of the phase information of a program module. The flowchart explaining the check process of the phase information of data. The flowchart explaining the process in the case of performing the check process of each phase information of a program module and data in series.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... IC card (portable electronic device), 11a ... IC card main body, 12 ... Card reader / writer, 13 ... Terminal device, 14 ... Keyboard, 15 ... CRT display part, 16 ... Printer, 101 ... CPU (control element) , 102 ... Data memory (storage means), 103 ... Working memory, 104 ... Program memory, 105 ... Communication unit, 106 ... IC chip, 301 ... Program module, 302 ... Permit phase information, 401 ... Data, 402 ... Permit phase information 501 ... phase information 502 ... data storage area.

Claims (12)

A portable electronic device that recognizes a stage where the portable electronic device is used and restricts its operation,
The program for controlling the operation of the portable electronic device is composed of a plurality of program modules, and each of the plurality of program modules is associated with pre-registered program module executable stage information. Before starting the execution, the program module executable stage information associated with the program module is compared with the recognition result of the stage where the portable electronic device is currently used to determine whether the program module can be executed. A portable electronic device characterized by that. A portable electronic device that recognizes a stage where the portable electronic device is used and restricts its operation,
First storage means storing a program composed of a plurality of program modules for controlling the operation of the portable electronic device;
Second storage means for storing program module executable stage information that is associated with each of the plurality of program modules stored in the first storage means and registered in advance;
Before starting execution of the program module, information on the program module executable stage associated with the program module stored in the second storage means and the recognition result of the stage in which the portable electronic device is currently used Execution feasibility judgment means for judging whether or not the program module can be executed by comparing;
A portable electronic device comprising:   3. The portable electronic device according to claim 2, further comprising a control unit that stops the operation of the portable electronic device when the execution of the program module is impossible as a result of the determination by the execution permission determining unit. . A portable electronic device that recognizes a stage where the portable electronic device is used and restricts its operation,
A plurality of data is stored in the memory, and each of the plurality of data is associated with information on an accessible stage registered in advance, and the access associated with the data can be performed before the data access is started. A portable electronic device comprising: determining whether or not access to the data is possible by comparing stage information with a recognition result at a stage where the portable electronic device is currently used. A portable electronic device that recognizes a stage where the portable electronic device is used and restricts its operation,
First storage means for storing a plurality of data;
Second storage means for storing information on accessible stages registered in advance and associated with a plurality of data stored in the first storage means;
By comparing the information of the accessible stage associated with the data stored in the second storage means and the recognition result of the stage where the portable electronic device is currently used before starting to access the data An access permission determination means for determining whether or not the data can be accessed;
A portable electronic device comprising:   6. The portable electronic device according to claim 5, further comprising a control unit that stops the operation of the portable electronic device when access to the data is impossible as a result of the determination by the access permission determining unit. A portable electronic device that recognizes a stage where the portable electronic device is used and restricts its operation,
First storage means storing a program composed of a plurality of program modules for controlling the operation of the portable electronic device;
Second storage means for storing program module executable stage information that is associated with each of the plurality of program modules stored in the first storage means and registered in advance;
A third storage means for storing a plurality of data;
A fourth storage means for storing information on accessible stages registered in advance and associated with a plurality of data stored in the third storage means;
Before starting execution of the program module, information on the program module executable stage associated with the program module stored in the second storage means and the recognition result of the stage in which the portable electronic device is currently used Execution feasibility judgment means for judging whether or not the program module can be executed by comparing;
As a result of the determination by the execution determination unit, when the execution of the program module is permitted and the data in the third storage unit is accessed when the program module is executed, the fourth storage is started before the access is started. Accessability determination means for determining whether or not access to the data is possible by comparing the information of the accessible stage associated with the data stored in the means and the recognition result of the stage where the portable electronic device is currently used When,
A portable electronic device comprising:   If the execution of the program module is impossible as a result of the determination by the execution permission determination means, or if the access to the data is not possible as a result of the determination by the access permission determination means, the operation of the portable electronic device is stopped. The portable electronic device according to claim 7, further comprising a control unit that controls the portable electronic device.   The stage in which the portable electronic device is used is at least two of an initialization phase, an issuance phase, and an operation phase. A portable electronic device according to claim 1. An IC card that recognizes the stage in which the IC card is used and restricts its operation,
A first storage unit storing a program composed of a plurality of program modules for controlling the operation of the IC card, and a plurality of program modules stored in the first storage unit are associated with each other and registered in advance. Second storage means for storing the information of the program module executable stage, and execution of the program module associated with the program module stored in the second storage means before starting execution of the program module An IC module having execution capability determination means for determining whether or not the program module can be executed by comparing information on possible levels and a recognition result at a stage where the IC card is currently used;
An IC card body containing the IC module;
An IC card comprising: An IC card that recognizes the stage in which the IC card is used and restricts its operation,
A first storage means for storing a plurality of data, and a second storage means for storing information on accessible stages registered in advance and associated with the plurality of data stored in the first storage means, respectively. Compare the storage means and the information on the accessible stage associated with the data stored in the second storage means before starting the data access and the recognition result of the stage where the IC card is currently used. An IC module having access permission determination means for determining whether or not access to the data is possible,
An IC card body containing the IC module;
An IC card comprising: An IC card that recognizes the stage in which the IC card is used and restricts its operation,
A first storage unit storing a program composed of a plurality of program modules for controlling the operation of the IC card, and a plurality of program modules stored in the first storage unit are associated with each other and registered in advance. Second storage means for storing information on the program module executable stage, third storage means for storing a plurality of data, and a plurality of data stored in the third storage means A fourth storage means storing information on accessible stages registered in advance and associated with each of the program modules stored in the second storage means before starting execution of the program module. Information on the executable stage of the program module and the recognition result of the stage in which the IC card is currently used As a result of the determination by the execution determination unit that determines whether or not the program module can be executed by comparing, execution of the program module is permitted as a result of the determination by the execution determination unit. When accessing the data, the information of the accessible stage associated with the data stored in the fourth storage means and the recognition result of the stage where the IC card is currently used are stored before starting the access. An IC module having an access permission determination means for determining whether or not access to the data is possible by comparing;
An IC card body containing the IC module;
An IC card comprising:

Images