JP2007206895A - Ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card and the like capable of restricting the selectable applications on a logic channel of the IC card. <P>SOLUTION: When the IC card 1 receives an IC card application selection request command from a portable telephone 3, an operation mode determination function/feature 59 in an execution environment 57 determines operation mode by using operation mode determination information 63, in order to determine whether the IC card application can turn to a selected state on a specified logic channel. When the operation mode of the IC card application requested to be selected is a normal mode, selection request processing is continued. When the operation mode is a selection-restricted mode, selection request processing is discontinued, and error is returned to the portable telephone 3. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an IC card or the like that can restrict selectable applications on a logical channel of the IC card.

A UIM (User Identity Module) card used by being mounted on a mobile phone is equipped with a mobile phone service application called a UIM application for maintaining a connection to a mobile phone network. If the selection state of the UIM application is canceled, the connection to the mobile phone network cannot be maintained, resulting in hindering the provision of the mobile phone service. Therefore, the UIM application is always kept in the selected state on the UIM card. Need to be done.
In recent years, IC cards including UIM cards have been progressing in the direction of expanding memory capacity. In response to this trend, there is a possibility that many IC card applications other than the UIM application are mounted on the UIM card.
In a conventional IC card including a UIM card, when another IC card application is selected on a logical channel for which a specific IC card application has already been selected, the selection state of the IC card application selected first is canceled. (See Non-Patent Document 1 for logical channels). Therefore, when an IC card application other than the UIM application is mounted on the UIM card, a provider of the IC card application other than the UIM application avoids a logical channel used by the UIM application when communicating with the company's IC card application. In this situation, the UIM card issuer is thoroughly aware of this, or the mobile phone has a mechanism to limit the logical channels that can be used by IC card application providers other than UIM applications. ing.
Conventional IC cards, including UIM cards, usually have a plurality of logical channels, and when an IC card application is selected, an IC card application is assigned to the logical channel for execution.

Identification cards-Integrated circuits (s) card with contacts-Part 4: Interindustry commands for interchange, ISO / IEC 7816-4: 1995 (E), September 9, 1995

  However, in the above method, when another IC card application is selected on the same logical channel as the logical channel for which the UIM application is selected, the selection state of the UIM application is canceled, and the mobile phone is in the mobile phone network. It becomes impossible to maintain the connection to the mobile phone, which hinders the provision of mobile phone services.

Normally, a UIM application is selected on logical channel 0, which is a basic logical channel, but another IC card application cannot be newly selected on a logical channel in which the UIM application is selected. There is no restriction, and there is no function to restrict the IC card application that can be selected on logical channel 0 to only the UIM application.
There may be a method of specifying and operating a rule that a logical channel for which another IC card application has already been selected is not selected between the UIM card issuer and the IC card application provider other than the UIM application. In the future, it is assumed that the number of IC card application providers other than the UIM application will increase significantly, and it is considered difficult to make it widely known.

  The present invention has been made in view of such problems, and an object of the present invention is to provide an IC card or the like that can restrict selectable applications on the logical channel of the IC card. is there.

  In order to achieve the above-described object, the first invention is an IC card mounted on a terminal, the IC card comprising reference information holding means for holding reference information for determining an operation mode of an application; The selection request using the receiving means for receiving the selection request for the application, the input information specifying means for specifying the input information for determining the operation mode of the selection request, and the reference information and the input information. An IC card comprising: an operation mode determining means for determining a mode; and a selection request processing means for processing the selection request in accordance with the operation mode.

  The operation modes are a normal mode for continuing the selection request and a restriction mode for canceling the selection request.

  For example, the reference information is a list of identifiers of applications that do not allow other applications to be selected on the logical channel that is selected, and the input information is an identifier of an application that is already selected on the logical channel requested to be selected. And the identifier of the application requested to be selected.

If no other application has already been selected on the logical channel requested to be selected, the operation mode of the application requested to be selected is set to the normal mode, and the selection request is continued.
If the identifier of the application already selected on the logical channel requested to be selected is not described in the identifier list, the operation mode of the application requested to be selected is set to the normal mode, and the selection request is continued.
When all or part of the identifier of the application already selected on the logical channel requested to be selected matches all or part of the identifier of the application requested to be selected, the operation of the application requested to be selected is in the normal mode. And continue the selection request.
If the identifier of the application already selected on the logical channel requested for selection is listed in the identifier list and is different from the identifier of the application requested for selection, the operation mode of the application requested for selection is set to the restricted mode, and the selection is made. Cancel the request.

  The reference information may be a list of identifiers of applications permitted to be selected and executed on each logical channel, and the input information may be an identifier of an application requested to be selected.

If an identifier is not registered in the identifier list corresponding to the logical channel requested to be selected, the operation mode of the application requested to be selected is set to the normal mode, and the selection request is continued.
If there is an identifier of the application requested to be selected in the identifier list corresponding to the logical channel requested to be selected, the operation mode of the application requested to be selected is set to the normal mode, and the selection request is continued.
If there is no identifier of the application requested to be selected in the identifier list corresponding to the logical channel requested to be selected, the operation mode of the application requested to be selected is set to the restricted mode, and the selection request is canceled.

  The second invention is a program for causing an IC card to function as the IC card of the first invention.

  ADVANTAGE OF THE INVENTION According to this invention, the IC card etc. which can restrict | limit the application which can be selected on the logical channel of an IC card can be provided.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, the IC card 1 according to the present embodiment will be described with reference to FIGS.
FIG. 1 is a diagram showing a schematic configuration of the IC card 1 and the mobile phone 3, and FIG. 2 is a hardware configuration diagram of the mobile phone 3.

The mobile phone 3 has the IC card 1 mounted thereon.
The IC card 1 is a removable recording medium mounted on a portable communication terminal such as a mobile phone 3 or a PDA (Personal Digital Assistance). Module) cards and UIM cards mounted on third generation mobile phones are known.
The IC card 1 is a small IC card having a size of about 15 × 25 mm and a thickness of about 8 mm.
The IC card 1 is fixed to a predetermined recess on the inside or outside of an insertion port (not shown) provided on the side surface of the mobile phone 3 or a battery (not shown) whose lid on the back side of the mobile phone 3 is opened. .

  The cellular phone 3 has an antenna 11 for transmitting and receiving, a liquid crystal display panel 13, a key button 15 and the like, and is mounted with an IC card 1 which is a removable recording medium.

  As shown in FIG. 2, the mobile phone 3 includes a control unit 21, a wireless communication unit 23, a display unit 25, an input unit 27, a call processing unit 29, a memory 31, an IC card interface 33, and the like connected via a bus 35. The

  The control unit 21 stores a CPU (Central Processing Unit) for executing a program, an OS (Operating System), a ROM (Read Only Memory) for storing program instructions or data, and temporary work data. For example, a RAM (Random Access Memory). The control unit 21 controls the entire mobile phone 3.

  The wireless communication unit 23 includes an antenna 11 and controls wireless communication performed with a base station (not shown). Under the control of the control unit 21, the wireless communication unit 23 generates a signal such as data related to voice or data for packet communication, and transmits the signal to the base station via the antenna 11, or is transmitted from the base station. A radio signal is received via the antenna 11, and the received signal is demodulated to obtain data relating to voice and data for packet communication.

The display unit 25 includes a liquid crystal display panel 13 and performs display control on the liquid crystal display panel 13.
The input unit 27 includes a key button 15 for inputting numbers, characters, and operation instructions, and outputs a signal corresponding to the operation of the key button 15 to the control unit 21.
The call processing unit 29 includes a microphone, a speaker, a voice processing unit, and the like, and performs call processing including call connection and disconnection processing under the control of the control unit 21.
The memory 31 stores application programs installed in the mobile phone 3, address book data such as telephone numbers and mail addresses, and the like.
The IC card interface 33 controls communication between the IC card 1 mounted on the mobile phone 3 and the mobile phone 3.

  Next, the IC card 1 will be described with reference to FIGS. 3 is a hardware configuration diagram of the IC card 1, FIG. 4 is a diagram illustrating details of the memory 47 of the IC card 1, and FIG. 5 is a diagram illustrating an example of the operation mode determination reference information 63 in the memory 47. 6 is a diagram illustrating an example of the operation mode determination reference information 63 in the memory 47.

  As shown in FIG. 3, the IC card 1 is connected to a CPU 41, a ROM 43, a RAM 45, and a memory 47 through a bus 49.

  The CPU 41 executes the program. The ROM 43 stores program instructions or data. The RAM 45 temporarily stores data and the like during execution of the program.

The memory 47 stores data and the like necessary for the operation of the IC card 1.
As shown in FIG. 4, the memory 47 includes an IC card serial number 51, subscriber identification information 53, an execution environment 57, an operation mode determination function 59, a command delivery function 61, an operation mode determination reference information 63, a UIM application 65, and an addition. Value service application (1) 67-1 to value-added service application (n) 67-n.

  The IC card serial number 51 is a serial number uniquely assigned to the IC card 1. When the IC card 1 is issued, an IC card issuing machine installed at a card issuing company or the like writes the data into the memory 47 of the IC card 1. .

  The subscriber identification information 53 is information used by the network to identify the IC card 1, and is written in the memory 47 of the IC card 1 at a store or the like when a mobile phone service contract is made.

  The execution environment 57 is a function that functions like an OS of a computer. The control unit 41 of the IC card 1 controls the entire IC card 1 according to the execution environment 57, and also includes a UIM application 65 and a value-added service application (1 ) 67-1 to Value-added service application (n) 67-n and the like are executed. The execution environment 57 has an operation mode determination function 59 and a command delivery function 61.

The UIM application 65 is an application for maintaining the connection of the mobile phone 3 equipped with the IC card 1 with the mobile phone network. The value-added service application (1) 67-1 to the value-added service application (n) 67-n. Are various IC card applications executed on the mobile phone 3.
The UIM application 65 and the value added service application 67 are loaded and installed when the IC card 1 is issued. At the time of execution on the IC card 1, any one of the logical channels 0 to 3 in the IC card 1 is selected.

  The command delivery function 61 passes a command output by operating the key button 15 of the mobile phone 3 to the UIM application 65 or the value added service application 67 in the IC card 1.

When the operation mode determination function 59 receives the selection request command for the UIM application 65 and the value added service application 67 from the mobile phone 3, the operation mode determination function 59 refers to the operation determination mode determination criterion information 63 and determines the operation mode of the selection request processing.
When the selection request command is received from the mobile phone 3, the selection request command is received by the operation mode determination function 59 instead of the command delivery function 61 in a state where the UIM application 65 or the value-added service application 67 requested to be selected is not yet selected. It is processed.

The operation modes include “normal mode” and “selection restriction mode”.
When the operation mode is “normal mode”, the execution environment 57 continues the selection request processing for the value-added service application 67 requested to be selected. When the operation mode is “selection restriction mode”, the execution environment 57 is requested to be selected. The selection request processing for the value-added service application 67 is stopped, and an error is returned to the mobile phone 3.

The operation mode determination reference information 63 is information that is referred to when determining the operation mode, and may be stored in a record format in an EF (Elementary File) or may be stored in a TLV (Tag Length Value) data object. The operation mode determination reference information 63 may be written using a command when the IC card 1 is issued, or may be specified by a parameter when the value-added service application 67 is installed.
As the operation mode determination reference information 63, for example, an example as shown in FIG. 5 or FIG. 6 can be considered.

The operation mode determination criterion information 63 illustrated in FIG. 5 includes a selection non-permitted IC card application identifier list 71. The selection non-permitted IC card application identifier list 71 is a list of identifiers of IC card applications that are not permitted to select other IC card applications on the logical channel to which the selected IC card application is assigned. The identifier of the IC card application is 1 to 16 bytes of data.
Normally, only the identifier of the UIM application 65 is written in the selection non-permitted IC card application identifier list 71. That is, the value-added service application 67 cannot be selected on the logical channel in which the UIM application 65 is selected, and the UIM application 65 is not released from the selected state.

The operation mode determination information 63 illustrated in FIG. 6 includes a selection permission IC card application identifier code 73. The selection-permitted IC card application identifier code 73 is a list of identifiers of IC card applications that are permitted to be selected on each logical channel.
On the logical channel in which the identifier is written in the selection-permitted IC card application identifier code 73, only the IC card application having the written identifier is permitted to be selected, and other IC card applications are in the selected state. Can not. If no identifier is written in the selection-permitted IC card application identifier code 73, it means that there is no restriction on the IC card application that is selected on the logical channel.
Usually, the identifier of the UIM application 65 is written in the logical channel 0 of the selection permission IC card application identifier code 73. That is, only the UIM application 65 is permitted to be selected on the logical channel 0, and other value-added service applications 67 are not permitted.

Next, the operation of this embodiment will be described with reference to FIGS.
FIG. 7 is a diagram showing a flow of operation mode determination processing using the operation mode determination reference information 63 including the selection non-permitted IC card application identifier list 71, and FIG. 8 is an operation mode including the selection permission IC card application identifier list 73. It is a figure which shows the flow of the operation mode determination process using determination reference information.

  In the operation mode determination process shown in FIG. 7, when the IC card application selection request command is received from the mobile phone 3, the control unit 41 of the IC card 1 passes the received selection request command to the operation mode determination function 59 of the execution environment 57. (Step 101).

  The operation mode determination function 59 of the IC card 1 determines whether there is an IC card application such as the UIM application 65 or the value-added service application 67 already selected in the logical channel requested to be selected (step 102). If not, the operation mode is set to “normal mode” (step 103).

  When there is an IC card application already selected in the logical channel requested to be selected, the operation mode determination function 59 of the IC card 1 determines that the identifier of the IC card application already selected is not selected. It is determined whether it is in the application identifier list 71 (step 104).

  When the identifier of the already selected IC card application is not in the selection-unpermitted IC card application identifier list 71, the IC card application is selected by another IC card application on the logical channel in which it is selected. Since it is permitted to enter the state, the operation mode is set to “normal mode” (step 105). That is, by continuing the selection process, the newly requested IC card application is selected, and when the selection request command is received, the already selected IC card application is deselected.

When the identifier of the already selected IC card application is in the selection-unpermitted IC card application identifier list 71, the identifier of the already selected IC card application is different from the identifier of the IC card application requested to be selected. If the two identifiers have the same value, the already selected IC card application and the requested IC card application are the same, so this selection request is the same IC card. It is considered to be an application reselection process. Therefore, the operation mode is set to “normal mode” (step 107).
If the two identifiers have different values, the IC card application requested to be selected cannot be selected, so the operation mode is set to “selection restriction mode” (step 108).

  The operation mode determination function 59 of the IC card 1 determines whether or not the operation mode is “normal mode” (step 109). If the operation mode is “selection restriction mode”, the selection request processing is stopped and an error is returned to the mobile phone 3 (step step). 110). On the other hand, when the operation mode is the “normal mode”, the execution environment 57 continues the selection request process (step 111).

In this way, by writing the identifier of the UIM application 65 in the selection-inhibited IC card application identifier code 71, a selection request for selecting another value-added service application 67 when the UIM application 65 is in the selected state is issued. Even if the UIM application 65 transmits to the selected logical channel, the selection request is canceled, the UIM application 65 is not deselected, and the connection to the mobile phone network is maintained. .
That is, the identifier of the IC card application already selected in the process of step 104, that is, the identifier of the UIM application 65 is in the unauthorized IC card application identification list 71, and further, the IC card application already selected in step 106 is displayed. Since the identifier, that is, the identifier of the UIM application 65 is different from the identifier of the value-added service application 67 requested to be selected, the operation mode is set to the selection restriction mode in step 108. Therefore, an error is returned to the selection request in step 110, and the selection request of the value added service application 67 is canceled.

  In the operation mode determination process shown in FIG. 8, when an IC card application selection request command is received from the mobile phone 3, the control unit 41 of the IC card 1 passes the received selection request command to the operation mode determination function 59 of the execution environment 57. (Step 201).

  The operation mode determination function 59 of the IC card 1 determines whether or not one or more IC card application identifiers are written in the selection permission IC card application identifier list 73 corresponding to the logical channel requested to be selected (step 202). If not written, the operation mode is set to “normal mode” (step 203).

  When one or more IC card application identifiers are written in the selection-permitted IC card application identifier list 73 corresponding to the logical channel requested to be selected, it is determined whether or not the identifier of the IC card application requested to be selected is included. If it is not included, selection on the logical channel is not permitted. Therefore, the operation mode is set to “selection restriction mode” (step 205). If included, the operation mode is set. The “normal mode” is set (step 206).

  The operation mode determination function 59 of the IC card 1 determines whether or not the operation mode is “normal mode” (step 207). If the operation mode is “selection restriction mode”, the selection request processing is stopped and an error is returned to the mobile phone 3 (step 207). 208). On the other hand, when the operation mode is “normal mode”, the execution environment 57 continues the selection request process (step 209).

Thus, by writing the identifier of the UIM application 65 in the logical channel 0 of the selection-permitted IC card application identifier code 73 and executing the UIM application 65 on the logical channel 0, when the UIM application 65 is in the selected state, Even if another value-added service application 67 makes a selection request to logical channel 0, the selection request is canceled, the UIM application 65 is not deselected, and the connection to the mobile phone network is maintained. Is done.
That is, the identifier of the UIM application 65 is in the selection permission IC card application identifier list 73 corresponding to the logical channel 0 that received the selection request in step 202, and the identifier of the value-added service application 67 requested for selection in step 204 is Since it is not in the selection permission IC card application identifier list 73, the operation mode is set to the selection restriction mode in step 205. Accordingly, an error is returned to the selection request in step 208, and the selection request of the value added service application 67 is canceled.

  As described above, according to this embodiment, it is possible to limit selection requests of other IC card applications on a logical channel in which a specific IC card application such as a UIM application is selected in the IC card. Possible IC cards can be provided.

  In the operation mode determination, when the IC card application selection request is made, the life cycle state indicating the state of the IC card is used, and if the factory is issued, the operation mode is always set to “normal mode”. For example, the operation mode may be determined according to the selection state on the logical channel requested to be selected and the operation mode determination reference information.

  The preferred embodiments of the IC card according to the present invention have been described above with reference to the accompanying drawings, but are not limited to the above-described embodiments. It is obvious for those skilled in the art that various modifications or modifications can be conceived within the scope of the technical idea described in the claims, and these are naturally within the technical scope of the present invention. It is understood that it belongs.

The figure which shows the structure outline of IC card 1 and the mobile telephone 3 Hardware configuration diagram of mobile phone 3 Hardware configuration of IC card 1 The figure which shows the detail of the memory 47 of IC card 1 The figure which shows an example of the operation mode criteria information 63 in the memory 47 The figure which shows an example of the operation mode criteria information 63 in the memory 47 The figure which shows the flow of the operation mode determination process using the operation mode determination reference | standard information 63 containing the selection non-permitted IC card application identifier list 71 The figure which shows the flow of the operation mode determination process using the operation mode determination reference | standard information containing the selection permission IC card application identifier list | wrist 73.

Explanation of symbols

1 ... IC card 3 ... Mobile phone 11 ... Antenna 13 ... Liquid crystal display panel 15 ... Key button 21 Control unit 23 Wireless communication unit 25 ... Display unit 27 ......... Input unit 29 ......... Call processing unit 31 ......... Memory 33 ......... IC card interface 41 ......... CPU
43 ……… ROM
45 ......... RAM
47 ......... Memory 51 ......... IC card serial number 53 ......... Subscriber identification information 57 ......... Execution environment 59 ......... Operation mode determination function 61 ......... Command delivery function 63 ......... Operation mode determination criteria Information 65 ... UIM application 67 ... Value-added service application 71 ... ... Selection-unpermitted IC card application identifier list 73 ... ... Selection-permitted IC card application identifier

Claims (14)

An IC card mounted on a terminal,
The IC card is
Reference information holding means for holding reference information for determining the operation mode of the application;
Receiving means for receiving a selection request of the application;
Input information specifying means for specifying input information for determining the operation mode of the selection request;
An operation mode determination means for determining an operation mode of the selection request using the reference information and the input information;
Selection request processing means for processing the selection request according to the operation mode;
An IC card characterized by comprising:   2. The IC card according to claim 1, wherein the operation modes are a normal mode for continuing the selection request and a selection restriction mode for canceling the selection request.   The reference information is a list of identifiers of applications that do not permit selection of other applications on the logical channel on which the reference information is selected, and the input information is already selected on the logical channel requested to be selected. 2. The IC card according to claim 1, wherein the identifier is an application identifier and an identifier of the application requested to be selected.   4. If no other application is already selected on the logical channel requested to be selected, the operation mode of the application requested to be selected is set to a normal mode, and the selection request is continued. IC card.   If the identifier of the application already selected on the logical channel requested to be selected is not listed in the identifier list, the operation mode of the application requested to be selected is set to the normal mode, and the selection request is continued. The IC card according to claim 3.   If the identifier of the application already selected on the logical channel requested for selection matches the identifier of the application requested for selection, the operation of the application requested for selection is set to the normal mode, and the selection request is continued. The IC card according to claim 3, wherein:   When the identifier of the application already selected on the logical channel requested to be selected is listed in the identifier list and is different from the identifier of the application requested to be selected, the operation mode of the application requested to select is selected. 4. The IC card according to claim 3, wherein the selection request mode is set and the selection request is canceled.   2. The reference information is a list of identifiers of applications permitted to be selected and executed on each logical channel, and the input information is an identifier of an application requested to be selected. IC card.   9. The method according to claim 8, wherein when an identifier is not registered in the identifier list corresponding to the logical channel requested to be selected, an operation mode of the application requested to be selected is set to a normal mode, and the selection request is continued. IC card of description.   When the identifier list corresponding to the logical channel requested for selection includes an identifier of the application requested for selection, the operation mode of the application requested for selection is set to a normal mode, and the selection request is continued. The IC card according to claim 8.   When there is no identifier of the application requested for selection in the identifier list corresponding to the logical channel requested for selection, the operation mode of the application requested for selection is set as a selection restriction mode, and the selection request is stopped. 9. The IC card according to claim 8, wherein:   A program for causing an IC card to function as the IC card according to claim 1.   The program which makes an IC card function as an IC card of Claim 3.   A program for causing an IC card to function as the IC card according to claim 8.

Images