JP2007243272A - Information processing system, management provider apparatus, service provider apparatus, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing system capable of virtually establishing a plurality of keys to a shared area of an integrated circuit chip capable of hierarchically including areas being data storage areas. <P>SOLUTION: A provider 0 manages the whole IC card (integrated circuit chip) 100, the IC card includes a plurality of providers 1, 2, each of which manages part areas of the IC card and provides a service to the IC card, the provider 0 establishes the shared area 3 to the IC card which both the provides 1, 2 use, and when providing a degeneration key for access to the shared area by the providers 1, 2 utilizing the shared area, the provider 0 is characterized by generating the degeneration key including the keys of the areas managed by the providers 1, 2. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an information processing system, a management provider device, a service provider device, and a computer program, and in particular, a plurality of services for an IC card (integrated circuit chip) that can hierarchically have an area that is a data storage area. The present invention relates to an information processing system, a management provider device, a service provider device, and a computer program.

  As an information processing system for providing a plurality of services to an IC card, for example, Japanese Patent Laid-Open No. 2000-36021 “Data Storage Device and Data Storage Method” (Patent Document 1), Japanese Patent Laid-Open No. 2004-336825 “Authentication” There is a technique disclosed in "Key Generation Method" (Patent Document 2). Patent Document 1 discloses an IC card that can hierarchically have an area (data storage area) that can be occupied by a plurality of providers. In such an IC card, Patent Document 2 discloses a method for one provider to simultaneously access a plurality of areas.

  In the technique disclosed in the above document, when a plurality of providers access the same area (shared area), only one key required for access can be set. The access cannot be prohibited. In order to prohibit access to the shared area by a specific provider, the key to access the shared area must be changed, but there was a problem that changing the key had a significant effect on other providers in operation. .

  The above problem will be described with reference to FIGS. FIG. 8 is an explanatory diagram showing areas in the IC card 400, encryption keys corresponding to the areas, and providers. In FIG. 8, consider a case where provider 1 accesses area 5 common to providers 1 and 2. The provider 0 who is the manager of the entire IC card sets the encryption key 5 in advance, and provides the degenerate key D05 for accessing the area 5 and the order of the areas (D0, area 5) to the providers 1 and 2. FIG. 9 is an explanatory diagram showing generation of a degenerate key, and shows a process in which provider 0 sets encryption key 5 and generates degenerate key D05 for accessing area 5 using 2-input degeneration circuit 500. . As a result, the providers 1 and 2 can access the area 5 using the degenerate key D05.

  Here, when the provider 1 stops the service operation on the IC card for some reason, it is necessary to change the degenerate key D05 used so far in order to prohibit the provider 1 from accessing the area 5. That is, it is necessary to change the encryption key 5. When the encryption key 5 is changed, the degenerate key D05 used by the provider 2 is also changed, resulting in a problem that costs are increased accordingly.

JP 2000-36021 A JP 2004-336825 A

  The present invention has been made in view of the above-described problems of the background art, and an object of the present invention is a novel and capable of artificially setting a plurality of keys in a certain area service. To provide an improved information processing system, management provider device, service provider device, and computer program. As a result, when a certain provider accesses the common area, a degenerate key different from other providers can be used. Further, it becomes easy to prohibit one provider from accessing the area.

  In order to solve the above problems, according to a first aspect of the present invention, there is provided an information processing system for providing a plurality of services to an integrated circuit chip that can hierarchically have an area that is a data storage area. Provided. An information processing system of the present invention comprises: a management provider device that manages the entire integrated circuit chip; and a plurality of service provider devices that manage an area of the integrated circuit chip and provide services to the integrated circuit chip. Including. Then, the management provider device sets a shared area used by at least two or more service provider devices for the integrated circuit chip, and the management provider device uses one service provider that uses the shared area. When a degenerate key for accessing the shared area is provided to a device, a degenerate key including an area (dedicated area) key managed by the one service provider device is generated.

  According to such a system, when the management provider device provides a degenerate key for accessing the common area, it is possible to generate a degenerate key including the key of the area (dedicated area) managed by the service provider device. is there. In this way, when a provider accesses a common area, a degenerate key different from other providers can be used. Further, it becomes easy to prohibit one provider from accessing the area. Conventionally, only one key can be set for one area service, but this method makes it possible to set a plurality of pseudo keys for one area service.

  In the information processing system of the present invention, for example, each service provider device can set one or more services in a lower layer of an area (dedicated area) managed by the service provider device. It is possible to generate a new degenerate key by adding a service key set in an area (dedicated area) managed by itself to the degenerate key provided from the management provider device. According to such a configuration, it is possible to simultaneously access a service set in a common area and a service set in an area managed by itself (dedicated area) using one degenerate key.

  In order to solve the above problems, according to a second aspect of the present invention, there is provided an information processing system for providing a plurality of services to an integrated circuit chip that can hierarchically have an area as a data storage area. , A management provider device for managing the entire integrated circuit chip is provided. The management provider device according to the present invention includes a shared area setting means for setting a shared area used by at least two service provider devices that provide services to the integrated circuit chip, and the shared area. When a degenerate key for accessing the shared area is provided to one service provider device that uses the service, a degenerate key is generated including the keys of the area (dedicated area) managed by the one service provider device And degenerate key generation means.

  According to such a configuration, when providing a degenerate key for accessing the shared area, it is possible to generate a degenerate key including the key of the area (dedicated area) managed by the service provider device. In this way, when a provider accesses a common area, a degenerate key different from other providers can be used. Further, it becomes easy to prohibit one provider from accessing the area. Conventionally, only one key can be set for one area service, but this method makes it possible to set a plurality of pseudo keys for one area service.

  Further, according to the present invention, there are provided a program for causing a computer to function as a management provider device according to the second aspect, and a computer-readable recording medium on which the program is recorded. Here, the program may be described in any programming language. In addition, as a recording medium, for example, a recording medium that is currently used as a recording medium capable of recording a program, such as a CD-ROM, a DVD-ROM, or a flexible disk, or any recording medium that is used in the future should be adopted. Can do.

  In order to solve the above-described problem, according to a third aspect of the present invention, an integrated circuit chip that manages an area that is a data storage area in a hierarchical manner is managed. , A service provider device for providing a service is provided. The service provider apparatus of the present invention is a degenerate key that is provided by a management provider apparatus that manages the entire integrated circuit chip and that is provided with a degenerate key that is used by at least two or more service provider apparatuses and that uses a common area. Receiving means, and degenerate key generation means for generating a new degenerate key by adding a service key set in an area (dedicated area) managed by itself to the degenerate key provided from the management provider device It is characterized by that.

  According to such a configuration, in addition to the above effects, a service set in the common area and a service set in the self-managed area (dedicated area) can be accessed simultaneously using one degenerate key. Is possible.

  In addition, according to the present invention, there are provided a program for causing a computer to function as the service provider device according to the third aspect, and a computer-readable recording medium on which the program is recorded. Here, the program may be described in any programming language. In addition, as a recording medium, for example, a recording medium that is currently used as a recording medium capable of recording a program, such as a CD-ROM, a DVD-ROM, or a flexible disk, or any recording medium that is used in the future should be adopted. Can do.

  In the present invention described above, the integrated circuit chip may be mounted on an IC card. It is possible to provide various services to IC card users by using IC cards that have been widely used in recent years. As a result, IC cards can be further spread and a new infrastructure can be constructed. In addition to the IC card, the integrated circuit chip can be mounted on a portable terminal such as a cellular phone or a personal computer.

  As described above, according to the present invention, when a certain provider accesses the shared area, a degenerate key different from other providers can be used. Further, it becomes easy to prohibit one provider from accessing the area. Conventionally, only one key can be set for one area service. However, according to the present invention, a plurality of keys can be set for one area service in a pseudo manner.

  Exemplary embodiments of an information processing system, a management provider device, a service provider device, and a computer program according to the present invention will be described below in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

  In the following description, the “IC card” may be a card-type data communication device, and an integrated circuit chip having an IC card function is built in an information communication terminal device (data processing device) such as a cellular phone. It may be what you did. Whether the IC card is built in the device or configured to be detachable from the device, it may be referred to as an “IC card” in this specification for convenience. An integrated circuit chip having an IC card function is mounted on an information processing terminal such as a portable terminal such as a mobile phone or a PDA or a personal computer (PC), for data communication with an external device. In this case, an interface for connecting to an external device is provided in addition to an interface for connecting the reader / writer device by wire or wirelessly.

(1) Internal configuration of IC card (Fig. 1)
FIG. 1 is an explanatory diagram showing the internal configuration of the IC card.
As shown in FIG. 1, the IC card 100 can hierarchically have areas that are data storage areas. Assume that providers 0, 1, and 2 exist as managers of areas in the IC card 100. Provider 0 is an example of a management provider apparatus according to the present invention, and manages the entire IC card 100. Providers 1 and 2 are examples of service provider devices according to the present invention, each managing one area of the IC card 100 and providing services to the IC card 100. In the following, the area managed by provider 1 is referred to as area 1, and the area managed by provider 2 is referred to as area 2.

  Provider 0 owns area 0 key (A0), area 1 key (A1), area 2 key (A2), area 3 key (A3), and service 3 key (S3). Provider 1 owns area 1 key (A1) and service 1 key (S1). The provider 2 owns the area 2 key (A2) and the service 2 key (S2). The key set for each area or service can be changed by the owner of the key of the parent (upper layer), not the owner of the key. That is, only the provider 0 can change the keys of the areas 1, 2, and 3.

  Provider 0, which is a management provider device, sets an area shared by providers 1 and 2 for IC card 100. It is assumed that the provider 0 conceptually has such shared area setting means (shared area setting function). In the following, it is assumed that the area shared by providers 1 and 2 is area 3, and provider 1 and provider 2 access service 3.

(2) Degenerate key generation method (FIGS. 2 and 3)
Provider 0 generates and provides a degenerate key to providers 1 and 2 in advance. In this embodiment, when provider 0, which is a management provider device, provides providers 1 and 2 with a degenerate key for accessing the shared area, the keys (A1, A1) of the areas managed by providers 1 and 2 are managed. A degenerate key including A2) is generated. A method for generating a degenerate key will be described below.

  Provider 0, which is a management provider, includes a two-input degeneration circuit. The two-input degenerate circuit is a circuit that receives one key and generates one degenerate key, and can be configured by, for example, an exclusive OR circuit (XOR). Such a two-input degenerate circuit can receive two keys (encryption keys) as inputs and obtain an exclusive OR operation result as a degenerate key. Such a degenerate key functions as one key having the functions of two keys, but the amount of information is the same as one key (for example, 30-byte digital data). Since the configuration / function itself of such a two-input degeneration circuit is well known (for example, see Japanese Patent Application Laid-Open No. 2004-336825 (Patent Document 2)), a more detailed description is omitted. In the following description and drawings, for convenience of explanation, a two-input degeneration circuit having the same function is represented by the reference numeral 200-n and may be collectively referred to as a two-input degeneration circuit 200.

FIG. 2 is an explanatory diagram showing a method for generating a degenerate key provided to the provider 1.
First, the key (A0) of area 0 and the key (A1) of area 1 are input to the 2-input degeneration circuit 200-1, and a degenerate key (A0A1) is generated. In this specification, a degenerate key having both functions of a key (A0) and a key (A1) is represented by writing an area together as “degenerate key (A0A1)”. Next, the degenerate key (A0A1) and the area 3 key (A3) are input to the 2-input degenerate circuit 200-2 to generate the degenerate key (A0A1A3). Further, the degenerate key (A0A1A3) and the service 3 key (S3) are input to the 2-input degenerate circuit 200-3, and a degenerate key (A0A1A3S3) is generated.

  Thus, in this embodiment, when provider 0 provides provider 1 with a degenerate key for accessing shared area A3, the degenerate key including the key (A1) of the area managed by provider 1 is included. Is generated.

FIG. 3 is an explanatory diagram showing a method for generating a degenerate key provided to the provider 2.
First, the area 0 key (A0) and the area 2 key (A2) are input to the 2-input degeneration circuit 200-4 to generate a degenerate key (A0A2). Next, the degenerate key (A0A2) and the area 3 key (A3) are input to the 2-input degenerate circuit 200-5 to generate the degenerate key (A0A2A3). Further, the degenerate key (A0A2A3) and the service 3 key (S3) are input to the 2-input degenerate circuit 200-6, and a degenerate key (A0A2A3S3) is generated.

  Thus, in this embodiment, when provider 0 provides provider 2 with a degenerate key for accessing shared area A3, the degenerate key including the key (A2) of the area managed by provider 2 is included. Is generated.

  By the above method, the providers 1 and 2 can access the same service 3 using different degenerate keys.

(3) Additional generation method of degenerate key (FIGS. 4 and 5)
As described above, the providers 1 and 2 can access the service 3 using the degenerate key provided from the provider 0. It is assumed that the providers 1 and 2 conceptually have a degenerate key receiving unit (degenerate key receiving function) that receives provision of the degenerate key. Further, when the user accesses the service at the same time, the service keys S1 and S2 can be additionally reduced. By this method, the providers 1 and 2 can access the same service 3 using different degenerate keys and can simultaneously access their own services. A method for additionally generating a degenerate key will be described below.

FIG. 4 is an explanatory diagram showing a method for additionally generating a degenerate key in the provider 1.
The method for generating the degenerate key (A0A1A3S3) in provider 0 is as described above (FIG. 2). Provider 1 also includes a two-input degeneration circuit 210 having the same function as Provider 0. Then, as shown in FIG. 4, the degenerate key (A0A1A3S3) and the service 1 key (S1) are input to the 2-input degenerate circuit 210, and the degenerate key (A0A1A3S3S1) is generated. Using this degenerate key (A0A1A3S3S1), the provider 1 can access the service 3 in the common area and can simultaneously access the service 1 managed by the provider 1.

FIG. 5 is an explanatory diagram showing a method for additionally generating a degenerate key in the provider 2.
The method for generating the degenerate key (A0A2A3S3) in provider 0 is as described above (FIG. 3). Provider 2 also includes a 2-input degeneration circuit 220 having the same function as Provider 0. Then, as shown in FIG. 5, the degenerate key (A0A2A3S3) and the service 2 key (S2) are input to the 2-input degenerate circuit 220, and the degenerate key (A0A2A3S3S2) is generated. Using this degenerate key (A0A2A3S3S2), the provider 2 can access the service 3 in the common area and simultaneously access the service 2 managed by the provider 2.

  According to the above method, the providers 1 and 2 can access the same service 3 using different degenerate keys and can simultaneously access their own services.

  The degenerate key generation method according to the present embodiment has been described above. According to the present embodiment, for example, when the provider 1 stops the service operation on the IC card 100 for some reason, the provider 0 who is the administrator of the entire IC card 100 changes the key A1 of the area 1 to change the provider 1 can be prohibited from accessing area 1, service 1, and service 3. Since the change does not affect the provider 2, the cost for the key change can be reduced.

(4) 2-input degeneration circuit and access to service (Fig. 6)
FIG. 6 is a general explanatory diagram of FIGS. 2 to 5 described above, and shows the input / output of the 2-input degeneration circuit of each provider and the generated degenerate key for accessing the service in the IC card 100. Used to indicate which services in the card can be accessed.

  The provider 0 inputs the keys A0, A1, A2, A3, and S3 owned by the provider 0 to the two-input degeneration circuit 200, and generates two degenerate keys (A0A1A3S3) and (A0A2A3S3). The generated degenerate key (A0A1A3S3) is provided to provider 1, and the degenerate key (A0A2A3S3) is provided to provider 2.

  The provider 1 inputs the received degenerated key (A0A1A3S3) and the key S1 owned by the provider 1 to the 2-input degeneration circuit 210, and generates a degenerated key (A0A1A3S3S1). This degenerate key (A0A1A3S3S1) can access the service 1 and service 3 in the IC card 100 simultaneously via the reader / writer 230.

  The provider 2 inputs the received degenerate key (A0A2A3S3) and the key S2 owned by the provider 2 to the 2-input degeneration circuit 220, and generates a degenerate key (A0A2A3S3S2). This degenerate key (A0A2A3S3S2) can simultaneously access the service 2 and service 3 in the IC card 100 via the reader / writer 240.

(5) Key change and access prohibition to service (Fig. 7)
FIG. 7 shows the input / output of the key change package generation circuit for prohibiting the provider 2 from accessing the shared service in the card, and which service is prohibited from accessing.

  As an example, a case where the provider 2 stops the service operation on the IC card 100 will be described. Provider 0 inputs keys A0, A2, A2 '(new A2 key) owned by provider 0 to key change package generation circuit 300, and generates key change package CKP_A2. Using the generated key change package CKP_A2, the key A2 of the area 2 in the card is rewritten to the key A2 'via the reader / writer 350. Accordingly, since A2 included in the degenerate key (A0A2A3S3S2) owned by provider 2 is different from the key A2 ′ of area 2 in the card, provider 2 uses the degenerated key (A0A2A3S3S2) owned by itself. Thus, it becomes impossible to access the service 3 and service 2 in the card via the reader / writer 240.

  On the other hand, since A2 is not included in the degenerate key owned by provider 1, provider 1 can access service 3 and service 1 without changing the access method before and after the key change of A2. .

  The configuration and operation of the information processing system according to the present embodiment and the management provider device (provider 0) and service provider devices (provider 1, provider 2) that are system components have been described above. Such a management provider device and a service provider device can cause a computer to function as a management provider device or a service provider device by incorporating a computer program for realizing the above functions into the computer. Such a computer program can be distributed in the market in a form recorded on a predetermined recording medium (for example, a CD-ROM) or downloaded via an electronic network.

(Effect of this embodiment)
As described above, according to this embodiment, when a certain provider accesses the shared area, a degenerate key different from other providers can be used. Further, it becomes easy to prohibit one provider from accessing the area. Conventionally, only one key can be set for one area service, but this method makes it possible to set a plurality of pseudo keys for one area service.

  The preferred embodiments of the information processing system, management provider device, service provider device, and computer program according to the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to such examples. It will be obvious to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea described in the claims, and these are naturally within the technical scope of the present invention. It is understood that it belongs.

  For example, in the above embodiment, the case where the service receiving side is an integrated circuit chip having an IC card function has been described, but the present invention is not limited to this. The semiconductor integrated circuit according to the present invention can be mounted on any information processing terminal, for example, any information processing terminal such as a portable terminal such as a mobile phone or a PDA, or a personal computer (PC).

(Industrial applicability)
The present invention can be used for an information processing system, a management provider device, a service provider device, and a computer program. In particular, the present invention is applied to an IC card (integrated circuit chip) that can hierarchically have an area as a data storage area. The present invention can be used for an information processing system, a management provider device, a service provider device, and a computer program for providing a plurality of services.

It is explanatory drawing which shows the internal structure of an IC card. It is explanatory drawing which shows the production | generation method of the degenerate key provided to the provider 1. FIG. It is explanatory drawing which shows the production | generation method of the degenerate key provided to the provider 2. FIG. It is explanatory drawing which shows the production | generation method of the degenerate key in the case of adding service key S1. It is explanatory drawing which shows the production | generation method of the degenerate key in the case of adding service key S2. It is explanatory drawing which shows the access to a 2-input degeneration circuit and a service. It is explanatory drawing which shows key change and access prohibition to a service. It is explanatory drawing which shows the encryption key and provider corresponding to the area in an IC card. It is explanatory drawing which shows the production | generation of a degenerate key.

Explanation of symbols

100 IC card 200 (200-1, 200-2..., 200-6) Provider 0 2-input degeneration circuit 210 Provider 1 2-input degeneration circuit 220 Provider 2 2-input degeneration circuit 230 Provider 1 reader / Writer 240 Provider 2 reader / writer 300 Key change package generation circuit 350 Provider 0 reader / writer

Claims (11)

An information processing system for providing a plurality of services to an integrated circuit chip capable of hierarchically having an area as a data storage area,
A management provider device for managing the entire integrated circuit chip;
A plurality of service provider devices that manage one area of the integrated circuit chip and provide services to the integrated circuit chip;
Including
The management provider device sets a shared area to be used by at least two or more service provider devices for the integrated circuit chip,
The management provider device includes a key of an area managed by the one service provider device when providing a degenerate key for accessing the common area to the one service provider device using the common area. An information processing system characterized by generating a degenerate key. Each service provider device can set one or more services below the area managed by itself.
The service provider device generates a new degenerate key by adding a service key set in an area managed by the service provider device to the degenerate key provided from the management provider device. Information processing system described in 1.   The information processing system according to claim 1, wherein the integrated circuit chip is mounted on an IC card. In an information processing system for providing a plurality of services to an integrated circuit chip that can hierarchically have an area that is a data storage area, a management provider device that manages the entire integrated circuit chip,
A shared area setting means for setting a shared area that is used by at least two service provider devices that provide services to the integrated circuit chip for the integrated circuit chip;
When a degenerate key for accessing the shared area is provided to one service provider device that uses the common area, a degenerate key is generated including a key for the area managed by the one service provider device. A degenerate key generation means;
A management provider device characterized by including:   5. The management provider apparatus according to claim 4, wherein the integrated circuit chip is mounted on an IC card. In an information processing system for providing a plurality of services to an integrated circuit chip that can hierarchically have an area that is a data storage area, the computer functions as a management provider device that manages the entire integrated circuit chip A computer program for
A shared area setting function for setting a shared area that is used by at least two or more service provider devices that provide services to the integrated circuit chip for the integrated circuit chip;
When a degenerate key for accessing the shared area is provided to one service provider device that uses the common area, a degenerate key is generated including a key for the area managed by the one service provider device. A degenerate key generation function;
A computer program characterized by causing a computer to execute.   The computer program according to claim 6, wherein the integrated circuit chip is mounted on an IC card. A service provider device that manages one area of the integrated circuit chip and provides a service for an integrated circuit chip that can hierarchically have an area that is a data storage area,
A degenerate key receiving means set by a management provider apparatus for managing the entire integrated circuit chip and receiving a degenerate key for use by at least two or more service provider apparatuses and for using a common area;
A degenerate key generation means for generating a new degenerate key by adding a service key set in the area managed by itself to the degenerate key provided from the management provider device;
A service provider device comprising:   9. The service provider apparatus according to claim 8, wherein the integrated circuit chip is mounted on an IC card. Computer program for causing a computer to function as a service provider device that manages one area of an integrated circuit chip and provides a service to an integrated circuit chip that can hierarchically have an area that is a data storage area Because
A degenerate key receiving function for receiving provision of a degenerate key for using a shared area used by at least two or more service provider devices set by a management provider device that manages the entire integrated circuit chip;
A degenerate key generation function for generating a new degenerate key by adding a service key set in the area managed by itself to the degenerate key provided from the management provider device;
A computer program characterized by causing a computer to execute.   The computer program according to claim 10, wherein the integrated circuit chip is mounted on an IC card.

Images