JP2008134882A - Ic card and program thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card and its program capable of reducing misoperations due to mistakes. <P>SOLUTION: The IC card 10 comprises a communication means 11 for receiving a command from a terminal 20, a command interpretation means 12a for interpreting the command received by the communication means 11, a command determination means 12b for determining whether or not the command interpreted by the command interpretation means 12a is an important command accompanied by writing transaction, an inquiring means 12c for inquiring the terminal 20 about whether or not the important command is to be executed when the command determination means 12b determines it as an important command, and a command execution means 12d for executing the important command when the inquiring means 12c determines that the execution of the important command is acceptable. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an IC card and its program.

FIG. 6 is a diagram for explaining a conventional IC card.
As shown in FIG. 6A, a conventional IC card 10A is a computer capable of executing interactive processing (for example, Patent Document 1), and a user 30 via a terminal 20 such as a personal computer (PC). Interprets and executes instructions from.
Since the conventional IC card 10A has a relatively low processing capability, the terminal 20 performs operations other than simple processing such as reading and writing and authentication, and constructs an interface that can be easily interpreted by the user 30.

However, as shown in FIG. 6B, when the IC card 10B becomes intelligent (high performance and high function), it is possible to reduce the processing at the terminal 20 and perform advanced processing on the IC card 10B side. (In the figure, the thickness of the arrow is changed). In that case, since the terminal 20 performs a simple relay process, if the operation from the user 30 lacks safety, there is a possibility that an instruction such as data deletion that cannot be restored can be easily executed. A system failure could occur.
JP-A-9-305734

  The subject of this invention is providing the IC card which can reduce the erroneous operation by negligence, and its program.

The present invention solves the above problems by the following means. In addition, in order to make an understanding easy, although the code | symbol corresponding to the Example of this invention is attached | subjected and demonstrated, it is not limited to this.
The invention of claim 1 includes an instruction receiving means (11) for receiving an instruction from an external device (20), an instruction interpreting means (12a) for interpreting an instruction received by the instruction receiving means (11), and the instruction interpretation. When the instruction interpreted by the means (12a) is an important instruction accompanied by a write process, an instruction judging means (12b) for judging whether or not the instruction judging means (12b) judges that it is an important instruction. Confirming means (12c) for confirming whether or not the important instruction can be executed, and an instruction for executing the important instruction when the confirming means (12c) confirms that the important instruction can be executed. And an execution means (12d).
According to a second aspect of the present invention, in the IC card (10) according to the first aspect, the important instruction is an instruction to delete and / or initialize at least part of data of the IC card (10). An IC card (10) characterized by
According to a third aspect of the present invention, in the IC card (10) according to the first aspect, the important instruction is an instruction to stop and / or disable at least a part of the function of the IC card (10). An IC card (10) characterized by
The invention of claim 4 is whether or not the IC card (10-2) according to any one of claims 1 to 3 is a valid user of the IC card (10-2). Authentication means (12e) for authenticating, wherein the command execution means (12d) executes the important command when the authentication means (12e) determines that it is a valid user. IC card (10-2).
The invention of claim 5 is the IC card (10-2) according to claim 4, further comprising storage means (15) for storing the authentication result of the authentication means (12e). 10-2).
The invention according to claim 6 is the IC card (10-3) according to claim 5, further comprising time information acquisition means (12f) for acquiring time information at the time of authentication, wherein the storage means (15) The IC card (10-3) is characterized by storing the time information together with the result.
According to the seventh aspect of the present invention, an instruction receiving procedure (S101) for receiving an instruction from the external device (20) to the IC card (10) and an instruction interpreting procedure for interpreting the instruction received in the instruction receiving procedure (S101) ( S102), an instruction determination procedure (S102) for determining whether or not the instruction interpreted in the instruction interpretation procedure (S102) is an important instruction with write processing, and an important instruction in the instruction determination procedure (S102). When it is determined that there is a confirmation procedure (S104) for confirming whether or not the important instruction can be executed with the external device (20), and when it is confirmed that the important instruction can be executed in the confirmation procedure (S104), An IC card program that executes an instruction execution procedure (S103) for executing the important instruction.

The present invention has the following effects.
(1) When an instruction received from an external device is an important instruction, whether or not the important instruction can be executed is confirmed with the external device, so that erroneous operations due to negligence can be reduced.
(2) Since the important command is a command for deleting and / or initializing at least part of the data of the IC card, the safety of the important data can be improved.
(3) Since the important command is a command for stopping and / or disabling at least a part of the functions of the IC card, the important functions can be protected more safely.

(4) Since the command execution means executes an important command when it is determined that the authentication means is a legitimate user, only the legitimate user can execute the important command and further reduce erroneous operations due to negligence. Can do.
(5) Since the storage means for storing the authentication result of the authentication means is provided, the authentication result becomes clear and the security can be improved.
(6) Since the storage means stores the time information at the time of authentication together with the authentication result, the authentication time becomes clear and the security can be further improved.

  Hereinafter, embodiments of the present invention will be described in more detail with reference to the drawings.

FIG. 1 is a diagram showing a first embodiment of an IC card according to the present invention.
The IC card 10 according to the first embodiment includes a communication unit (command receiving unit) 11, a CPU 12, a RAM 13, a ROM 14, an EEPROM 15, and the like.

  The communication unit 11 includes an antenna such as a winding coil and an I / O interface such as a modulation circuit and a demodulation circuit, and is a part that communicates with the terminal 20 in a non-contact manner, and receives commands from the terminal 20 , Mediating communication between the CPU 12 and the terminal 20.

  The CPU 12 is a central processing unit that performs overall control of the IC card 10, performs arithmetic processing such as four arithmetic operations and logical operations, and stores them in the ROM 14 and the EEPROM 15 in accordance with commands received from the terminal 20 via the communication unit 11. It is a control part which performs the program of the IC card memorize | stored.

Further, the CPU 12 includes an instruction interpretation unit 12a, an instruction determination unit 12b, a confirmation unit 12c, and an instruction execution unit 12d.
The command interpretation unit 12a is a control unit that interprets a command received by the communication unit 11.
The instruction determination unit 12b is a control unit that determines whether or not the instruction interpreted by the instruction interpretation unit 12a is an important instruction accompanied by a writing process.
Here, the important instruction accompanied with the writing process is an instruction for causing the IC card 10 to perform an important operation that cannot be repaired. For example, the data deletion process, the memory initialization process, and the application of the flag writing process are performed. This is an instruction for performing stop processing (function stop processing), invalidation processing of all functions (function invalidation processing) before discarding the card, and the like.

The confirmation unit 12c is a control unit that confirms with the terminal 20 whether or not the important instruction can be executed when the instruction determination unit 12b determines that the instruction is an important instruction.
The instruction execution means 12d is a control unit that executes the important instruction when the confirmation means 12c confirms that the important instruction can be executed, and does not execute the important instruction when it is confirmed that the important instruction is not possible.
The functions of these means are realized by the CPU 12 executing an IC card program stored in the ROM 14 or the EEPROM 15.

The RAM 13 is a volatile memory, and is used as a work area where the CPU 12 performs processing, a transmission / reception buffer for exchanging data with the terminal 20, and the like.
The ROM 14 is a nonvolatile read-only memory, and stores an execution code, various parameters, and the like.
The EEPROM 15 is a non-volatile memory that can be rewritten at any time, and stores an IC card program, unique information (card unique number, member number, etc.), a list of command information, and the like.

  On the other hand, the terminal 20 is an external device that communicates with the IC card 10 in a non-contact manner, and supplies power and a clock to the IC card 10 to transmit commands and data. 10 or the like.

FIG. 2 is a diagram for explaining the processing flow of the IC card 10.
In step 101 in FIG. 2 (hereinafter, “step” is referred to as “S”), the IC card 10 is in a state of waiting to receive a command (command).
When the communication means 11 of the IC card 10 receives a command from the terminal 20 (command receiving procedure), the CPU 12 of the IC card 10 refers to the command information list stored in the EEPROM 15 (command interpreting procedure) and receives it. It is determined whether or not the instruction is an important instruction (S102; instruction determination procedure).

If it is determined that the command is not an important command (S102; NO), the processing of the command is executed as it is (S103).
On the other hand, if it is determined that the command is an important command (S102; YES), a confirmation request is transmitted to the terminal 20 (S104; confirmation procedure).
The IC card 10 is in a waiting state for confirmation (S105). When confirmation is obtained (S106; YES), processing of an important instruction is executed (S103; instruction execution procedure), and when confirmation is not obtained. (S106; NO), the important instruction processing is not executed.

FIG. 3 is a diagram for explaining the flow of processing among the IC card 10, the terminal 20, and the user 30.
First, the user 30 operates an input device such as a keyboard and a mouse of the terminal 20 (S201).
The terminal 20 interprets and processes the operation (S202), and transmits a command to the IC card 10 (S203). Here, it is assumed that the user 30 has requested “data deletion processing”.
The IC card 10 interprets and processes the received command (S204), and transmits response data for confirmation to the terminal 20 (S205).
The terminal 20 interprets and processes the response from the IC card 10 (S206), and asks the user 30 for confirmation (S207). Specifically, a display such as “Do you really want to delete data?” Is displayed on the display of the terminal 20.
The user 30 performs an operation for displaying an intention by pressing a “Yes” or “No” button (S208).
The terminal 20 interprets and processes the operation of the user 30 (S209), and transmits a command to the IC card 10 (S210). Note that this instruction is not an instruction such as “data deletion process” but an instruction as to whether or not to execute the instruction transmitted first.
The IC card 10 interprets and processes the command (S211). For example, if the instruction is “execute”, the data deletion process is really performed, and if the instruction is “do not execute”, the data deletion process is cancelled.
The IC card 10 transmits response data as a processing result to the terminal 20 (S212).
The terminal 20 interprets and processes the received response data (S213), and notifies the user 30 of completion (S214). The completion notification is made by displaying, for example, “Erase completed” or “Not erased”.

As described above, according to the first embodiment, when the instruction received from the terminal 20 is an important instruction, whether or not the important instruction can be executed is confirmed with the user 30 via the terminal 20, thereby reducing erroneous operations due to negligence. Can be made.
In addition, important operations that cannot be repaired are set as important instructions, such as "data deletion processing", "memory initialization processing", "application stop processing", "invalidation processing of all functions before card discard" By doing so, important data and important functions can be safely protected.
Furthermore, the terminal 20 only needs to relay the IC card 10 and the user 30 simply, and the processing load of the terminal 20 can be reduced.

FIG. 4 shows a second embodiment of the IC card according to the present invention.
In addition, the part which fulfill | performs the same function as Example 1 mentioned above attaches | subjects the same code | symbol or the code | symbol unified at the end, and abbreviate | omits duplication description and drawing suitably.
Unlike the IC card 10 according to the first embodiment, the IC card 10-2 according to the second embodiment authenticates whether or not the user is a legitimate user (user) with a personal identification number such as a PIN (Personal Identification Number). Is provided. The authentication by the authentication unit 12e is executed every time each process is performed.
Further, the instruction execution unit 12d executes an important command when it is determined that the authentication unit 12e is a valid user.
Further, the CPU 12 stores the authentication result of the authentication unit 12e in the EEPROM 15 as a storage unit.

As described above, according to the second embodiment, the instruction execution unit 12d executes the important command when the authentication unit 12e determines that the user is a valid user. Therefore, only the valid user executes the important command. And erroneous operation due to negligence can be further reduced.
Further, since the authentication result is stored in the EEPROM 15, it becomes easy to grasp the malicious acts of the Service-to-Self and the security can be improved.
Furthermore, in the conventional general authentication method, if the authentication is successful first, then authority is granted and important processing can be performed. However, in the method of this embodiment, authentication is performed for each processing. Therefore, security can be further improved.

FIG. 5 is a diagram showing a third embodiment of the IC card according to the present invention.
In addition to the IC card 10-2 of the second embodiment, the IC card 10-3 of the third embodiment further includes time information acquisition means 12f that acquires time information at the time of authentication. The time information acquisition unit 12f acquires time information from a clock unit of the terminal 20 or the like.
Further, the CPU 12 stores time information in the EEPROM 15 together with the authentication result.

  As described above, according to the third embodiment, since the authentication result and the time information are stored in the EEPROM 15, it is clear which person has operated at what time, and the security can be further improved. it can.

(Modification)
The present invention is not limited to the embodiments described above, and various modifications and changes are possible, and these are also within the equivalent scope of the present invention.
(1) The IC card may be an IC card such as a SIM (Subscriber Identity Module) card or a UIM (User Identity Module) card.
(2) The external device may be a mobile phone or a reader / writer.

It is a figure which shows Example 1 of the IC card by this invention. It is a figure explaining the flow of processing of IC card. It is a figure explaining the flow of a process among IC card 10, the terminal 20, and the user 30. FIG. It is a figure which shows Example 2 of the IC card by this invention. It is a figure which shows Example 3 of the IC card by this invention. It is a figure explaining the conventional IC card.

Explanation of symbols

10, 10-2, 10-3 IC card 11 Communication means (command receiving means)
12 CPU
12a Command interpretation unit 12b Command determination unit 12c Confirmation unit 12d Command execution unit 12e Authentication unit 12f Time information acquisition unit 13 RAM
14 ROM
15 EEPROM
20 terminal (external device)
30 users

Claims (7)

Command receiving means for receiving commands from an external device;
Command interpreting means for interpreting the command received by the command receiving means;
Command judging means for judging whether or not the command interpreted by the command interpreting means is an important command accompanied by a writing process;
When the instruction determining means determines that it is an important instruction, confirmation means for confirming with the external device whether or not the important instruction can be executed;
An instruction execution means for executing the important instruction when the confirmation means confirms the execution of the important instruction;
IC card equipped with. In the IC card according to claim 1,
The important instruction is an instruction to delete and / or initialize at least a part of data of the IC card;
IC card characterized by In the IC card according to claim 1,
The important instruction is an instruction to stop and / or disable at least a part of the function of the IC card;
IC card characterized by In the IC card according to any one of claims 1 to 3,
An authentication means for authenticating whether or not the IC card is a valid user;
The instruction execution means executes the important instruction when the authentication means determines that the user is a valid user;
IC card characterized by In the IC card according to claim 4,
Comprising storage means for storing an authentication result of the authentication means;
IC card characterized by The IC card according to claim 5,
Time information acquisition means for acquiring time information at the time of authentication is provided,
The storage means stores the time information together with the authentication result;
IC card characterized by IC card
A command receiving procedure for receiving commands from an external device;
An instruction interpretation procedure for interpreting an instruction received in the instruction reception procedure;
An instruction determination procedure for determining whether or not an instruction interpreted in the instruction interpretation procedure is an important instruction accompanied by a writing process;
A confirmation procedure for confirming with the external device whether or not the important instruction can be executed when it is determined that the instruction is an important instruction in the instruction determining procedure;
An instruction execution procedure for executing the important instruction when execution of the important instruction is confirmed in the checking procedure;
IC card program to execute.

Images