JP2008152451A - Information storage medium, medium processor and medium processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information storage medium excellent in updating key data. <P>SOLUTION: This information storage medium has: a communication means communicating with a medium processor; a management means managing a prescribed number of pieces of the key data by a chain structure wherein arrangement order can be traced; and a processing means selecting the key data of a prescribed fixed position from the prescribed number of pieces of the key data managed by the management means based on a prescribed instruction received through the communication means, and executing processing based on the selected key data. The management means adjacently puts the key data for the update received through the communication means into one end of the prescribed number of pieces of the key data managed by the chain structure, and excludes the key data of the other end to continuously manage the same number of pieces of the key data as the prescribed number wherein the key data for the update are added to one end of the chain structure as the already updated key data. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information storage medium called an IC card including an IC (integrated circuit) chip having a control element such as a nonvolatile data memory and a CPU, and in particular, key data held in the nonvolatile memory. Related to generation management.

  The present invention also relates to a medium processing apparatus called a reader / writer that records data on such an information storage medium and reads data stored on the information storage medium, and more particularly to an information storage medium. The present invention relates to a medium processing apparatus that updates held key data.

  Furthermore, the present invention relates to a medium processing system including such an information storage medium and a medium processing apparatus.

  In recent years, IC cards (contact type and non-contact type) having excellent safety have been widely used. Such an IC card includes a non-volatile memory that can retain data even when power supply is cut off, a communication I / F that can communicate with a reader / writer, a control element such as a CPU that executes various operations, It has a ROM for storing operation programs and the like, and a RAM for temporarily storing data.

  In order to increase the security of data processing by the IC card, key data is held in the non-volatile memory of the IC card, and the IC card executes various data processing on the condition of authentication or verification of the key data. In the current IC card, there is a case where this key data is not updated (generation change). In other words, both the IC card and the external device (reader / writer) hold the key data decided in advance, and the key data held by both can continue to be used.

In ISO / IEC7816-4, the concept of EF (Elementary File) is defined as a data structure when accessing by a command, and key data held in a nonvolatile memory is managed in units of files such as EF. A technique for updating by this method has been proposed. For example, when updating key data, a method of storing different key data in a plurality of different EFs in advance and changing the access destination EF is used (see Patent Document 1).
Japanese Patent No. 2695857

  In the key data update method disclosed in Patent Document 1, it is necessary to change the processing command from the external device to the IC card. That is, it is necessary to change the processing instruction for changing the EF of the access destination (with the change of the external device). In the future, from the viewpoint of security, the necessity of regularly and frequently updating the key data will increase. Therefore, the study of a method for updating the key efficiently is a future problem.

  An object of the present invention is to solve the above-described problems, and provides an information storage medium, a medium processing apparatus, and a medium processing system that are excellent in updating key data.

  The information storage medium, medium processing apparatus, and medium processing system of the present invention are configured as follows.

  (1) An information storage medium according to the present invention is an information storage medium constituted by a card body in which a module is embedded, and the module has a communication means that communicates with a medium processing device and a chain structure in which the arrangement order can be traced. Management means for managing a predetermined number of key data, and key data at a predetermined fixed position among the predetermined number of key data managed by the management means based on a predetermined command received via the communication means. Processing means for selecting and executing processing based on the selected key data, wherein the management means converts the update key data received via the communication means to the predetermined number of key data managed by a chain structure. By arranging the key data at the other end and excluding the key data at the other end, the key data of the same number as the predetermined number obtained by adding the update key data to one end of the chain structure is updated key data Continuing supervises as.

  (2) A medium processing apparatus according to the present invention is a medium processing apparatus that processes an information storage medium in which a predetermined number of key data is managed by a chain structure in which the arrangement order is traced, and a communication means that communicates with the information storage medium; Management means for managing the predetermined number of key data by a chain structure that can be traced in order, and selecting the first key data at a predetermined fixed position from among the predetermined number of key data managed by the management means The first key data is transmitted to the information storage medium via the means, and the second of the predetermined fixed position of the predetermined number of key data managed in the information storage medium via the communication means. And processing means for instructing selection based on the first key data and processing based on the first and second key data, and the management means uses the predetermined number of key data as update key data provided from a host device. One end of data By arranging and excluding the key data at the other end, the predetermined number of key data added to the one end of the chain structure with the update key data is continuously managed as updated key data, and the processing means includes: The update key data provided from the host device is transmitted to the information storage medium via the communication unit, and one end of the predetermined number of key data managed in the information storage medium. And the key data at the other end are excluded, and the same number of key data as the updated key data added to one end of the chain structure is ordered to be continuously managed as updated key data.

  (3) A medium processing system of the present invention is a medium processing system including an information storage medium configured by a card body in which a module is embedded, and a medium processing apparatus for processing the information storage medium, the medium processing system The apparatus includes: a first communication unit that communicates with the information storage medium; a first management unit that manages a predetermined number of key data using a chain structure in which the arrangement order can be traced; and the predetermined unit managed by the first management unit The first key data at a predetermined fixed position is selected from a plurality of key data, and the first key data is transmitted to the information storage medium via the first communication means, and the first communication Orders to select second key data at a predetermined fixed position out of the predetermined number of key data managed in the information storage medium via means, and orders processing based on the first and second key data First place And the first management unit arranges the update key data provided from the host device at one end of the predetermined number of key data and excludes the key data at the other end, thereby updating the update key data. The key data equal to the predetermined number obtained by adding the key data to one end of the chain structure is continuously managed as updated key data, and the first processing means is configured to update the key data for update provided from a host device. And transmitting the update key data to one end of the predetermined number of key data managed in the information storage medium and transmitting the key data at the other end to the information storage medium via the first communication means. By excluding it, the update key data is added to one end of the chain structure, and the same number of key data as the updated key data is continuously managed as the updated key data, and the module of the information storage medium is ordered. Through a second communication means for communicating with the medium processing device, a second management means for managing the predetermined number of key data in a chained structure in which the arrangement order can be traced, and the second communication means. The first key data is received, and a predetermined fixed position of the predetermined number of key data managed by the second management means is determined based on a command received via the second communication means. Second processing means for selecting the second key data and executing processing based on the first and second key data, and the second management means via the second communication means. The update key data received in this manner are arranged at one end of the predetermined number of key data and the key data at the other end are excluded, thereby adding the predetermined number of the update key data to one end of the chain structure and Same number of key data as updated key data Continue to manage.

  ADVANTAGE OF THE INVENTION According to this invention, the information storage medium excellent in the update of key data, a medium processing apparatus, and a medium processing system can be provided.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a schematic configuration of an IC card system (medium processing system) according to an embodiment of the present invention. As shown in FIG. 1, the IC card system includes a terminal 1 and an IC card 2. The terminal 1 includes a main body (upper apparatus) 11, a display 12, a keyboard 13, and a card reader / writer 14. The terminal 1 is configured to be communicable with the IC card 2, and the terminal 1 transmits data to the IC card 2 and receives data from the IC card 2.

  The main body 11 executes applications and controls input / output. The display 12 displays a result of communication with the IC card 2 and the like. The keyboard 13 inputs characters and numbers to the main body 11. The card reader / writer 14 communicates with the IC card 2.

  In the present embodiment, the case where the IC card 2 supports the contact communication function will be described. However, the IC card 2 may support the non-contact communication function, or the contact card communication function and the non-contact communication function. It may be a combination type that supports both contact-type communication functions. Similarly, the case where the card reader / writer 14 supports the contact communication function will be described. However, the card reader / writer 14 may support the non-contact communication function, or the contact communication function and the non-contact communication function. It may be a combination type that supports both contact-type communication functions.

  FIG. 2 is a block diagram showing a schematic configuration of a card reader / writer according to an embodiment of the present invention. As shown in FIG. 2, the card reader / writer 14 includes a contact terminal 141, a communication I / F 142, a CPU 143, a data memory 144, and a RAM 145.

  FIG. 4 is a block diagram showing a schematic configuration of an IC card according to an embodiment of the present invention. As shown in FIG. 4, the IC card 2 includes an IC chip 20 (IC module). The IC chip 20 includes a contact terminal 201, a communication I / F 202, a CPU 203, a data memory 204, and a RAM 205.

  The contact terminal 141 of the card reader / writer 14 is connected to the contact terminal 201 of the IC card 2 and transmits / receives data between the card reader / writer 14 and the IC card 2. The communication I / F 142 controls input / output of data transmitted to the IC card 2 and data received from the IC card 2. The CPU 143 generates various commands (an authentication command and a verification command) based on instructions from the main body (higher-level device) 11. The data memory 144 is a nonvolatile memory such as an EEPROM or FRAM, and stores key data. The RAM 145 is a work memory that temporarily stores data transmitted from the IC card 2, for example.

  On the other hand, the contact terminal 201 of the IC card 2 is connected to the contact terminal 141 of the card reader / writer 14 to transmit / receive data between the IC card 2 and the card reader / writer 14. The communication I / F 202 controls input / output of data transmitted to the card reader / writer 14 and data received from the card reader / writer 14. The CPU 203 executes various processes based on various commands (authentication command and verification command) from the card reader / writer 14. The CPU 203 manages the data stored in the data memory 204 in units of files and searches for a designated file. Furthermore, the CPU 203 executes management and update of key data described later. The data memory 204 is a nonvolatile memory such as an EEPROM or FRAM, and stores key data. The RAM 205 is a work memory that temporarily stores data transmitted from the card reader / writer 14, for example.

  FIG. 3 is a diagram showing a file structure in the data memory 144 of the card reader / writer 14. As shown in FIG. 3, the data memory 144 stores MF and also stores EF1, EF2,..., EF3 subordinate to the MF. In the present embodiment, for example, a case where a predetermined number of key data is stored in the EF1 will be described.

  FIG. 5 is a diagram showing a file structure in the data memory 204 of the IC card 2. Similar to the file structure in the data memory 144 of the card reader / writer 14 shown in FIG. 3, the data memory 204 stores MF and also stores EF1, EF2,..., EF3 subordinate to the MF. In the present embodiment, for example, a case where a predetermined number of key data is stored in the EF1 will be described.

  FIG. 6 is a diagram showing an example of the key data file stored in the EF 1 of the data memories 144 and 204. A case will be described in which, for example, five generations of key data (five key data) are stored in one key data file.

  The key data is used for concealing various data, external authentication, internal authentication, and verification. One key data file has a fixed length format. The top key data K1 (start key data K1) starting from the start address of the key data file is the key data (current key data) currently used.

  By having the above data structure, a plurality of key data can be set in one key data file, and even when the key data is updated, a processing command (card reader / writer 14) with the external device (card reader / writer 14) The key data can be updated without changing the authentication command or the verification command. The update of the key data will be described in detail below.

  FIG. 7 is a diagram illustrating an example of the key data update process. FIG. 8 is a diagram showing the transition of the key data file corresponding to the key data update process. Here, the key data update will be conceptually described.

  First, update of key data in the card reader / writer 14 will be described. A predetermined number of key data (for example, key data K1, K2, K3, and K4) having a chained structure (so-called queue structure) in which the order of arrangement is updated with key data for update (key data K6) provided from the host apparatus (main unit 11). , K5), and the key data at the other end are excluded. Accordingly, a predetermined number of key data obtained by adding the update key data to one end of the chain structure can be continuously managed as updated key data.

  Specifically, the CPU 143 of the card reader / writer 14 sets the update key data (key data K6) to n (n: integer, 2 ≦ n, for example, n = 5) key data (for example, key data K1, N2 from the second to the n-th by placing the n-th key data (key data K5) of K2, K3, K4, K5) following the n-th key data (key data K1) and excluding the top key data (key data K1) −1 key data (key data K2, K3, K4, K5) and one update key data (key data K6) arranged in order, a total of n key data (key data K2, K3, K4, K5) , K6) are continuously managed as updated key data.

  Alternatively, the CPU 143 of the card reader / writer 14 has n pieces (n: integer, 2 ≦ n, for example, n = 5) of key data (for example, key data K1, K2, K3) for the update key data (key data K6). , K4, K5) are arranged before the first key data (key data K1) and the n-th key data (key data K5) is excluded, and one update key data (key data K6) A total of n key data (key data K6, K1, K2, K3, K4) in which n-1 key data (key data K1, K2, K3, K4) from 1 to n-1 are arranged in order. Continue management as updated key data.

  Corresponding to the update of the key data in the card reader / writer 14 described above (by the key update command from the card reader / writer 14), the key data in the IC card 2 is also updated. That is, the card reader / writer 14 instructs the IC card 2 to update the key data. That is, the update key data (key data K6) provided from the higher-level device (main body 11) is transmitted to the IC card 2, and the update key data is managed by the IC card with a predetermined number of key data (for example, key data). The data K1, K2, K3, K4, K5) are arranged at one end of the data, and the key data at the other end are excluded, whereby a predetermined number of key data obtained by adding the update key data to one end of the chain structure is updated. Command to continue management as.

  Specifically, the CPU 203 of the IC card 2 sets the update key data (key data K6) to n (n: integer, 2 ≦ n, for example, n = 5) key data (for example, key data K1, K2,. By placing the nth key data (key data K5) after K3, K4, K5) and excluding the top key data (key data K1), n-1 from the second to the nth A total of n pieces of key data (key data K2, K3, K4, K5, K6) in which one piece of key data (key data K2, K3, K4, K5) and one update key data (key data K6) are arranged in order. ) Is continuously managed as updated key data. That is, the CPU 203 of the IC card 2 receives n-1 key data (key data K2, K3, K4, K5) from the second to the nth and one update key data (key data K6) in order. The total n pieces of key data arranged are managed again as a total of n pieces of key data from 1 to n.

  Alternatively, the CPU 203 of the IC card 2 sets the update key data (key data K6) to n (n: integer, 2 ≦ n, for example, n = 5) key data (for example, key data K1, K2, K3, K4). , K5) are arranged before the first key data (key data K1) and the n-th key data (key data K5) is excluded, and one update key data (key data K6) and 1 are added. A total of n key data (key data K6, K1, K2, K3, K4) in which n−1 key data (key data K1, K2, K3, K4) up to the (n−1) th order are updated have been updated. Continue management as key data. That is, the CPU 203 of the IC card 2 includes one update key data (key data K6) and n-1 key data (key data K1, K2, K3, K4) from the first to the (n-1) th. Are sequentially managed as a total of n pieces of key data from 1 to the nth.

  FIG. 9 is a flowchart showing an example of the key data update process (on the IC card side).

  Step S1: The IC card 2 is activated via the contact terminal 201.

  Step S2: The IC card 2 receives a command (command) from the card reader / writer 14 and performs the following determination / processing.

  Step S3: In order to access the key data file, the IC card 2 sets EF1 storing the key data file as the current file.

  Step S4: The key data K2, K3, K4, K5 obtained by removing the top key data (key data K1: current key) from the key data file stored in EF1 is expanded in the RAM 205 (first key data exclusion process). Alternatively, key data K1, K2, K3, and K4 obtained by removing the last key data (key data K5: current key) from the key data file stored in EF1 are expanded in the RAM 205 (last key data excluding process). .

  Step S5: Update key data K6 is added next to the key data K2, K3, K4, K5 expanded in the RAM 205 (first key data exclusion process). Alternatively, the update key data K6 is added to the head of the key data K1, K2, K3, K4 expanded in the RAM 205 (last key data exclusion process).

  Step S6: The key data K2, K3, K4, K5, and K6 expanded in the RAM 205 are overwritten on the key data file of EF1 (first key data exclusion process). Alternatively, the key data K6, K1, K2, K3, and K4 expanded in the RAM 205 are overwritten on the key data file of EF1 (last key data exclusion process).

  Step S7: The processing result is returned as response data to the card reader / writer 14.

  As described above, by newly adding the update key data K6 (that is, by the leading key data excluding process or the trailing key data excluding process), the key data is updated, and the key data that is no longer used is excluded. (For example, discard).

  FIG. 10 is a flowchart illustrating an example of authentication processing based on key data.

  Step S1: The IC card 2 is activated via the contact terminal 201.

  Step S2: The IC card 2 receives a command (command) from the card reader / writer 14 and performs the following determination / processing. Here, a case where an authentication command is received and authentication processing is performed will be described.

  Step S3: In order to access the key data file, the IC card 2 sets EF1 storing the key data file as the current file.

  Step S4: Key data is acquired from the head address of the key data file stored in EF1, and expanded in the RAM 205. Before the update process, the key data K1 is acquired from the head address, and after the update process by the head key data exclusion process, the key data K2 is acquired from the head address (because the key data K1 is excluded). Alternatively, the key data is acquired from the last address of the key data file stored in the EF 1 and developed in the RAM 205. Before the update process, the key data K5 is acquired from the last address, and after the update process by the last key data exclusion process, the key data K4 is acquired from the last address (because the key data K5 is excluded). In addition to the above, the m-th (m: integer, m <n) key data out of a predetermined number of key data is acquired (selected) before the update process and after the update process by the leading key data exclusion process. (The update key data K6 is added at the end, which means that the m-th key data excluding the end may be acquired). Alternatively, the m-th (m: integer, 2 ≦ m ≦ n) key data out of a predetermined number of key data is acquired (selected) before the update process and after the update process by the last key data exclusion process. (The update key data K6 is added at the head, which means that the m-th key data excluding the head may be acquired).

  Step S5: Using the key data acquired in S4, processing corresponding to the authentication command is executed. For example, assume that the card reader / writer 14 selects m-th first key data out of n pieces of key data, and transmits the first key data to the IC card 2. The IC card 2 receives the first key data, selects the same m-th second key data from the n pieces of key data, and performs an authentication process based on the first and second key data. Execute.

  Step S6: The processing result is returned as response data to the card reader / writer 14.

  As described above, the current key can be easily updated. That is, even if the current key is changed (since it is updated by both the card reader / writer 14 and the IC card 2), it is not necessary to change the authentication command or the like transmitted from the card reader / writer 14 side. Moreover, since the update key data is not used for authentication or verification as it is, it is excellent in safety. In the present embodiment, the case of holding and updating five pieces of key data has been described, but by increasing the number of key data, the update key data is used for actual authentication or verification. Requires considerable renewal, ensuring high security.

  As described in detail above, a process in which a plurality of key data is stored in the same EF, and the key data in the EF is updated with the update key data, thereby being transmitted / received between the card reader / writer 14 and the IC card 2 It is possible to update key data with high security without changing the instruction interface. It is also possible to exclude (for example, discard) key data that is no longer used at the same time as updating.

  The key data update process described above can be realized relatively easily by managing a predetermined number of key data in a queue structure and applying a FIFO technique. That is, update key data is added to the queue end, and the key data of the queue top is pushed out and discarded. Alternatively, update key data is added to the queue top, and the queue end key data is pushed out and discarded.

  Note that the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the scope of the invention in the implementation stage. In addition, the embodiments may be appropriately combined as much as possible, and in that case, the combined effect can be obtained. Further, the above embodiments include inventions at various stages, and various inventions can be extracted by appropriately combining a plurality of disclosed constituent elements. For example, even if some constituent requirements are deleted from all the constituent requirements shown in the embodiment, the problem described in the column of the problem to be solved by the invention can be solved, and the effect described in the column of the effect of the invention Can be obtained as an invention.

1 is a block diagram showing a schematic configuration of an IC card system (medium processing system) according to an embodiment of the present invention. 1 is a block diagram showing a schematic configuration of a card reader / writer according to an embodiment of the present invention. It is a figure which shows the file structure in the data memory of a card reader / writer. It is a block diagram which shows schematic structure of the IC card which concerns on one Embodiment of this invention. It is a figure which shows the file structure in the data memory of an IC card. It is a figure which shows an example of the key data file stored in EF of a data memory. It is a figure which shows an example of a key data update process. It is a figure which shows the transition of the key data file corresponding to a key data update process. It is a flowchart which shows an example of a key data update process (IC card side). It is a flowchart which shows an example of the authentication process based on key data.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Terminal, 2 ... IC card, 11 ... Main body (high-order apparatus), 12 ... Display, 13 ... Keyboard, 14 ... Card reader / writer, 141 ... Contact terminal, 142 ... Communication I / F, 143 ... CPU, 144 ... Data memory, 145 ... RAM, 201 ... contact terminal, 202 ... communication I / F, 203 ... CPU, 204 ... data memory, 205 ... RAM

Claims (11)

An information storage medium comprising a card body in which a module is embedded,
The module is
Communication means for communicating with the media processing device;
A management means for managing a predetermined number of key data by a chain structure in which the arrangement order is traced;
Based on a predetermined command received via the communication unit, key data at a predetermined fixed position is selected from the predetermined number of key data managed by the management unit, and processing based on the selected key data is executed. Processing means to
With
The management means arranges the update key data received via the communication means at one end of the predetermined number of key data managed by a chain structure and excludes the other end key data, thereby updating the update data. Continuously managing the key data of the same number as the predetermined number obtained by adding the key data for one end of the chain structure as updated key data;
An information storage medium characterized by the above. An information storage medium comprising a card body in which a module is embedded,
The module is
Communication means for communicating with the media processing device;
Management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
Based on a predetermined command received via the communication means, the m-th (m: integer, m <n) key data is selected from the n key data managed by the management means, and the selected key is selected. Processing means for executing processing based on the data;
With
The management means arranges the update key data received via the communication means after the n-th key data out of the n key data managed by the chain structure and excludes the top key data In this way, a total of n key data in which n-1 key data from the second to the nth and one update key data are arranged in order are continuously managed as updated key data.
An information storage medium characterized by the above. The management means stores a total of n pieces of key data in which n-1 key data from the 2nd to nth and one piece of the update key data are arranged in order, a total of n pieces from 1 to n again. As key data for
The processing means manages the m-th key data based on the same command as the predetermined command even after managing a total of n key data from 1 to the n-th when the update key data is added to the chain structure. To execute processing based on the selected key data,
The information storage medium according to claim 2. An information storage medium comprising a card body in which a module is embedded,
The module is
Communication means for communicating with the media processing device;
Management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
Based on a predetermined command received via the communication means, the m-th (m: integer, 2 ≦ m ≦ n) key data out of n key data managed by the management means is selected and selected Processing means for executing processing based on the key data obtained;
With
The management means arranges the update key data received via the communication means before the first key data of the n key data managed by the chain structure and excludes the n-th key data Thus, a total of n pieces of key data in which one piece of the update key data and n-1 pieces of key data from 1 to (n-1) th are arranged in order are continuously managed as updated key data.
An information storage body characterized by that. The management means adds a total of n key data in which the one update key data and the (n−1) th key data from the first to the (n−1) th are arranged in order, again from the first to the nth. managed as n key data,
The processing means manages the m-th key data based on the same command as the predetermined command even after managing a total of n key data from 1 to the n-th when the update key data is added to the chain structure. To execute processing based on the selected key data,
The information storage medium according to claim 4. A medium processing apparatus that processes an information storage medium that manages a predetermined number of key data with a chain structure in which the arrangement order is traced,
A communication means for communicating with the information storage medium;
A management means for managing the predetermined number of key data by a chain structure in which the arrangement order is traced;
The first key data at a predetermined fixed position is selected from the predetermined number of key data managed by the management means, and the first key data is transmitted to the information storage medium via the communication means. Ordering selection of second key data at a predetermined fixed position out of the predetermined number of key data managed in the information storage medium via the communication means, and based on the first and second key data Processing means for ordering processing;
With
The management means arranges the update key data provided from the higher-level device at one end of the predetermined number of key data and excludes the key data at the other end so that the update key data is one end of the chain structure. Continuously managing the same number of key data as the updated key data in addition to the predetermined number,
The processing means transmits the update key data provided from a higher-level device to the information storage medium via the communication means, and the predetermined number of the update key data managed in the information storage medium The key data equal to the predetermined number obtained by adding the update key data to one end of the chain structure is continuously managed as updated key data by arranging at one end of the key data and excluding the key data at the other end. To command,
A medium processing apparatus. A medium processing apparatus that processes an information storage medium that manages a predetermined number of key data with a chain structure in which the arrangement order is traced,
A communication means for communicating with the information storage medium;
Management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
The m-th (m: integer, m <n) first key data of the n key data managed by the management means is selected, and the first key data is selected as the information via the communication means. The first and second keys are transmitted to the storage medium and ordered to select the m-th second key data out of the n pieces of key data managed in the information storage medium via the communication means. Processing means for ordering processing based on data;
With
The management means arranges the update key data provided from the host device after the n-th key data out of the n key data and excludes the first key data from the second n A total of n key data in which n−1 key data up to the th and one update key data are arranged in order are continuously managed as updated key data;
The processing means transmits the update key data provided from a higher-level device to the information storage medium via the communication means, and the n pieces of update key data managed in the information storage medium By arranging the n-th key data after the n-th key data in the key data and excluding the first key data, the (n-1) key data from the second to the n-th and the one update key data In order to continuously manage a total of n pieces of key data arranged in order as updated key data.
A medium processing apparatus. A medium processing apparatus that processes an information storage medium that manages a predetermined number of key data with a chain structure in which the arrangement order is traced,
A communication means for communicating with the information storage medium;
Management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
The m-th (m: integer, 2 ≦ m ≦ n) first key data is selected from the n pieces of key data managed by the management means, and the first key data is selected via the communication means. In addition to transmitting to the information storage medium, the m th second key data out of the n key data managed in the information storage medium is ordered via the communication means, and the first and second keys are selected. Processing means for ordering processing based on the key data of;
With
The management means arranges the update key data provided from the host device before the first key data of the n pieces of key data and excludes the nth key data to provide one update data A total of n key data in which key data and n-1 key data from 1 to (n-1) th are arranged in order are continuously managed as updated key data;
The processing means transmits the update key data provided from a higher-level device to the information storage medium via the communication means, and the n pieces of update key data managed in the information storage medium By arranging the key data before the first key data and excluding the n-th key data, one update key data and n-1 key data from 1 to n-1 are obtained. And in order to continuously manage a total of n pieces of key data arranged in order as updated key data.
A medium processing apparatus. An information storage medium comprising a card body in which a module is embedded, and a medium processing system including a medium processing device for processing the information storage medium,
The medium processing apparatus includes:
First communication means for communicating with the information storage medium;
A first management means for managing a predetermined number of key data by a chain structure in which the arrangement order is traced;
The first key data at a predetermined fixed position is selected from the predetermined number of key data managed by the first management means, and the first key data is selected as the information via the first communication means. The second key data at a predetermined fixed position out of the predetermined number of key data managed in the information storage medium via the first communication means is transmitted and sent to the storage medium, First processing means for commanding processing based on the first and second key data;
With
The first management means links the update key data by arranging the update key data provided from the host device at one end of the predetermined number of key data and excluding the key data at the other end. Continue managing the same number of key data as the updated number of key data added to one end of the structure,
The first processing means transmits the update key data provided from a higher-level device to the information storage medium via the first communication means, and transmits the update key data to the information storage medium. The same number of key data as the predetermined number obtained by adding the update key data to one end of the chain structure has been updated by arranging at one end of the predetermined number of managed key data and excluding the key data at the other end Ordered to continue managing as key data,
The module of the information storage medium is
Second communication means for communicating with the medium processing device;
A second management means for managing the predetermined number of key data by a chain structure in which the arrangement order is traced;
The predetermined number of keys managed by the second management means based on the command received via the second communication means while receiving the first key data via the second communication means Second processing means for selecting the second key data at a predetermined fixed position of the data and executing processing based on the first and second key data;
With
The second management means arranges the update key data received via the second communication means at one end of the predetermined number of key data and excludes the key data at the other end, thereby Continue to manage the same number of key data as updated key data by adding update key data to one end of the chain structure,
A medium processing system. An information storage medium comprising a card body in which a module is embedded, and a medium processing system including a medium processing device for processing the information storage medium,
The medium processing apparatus includes:
First communication means for communicating with the information storage medium;
First management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
The m-th (m: integer, m <n) first key data among the n pieces of key data managed by the first management means is selected, and the first key data is selected via the first communication means. Key data is transmitted to the information storage medium, and the m-th second key data out of the n pieces of key data managed in the information storage medium is ordered via the first communication means. Processing means for instructing processing based on the first and second key data;
With
The first management means arranges the update key data provided from the host device after the n-th key data of the n pieces of key data and excludes the top key data by 2 A total of n key data in which n-1 key data from the nth to the nth and one update key data are arranged in order are continuously managed as updated key data;
The first processing means transmits the update key data provided from a higher-level device to the information storage medium via the first communication means, and transmits the update key data to the information storage medium. By arranging the n-th key data after the managed n-number of key data and excluding the top key data, the (n−1) th key data from the second to the n-th and one Order to continuously manage a total of n pieces of key data in which the update key data are arranged in order as updated key data;
The module of the information storage medium is
Second communication means for communicating with the medium processing device;
A second management means for managing n pieces of key data from 1 to the n-th by a chain structure in which the arrangement order is traced;
The n key data managed by the second management means based on the command received via the second communication means while receiving the first key data via the second communication means A second processing means for selecting the m-th second key data from among the second key data, and executing processing based on the first and second key data;
With
The second management means arranges the update key data received via the second communication means after the n-th key data of the n pieces of key data and sets the leading key data. By excluding, a total of n key data in which n-1 key data from the second to nth and one update key data are arranged in order are continuously managed as updated key data.
A medium processing system. An information storage medium comprising a card body in which a module is embedded, and a medium processing system including a medium processing device for processing the information storage medium,
The medium processing apparatus includes:
First communication means for communicating with the information storage medium;
First management means for managing n (n: integer, 2 ≦ n) key data from 1 to n-th by a chain structure in which the arrangement order is traced;
The m-th (m: integer, 2 ≦ m ≦ n) first key data among n pieces of key data managed by the first management means is selected and the first communication means is used to select the first key data. The first key data is transmitted to the information storage medium, and the mth second key data is selected from the n key data managed by the information storage medium via the first communication means. Processing means for commanding processing based on the first and second key data;
With
The first management means arranges the update key data provided from the host device before the first key data of the n key data and excludes the n-th key data, A total of n key data in which the update key data and n-1 key data from 1 to (n-1) th are arranged in order are continuously managed as updated key data;
The first processing means transmits the update key data provided from a higher-level device to the information storage medium via the first communication means, and transmits the update key data to the information storage medium. By arranging before the first key data of the managed n pieces of key data and excluding the n-th key data, one update key data and n from 1 to (n-1) th -Order to continuously manage a total of n pieces of key data arranged in order of one key data as updated key data;
The module of the information storage medium is
Second communication means for communicating with the medium processing device;
A second management means for managing n pieces of key data from 1 to the n-th by a chain structure in which the arrangement order is traced;
The n key data managed by the second management means based on the command received via the second communication means while receiving the first key data via the second communication means A second processing means for selecting the m-th second key data from among the second key data, and executing processing based on the first and second key data;
With
The second management means arranges the update key data received via the second communication means before the first key data of n pieces of key data and stores the nth key data. By excluding, a total of n pieces of key data in which one piece of the update key data and n-1 pieces of key data from 1 to the (n-1) th order are sequentially managed as updated key data.
A medium processing system.

Images