JP2010193201A - Portable terminal, communication system and ic card control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To read/write data from/in an IC card, while executing a software for communication via network, as it is. <P>SOLUTION: A first program receives specified data, including location information that shows the location of a script for executing access to one storage area from among a plurality of storage areas in an IC card via a communication means from a first server in the network. The first program acquires a script via the communication means from the network, according to the location information included in the received data. The first program executes the acquired script, to make a second control means access one storage area, and it acquires information, corresponding to the result obtained through accessing to the storage area. The first program makes a display means display the information, corresponding to the result. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a technique for using an IC card in a mobile terminal.

  An IC card used in a portable terminal is known, such as mobile FeliCa (registered trademark). For a single IC card, data is read and written using a dedicated reader / writer, but for an IC card built in a portable terminal, in addition to reading and writing data using a reader / writer, Data can be read and written from the mobile terminal body. Many portable terminals have a function of performing communication via a network, and various services can be provided by a communication function and an IC card function. In a portable terminal incorporating an IC card, dedicated application software is used to read and write data on the IC card.

  On the other hand, Patent Document 1 discloses a technique for displaying an execution result of an APDU (Application Protocol Data Unit, which is a message transmitted from a terminal device to an IC card) on a web browser ( In particular, paragraphs 0020-0022).

JP 2006-244211 A

When performing communication through the network and reading / writing data to / from the IC card as a series of processing, software for performing communication via the network and software for reading / writing data from / to the IC card are provided. Switching was cumbersome. Also in Patent Document 1, it is necessary to use dedicated software for acquisition and execution of APDU.
In contrast, the present invention provides a technique for reading and writing data to and from an IC card while executing software for performing communication via a network.

The present invention receives a communication means for communicating via a network, a display means for displaying information, and specific data described in a specific format from the network via the communication means, and responds to the received specific data. First control means for executing a first program for displaying the displayed information on the display means, an antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a signal from the antenna Or an IC card having a second control means for accessing the memory in response to a signal from the first control means, and the first control means executing the first program Specific data including location information indicating the location of a script for executing processing for accessing one of the plurality of storage areas is stored on the network. The first control means that is received from the server via the communication means and that is executing the first program is connected to the communication means from the network based on the location information included in the received data. The first control unit that acquires the script via the command and executes the first program executes the acquired script, so that the second control unit is stored in the one storage area. The first control means that executes access to the first storage area and obtains information according to the result of accessing the one storage area, and displays the information according to the result to the display means. A portable terminal characterized by being displayed is provided.
According to this portable terminal, the IC card is accessed by a script executed from the first program.

In a preferred aspect, the specific data includes a first script for executing a process for accessing the one storage area and a second for executing a process for accessing another storage area different from the one storage area. The first control means including the location information indicating the location of the script and executing the first program sequentially executes the first script and the second script, whereby the second The first storage area and the other storage area, the first information corresponding to the result of accessing the one storage area, and the second information corresponding to the result of accessing the other storage area And the first control unit executing the first program causes the display unit to display the first information and the second information. Good.
According to this portable terminal, access to different storage areas of the IC card is performed by a plurality of scripts executed from the first program.

In another preferred embodiment, the network includes a second server that permits rewriting of the memory content of the memory, and the script is a script for executing a process of rewriting the memory content of the memory, The first control means executing the script transmits the permission request to the second server via the communication means, and the first control means executing the script includes: A response to the request is received from the second server via the communication means, and the second control means, when the response permits rewriting of the stored contents of the memory, the memory And the stored contents of the memory may be rewritten.
According to this portable terminal, when a script executed from the first program is authenticated, data is written to the IC card.

In yet another preferred aspect, the portable terminal has storage means for storing the specific data and the script, and the first program reads the specific data from the storage means and responds to the read specific data. Including a group of instructions for causing the first control means to execute a process for causing the display means to display the information, and the first control means executing the first program from the storage means. The second control unit may access the one storage area by executing the script read from the script, and information corresponding to the result of accessing the one storage area may be acquired.
According to this portable terminal, the script is stored in the storage unit together with the specific data, and the IC card is accessed when the script is read from the storage unit.

In still another preferred aspect, the portable terminal has storage means for storing information according to a result of accessing the memory, and the first program reads the information from the storage means and reads the information. May include a command group for causing the first control means to execute a process of causing the display means to display a message.
According to this portable terminal, the execution result of the script executed from the first program is stored.

In still another preferred aspect, the portable terminal has storage means for storing the specific data, and the first program reads the specific data from the storage means, and stores information according to the read specific data. A location that includes a group of instructions for causing the first control means to execute processing to be displayed on the display means, and that the first control means that executes the first program is included in the read data Based on the information, the script may be acquired from the network via the communication means.
According to this portable terminal, the data is read from the IC card by the script acquired based on the location information included in the specific data stored in the storage means.

In still another preferred aspect, the storage means causes the first control means to execute a process of transmitting, via the communication means, an e-mail attached with data stored in the storage means. 2 programs may be stored, and the first control unit may transmit the electronic mail to another portable terminal by executing the second program.
According to this portable terminal, a script executed from the first program or an execution result thereof is transmitted to another portable terminal.

In still another preferred aspect, the network includes a second server that permits rewriting of the storage contents of the memory, and the specific data stores the storage contents of one storage area among the plurality of storage areas. Location information indicating the location of a first script for executing rewriting processing and a second script for executing processing for rewriting the storage contents of another storage area different from the one storage area, and the one storage And instruction information for instructing the user to start execution of the specific process for rewriting the storage contents of the area and the other storage area, and when the start of execution of the specific process is instructed according to the instruction information, The first control means that is executing the script performs a first request for the permission for the one storage area and a previous request for the other storage area. A second request for permission is transmitted to the second server via the communication means, and the first control means executing the script includes the first request and the second request. Is received from the second server via the communication means, and the second control means receives the first request and the second request in the one storage area and the other storage area. If rewriting of the storage contents is permitted, the memory is accessed, the storage contents of the one storage area and the other storage area are rewritten, and the storage of the one storage area and the other storage area is stored. When the contents are rewritten, the first control unit executing the first program may transmit information indicating that the rewriting of the stored contents is completed to the first server.
According to this portable terminal, a series of processing is performed by two scripts, a first script and a second script, corresponding to different services.

In still another aspect, the script is described in an object-oriented programming language, and includes a first method for executing a process of reading data from the one storage area, and a process of writing data to the one storage area. A second method for executing, wherein the specific data includes information specifying a method to be executed, and the first control means executing the first program includes: A method specified by information included in the specific data may be executed.
According to this portable terminal, the script to be transmitted to the portable terminal is unified regardless of the contents of the processing.

In addition, the present invention includes a server and a mobile terminal connected to the server via a network, the mobile terminal including a communication unit that communicates via the network, a display unit that displays information, First control for receiving specific data described in a specific format from the network via the communication means and executing a first program for causing the display means to display information corresponding to the received specific data Means, an antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a second control for accessing the memory in response to a signal from the antenna or a signal from the first control means And the first control means executing the first program accesses one storage area of the plurality of storage areas. The first control means for receiving the specific data including the location information indicating the location of the script for executing the processing to be performed from the server via the communication means, and executing the first program, Based on the location information included in the received data, the first control unit that acquires the script from the network via the communication unit and executes the first program is the acquired script. By executing the above, the second control means is made to access the one storage area, obtains information according to the result of accessing the one storage area, and executes the first program. Provided is a communication system, wherein the first control means causes the display means to display information according to the result.
According to this communication system, an IC card is accessed by a script executed from the first program.

The present invention further includes a communication unit that communicates via a network, a display unit that displays information, and specific data described in a specific format from the network via the communication unit, and the received specific data First control means for executing a specific program for causing the display means to display corresponding information, an antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a signal from the antenna or In a computer device having an IC card having a second control means for accessing the memory in response to a signal from the first control means, the first control means for executing the specific program, A specific data including location information indicating a location of a script for executing processing for accessing one of the plurality of storage areas. Based on the location information included in the received data by the step of receiving the data from the first server on the network via the communication means and the first control means executing the specific program. Acquiring the script from the network via the communication means, and the first control means executing the specific program executing the acquired script to execute the second control. Means for accessing the one storage area, obtaining information according to the result of accessing the one storage area, and the first control means executing the specific program according to the result And displaying the information on the display means.
According to this IC card control method, the IC card is accessed by a script executed from the first program.

It is a figure which shows the structure of the communication system which concerns on one Embodiment of this invention. 1 is an external view of a mobile phone 10. FIG. 2 is a diagram showing a hardware configuration of a mobile phone 10. FIG. 2 is a diagram showing a configuration of an IC card 500. FIG. 5 is a diagram illustrating a configuration of a storage area of a memory 504. FIG. 3 is a diagram showing a software configuration of the mobile phone 10. FIG. 2 is a diagram illustrating a configuration of a service server 30. FIG. 2 is a diagram showing a configuration of a remote issuing server 40. FIG. 2 is a diagram illustrating a configuration of a service server 50. FIG. 2 is a diagram illustrating a configuration of a service server 60. FIG. It is a sequence diagram which shows the process by a registration script. It is a sequence diagram which shows the process by a read script. It is a sequence diagram which shows the process by a writing script. It is a sequence diagram which shows the process by a deletion script. It is a sequence diagram which shows the operation | movement at the time of the new registration of a service. It is a figure which illustrates the screen which a browser displays with operation of Drawing 15. It is a sequence diagram which shows operation | movement when accessing a shopping site. It is a sequence diagram which shows operation | movement when accessing a shopping site. It is a figure which illustrates the screen which a browser displays with operation of Drawing 17A and B. It is a figure which illustrates the specific example of an external link. It is a sequence diagram which shows the operation | movement at the time of performing a settlement payment. It is a sequence diagram which shows the operation | movement at the time of performing a settlement payment. It is a figure which illustrates the screen which a browser displays with operation of Drawing 20A and B. It is a figure which illustrates the list screen of a screen memo. It is a figure which shows the outline | summary of the encryption technique used in a communication system.

1. Configuration FIG. 1 is a diagram showing a configuration of a communication system according to an embodiment of the present invention. This communication system includes a mobile phone 10, a management server 20, a service server 30, a remote issuing server 40, a service server 50, and a service server 60. The management server 20, service server 30, remote issuing server 40, service server 50, and service server 60 are connected via a network 70. The reader / writer 510 performs wireless communication with an IC (Integrated Circuit) card 500 built in the mobile phone 10 to read / write data.

1-1. Mobile phone 10
FIG. 2 is an external view of the mobile phone 10. The mobile phone 10 is an example of a mobile terminal according to the present invention. The mobile phone 10 has a housing 9A and a housing 9B. The housing 9 </ b> A and the housing 9 </ b> B are connected via the hinge 3. The mobile phone 10 is a so-called foldable mobile phone. The user of the mobile phone 10 performs voice communication and data communication with the housing 9A and the housing 9B opened as shown in FIG.

  The housing 9A includes a speaker 6, an antenna 7, and a display device 8. The speaker 6 outputs voice of a call, operation sound, music sound, and the like. The antenna 7 performs wireless communication with the wireless base station. The display device 8 displays characters and images. The housing 9 </ b> B has a keypad 4 and a microphone 5. The keypad 4 receives a user operation and outputs a signal corresponding to the received operation. The microphone 5 converts the input sound into an electric signal and outputs it.

  FIG. 3 is a diagram illustrating a hardware configuration of the mobile phone 10. A CPU (Central Processing Unit) 102 is a control device (an example of a first control unit) that controls each component of the mobile phone 10. A ROM (Read Only Memory) 103 is a storage device that stores programs and data necessary for basic operations of the mobile phone 10. The ROM 103 stores, for example, an IPL (Initial Program Loader), an OS (Operating System) program, and Java (registered trademark) platform software. The IPL is a program for reading a program that is executed first when the mobile phone 10 is powered on. In this embodiment, the IPL reads the OS program. The OS program is a program for realizing input / output of data, access to a storage device, execution of various programs, voice communication, data communication, and other basic functions of the mobile phone 10. Java (registered trademark) platform software is a program and data for realizing a Java execution environment on the OS.

  A RAM (Random Access Memory) 104 is a storage device that functions as a work area when the CPU 102 executes a program. The storage unit 105 is a storage device that stores application programs and data. The storage unit 105 includes a nonvolatile memory such as a flash memory. In the present embodiment, the storage unit 105 stores a browser program. The browser program is a program for receiving HTML (HyperText Markup Language) data via a network and causing the display device 8 to display information corresponding to the received HTML data. The storage unit 105 stores an e-mail program. The e-mail program (mailer) is a program for sending and receiving e-mails via a network and displaying and editing the sent and received e-mails. It is possible to attach image data and address book data as an attached file to the e-mail.

  In this example, the browser program includes a group of instructions for causing the mobile phone 10 to function as a script processing engine. A “script processing engine” refers to a software component for executing a process according to a group of instructions described in a script. A function as a script processing engine is realized by the CPU 102 executing this instruction group and controlling hardware such as the RAM 104.

  The operation unit 106 outputs a signal corresponding to a user operation. The operation unit 106 has an input device such as a keypad (keypad 4 in FIG. 1) including a numeric keypad, a call key, a call end key, a clear key, a cursor key, a power key, and other keys for performing input. . The user inputs an instruction to the mobile phone 10 by operating the keypad. The display unit 107 (an example of a display unit) displays characters and images. The display unit 107 includes a display device (display device 8 in FIG. 1) such as a liquid crystal display. The display unit 107 displays information processed by the running application program. The display unit 107 includes a display body such as an LCD (liquid crystal display) and a drive circuit that drives the display body. The communication unit 108 (an example of a communication unit) performs voice communication or data communication via a radio base station via an antenna (antenna 7 in FIG. 1). The bus 109 is a transmission path for transmitting signals and data exchanged between components. Furthermore, the mobile phone 10 has an IC card 500. The above components are connected via a bus 109.

  FIG. 4 is a diagram illustrating a configuration of the IC card 500. The antenna 501 is used for transmitting / receiving a radio signal to / from the reader / writer 510. The IC chip 502 performs processing according to the signal received by the antenna 501. The IC chip 502 includes a processor 503 (an example of second control means) and a memory 504.

  The IC card 500 has a signal line 505 used for data transmission / reception with the CPU 102. The processor 503 accesses the memory 504 in accordance with a signal received by the antenna 501 or a signal from the CPU 102, and reads or writes data. The processor 503 executes processing associated with data reading or writing, such as data encryption or decryption.

  FIG. 5 is a diagram illustrating the configuration of the storage area of the memory 504. In this example, two areas of a common area and a free area are set in the memory 504 in the initial state (FIG. 5A). The common area is an area where an area is set for each service and data is written by a predetermined operator (in this example, an operator that manages and operates the remote issuing server 40). The free area is an area where data can be written regardless of the operator.

  The common area can be further divided into a plurality of areas, and data of different services is stored in each area. In the example of FIG. 5, two storage areas are set in the common area, and data of electronic money of company A and electronic money of company B is stored (FIG. 5B). Hereinafter, electronic money provided by Company A and Company B will be referred to as “Company A Money” and “Company B Money”, respectively. Access restrictions (security) can be set for each area individually. Thereby, data used in a plurality of services can be managed in one card, and security of data between services is ensured.

  FIG. 6 is a diagram illustrating a software configuration of the mobile phone 10. On the OS 111, an application program such as a browser, a client software 121, a device driver 122, and the like operate. The browser 130 has a function of causing the display device 8 to display information corresponding to the HTML data. The browser 130 has a function related to a function of displaying information, such as a function of receiving HTML data from the network. The script processing engine 131 is one of such related functions, and has a function of interpreting a Java script and executing a process according to an instruction described in the Java script. The script processing engine 131 includes an API (Application Program Interface) group for accessing the IC card 500. The API group 120 includes, for example, a server communication start API for starting communication with the server, a data read API for reading data from the IC card 500, a data write API for writing data to the IC card 500, and the like. Is included.

  The client software 121 is software for relaying communication with a server such as the remote issuing server 40. The device driver 122 is a driver program for accessing the IC card 500.

1-2. Management server 20
The management server 20 is a server for performing processing such as authentication and billing when the mobile phone 10 performs communication via a network.

1-3. Service server 30
FIG. 7 is a diagram illustrating the configuration of the service server 30. The service server 30 is a server that is managed and operated by company A, which is a provider that provides electronic money services. The service server 30 includes HTML data for providing information related to the service, various scripts (balance display script, settlement script, charge script, and deletion script) used for the electronic money service, and a server program for causing the server to function. Are stored in storage means such as an HDD. Details of these scripts will be described later. The service server 30 includes communication means such as a communication interface used for communication via a network, and control means such as a CPU that executes a program. When the control unit executes the server program and controls the storage unit and the communication unit, the service server 30 has a function of transmitting HTML data and a script in response to a request from the mobile phone 10.

1-4. Remote issuing server 40
FIG. 8 is a diagram showing the configuration of the remote issuing server 40. The remote issue server 40 is a server that is managed and operated by a provider that provides the platform of the IC card 500. The remote issuance server 40 executes a process used for the service of the IC card 500 such as a database for recording information related to a service provided by a business operator, a process for registering information in the database, and an authentication process for registration and settlement. Are stored in storage means such as an HDD. The remote issuing server 40 also has communication means such as a communication interface used for communication via a network, and control means such as a CPU that executes a program. When the control unit executes the server program and controls the storage unit and the communication unit, the remote issuing server 40 has a function of performing processing such as service registration and authentication in response to a request from the mobile phone 10.

1-5. Service server 50
FIG. 9 is a diagram illustrating a configuration of the service server 50. The service server 50 is a server that is managed and operated by Company B, which is a provider that provides electronic money services. The service server 50 includes HTML data for providing service-related information, various scripts (balance display script, settlement script, charge script, and deletion script) used for the electronic money service, and a server program for causing the server to function. Are stored in storage means such as an HDD. Details of these scripts will be described later. The service server 50 also has communication means such as a communication interface used for communication via a network, and control means such as a CPU that executes a program. When the control unit executes the server program and controls the storage unit and the communication unit, the service server 50 has a function of transmitting HTML data and a script in response to a request from the mobile phone 10.

1-6. Service server 60
FIG. 10 is a diagram illustrating a configuration of the service server 60. The service server 60 is a server managed and operated by a company C, which is a third party who is not a provider of electronic money services. Company C operates a shopping site using the service server 60 and conducts a mail order business. The service server 60 includes a product database in which products and product attributes (name, quantity, unit price, image, etc.) are recorded, a point database in which points the user has, HTML data for providing information related to shopping, A server program for functioning as a server is stored in storage means such as an HDD. The service server 60 includes communication means such as a communication interface used for communication via a network, and control means such as a CPU that executes a program. When the control unit executes the server program and controls the storage unit and the communication unit, the service server 60 has a function of transmitting HTML data in response to a request from the mobile phone 10 and performing processing related to purchase of a product. . The HTML data provided by the service server 60 includes a script link provided by the service server 30 or the service server 50. That is, a script provided by the service server 30 or the service server 50 can be called through the HTML data.

2. Operation 2-1. Script The mobile phone 10 has a function of executing a script from the browser (more specifically, by the function of the script processing engine). In this example, the script is a Java (registered trademark) script that is an object-oriented programming language. Here, the script executed from the browser includes a script for accessing the IC card 500. “Accessing the IC card 500” means setting a storage area in the memory 504 of the IC card 500, reading data from the set storage area, writing data to the storage area, or storing Rewriting the data stored in the area. The script for accessing the IC card 500 includes a script for performing new registration (hereinafter referred to as “registration script”), a script for reading data (hereinafter referred to as “read script”), and a script for writing data. (Hereinafter referred to as “write script”) and scripts for deleting registered data (hereinafter referred to as “delete script”).

2-1-1. Registration Script The registration script is a script for setting a new storage area in the memory 504 of the IC card 500 and writing initial data in the set storage area. The registration script is used when “issuing” electronic money or an electronic ticket.

  FIG. 11 is a sequence diagram showing processing by a registration script. In the following, software such as “browser”, “mailer”, “script processing engine”, “API”, “script”, “OS”, etc. will be described as the subject of processing. This means that the CPU 102 that executes the instructions included in the command performs processing in cooperation with hardware resources such as the RAM 104, the display unit 107, and the communication unit 108. For example, when it is described that “the browser displays a page according to the HTML data”, the CPU 102 executing the browser program interprets the HTML data and causes the display unit 107 to display a page (image) corresponding to the HTML data. Means that. Alternatively, when it is described that “API delivers data to the browser”, the CPU 102 executing the API stores the data in a predetermined storage area, then executes the browser and reads the data from the storage area. means. In addition, when it is described that “the mailer displays an e-mail message”, the CPU 102 executing the e-mail program interprets the e-mail data and displays an image indicating the content of the e-mail on the display unit 107. It means that In FIG. 11, the browser and the script processing engine are described separately, but as described above, the script processing engine is a part of the browser function.

  In step S100, the browser reads the registration script. That is, the browser requests the service server 30 to transmit a registration script. When receiving the request for transmitting the registration script from the mobile phone 10, the service server 30 transmits the registration script to the mobile phone 10 (step S101). The browser passes the read registration script to the script processing engine (step S102).

  When the registered script is received, the script processing engine performs processing according to an instruction described in the script. In step S <b> 103, the script processing engine transmits a ticket issuing request to the remote issuing server 40. Specifically, it is as follows. The registration script includes a group of instructions for calling the server communication start API. When the CPU 102 executes these command groups, the server communication start API is activated. The server communication API calls client software. The client software communicates with the remote issue server 40 via the communication unit 108. That is, the client software transmits a ticket issuing request to the remote issuing server 40. The ticketing request includes information used for processing in the remote issuing server 40, for example, an identifier for identifying the service of company A and information indicating the user's attributes (hereinafter referred to as “user information”). In FIG. 11, processing such as an API or a device driver called from a registration script is also described as processing of a script processing engine that executes the registration script. The same applies to the other drawings.

  When the remote issuance server 40 receives the ticketing request, it generates information (hereinafter referred to as “ticketing information”) used for the ticketing process (step S104). The ticket issuing information includes, for example, an identifier for specifying a service and a user, and initial data written in the IC card 500. When the ticket issuing information is generated, the remote issuing server 40 stores the generated ticket issuing information and corresponding user information. The remote issuing server 40 transmits the ticket issue information to the mobile phone 10 (step S105). The client software of the mobile phone 10 receives the ticket issuing information and delivers the received ticket issuing information to the script processing engine.

  In step S106, the script processing engine performs ticketing processing using the ticketing information. That is, the CPU 102 executing the registration script sets a service area for company A in the memory 504 of the IC card 500, and specifies an identifier for specifying the service of company A and the mobile phone 10 in the set area. A command for writing the identifier is transmitted to the IC chip 502. Upon receiving an instruction from the CPU 102, the processor 503 of the IC chip 502 sets an area for company A's service in the memory 504, and specifies an identifier for identifying the company A's service and the mobile phone 10 in the set area. Write the identifier. Furthermore, the processor 503 receives an instruction from the CPU 102 and writes an initial value of service data for the company A (hereinafter, this data is referred to as “service data”) in the memory 504. Taking the case where the service of company A is electronic money as an example, the service data is data on the balance of electronic money. Alternatively, in another example, if this service is a point card, the service data is the balance of points, and if this service is a ticketing service such as an admission ticket or a ticket, the service data is information identifying the ticket. is there.

  When the ticketing process is completed, the script processing engine transmits a notification to the effect that ticketing has been completed to the remote issuing server 40 (step S107). This notification includes an identifier that identifies the issued service and the mobile phone 10.

  Further, the script processing engine transmits information used for service registration, in this example, user information, an identifier for identifying the service of company A, and an identifier for identifying the mobile phone 10 to the service server 30 (step S108). The service server 30 stores (registers) the information received from the mobile phone 10 (step S109). When the registration of the information is completed, the service server 30 transmits a notification that the registration is completed to the mobile phone 10 (step S110). This notification includes HTML data for displaying the registered information. When this notification is received, the script processing engine delivers the HTML data included in the notification to the browser (step S111), and ends the processing by the registered script. The browser displays information according to the acquired HTML data. The processes in steps S103, S106, S107, S108, and S111 are processes performed by the script processing engine in accordance with instructions described in the registration script.

2-1-2. Read Script FIG. 12 is a sequence diagram showing processing by the read script. The read script is a script for reading data from a storage area already set in the memory 504 of the IC card 500. Specific examples of the read script include a “balance display script” for displaying the balance of electronic money and point cards, and a “content display script” for confirming the contents of the electronic ticket.

  The read script includes a group of instructions for calling a data read API for reading service data. The data read API is executed by the CPU 102 executing these instruction groups.

  In step S200, the browser reads the read script. That is, the browser requests the service server 30 to transmit a read script. When receiving the request for transmitting the read script from the mobile phone 10, the service server 30 transmits the read script to the mobile phone 10 (step S201). The browser passes the read script that has been read to the script processing engine (step S202).

  When the registered script is received, the script processing engine performs processing according to an instruction described in the script. In step S203, the script processing engine delivers an identifier for identifying the service of company A to the data reading API (that is, identifies the service). The data read API transmits a request to deliver the service data read from the storage area corresponding to the identifier to the IC chip 502 of the IC card 500. This request includes an identifier that identifies the service of company A.

  In step S <b> 204, the script processing engine reads service data from the IC chip 502. Specifically, it is as follows. Upon receiving a data delivery request from the data read API, the processor 503 of the IC chip 502 reads and reads service data (point balance in this example) from the storage area corresponding to the identifier included in the request in the memory 504. The service data is transferred to the data reading API. The data read API passes the acquired service data to the script processing engine.

  In step S205, the script processing engine delivers the acquired service data to the browser, and ends the read script processing. The browser displays information based on the acquired service data. The processes in steps S203 to S205 are processes performed by the script processing engine in accordance with instructions described in the read script.

2-1-3. Write Script FIG. 13 is a sequence diagram showing processing by a write script. The writing script is a script for writing data in a storage area already set in the memory 504 of the IC card 500 or rewriting data already stored. Specific examples of the write script include a charge script for “charging” (balance increasing process) for electronic money and point cards, “settlement” and “using points” (processing for decreasing balance) for electronic money and point cards. There is a settlement script to do this.

  In step S300, the browser reads the writing script. That is, the browser requests the service server 30 to transmit a write script. When receiving the request for sending the write script from the mobile phone 10, the service server 30 sends the write script to the mobile phone 10 (step S301). The browser passes the read writing script to the script processing engine (step S302).

  In step S303, the script processing engine calls the data writing API, and the identifier for specifying the service of company A and the data to be written (for example, data indicating the amount to be settled or the amount to be charged) are set as the data writing API. hand over. The data writing API transmits a request to write the target data to the storage area corresponding to this identifier to the IC chip 502 of the IC card 500. This request includes an identifier for identifying the service of company A and target data.

  Upon receiving a data write request, the processor 503 of the IC chip 502 determines whether the write request satisfies a predetermined constraint (step S304). For example, in the case where the write request is a process of reducing the balance indicated by the service data such as “settlement” or “use of points”, the constraint condition is a value to be subtracted from the service data (amount of settlement or used Point) is less than the balance of the service data. Alternatively, the constraint condition is a condition that, in the case of processing for increasing the balance indicated by the service data such as “charge” as the write request, the balance after processing is equal to or less than a predetermined upper limit value. Note that, depending on the type of write request, it is not necessary to perform the process of determining whether or not the constraint condition is satisfied.

  If it is determined that the write request satisfies the constraint condition (S304: YES), the processor 503 moves the process to step S305. When it is determined that the write request does not satisfy the constraint condition (S304: NO), the processor 503 transmits an error message indicating that to the script processing engine via the data write API. Upon receiving the error message, the script processing engine notifies the browser that an error has occurred (step S312), and ends the process.

  In step S <b> 305, the processor 503 transmits a data write request to the remote issuing server 40. Specifically, it is as follows. The processor 503 calls a server communication API. The server communication API calls client software. The client software communicates with the remote issue server 40 via the communication unit 108. That is, the client software transmits a data write request to the remote issuing server 40. The write request includes information used for authentication in the remote issuing server 40, for example, an identifier for specifying the service of company A and an identifier for the mobile phone 10.

  When receiving the data write request from the mobile phone 10, the remote issuing server 40 authenticates the received write request (step S306). For the authentication, an encryption technique and an electronic signature technique described later are used. Alternatively, information such as an identifier for specifying the service of company A and an identifier of the mobile phone 10 may be used for authentication. When the authentication process is performed, the remote issuing server 40 transmits the authentication result to the mobile phone 10 (step S307).

  The processor 503 of the IC chip 502 receives the authentication result from the remote issuing server 40 (via the server communication API and client software). The processor 503 determines the next process to be performed according to the authentication result (step S308). When the authentication is successful (step S308: YES), the processor 503 writes the target data in a storage area corresponding to the service of company A in the memory 504 (step S309). When the target data is written in the storage area, the processor 503 transmits a notification to the effect that the writing has been completed to the script processing engine (step S310). When the script processing engine receives a notification that writing has been completed, the script processing engine notifies the browser that writing has been completed (step S311), and ends the processing by the writing script.

  If the authentication has failed (step S308: NO), the processor 503 does not write the target data in the memory 504, and sends a notification that the authentication has failed to the script processing engine. When the script processing engine receives the notification that the authentication has failed, the script processing engine notifies the browser that the authentication has failed (step S313), and ends the processing by the writing script. The processes in steps S303, S311, S312 and S313 are processes performed by the script processing engine in accordance with the instructions described in the write script.

2-1-4. Deletion Script The deletion script is a script for deleting data in the storage area set in the memory 504 of the IC card 500 and deleting a service corresponding to the storage area from the IC card 500. The deletion script is used when “deleting” electronic money or an electronic ticket.

  FIG. 14 is a sequence diagram showing processing by a deletion script. In step S400, the browser reads the deletion script. That is, the browser requests the service server 30 to transmit a deletion script. When receiving the request for transmission of the deletion script from the mobile phone 10, the service server 30 transmits the deletion script to the mobile phone 10 (step S401). The browser passes the read deletion script to the script processing engine (step S402).

  When the deletion script is received, the script processing engine performs processing according to an instruction described in the script. In step S <b> 403, the script processing engine transmits a deletion request to the remote issuing server 40. The deletion request includes information used for processing in the remote issuing server 40, for example, an identifier for specifying the service of company A and user information.

  When receiving the deletion request, the remote issuing server 40 generates information (hereinafter referred to as “deletion information”) used for the deletion process (step S404). The deletion information includes, for example, an identifier that identifies a service and a user to be deleted. When the deletion information is generated, the remote issuing server 40 deletes the stored user information from the storage means such as the HDD. The remote issuing server 40 transmits the deletion information to the mobile phone 10 (step S405). The client software of the mobile phone 10 receives the deletion information and delivers the received deletion information to the script processing engine.

  In step S406, the script processing engine performs a deletion process using the deletion information. That is, the CPU 102 executing the deletion script transmits to the IC chip 502 a command for deleting the service area for Company A set in the memory 504 of the IC card 500. In response to an instruction from the CPU 102, the processor 503 of the IC chip 502 deletes (deletes) all data stored in the service area for Company A set in the memory 504.

  When the deletion process is completed, the script processing engine transmits a notification that the deletion is completed to the remote issuing server 40 (step S407). This notification includes an identifier that identifies the deleted service and the mobile phone 10.

  Furthermore, the script processing engine transmits information for identifying the deleted service, in this example, user information, an identifier for identifying the service of company A, and an identifier for identifying the mobile phone 10 to the service server 30 (step S408). The service server 30 deletes the data stored in the storage means such as the HDD using the information received from the mobile phone 10 (step S409). When the deletion of information is completed, the service server 30 transmits a notification that the deletion is completed to the mobile phone 10 (step S410). This notification includes HTML data for displaying that the service has been deleted. Upon receiving this notification, the script processing engine delivers the HTML data included in the notification to the browser (step S411), and ends the processing by the deletion script. The browser displays information according to the acquired HTML data. The processes in steps S403, S406, S407, S408, and S411 are processes performed by the script processing engine in accordance with the instructions described in the deletion script.

2-2. Specific Example of Operation Hereinafter, a specific example of the operation of the communication system using the registration script, the read script, or the write script will be described. Here, six specific operation examples of service registration 1, use of external links, split settlement, and processing 1 to 3 using screen memos will be described.

2-2-1. New Service Registration FIG. 15 is a sequence diagram showing an operation at the time of new service registration in the mobile phone 10. FIG. 16 is a diagram illustrating a screen displayed by the browser in accordance with the operation of FIG. The operation for newly registering a service will be described below with reference to FIGS.

  In step S501, the CPU 102 of the mobile phone 10 acquires a URL for registering the service of company A. In this example, the URL is acquired from HTML data acquired by the browser program. Alternatively, the URL may be included in the delivered email. Or CPU102 may acquire URL by infrared communication. Further alternatively, the CPU 102 may acquire the URL by receiving data transmitted from the reader / writer 510, which is an external device, via the antenna 501 by the function of the IC card 500.

  In step S502, the browser acquires HTML data from the service server 30 specified by the acquired URL.

  FIG. 16A is a diagram illustrating a screen image displayed on the display unit 107 in accordance with HTML data. In this example, the displayed screen includes the text “Linked Now”, “Point Confirmation” and “User Information” in addition to the title “Country A Service Country”. When the user performs an operation of selecting text with a link, the browser displays a screen corresponding to the HTML data indicated by the link. For example, when a text with a link “Register Now” is selected, the browser displays a user information input screen for inputting information used for registering the service of Company A on the IC card 500.

  FIG. 16B is a diagram illustrating a user information input screen. In this example, registration of the service of company A uses three pieces of information: name, telephone number, and date of birth. The user information input screen includes text boxes BX1, BX2, and BX3 used for inputting a name, a telephone number, and a date of birth. Furthermore, the user information input screen includes a button “Register”. The “Register” button is associated with the URL of a registration script for registering the service of Company A. When the user performs an operation of pressing a “register” button, the browser downloads registration script data from the storage location in the service server 30 specified by the URL linked to the button (step S503). .

  In step S504, the browser executes the downloaded registration script. The browser has a function of executing a script, and the script can be further executed while the browser is activated.

  The activated registration script transmits a ticketing request to the remote issuing server 40. The remote issuing server 40 generates ticket issuing information. The remote issuing server 40 transmits the ticket issuing information to the mobile phone 10. When the ticket issuing information is received, the registration script sets a new storage area in the memory 504 of the IC card 500 and writes initial data in the set storage area (this process is hereinafter referred to as “ticketing”). Details of these processes have already been described with reference to FIG.

  When the ticketing process is completed, the registration script transmits a notification to the effect that ticketing has been completed to the remote issuing server 40 (step S505). This notification includes an identifier that identifies the issued service and the mobile phone 10. Further, the registration script transmits to the service server 30 information used for service registration, in this example, user information, an identifier for identifying the service of company A, and an identifier for identifying the mobile phone 10 (step S506). The service server 30 stores (registers) the information received from the mobile phone 10 (step S507). When the information registration is completed, the service server 30 transmits a notification to the effect that the registration is completed to the mobile phone 10 (step S508). This notification includes HTML data for displaying the registered information. When this notification is received, the registration script passes the HTML data included in the notification to the browser and ends the operation. A screen displayed during the processing of steps S503 to S508 is illustrated in FIG.

  In step S509, the browser displays a screen according to the HTML data included in the notification. FIG. 16D is a diagram illustrating a screen displayed in step S509. This screen includes a text “Registration completed!” Indicating that registration is completed, and registered user information. In addition, this screen contains a text with a link "to top". This text is associated with the URL of the top page of the site. When the user performs an operation of selecting the text with the link, the browser acquires HTML data from the resource specified by the URL, and displays a screen according to the acquired HTML data. This HTML data includes a balance display script for displaying the balance of the service (electronic money) of company A.

  FIG. 16E is a diagram illustrating a screen displayed according to the acquired HTML data. In this example, the displayed screen has the title “Customer A Service Country”, the text “Customer's Points”, the balance of electronic money “300 pt”, and the linked text “Click here for supported stores”. Contains. Among these, an electronic money balance of “300 pt” is displayed by the balance display script.

  As described above, according to this communication system, a series of processing such as display of a service site, input of user information, and ticketing processing is performed on a single application software called a browser. Therefore, it is possible to provide a new service registration to the user in a seamless environment.

2-2-2. Use of External Link Next, the operation when the mobile phone 10 accesses a site (shopping site) using an external link of company C, which is not the IC card 500 service provider, will be described. The site of company C includes links to scripts provided by company A and company B, which are providers (electronic money) of the IC card 500, as external links.

  17A and 17B are sequence diagrams showing operations when the mobile phone 10 accesses a shopping site of the company C. FIG. 18 is a diagram illustrating a screen displayed by the browser in accordance with the operations of FIGS. 17A and 17B. Hereinafter, the operation of the service using the external link will be described with reference to FIG. 17A, FIG. 17B, and FIG.

  In step S601, the browser acquires HTML data from the service server 60 of company C. This HTML data includes the URL of the balance display script of the company A and the URL of the balance display script of the company B. The balance display scripts of Company A and Company B are used as external links. The browser executes the balance display script of company A and the balance display script of company B in a predetermined order, for example, the order described in the HTML data. Here, an example in which these scripts are executed in the order of the balance display script of company A and the balance display script of company B will be described.

  FIG. 19 is a diagram illustrating a specific example of an external link. In this example, the balance display script is called using an HTML object tag. The HTML of a single page includes two links, a balance display script for company A and a balance display script for company B. Hereinafter, description will be given with reference to FIGS. 17A, 17B, and 18 again.

In step S602, the browser downloads the balance display script of company A from the resource (service server 30 of company A) specified by the URL.
In step S603, the browser executes the downloaded script. The processing by the balance display script is as already described.
In step S604, the browser displays the service data of company A acquired by the balance display script of company A.

In step S605, the browser downloads the balance display script of company B from the resource (service server 50 of company B) specified by the URL.
In step S606, the browser executes the downloaded script. The processing by the balance display script is as already described.
In step S607, the browser displays the service data of company B acquired by the balance display script of company B.

  FIG. 18A is a diagram illustrating a screen displayed according to HTML data. This screen includes a text “C company shopping” indicating a title, a text “C company point: 500 pt” indicating point information, and texts “G × T battle ticket 3 sheets” and “ “Price: ¥ 4,500”, product image, and text “A company money: ¥ 3,000” indicating the balance data of company A acquired by the balance script of company A, and the balance script of company B. Text “B company money: ¥ 11,800” indicating the balance data of company B, and linked texts “settlement with money of company A” and “settlement with money of company B”. The text “settlement with money of company A” and “settlement with money of company B” are associated with the URL of the settlement script of company A and the URL of the settlement script of company B, respectively.

  In step S608, the browser determines the next process according to the user's instruction. When the user selects the linked text “settlement with money from company A” (S608: A), the browser proceeds to step S609. When the user selects the linked text “settlement with company B money” (S608: B), the browser proceeds to step S612.

In step S609, the browser downloads the payment script of company A from the resource specified by the URL associated with the text “settlement with money of company A”.
In step S610, the browser executes the downloaded script. The settlement script processing has already been described with reference to FIG. When the payment process is completed, the payment script of company A notifies the browser that the payment process is completed.
Upon receiving a notification that the payment process has been completed from the payment script, the browser transmits a notification that the payment process has been completed to the service server 60 (step S611).

Upon receiving a notification that the payment process is completed from the browser of the mobile phone 10, the service server 60 performs a product purchase process (step S615). When the purchase process is completed, the service server 60 transmits a notification that the purchase process is completed to the browser (step S616).
FIG. 18B is a diagram illustrating a screen displayed by the browser while the processes of steps S609 to S616 are performed. In this way, the browser displays the progress of processing.

When the notification indicating that the purchase processing is completed is received from the service server 60, the browser displays the notification (step S617).
FIG. 18C is a diagram illustrating a screen displayed by the browser in step S617. When the purchase process is completed, the browser displays text indicating that the purchase process is completed.

In step S612, the browser downloads the payment script of company B from the resource specified by the URL associated with the text “settlement with money of company B”. When acquiring the payment script of company B, the browser proceeds to step S613.
In step S613, the browser executes the downloaded script. The settlement script processing has already been described with reference to FIG. When the payment process is completed, the payment script of company B notifies the browser that the payment process is completed.
Upon receiving a notification that the payment process has been completed from the payment script, the browser transmits a notification that the payment process has been completed to the service server 60 (step S614).

  As described above, according to this communication system, during online shopping, a series of processing such as display of available electronic money balance and payment processing is performed on a single application software called a browser. Therefore, it is possible to provide services to users in a seamless environment.

  Note that the script included as an external link in the shopping site is not limited to the settlement script. A script other than the settlement script such as a charge script for charging electronic money may be used. FIG. 18D is a diagram illustrating a screen for inputting information used to execute the charge script. This screen is arranged in correspondence with the text “A company money” indicating the title, the text “balance: 3,000 yen” indicating the balance data acquired by the balance script, and the text “charge amount”. A text box BX4 (in this example, a value of “30,000 yen” is input) for inputting the charge amount, and a pull-down menu BX5 for inputting the charge method arranged corresponding to the text “charge method” (In this example, “credit card” is selected), a button “return” linked to the URL of the previous screen, and a button “decision” linked to the URL of the charge script of company A. Yes.

  When the user performs an operation of selecting the button “OK” with the link, the browser downloads the charge script from the resource (the service server 30 in this example) specified by the URL linked to the button “OK”. The browser executes the downloaded script. The processing of the charge script has already been described with reference to FIG. When the charging process is completed, the charge script of company A notifies the browser that the charging process is completed. When notified that the charging process is complete, the browser displays a screen indicating that the charging process is complete.

  FIG. 18E is a diagram illustrating a screen displayed by the browser when the charging process is being executed. FIG. 18F illustrates a screen displayed by the browser after the charging process is completed. This screen displays the text “Charge completed!” Indicating the message to the user and the text “Balance data acquired by the balance display script arranged in correspondence with the text“ Company A money balance ”“ 33,000 yen ”and the text“ return to product screen ”linked to the URL of the screen in FIG. When the user performs an operation of selecting the linked text “return to the product screen”, the browser proceeds to step S601.

2-2-3. Next, an example will be described in which the mobile phone 10 performs settlement payment, that is, settlement of one product using two services of Company A money and Company B money. In this example, since there are many matters common to the operation of “use of external link” already described in section 2-2-2, the description of the parts common to the operation of “use of external link” is omitted.

  FIG. 20A and FIG. 20B are sequence diagrams showing an operation when the mobile phone 10 makes a split settlement. FIG. 21 is a diagram illustrating a screen displayed by the browser in accordance with the operations of FIGS. 20A and 20B. Hereinafter, the split settlement operation will be described with reference to FIGS. 20A, 20B, and 21. FIG.

  In step S <b> 701, the browser acquires HTML data from the service server 60. The HTML data includes the balance display script URL of company A and the balance display script URL of company B as external links. Thereafter, the same processing as steps S502 to S507 in FIG. 17A is performed.

  FIG. 21A is a diagram illustrating a screen displayed according to HTML data. In addition to the elements described with reference to FIG. 18A, this screen includes a button “linked to the URL of HTML data (hereinafter referred to as“ HTML data for split payment ”) for inputting information used for split payment. Includes installment payments. When the user performs an operation of pressing the button “split payment” (S702: YES), the browser proceeds to step S703. If any other operation is performed (S702: NO), the browser performs the same process as in FIG.

  In step S <b> 703, the browser downloads split settlement HTML data from the service server 60. The browser displays a screen according to the downloaded HTML data (step S704).

  FIG. 21B is a diagram illustrating a screen displayed by the browser in step S704. This screen shows a text “A company money balance: 3,000 yen” indicating balance data acquired by the balance display script of company A and a text “B company money indicating balance data acquired by the balance display script of company B”. "Balance: 11,800 yen", a text box BX6 for entering the amount to be settled from the A company money, a text box BX7 for entering the amount to be settled from the B company money, and an event for starting the split settlement process. Includes the button “Execute”.

  The user operates the keypad 4 and inputs the amount to be settled from the company A money and the amount to be settled from the company B money in the text boxes BX6 and BX7. In the example of FIG. 21B, “3,000 yen” is input as the amount to be settled from the A company money, and “1,500 yen” is input as the amount to be settled from the B company money. When the user performs an operation of pressing the “execute” button in this state, the browser proceeds to step S705.

  In step S705, the browser sets the parameters (amount to be settled from Company A money and an amount to be settled from Company B money; hereinafter referred to as “split settlement amount”) satisfying a predetermined constraint condition. Judgment is made. This restriction condition relates to the balance, for example, that the amount settled from the A company money and the amount settled from the B company money are respectively equal to or less than the balance of the A company money and the balance of the B company money. If it is determined that the constraint condition is satisfied (S705: YES), the browser proceeds to step S707. When it is determined that the constraint condition is not satisfied (S705: NO), the browser transmits an error message to the service server 60. Upon receiving the error message, the service server 60 performs error processing (step S706).

  In step S <b> 707, the browser transmits split settlement amount data to the service server 60. When the split settlement amount data is received from the mobile phone 10, the service server 60 determines whether the split settlement amount data satisfies a predetermined constraint (step S708). This restriction condition relates to the total amount of the divided settlement, and for example, the sum of the amount settled from the company A money and the amount settled from the company B money is equal to the amount of the product to be purchased. If it is determined that the constraint condition is satisfied (S708: YES), the service server 60 transmits HTML data instructing payment of the company A money to the mobile phone 10 (step S709). When it is determined that the constraint condition is not satisfied (S708: NO), the service server 60 performs error processing (step S710).

  When the HTML data instructing the payment of the company A money is received, the browser acquires the payment script of the company A (step S711). The browser executes the settlement script of company A (step S712). Details of the processing by the settlement script are as described above. When the payment for the A company money is completed, the browser notifies the service server 60 that the payment for the A company money has been completed (step S713). When the service server 60 receives the notification that the payment of the A company money is completed, the service server 60 transmits HTML data instructing the payment of the B company money to the mobile phone 10 (step S714).

  When the HTML data instructing payment of the B company money is received, the browser acquires the payment script of the B company (step S715). The browser executes the settlement script of company B (step S716). Details of the processing by the settlement script are as described above. When the payment for the B company money is completed, the browser notifies the service server 60 that the payment for the B company money has been completed (step S717). Through the processing in steps S712 and S716, a total of 4,500 yen is settled from Company A money of 3,000 yen and from Company B money of 1,500 yen.

  When the service server 60 receives the notification that the payment for the B company money has been completed, the service server 60 performs a product purchase process (step S718). When the purchase process is completed, the service server 60 transmits a notification that the purchase process is completed to the browser (step S719). When the notification indicating that the purchase process is completed is received from the service server 60, the browser displays the notification (step S720).

  As described above, according to this communication system, during online shopping, a series of processing such as display of available electronic money balance and payment processing is performed on a single application software called a browser. Furthermore, even when the balance of electronic money is insufficient, it is possible to provide services to the user in a seamless environment by making split payments with a plurality of electronic money.

2-2-4. Processing using screen memo # 1
Here, an example will be described in which a browser executes a script using HTML data stored as a screen memo. The “screen memo” refers to storing HTML data of a screen displayed by the browser in a storage unit such as a nonvolatile memory, or data stored in this way.

  For example, when the browser displays the screen of FIG. 18A and the user performs an operation for instructing to save this screen as a screen memo, the browser converts the HTML data of this screen to this It memorize | stores in the non-volatile memory with the identifier which identifies a screen. At this time, in addition to the HTML data of this screen, the browser also includes a script including a link in the HTML data (in the example of FIG. 18A, the balance display script of company A and the balance display script of company B). Store in memory. The script is stored in a non-volatile memory together with an identifier indicating the link. The screen memo is stored in the non-volatile memory even after the browser is terminated.

  FIG. 22 is a diagram illustrating a screen memo list screen. In this example, screens corresponding to the identifiers “3 G × T battles” and “November 28 news” are stored as screen memos. The identifier “three G × T battles” corresponds to the HTML data on the screen of FIG. 18A and the script included in the HTML data. When the user performs an operation of selecting a screen to be displayed from the list, the OS activates a browser to display the selected screen.

  When the identifier “three G × T battles” is selected, the browser displays the screen shown in FIG. Thereafter, processing is performed according to the flow of FIG. However, in this case, the browser searches whether the script is stored in the nonvolatile memory before acquiring the script from the resource indicated by the link. When the script corresponding to the link is stored in the nonvolatile memory, the browser reads the script from the nonvolatile memory. When the script corresponding to the link is not stored in the nonvolatile memory, the browser acquires the script from the resource indicated by the link. According to this example, when the HTML data stored as the screen memo is read, the script is executed again. That is, not the time when the screen memo is stored, but the data of the IC card 500 when the HTML data stored as the screen memo is read is read.

2-2-5. Processing using screen memo 2
Here, another example of processing using a screen memo will be described. In this example, when the HTML data to be screen memo includes a script, the browser stores the script execution result in the nonvolatile memory together with the HTML data, not the script itself. When the screen of FIG. 18A is saved as a screen memo, the result of executing the balance display script of company A, not the balance display script of company A and the balance display script of company B itself ("3,000 yen And the result of executing the balance display script of company B (the balance of “11,800 yen”) are stored. That is, according to the processing described in section 2-2-4, the contents (that is, current data) corresponding to the service data of the IC card 500 at the “when the screen is stored” as the screen memo is displayed. On the other hand, according to this example, the contents (that is, past data) corresponding to the service data of the IC card 500 at the “stored time” as the screen memo are displayed. That is, according to this example, the execution result at the time when the screen memo is stored is displayed, and the IC card 500 is not accessed. Since access to the IC card 500 is not performed, communication related thereto is not performed. That is, the result is displayed even in an offline state.

2-2-6. Processing using screen memo 3
Here, still another example of processing using a screen memo will be described. In this example, the mobile phone 10 transmits screen memo data to another mobile phone 10. Specifically, it is as follows.

  When instructed to save the displayed screen as a screen memo, the browser stores the HTML data of the screen in the nonvolatile memory. At this time, the browser stores the screen memo data in a format that can be attached to the e-mail.

  Thereafter, when the mailer requests to display a list of files or folders, the OS provides the mailer with information indicating a screen memo data or a folder corresponding to the screen memo data. When the user performs an operation of selecting screen memo data from the list, the mailer transmits an e-mail to the other mobile phone 10 with the selected screen memo data as attached data.

  The other mobile phone 10 that has received the e-mail to which the screen memo data is attached is described in section 2-2-4 or 2-2-5 using the screen memo data received from the mobile phone 10. Process.

  Note that the method for transmitting the screen memo to another mobile phone 10 is not limited to the method using electronic mail. Sending screen memo data to another mobile phone 10 using infrared communication, communication via a reader / writer 510, short-range wireless communication such as BlueTooth (registered trademark), or an external storage medium such as a memory card. Good.

3. Security Next, the security of the service described above will be described. Although detailed description has been omitted so far, encryption technology is used for accessing the IC card 500 by a script.

FIG. 23 is a diagram showing an outline of the encryption technique used in the communication system. The certificate authority CA is a certificate authority that is managed and operated by a predetermined operator (for example, a line operator of the mobile phone 10). The certificate authority CA issues the certificate authority's private key K _pr ^CA and public key K _pub ^CA. Further, the certificate authority CA issues an electronic certificate S _m to the mobile phone 10. The electronic certificate S _m includes the electronic signature of the certificate authority CA and the public key K _pub ^CA. Cellular phone 10 stores the electronic certificate C _m.

The certificate authority CA issues a secret key K _pr ^CP and a public key K _pub ^CP to the service provider. In FIG. 23, company A operating the service server 30 is illustrated as a service provider. The service provider that has received the key application applies to the certification authority CA to use the IC card service. This use application includes the public key K _pub ^CP . The certificate authority CA receives the application for use and issues the electronic certificate _SCP and ID data indicating the ID of the service provider. The electronic certificate S _CP includes the electronic signature of the certificate authority CA and the public key K _pub ^CP . The digital signature of the certificate authority CA is obtained by encrypting the message digest of the public key K _pub ^CP using a hash function with the secret key K _pr ^CA. The service server 30 stores a secret key K _pr ^CP , a public key public key K _pub ^CP , an electronic certificate S _CP and ID data.

The script that the service server 30 transmits to the mobile phone 10 is a package of an execution code (script body), an electronic certificate _SCP , and ID data. Upon receiving the script, the mobile phone 10 extracts the electronic certificate S _CP from the package. Mobile phone 10, the extracted digital signature included in the electronic certificate S _CP, decoded by the public key K _pub ^CA included in the electronic certificate C _m, to obtain a message digest. Further, the mobile phone 10 applies a hash function to the public key K _pub ^CA included in the electronic certificate C _m to generate a message digest. The mobile phone 10 compares the generated message digest with the message digest obtained by decryption. If the two match, the mobile phone 10 determines that the script is valid and executes the execution code. If the two do not match, the mobile phone 10 determines that the script is invalid and does not execute the execution code. In the mobile phone 10, these processes are performed by software.

  The above is the technology for confirming the validity of the script received from the service server 30. However, communication using the encryption technology is similarly performed between the IC card 500 and the remote issuing server 40. The IC card 500 stores software for encrypted communication, and performs encrypted communication with the remote issuing server 40 using the software. The specific processing of the encrypted communication described above is merely an example, and other encryption techniques may be used as long as the validity of the communication partner can be confirmed.

4). Other Embodiments The present invention is not limited to the above-described embodiments, and various modifications can be made. Hereinafter, some modifications will be described. Two or more of the following modifications may be used in combination.

4-1. Modification 1
In the embodiment, a plurality of scripts for accessing the IC card 500 are prepared in accordance with their functions, such as a registration script, a balance display script, a settlement script, and a charge script. However, the script provided by the service provider may be one. In this case, a single script includes a method for displaying a balance (hereinafter referred to as “balance display method”), a method for performing settlement (hereinafter referred to as “settlement method”), and a method for performing charging (hereinafter “ A plurality of methods such as “charge method”. The HTML data includes information specifying a method to be executed in addition to the URL of the script. The browser executes a method specified by the HTML data in the script.

  That is, the script executes a first method for executing a process of reading data from one storage area among a plurality of storage areas of the IC card 500 and a first method for executing a process of writing data to the one storage area. A plurality of methods including two methods may be included.

4-2. Modification 2
As described in the embodiment, when a plurality of scripts are used, the plurality of scripts may not be divided according to the process, but may be divided according to the security level required by the content of the process. For example, a process of writing data such as settlement or charge requires a higher security level than a simple data reading process such as balance display. Therefore, the service provider may prepare a first script including a balance display method and a second script including a settlement method and a charge method. In this case, the security level of the second script is different from that of the first script by a technique such as using a stronger encryption key or using a more complicated authentication algorithm.

4-3. Modification 3
In the embodiment, the program and data for providing the service are not limited to the browser and the HTML data. A program for receiving specific data described in a specific format and specific data described in a specific format from a network via a communication unit, and displaying information corresponding to the received specific data on a display unit Any program and data may be used.

4-4. Modification 4
11-14, the operation of each script has been described separately for the function of the script itself and the function of the API or device driver called from the script, but the distribution of the function is not limited to that described in the embodiment. For example, a group of instructions for realizing the function described as the API function in the embodiment may be described in the script body. That is, the script body may have the function. Alternatively, a group of instructions for realizing the function described as the script function in the embodiment may be described in an API, a module, another script, a function, or the like other than the script body. In short, as long as the processing shown in FIG. 11-14 is realized by a group of instructions described directly or indirectly in the script body, any division of roles among software may be used.

4-5. Modification 5
In the example of “Process using screen memo No. 1” described above, the script is stored in the storage unit together with the HTML data. However, the script need not be stored in the storage means. In this case, the browser reads out HTML data stored as a screen memo. The script is acquired based on the location information included in the read HTML data. That is, the script is acquired and executed at the timing when the screen memo is read.

4-6. Modification 6
The sharing of the function of displaying HTML data and the function of executing a script is not limited to that described in the embodiment. In the embodiment, the script processing engine for executing the script is a part of the browser function, but the script processing engine may be a program different from the browser. The point is that the script processing engine can be called from the browser.

4-7. Modification 7
The programming language for describing the script is not limited to the Java script. Other object-oriented programming languages such as C ++ and browser content such as Flash may be used. Alternatively, a non-object oriented programming language may be used.

4-8. Modification 8
The location information indicating the location of the script is not limited to the URL. Any information may be used as long as the location of the script can be specified.

4-9. Modification 9
The “IC card” in this paper does not necessarily have a card shape. The “card” is a word symbolizing the function of the IC card 500 and does not specify the shape. The IC card accesses the memory in accordance with an antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a signal from the antenna or a signal from the first control means (CPU 102 in the embodiment). As long as it has the second control means (the processor 503 in the embodiment), its shape may be any. Further, the configuration of the storage area of the memory 504 of the IC card 500 is not limited to that shown in FIG. The memory 504 may not have a free area. Alternatively, the memory 504 may have another third area in addition to the free area.

4-10. Modification 10
In the above-described embodiment, the program executed by the CPU 102 includes a magnetic recording medium (magnetic tape, magnetic disk (HDD (Hard Disk Drive), FD (Flexible Disk)), etc.), optical recording medium (optical disk (CD (Compact Disk)). , DVD (Digital Versatile Disk), etc.), magneto-optical recording medium, semiconductor memory (flash ROM, etc.) and the like. The program may be downloaded via a network such as the Internet.

DESCRIPTION OF SYMBOLS 3 ... Hinge, 4 ... Keypad, 5 ... Microphone, 6 ... Speaker, 7 ... Antenna, 8 ... Display device, 10 ... Mobile phone, 20 ... Management server, 30 ... Service server, 40 ... Remote issue server, 50 ... Service Server, 60 ... Service server, 70 ... Network, 102 ... CPU, 103 ... ROM, 104 ... RAM, 105 ... Storage unit, 106 ... Operation unit, 107 ... Display unit, 108 ... Communication unit, 109 ... Bus, 111 ... OS 121 ... Client software, 122 ... Device driver, 130 ... Browser, 131 ... Script processing engine, 500 ... IC card, 501 ... Antenna, 502 ... IC chip, 503 ... Processor, 504 ... Memory, 505 ... Signal line, 510 ... Reader / Writer

Claims (11)

A communication means for communicating via a network;
Display means for displaying information;
First control for receiving specific data described in a specific format from the network via the communication means and executing a first program for causing the display means to display information corresponding to the received specific data Means,
An antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a second control unit that accesses the memory in response to a signal from the antenna or a signal from the first control unit And having an IC card
Specific data including location information indicating the location of a script for executing processing for accessing one storage area of the plurality of storage areas by the first control means executing the first program. , Received from the first server on the network via the communication means,
The first control means executing the first program acquires the script from the network via the communication means based on location information included in the received data,
The first control means executing the first program executes the acquired script to cause the second control means to access the one storage area, and to store the one storage area. Obtain information according to the access result,
The mobile terminal, wherein the first control unit executing the first program causes the display unit to display information corresponding to the result. Location of a first script for executing processing for accessing the one storage area by the specific data and a second script for executing processing for accessing another storage area different from the one storage area Including location information indicating
The first control means executing the first program executes the first script and the second script in sequence, thereby causing the second control means to move to the one storage area and the first storage area. Accessing another storage area, obtaining first information corresponding to a result of accessing the one storage area and second information corresponding to a result of accessing the other storage area;
2. The mobile terminal according to claim 1, wherein the first control unit that executes the first program causes the display unit to display the first information and the second information. . The network includes a second server that permits rewriting of the stored contents of the memory;
The script is a script for executing a process of rewriting the stored contents of the memory,
The first control means executing the script transmits the permission request to the second server via the communication means,
The first control means executing the script receives a response to the request from the second server via the communication means,
The said 2nd control means accesses the said memory, and rewrites the memory content of the said memory, when the said response permits rewriting of the memory content of the said memory, The memory content of the said memory is rewritten. The portable terminal as described in. Storage means for storing the specific data and the script;
The first program includes a group of instructions for causing the first control unit to execute a process of reading the specific data from the storage unit and causing the display unit to display information according to the read specific data.
The first control means executing the first program causes the second control means to access the one storage area by executing a script that reads the script from the storage means, Information according to a result of accessing the one storage area is acquired. The portable terminal according to any one of claims 1-3. Storage means for storing information according to the result of accessing the memory;
The first program includes an instruction group for causing the first control unit to execute a process of reading the information from the storage unit and displaying the read information on the display unit. The portable terminal as described in any one of 1-3. Storage means for storing the specific data;
The first program includes a group of instructions for causing the first control unit to execute a process of reading the specific data from the storage unit and causing the display unit to display information according to the read specific data.
The first control unit executing the first program acquires the script from the network via the communication unit based on location information included in the read data. The portable terminal as described in any one of Claims 1-3. The storage means stores a second program for causing the first control means to execute a process of transmitting an e-mail attached with specific data stored in the storage means via the communication means. ,
The mobile terminal according to any one of claims 4 to 6, wherein the first control means transmits the electronic mail to another mobile terminal by executing the second program. . The network includes a second server that permits rewriting of the stored contents of the memory;
The specific data includes a first script for executing a process of rewriting the storage contents of one of the plurality of storage areas, and a process of rewriting the storage contents of another storage area different from the one storage area. Location information indicating the location of the second script to be executed, and instruction information for instructing the user to start executing a specific process for rewriting the storage contents of the one storage area and the other storage area ,
When the start of the execution of the specific process is instructed according to the instruction information, the first control means executing the script includes a first request for obtaining the permission for the one storage area, and the first request Sending a second request for the permission for another storage area to the second server via the communication means;
The first control means executing the script receives a response to the first request and the second request from the second server via the communication means,
The second control means accesses the memory when the first request and the second request permit rewriting of the storage contents of the one storage area and the other storage area. , Rewriting the storage contents of the one storage area and the other storage area,
When the storage contents of the one storage area and the other storage area are rewritten, the first control means executing the first program indicates that the rewriting of the storage contents is completed The mobile terminal according to claim 1, wherein the mobile terminal is transmitted to the first server. The script is written in an object-oriented programming language, and a first method for executing a process of reading data from the one storage area and a second method for executing a process of writing data to the one storage area And methods
The specific data includes information specifying a method to be executed;
9. The method according to claim 1, wherein the first control unit executing the first program executes a method specified by information included in the specific data in the script. A portable terminal according to any of the above sections. A server and a portable terminal connected to the server via a network,
The portable terminal is
Communication means for communicating via the network;
Display means for displaying information;
First control for receiving specific data described in a specific format from the network via the communication means and executing a first program for causing the display means to display information corresponding to the received specific data Means,
An antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a second control unit that accesses the memory in response to a signal from the antenna or a signal from the first control unit And having an IC card
Specific data including location information indicating the location of a script for executing processing for accessing one storage area of the plurality of storage areas by the first control means executing the first program. , Received from the server via the communication means,
The first control means executing the first program acquires the script from the network via the communication means based on location information included in the received data,
The first control means executing the first program executes the acquired script to cause the second control means to access the one storage area, and to store the one storage area. Obtain information according to the access result,
The first control means that is executing the first program causes the display means to display information corresponding to the result. A communication means for communicating via a network;
Display means for displaying information;
First control means for receiving specific data described in a specific format from the network via the communication means, and executing a specific program for causing the display means to display information corresponding to the received specific data; ,
An antenna, a memory having a plurality of storage areas in which access restrictions can be individually set, and a second control unit that accesses the memory in response to a signal from the antenna or a signal from the first control unit In a computer device having an IC card
The first control means executing the specific program includes specific data including location information indicating a location of a script for executing a process of accessing one of the plurality of storage areas, Receiving from a first server on the network via the communication means;
The first control unit executing the specific program acquires the script from the network via the communication unit based on location information included in the received data;
The first control means executing the specific program causes the second control means to access the one storage area by accessing the one storage area by executing the acquired script. Obtaining information according to the results;
An IC card control method comprising: a step of causing the display means to display information corresponding to the result, wherein the first control means executing the specific program.

Images