JP2012243133A - Portable electronic device and control method of portable electronic device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable electronic device and a control method of the portable electronic device capable of indirectly inspecting a piece of data with high accuracy.SOLUTION: The portable electronic device includes: a memory that stores data; a receiving section that receives a command transmitted from an external apparatus; a command processing section that, when the receiving section receives an issuance command, obtains a piece of data based on the issued command and writes the obtained data in the memory; a hash value calculation section that, when the receiving section receives an inspection command, calculates a hash value based on the data in the memory; a response processing section that generates a response based on the hash value calculated by the hash value calculation section; and a transmitting section that transmits the response generated by the response processing section to the external apparatus.

Description

  Embodiments described herein relate generally to a portable electronic device and a method for controlling the portable electronic device.

  In general, an IC card used as a portable electronic device includes a card-like main body formed of plastic or the like and an IC module embedded in the main body. The IC module has an IC chip. The IC chip has a nonvolatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory) or a flash ROM that can hold data even in the absence of a power source, and a CPU that executes various operations.

  The IC card is, for example, an IC card conforming to the international standard ISO / IEC7816. The IC card is excellent in portability and can perform communication with an external device and complicated calculation processing. Further, since it is difficult to forge, the IC card is assumed to store highly confidential information and be used for a security system, electronic commerce, and the like.

  An IC card is normally subjected to an issuing process for writing applications, control data, or other data before shipment. In many cases, data written to the IC card by such issuing processing is data that requires high confidentiality, such as an encryption key. For this reason, the IC card is configured not to easily output these data to the outside. Therefore, the issuing device that issues the IC card transmits a command to the IC card, and determines whether or not the data is correctly stored by the issuing process based on whether or not the response from the IC card is correct.

JP 11-175403 A

  However, when data in the IC card is inspected based on whether the response to the command is correct or not, there is a possibility that not all data can be confirmed. That is, if a problem occurs in data that is not handled by the command transmitted to the IC card, the problem may not be found by the above method.

  Therefore, an object of the present invention is to provide a portable electronic device capable of inspecting data indirectly and with higher accuracy, and a method for controlling the portable electronic device.

  A portable electronic device according to an embodiment includes a memory that stores data, a receiving unit that receives a command transmitted from an external device, and a data received based on the issuing command when the receiving unit receives the issuing command. A command processing unit that writes the acquired data to the memory, a hash value calculation unit that calculates a hash value based on the data in the memory when the receiving unit receives an inspection command, and the hash value calculation A response processing unit that generates a response based on the hash value calculated by the unit, and a transmission unit that transmits the response generated by the response processing unit to the external device.

FIG. 1 is a diagram for explaining an example of an IC card processing system according to an embodiment. FIG. 2 is a diagram for explaining an example of an IC card according to an embodiment. FIG. 3 is a diagram for explaining an example of an IC card processing system according to an embodiment. FIG. 4 is a diagram for explaining an example of an IC card processing system according to an embodiment. FIG. 5 is a diagram for explaining an example of an IC card processing system according to an embodiment. FIG. 6 is a diagram for explaining an example of an IC card processing system according to an embodiment.

  Hereinafter, a portable electronic device, a processing device for a portable electronic device, and a processing system for a portable electronic device according to an embodiment will be described in detail with reference to the drawings.

  The portable electronic device (IC card) 20 and the processing device (terminal device) 10 that processes the IC card 20 according to the present embodiment have, for example, functions of contact communication and / or non-contact communication. Thereby, the IC card 20 and the terminal device 10 can transmit and receive data to and from each other.

FIG. 1 shows a configuration example of an IC card processing system 1 according to an embodiment.
The IC card processing system 1 includes a terminal device 10 that processes the IC card 20 and an IC card 20.

  The terminal device 10 includes a CPU 11, a ROM 12, a RAM 13, a nonvolatile memory 14, a card reader / writer 15, an operation unit 17, a display 18, and a power supply unit 19. The CPU 11, the ROM 12, the RAM 13, the nonvolatile memory 14, the card reader / writer 15, the operation unit 17, and the display 18 are connected to each other via a bus.

  The CPU 11 functions as a control unit that controls the entire terminal device 10. The CPU 11 performs various processes based on the control program and control data stored in the ROM 12 or the nonvolatile memory 14. For example, the CPU 11 transmits and receives commands and responses to and from the IC card 20 via the card reader / writer 15.

  The ROM 12 is a non-volatile memory that stores a control program and control data in advance. The RAM 13 is a volatile memory that functions as a working memory. The RAM 13 temporarily stores data being processed by the CPU 11. For example, the RAM 13 temporarily stores data to be transmitted / received to / from an external device via the card reader / writer 15. The RAM 13 temporarily stores a program executed by the CPU 11.

  The nonvolatile memory 14 includes, for example, an EEPROM, an FRAM, and the like. The nonvolatile memory 14 stores, for example, a control program, control data, an application, and data used for the application.

  The card reader / writer 15 is an interface device for communicating with the IC card 20. The card reader / writer 15 transmits / receives data to / from the IC card 20 by contact communication or non-contact communication.

  When used as an interface for contact communication, the card reader / writer 15 includes a slot in which the IC card 20 is mounted and a plurality of contact terminals connected to a contact pattern included in the IC card 20.

  When the IC card 20 is mounted in the slot, the plurality of contact terminals of the card reader / writer 15 are connected to the contact pattern of the IC card 20. Thereby, the terminal device 10 and the IC card 20 are electrically connected. The card reader / writer 15 performs power supply, clock supply, reset signal input, data transmission / reception, and the like to the IC card 20 installed in the slot.

  When used as an interface for non-contact communication, the card reader / writer 15 includes a signal processing unit that performs signal processing on data to be transmitted and received, and an antenna having a predetermined resonance frequency.

  For example, the card reader / writer 15 performs signal processing such as encoding, decoding, modulation, and demodulation on data to be transmitted and received by a signal processing unit. The card reader / writer 15 supplies the encoded and modulated data to the antenna. The antenna generates a magnetic field according to the supplied data. Thereby, the terminal device 10 can transmit data to the IC card 20 existing in the communicable range in a non-contact manner.

  Further, the antenna of the card reader / writer 15 detects a magnetic field and generates a signal according to the detected magnetic field. Thereby, the card reader / writer 15 can receive a signal in a non-contact manner. The signal processing unit demodulates and decodes the signal received by the antenna. Thereby, the terminal device 10 can acquire the original data transmitted from the IC card 20.

  The operation unit 17 includes, for example, operation keys and generates an operation signal based on an operation input by the operator. The operation unit 17 inputs the generated operation signal to the CPU. Thereby, CPU11 can matter about processing based on operation inputted by an operator.

  The display 18 displays various information based on signals for displaying video input from the CPU 11 or a display processing module such as a graphic controller (not shown).

  The power supply unit 19 supplies power to each unit of the terminal device 10. For example, the power supply unit 19 receives power from a commercial power supply, converts the power into a predetermined voltage, and supplies the voltage to each unit of the terminal device 10.

FIG. 2 shows a configuration example of the IC card 20 according to one embodiment.
As shown in FIG. 2, the IC card 20 includes, for example, a rectangular main body 21 and an IC module 22 built in the main body 21. The IC module 22 includes an IC chip 23 and a communication unit 24. The IC chip 23 and the communication unit 24 are formed in the IC module 22 while being connected to each other.

  The main body 21 is not limited to a rectangular shape, and may have any shape as long as the IC module 22 in which at least the communication unit 24 is disposed can be installed.

  The IC chip 23 includes a communication unit 24, a CPU 25, a ROM 26, a RAM 27, a nonvolatile memory 28, a power supply unit 31, a logic unit 32, and the like. The communication unit 24, the CPU 25, the ROM 26, the RAM 27, the nonvolatile memory 28, the power supply unit 31, and the logic unit 32 are connected to each other via a bus.

  The communication unit 24 is an interface for communicating with the card reader / writer 15 of the terminal device (external device) 10. The communication unit 24 transmits / receives data to / from the terminal device 10 by contact communication or non-contact communication.

  When used as an interface for contact communication, the communication unit 24 includes a contact pattern connected to a contact terminal of the card reader / writer 15. The contact pattern is a contact terminal formed on the surface of the IC module 22 with a conductive metal or the like. That is, the contact pattern is formed so as to be in contact with the contact terminal of the card reader / writer 15 of the terminal device 10.

  The contact pattern is formed by dividing a surface formed of metal into a plurality of areas. Each divided area functions as a terminal. The communication unit 24 can transmit / receive data to / from the card reader / writer 15 via the contact pattern.

  When used as an interface for non-contact communication, the communication unit 24 includes a signal processing unit and an antenna.

  The signal processing unit performs signal processing such as encoding and load modulation on data to be transmitted to the terminal device 10. For example, the signal processing unit modulates (amplifies) data to be transmitted to the terminal device 10. The signal processing unit supplies the signal-processed data to the antenna.

  The antenna is constituted by, for example, a metal wire disposed in a predetermined shape in the IC module 22. The IC card 20 generates a magnetic field by an antenna according to data transmitted to the terminal device 10. Thereby, the IC card 20 can transmit data to the terminal device 10. Further, the IC card 20 recognizes data transmitted from the terminal device 10 based on an induced current generated in the antenna by electromagnetic induction.

  For example, the signal processing unit demodulates and decodes the induced current generated in the antenna. For example, the signal processing unit analyzes a signal received by the antenna. As a result, the communication unit 24 acquires binary logical data. The communication unit 24 transmits the analyzed data to the CPU 25 via the bus.

  The CPU 25 functions as a control unit that controls the entire IC card 20. The CPU 25 performs various processes based on the control program and control data stored in the ROM 26 or the nonvolatile memory 28. For example, various processes are performed in accordance with commands received from the terminal device 10 and data such as responses as processing results is generated.

  The ROM 26 is a non-volatile memory that stores a control program and control data in advance. The ROM 26 is incorporated in the IC card 20 in a state where a control program, control data, and the like are stored at the manufacturing stage. That is, the control program and control data stored in the ROM 26 are incorporated in advance according to the specifications of the IC card 20.

  The RAM 27 is a volatile memory that functions as a working memory. The RAM 27 temporarily stores data being processed by the CPU 25. For example, the RAM 27 temporarily stores data received from the terminal device 10 via the communication unit 24. The RAM 27 temporarily stores data to be transmitted to the terminal device 10 via the communication unit 24. Furthermore, the RAM 27 temporarily stores a program executed by the CPU 25.

  The non-volatile memory 28 includes a non-volatile memory capable of writing and rewriting data, such as an EEPROM or a flash ROM. The nonvolatile memory 28 stores a control program and various data according to the usage application of the IC card 20.

  For example, in the nonvolatile memory 28, a program file and a data file are created. A control program and various data are written in each created file. The CPU 25 can implement various processes by executing programs stored in the nonvolatile memory 28 or the ROM 26.

  The power supply unit 31 supplies power to each unit of the terminal device 10. When the IC card 20 has a configuration for performing contact communication, the power supply unit 31 supplies power supplied from the card reader / writer 15 to each unit of the IC card 20 via the contact pattern of the communication unit 24.

  In addition, when the IC card 20 has a configuration for performing contactless communication, power is generated based on radio waves transmitted from the antenna of the card reader / writer 15, particularly carrier waves. Furthermore, the power supply unit 31 generates an operation clock. The power supply unit 31 supplies the generated power and operation clock to each unit of the IC card 20. Each unit of the IC card 20 becomes operable when supplied with power.

  The logic unit 32 is an arithmetic unit that performs arithmetic processing by hardware. For example, the logic unit 32 performs processes such as encryption, decryption, hash calculation, and random number generation based on a command from the terminal device 10. For example, when receiving a mutual authentication command from the terminal device 10, the logic unit 32 generates a random number and transmits the generated random number to the CPU 25.

  For example, when the terminal device 10 functions as an issuing device for the IC card 20, the terminal device 10 transmits various commands to the IC card 20, thereby causing applications, control data, Various data such as an encryption key can be stored.

FIG. 3 shows an example of the issuing process of the IC card 20 by the terminal device 10.
First, the terminal device 10 initializes the nonvolatile memory 28 of the IC card 20 by transmitting a command (initialization command) to the IC card 20 (step S11). Accordingly, the terminal device 10 defines a key file, a data file, and the like corresponding to the purpose of use and use of the IC card 20 in the nonvolatile memory 28 of the IC card 20.

  Thereby, the terminal device 10 creates a file structure defined by, for example, ISO / IEC7816 in the nonvolatile memory 28. The nonvolatile memory 28 that has been initialized includes a master file (MF), a dedicated file (DF), and an elementary file (EF).

  The MF is a file that is the basis of the file structure. The DF is created below the MF. The DF is a file that stores applications and data used for the applications in groups. EF is created below DF. The EF is a file for storing various data. In some cases, an EF is placed directly under the MF.

  There are various types of EFs, such as a Working Elementary File (WEF) and an Internal Elementary File (IEF). The WEF is a working EF and stores personal information and the like. The IEF is an internal EF and stores data such as an encryption key (password) for security.

  Next, the terminal device 10 switches the IC card 20 phase by transmitting a command (phase switching command) to the IC card 20 (step S12). In this case, the terminal device 10 switches the phase of the IC card 20 from the initial phase in which initialization processing or the like is performed to the primary issue phase in which primary issuance is performed.

  The terminal apparatus 10 writes various data in a file created in the nonvolatile memory 28 of the IC card 20 by transmitting a command (primary issue command) to the IC card 20 (step S13). For example, the terminal device 10 writes various data such as the above-described application, control data, and encryption key to a predetermined file by transmitting a WRITE command to the IC card 20 a plurality of times.

  The data written in the primary issue is usually data common to a plurality of cards. Further, when the IC card 20 receives the primary issue command, the IC card 20 may generate data such as a random number by the logic unit 32 or the like, and store the generated random number in a file. That is, the non-volatile memory 28 of the IC card 20 has an area for writing data acquired from an issuance command received from the outside (first memory) and an area for writing data generated inside the IC card 20 (second memory). And have.

  Furthermore, the terminal device 10 transmits an inspection command to the IC card 20 as the last command of all the primary issue commands. When receiving the inspection command, the IC card 20 performs a hash calculation based on the data in the nonvolatile memory 28 and transmits a response including the calculated hash value to the terminal device 10. Further, the terminal device 10 sequentially recognizes data written to the IC card 20. The terminal device 10 calculates a hash value based on the data in the nonvolatile memory 28 of the recognized IC card 20. If the calculated hash value matches the hash value included in the received response, the terminal device 10 performs subsequent processing.

  If the hash value included in the received response is a correct value, the terminal device 10 transmits a command (phase switching command) to the IC card 20. Thereby, the terminal device 10 switches the IC card 20 phase (step S14). In this case, the terminal device 10 switches the phase of the IC card 20 from the primary issue phase to the secondary issue phase in which secondary issue is performed.

  The terminal apparatus 10 writes various data in a file created in the nonvolatile memory 28 of the IC card 20 by transmitting a command (secondary issue command) to the IC card 20 (step S15). For example, the terminal device 10 writes individual data such as personal data in a predetermined file by transmitting a WRITE command to the IC card 20 a plurality of times. The primary issue and the secondary issue may be configured such that different terminal devices 10 execute the processes, or the same terminal device 10 may execute the primary issue and the secondary issue.

  When the secondary issue is completed, the terminal device 10 transmits a command (phase switching command) to the IC card 20. Thereby, the terminal device 10 switches the IC card 20 phase (step S16). In this case, the terminal device 10 switches the phase of the IC card 20 from the secondary issue phase to the operation phase (step S17). Thereafter, the IC card 20 can execute an application stored in the nonvolatile memory 28 in accordance with a command received from the terminal device 10. Thereby, the IC card 20 is used for various applications such as a traffic system and a financial system.

FIG. 4 shows an example of processing of the IC card 20 in the primary issue or the secondary issue.
The IC card 20 holds a state waiting for a command from the terminal device 10. That is, the IC card 20 sequentially determines whether or not an issue command such as a primary issue command or a secondary issue command has been received (step S21).

  If it is determined that the issue command has been received, the IC card 20 writes data in a predetermined file in the nonvolatile memory 28 in accordance with the received issue command (step S22). After writing the data, the IC card 20 proceeds to step S21 and maintains a state of waiting for the next issue command.

  If it is determined in step S21 that the issue command has not been received, the IC card 20 determines whether an inspection command has been received (step S23). If it is determined that the inspection command has not been received, the IC card 20 proceeds to step S21 and maintains a state of waiting for the next issue command.

  For example, the terminal device 10 transmits a command as shown in FIG. 5 to the IC card 20.

As shown in FIG. 5, the command transmitted from the terminal device 10 to the IC card 20 is
“CLA” 501, “INS” 502, “P1” 503, “P2” 504, “Lc” 505, “Data” 506, and “Le” 507.

  “CLA” 501 is a class byte indicating the stratification of the command. “INS” 502 is an instruction byte indicating the type of command. “P1” 503 and “P2” 504 are parameter bytes indicating parameters according to “INS” 502.

  “Lc” 505 is a length field for coding number Nc indicating the data length (number of bytes) of “Data” 506. “Data” 506 is a command data field indicating the data body of the command. “Le” 507 is a length field for coding number Ne indicating the data length of the response to the command.

  That is, “CLA” 501 and “INS” 502 indicate whether the command is an inspection command, an issued command, or another command. The IC card 20 recognizes the type of the received command by analyzing the values of “CLA” 501 and “INS” 502 of the received command.

  For example, when the command is a write command, the IC card 20 writes the data in “Data” 506 to a location designated by “P1” 503 and “P2” 504 of the nonvolatile memory 28 or a file.

  “Data” 506 may include a plurality of TLV data objects. In this case, “Data” 506 includes a plurality of data having a tag length value (TLV) structure. Tag of the TLV data object is information for causing the CPU 25 of the IC card 20 to identify the TLV data object. Length is information indicating the value data length of the TLV data object. Value is the data body of the TLV data object.

  For example, when the “Data” 506 includes a TLV data object indicating a data writing destination, a TLV data object indicating a data main body, and the like, the IC card 20 writes the data main body in a writing destination indicated by the TLV data object.

  Further, when the CPU 25 of the IC card 20 receives a command that needs to generate data internally, the CPU 25 generates data and writes the generated data (generated data) into a predetermined file in the nonvolatile memory 28. For example, the CPU 25 causes the logic unit 32 to generate a random number, and generates generation data based on the generated random number. Further, the CPU 25 writes the generated data at a position designated by a command in the nonvolatile memory 28 or a preset position.

  By repeatedly performing the above processing, various data are written in the nonvolatile memory 28 of the IC card 20.

FIG. 6 shows an example of the nonvolatile memory 28 of the IC card 20.
Data 281 and 282 indicate data acquired from the issue command. Data 283 indicates generated data generated in the IC card 28 by the above processing. Further, a management file or the like is stored in the nonvolatile memory 28. The IC card 20 can recognize the data in the nonvolatile memory 28 as a file structure from the management file.

  Further, when it is determined in step S23 shown in FIG. 4 that the IC card 20 has received the inspection command, the IC card 20 calculates a hash value based on the data stored in the nonvolatile memory 28 (step S24). .

  For example, the IC card 20 calculates a hash value using SHA256 as a hash function. The IC card 20 calculates a hash value based on all data in the nonvolatile memory 28, for example.

  If the data “506” of the inspection command includes data specifying an area on the nonvolatile memory 28, the IC card 20 is based on the data of the area specified by the inspection command on the nonvolatile memory 28. The hash value may be calculated. In this case, the inspection command includes, for example, data indicating the head address and data indicating the data length. The IC card 20 calculates a hash value based on the data having the length indicated by the data length from the position indicated by the head address among the data stored in the nonvolatile memory 28.

  In addition, when the inspection data “Data” 506 includes a plurality of data specifying the areas on the nonvolatile memory 28, the IC card 20 stores the plurality of areas specified by the inspection commands on the nonvolatile memory 28. The configuration may be such that the data is combined and the hash value is calculated based on the combined data.

  Furthermore, if the data used for calculating the hash value includes the generated data as described above, the IC card 20 replaces the generated data with a preset value (for example, “0”, etc.) The configuration may be such that the hash value is calculated based on data including the replaced data. In this case, the terminal device 10 also replaces the data in the area corresponding to the generated data with a predetermined value set in advance, and calculates a hash value. The value replaced in the IC card 20 and the value replaced in the terminal device 10 need to match.

  When the data used for calculating the hash value includes encrypted data, the IC card 20 decrypts the encrypted data and calculates the hash value based on the decrypted data. It may be configured to. Thereby, even if the data stored in the nonvolatile memory 28 is encrypted, the IC card 20 can calculate the hash value.

  The IC card 20 generates a response based on the calculated hash value (step S25). The IC card 20 transmits the generated response to the terminal device 10 (step S26).

  Further, the IC card 20 stops the calculation of the hash value and the function of outputting the calculated hash value as a response (generally referred to as a hash function) (step S27), and ends the process.

  For example, the IC card 20 stores information (hash flag) indicating whether or not to stop the hash function in the nonvolatile memory 28. The IC card 20 can stop the hash function by turning off the hash flag at a predetermined timing.

  For example, when the hash function is stopped at the timing when the IC card 20 is switched from the primary issue phase to the secondary issue phase, the IC card 20 does not output the hash value after the secondary issue phase. For example, when the hash function is stopped at the timing when the IC card 20 is switched from the secondary issue phase to the operation phase, the IC card 20 does not output the hash value in the operation phase. Thereby, higher security of the Ic card 20 can be realized.

  In the above example, the IC card 20 has been described as a configuration in which the hash value is calculated and output as the last process in the primary issue phase or the secondary issue phase, and the hash function is stopped. Not. For example, the IC card 20 may be configured to stop the hash function when a phase switching command is received.

  Further, the terminal device 10 can manage (obtain) the state of the nonvolatile memory 28 of the IC card 20 based on the issue command transmitted to the IC card 20 in the issue phase. The terminal device 10 calculates a hash value based on the state of the nonvolatile memory 28 managed by itself. The terminal device 10 compares the calculated hash value with the hash value included in the received response. If the calculated hash value matches the hash value included in the received response, the terminal device 10 performs subsequent processing.

  The terminal device 10 may be configured to store a hash value calculated in advance when data to be written in the IC card 20 is constant. In this case, when the stored hash value matches the hash value included in the received response, the terminal device 10 performs subsequent processing.

  As described above, the IC card 20 according to the embodiment calculates the hash value based on the data stored in the nonvolatile memory 28 when the inspection command is received in the issue phase. The IC card 20 adds the calculated hash value to the response and transmits it to the terminal device 10. The terminal device 10 determines whether or not the data has been correctly written to the IC card 20 by determining whether or not the hash value added to the response is correct.

  Thus, by calculating a hash value based on the data in the nonvolatile memory 28 using the hash function, the IC card processing system 1 determines the accuracy of the data in the nonvolatile memory 28 in 1-bit units. can do. Further, the IC card processing system 1 confirms the accuracy of the data in the nonvolatile memory 28 without outputting from the IC card 20 initialization data that must be managed securely, such as personal data or an encryption key. be able to. As a result, it is possible to provide a portable electronic device capable of inspecting data indirectly and with higher accuracy, and a method for controlling the portable electronic device.

  In the above embodiment, the IC card 20 has been described as calculating a hash value using SHA256 as a hash function, but the present invention is not limited to this configuration. The hash function used by the IC card 20 for calculating the hash value may be any as long as it is at least the same as the hash function used by the terminal device 10.

  It should be noted that the functions described in the above embodiments are not limited to being configured using hardware, but can be realized by causing a computer to read a program describing each function using software. Each function may be configured by appropriately selecting either software or hardware.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  DESCRIPTION OF SYMBOLS 1 ... IC card processing system, 10 ... Terminal device, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... Non-volatile memory, 15 ... Card reader / writer, 17 ... Operation part, 18 ... Display, 19 ... Power supply part, DESCRIPTION OF SYMBOLS 20 ... IC card, 21 ... Main body, 22 ... IC module, 23 ... IC chip, 24 ... Communication part, 25 ... CPU, 26 ... ROM, 27 ... RAM, 28 ... Nonvolatile memory, 31 ... Power supply part.

Claims (7)

A memory for storing data;
A receiving unit for receiving a command transmitted from an external device;
When receiving an issue command by the receiving unit, a command processing unit that acquires data based on the issue command and writes the acquired data to the memory;
A hash value calculation unit that calculates a hash value based on the data in the memory, when an inspection command is received by the reception unit;
A response processing unit that generates a response based on the hash value calculated by the hash value calculation unit;
A transmission unit that transmits the response generated by the response processing unit to the external device;
A portable electronic device comprising: The command processing unit generates data based on the issued command, writes the generated data to the memory,
The hash value calculation unit replaces the data generated in the memory with preset data, and calculates a hash value based on the data in the memory.
The portable electronic device according to claim 1.   The portable electronic device according to claim 1, wherein the hash value calculation unit calculates a hash value based on data in an area specified by the inspection command in the memory.   4. The portable electronic device according to claim 3, wherein the hash value calculation unit combines data of a plurality of areas designated by the inspection command in the memory and calculates a hash value based on the combined data. apparatus.   The portable electronic device according to claim 1, wherein the hash value calculation unit decodes the data in the memory and calculates a hash value based on the combined data. An IC module comprising the above-mentioned parts;
A main body on which the IC module is disposed;
The portable electronic device according to claim 1, comprising: A method of controlling a portable electronic device used in a portable electronic device comprising a memory for storing data,
When an issue command transmitted from an external device is received, data is acquired based on the issue command, and the acquired data is written to the memory.
When a test command transmitted from an external device is received, a hash value is calculated based on the data in the memory,
Generate a response based on the calculated hash value,
Sending the generated response to the external device;
Control method of portable electronic device.

Images