JP2013156742A - Ic card, manufacturing method of ic card, issuing method of ic card and information processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card capable of enhancing retrieval processing efficiency.SOLUTION: An IC card is constituted of an IC module and a substrate. The IC module comprises: storage means; communication means; and processing means. The storage means stores type information indicating a type of a value area, data length information indicating a data length of the value area and a plurality of files containing a data object configured by the value area. The communication means receives a command containing specific type information specifying a retrieval object data object. The processing means retrieves the retrieval object data object out of the plurality of files on the basis of the specific type information contained in the command.

Description

  Embodiments described herein relate generally to an IC card, an IC card manufacturing method, an IC card issuing method, and an information processing method.

  In recent years, the spread of IC cards (communication media) has been remarkable. For example, IC cards are used not only for settlement of credit cards, commuter passes, passports, licenses, and other commercial transactions, but also in various fields as ID cards for employee cards, membership cards, insurance cards, etc. Yes.

  The IC card contains an IC (integrated circuit) chip having a nonvolatile data memory and a control element such as a CPU. Also, an IC card processing device such as an IC card reader / writer transmits a read command to the IC card and reads data from the IC card, or transmits a write command to the IC card and writes data to the IC card. Sloppy.

  The data memory of the IC card includes a main file (abbreviated as MF), a plurality of dedicated files (abbreviated as DF) belonging to the main file, and a basic file (abbreviated as Elementary File, EF) belonging to each dedicated file. ) Is memorized. The file stores type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area.

  For example, when the CPU of the IC card receives a select command from the IC card reader / writer, it selects DF or EF according to the select command. Further, when the CPU of the IC card receives a read command from the IC card reader / writer, it searches for a data object from the selected DF or EF based on the type information included in the read command, and outputs the searched data object.

JP 2006-107403 A

  As described above, the IC card searches for a data object using the selected DF or EF as a search target file. In other words, the IC card cannot search for a data object using an unselected DF or EF as a search target file, and improvement of search processing efficiency is required.

  An object of the present invention is to provide an IC card, an IC card manufacturing method, an IC card issuance method, and an information processing method that can improve search processing efficiency.

  The IC card according to the embodiment includes an IC module and a base material, and the IC module includes a storage unit, a communication unit, and a processing unit. The storage unit stores a plurality of files including type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area. The communication means receives a command including designation type information for designating a search target data object. The processing means searches the search target data object from the plurality of files based on the designated type information included in the command.

1 is a block diagram showing a schematic configuration of an IC card system (also called a smart card system) according to an embodiment. It is a block diagram which shows schematic structure of the card reader / writer concerning embodiment. It is a block diagram which shows schematic structure of the IC card which concerns on embodiment. It is a figure which shows the 1st example of the command transmission / reception sequence of the IC card and reader / writer which concern on embodiment. It is a figure which shows the 2nd example of the command transmission / reception sequence of the IC card and reader / writer which concern on embodiment. It is a figure which shows the 1st example of the command format which concerns on embodiment. It is a figure which shows the 1st example of the response data format which concerns on embodiment. It is a figure which shows the 2nd example of the command format which concerns on embodiment. It is a figure which shows the 2nd example of the response data format which concerns on embodiment. It is a figure which shows an example of the bit assignment of the identifier contained in the command format which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment. It is a flowchart which shows an example of the IC card internal process which concerns on embodiment.

  Hereinafter, embodiments will be described with reference to the drawings.

  FIG. 1 is a block diagram illustrating a schematic configuration of an IC card system (also called a smart card system) according to an embodiment. As shown in FIG. 1, the IC card system includes a terminal 1 (communication device) and an IC card 2 (portable electronic device). The terminal 1 includes a control unit 11, a display 12, a keyboard 13, and a reader / writer. The terminal 1 is configured to be communicable with the IC card 2, and the terminal 1 transmits data to the IC card 2 and receives data from the IC card 2.

  For example, the control unit 11 can selectively execute a plurality of communication methods and a plurality of applications. The display 12 displays a result of communication with the IC card 2 and an authentication result. The keyboard 13 inputs characters, numbers, and the like to the control unit 11. The reader / writer communicates with the IC card 2.

  The IC card 2 may be any of a contact type card, a non-contact type card (wireless card), and a combination type card that supports both a non-contact type and a contact type.

  FIG. 2 is a block diagram illustrating a schematic configuration of the reader / writer according to the embodiment. As shown in FIG. 2, the reader / writer includes a communication I / F 142, a CPU 143, a data memory (nonvolatile memory) 144, a RAM 145, and a ROM 146. The CPU 143 controls transmission of a command (command) to the IC card 2, detects a response from the IC card 2, and further sends a command (command) to the IC card 2 based on the response from the IC card 2. ) Etc. are controlled.

  FIG. 3 is a block diagram illustrating a schematic configuration of the IC card according to the embodiment. As shown in FIG. 3, the IC card 2 is constituted by, for example, a plastic card (base material) 2a and includes an IC module 20 (IC chip). The IC module 20 includes a communication I / F (communication means) 201, a CPU. (Processing means) 204, data memory (nonvolatile memory such as EEPROM, FRAM (registered trademark), FLASH, etc.) 205, RAM 206, ROM 207 are provided. The IC card 2 as described above will be described as an example of the portable electronic device, but the present embodiment is not limited to this. For example, the portable electronic device may be a SIM-shaped IC card.

  The RAM 206 functions as a working memory. The ROM 207 holds an IC card program executed by the CPU 204. The CPU 204 operates based on an IC card program or the like stored in the ROM 207. Further, the CPU 204 reads data stored in the data memory 205 or RAM 206, writes data to the data memory 205 or RAM 206, and further receives a command (transmitted from the terminal 1) via the communication I / F 201. The command execution result is interpreted and executed, and a command execution result is returned to the terminal 1 via the communication I / F 201.

  For example, the data memory 205 stores files such as MF, DF, and EF. The MF is a DF positioned at the highest level. One or more DFs belong to the MF, and one or more EFs belong to each DF. These MF, DF, and EF store one or more data objects. The data object includes type information (tag value) indicating the type of the value area, data length information (length) indicating the data length of the value area, and a value area (value).

  Hereinafter, a search process for the data object stored in the IC card 2 described above will be described. The IC card 2 can perform data object operations for all user areas.

  (1) In ISO / IEC 7816-4 Second edition 2005-01-15, the current odd number INS GET DATA command uses tag list data object (tag = '5C'), header list data object (tag = '5D') , extended header list data object (tag = '4D') can be used to specify multiple tag values, and if the specified multiple tag values exist in the current DF or current EF, output the values Can do. However, the DF or EF different from the current DF or the current EF is used as a search target, and the data object of the designated tag value cannot be searched, and cannot be read, which is inconvenient. In order to search for a desired DF or EF different from the current DF or the current EF, it is necessary to select the desired DF or EF using a select command or the like, and it is inconvenient.

  Therefore, in the IC card 2 of the present embodiment, the search of the data object by the command can be performed with the entire user area as the search target without limiting the search target of the data object by the command to the current EF or the current DF.

(2) Also, ISO / IEC 7816-4 Second edition 2005-01-15 does not define a function for outputting a plurality of read data objects as structured data objects. For example, when the reader / writer 14 needs a structured data object, it is inconvenient because a plurality of read data objects must be shaped into a structured data object.

  Therefore, the IC card 2 of the present embodiment searches for a plurality of data objects distributed in the storage area of the IC card 2, generates a structured data object including the searched data objects, and generates the generated structure. Output a structured data object. Details of the structured data object will be described later.

  First, a first example of search processing will be described with reference to FIGS. 4, 6A, 6B, 8, and 9A to 9F.

  After the IC card 2 is activated, the reader / writer 14 transmits a SELECT command instructing to select the MF (ST401). The IC card 2 receives the SELECT command via the communication I / F 201. In response to receiving the SELECT command, the IC card 2 selects an MF and returns a status word indicating that the MF selection has been successful (ST402).

  Thereafter, the reader / writer 14 transmits a GET DATA command corresponding to the command format 601 shown in FIG. 6A (ST403). As shown in FIG. 6A, P1P2 of the command format 601 includes values (0xFF, 0xFF) indicating the extension, and the identifier of the data part of the command format 601 specifies the entire card search by the bit assignment shown in FIG. In addition, the data portion of the command format 601 includes a search target TAG1.

  When receiving the GET DATA command corresponding to the command format 601, the CPU 204 of the IC card 2 searches the entire card (for example, MF, all DFs, all EFs) according to the flowcharts shown in FIGS. 9A to 9F, Data corresponding to the designated TAG1 is searched. If data corresponding to the specified TAG1 is found as a result of the search, the IC card 2 outputs response data corresponding to the response data format 602 shown in FIG. 6B as a response to the GET DATA command (ST404).

  Next, a second example of search processing will be described with reference to FIGS. 5, 7A, 7B, 8, and 9A to 9F.

  After the IC card 2 is activated, the reader / writer 14 transmits a SELECT command instructing to select the MF (ST501). The IC card 2 receives the SELECT command via the communication I / F 201. In response to receiving the SELECT command, the IC card 2 selects an MF and transmits a status word indicating that the MF selection has been successful (ST502).

  Thereafter, the reader / writer 14 transmits a GET DATA command corresponding to the command format 701 shown in FIG. 7A (ST503). As shown in FIG. 7A, P1P2 of the command format 701 includes values (0xFF, 0xFF) indicating the extension, and the identifier of the data part of the command format 701 is the search target for the entire card by the bit assignment shown in FIG. In addition to the information to be specified, further includes information to specify the structured data object, and the data portion of the command format 701 includes data obtained by concatenating TAG1, LENGTH1, TAG2, LENGTH2,.

  When the CPU 204 of the IC card 2 receives the GET DATA command corresponding to the command format 701, the entire card is searched according to the flowcharts of FIGS. 9A to 9F, and the data corresponding to the designated TAG1, TAG2,. To do. As a result of the search, the IC card 2 outputs each data found as response data of the GET DATA command. Here, the CPU 204 of the IC card 2 generates a structured data object from each found data, and outputs the generated structured data object as response data. FIG. 7B is a diagram illustrating an example of response data corresponding to the generated structured data object. As shown in FIG. 7B, the response data 702 includes TAGa, LENGTHa, and subsequent data (DATAa). Further, the subsequent data (DATAa) includes TAG1, LENGTH1, DATA1, TAG2, LENGTH2, DATA2,. , TAGn, LENGTHn, DATAn. Such a data object having the data structure shown in FIG. 7B is referred to as a Constructed data object.

  As described above, the IC card 2 retrieves data corresponding to all the designated TAGs and LENGTHs, generates a structured data object from each found data, and generates the structured data object as response data 702. Output as.

  Here, the flowcharts of FIGS. 9A to 9F will be described.

  If IC card 2 receives the GET DATA command and does not detect a value indicating expansion from P1P2 (ST901, NO), IC card 2 searches TAG specified by P1P2 from the subordinate of current DF or current EF (ST902). If IC card 2 cannot find the designated TAG (NO in ST903), it outputs SW (Status Word) indicating an error (ST904). When IC card 2 finds the specified TAG (ST903, YES), it sets response data including the data of the found TAG (ST905), and outputs SW = 9000 and response data (ST906).

  The IC card 2 receives the GET DATA command, detects the value indicating the extension from P1P2 (ST901, YES), does not detect the designation of the structured data object from the identifier (ST907, NO), and determines the entire card from the identifier. If no search designation is detected (NO in ST908), an SW indicating an error is output (ST909). When the IC card 2 detects designation of the entire card search from the identifier (ST908, NO), it searches the entire card for the TAG designated by P1P2 (ST910). If the IC card 2 cannot find the designated TAG (ST911, NO), it outputs an SW indicating an error (ST912). When the IC card 2 finds the designated TAG (ST911, YES), it sets response data including the data of the found TAG (ST913), and outputs SW = 9000 and response data (ST914).

  The IC card 2 receives the GET DATA command, detects the value indicating the extension from P1P2 (ST901, YES), detects the designation of the structured data object from the identifier (ST907, YES), and searches the entire card from the identifier. Is detected (ST915, YES), the TAG immediately after the identifier is designated (ST916). If the designated TAG does not indicate a Constructed data object (ST917, NO), the IC card 2 moves the pointer to the next TAG and searches for the designated TAG in the entire card (ST919). If the IC card 2 cannot find the specified TAG (ST920, NO) and is requested to output response data only when all the tags specified by the identifier exist (ST921, YES), SW indicating an error is output (ST922). When IC card 2 finds the designated TAG (ST920, YES), it sets response data including the data of the found TAG (ST923), and moves the pointer to the next TAG (ST924). If it is the last TAG (ST925, YES), the IC card 2 outputs SW = 9000 and response data (ST926), not the last TAG (ST925, NO), and the designated TAG has a Constructed data object. If it is shown (ST927, YES), the IC card 2 moves the pointer to the next TAG (ST928), and proceeds to the processing of ST918.

  The IC card 2 receives the GET DATA command, detects the value indicating the extension from P1P2 (ST901, YES), detects the designation of the structured data object from the identifier (ST907, YES), and searches the entire card from the identifier. Is not detected (ST915, NO), the TAG immediately after the identifier is designated (ST936). Thereafter, the IC card 2 executes the processing after ST936 in the same manner as ST916 to ST928.

  The present embodiment will be summarized below.

(1) The IC card 2 holds data therein, interprets and executes a command instructed from the outside, and presents the result. Such an IC card 2 receives a command for processing a data object composed of three types of data, ie, data indicating the type of the value area (tag area), the data length of the value area (length area), and the value area. Then, processing corresponding to the command is executed, and a response corresponding to the command is returned. The IC card 2 performs a search for all internal data based on the specified type information included in the command, searches for data objects that match the specified type information, and performs data processing based on the processing content included in the command. Process the object.

(2) The IC card 2 holds data therein, interprets and executes a command instructed from the outside, and presents the result. Such an IC card 2 receives a command for processing a data object composed of three types of data, ie, data indicating the type of the value area (tag area), the data length of the value area (length area), and the value area. Then, processing corresponding to the command is executed, and a response corresponding to the command is returned. The IC card 2 searches all internal data based on a plurality of designated type information included in the command, searches for a plurality of data objects that match the specified type information, and performs processing included in the command. Based on the contents (designation of structure data format), a plurality of data objects are output in the designated data format (structure data format).

  Further, the IC card manufacturing apparatus manufactures the IC card 2 described above by the IC card manufacturing method. For example, the IC card manufacturing apparatus manufactures the IC module 20 including the communication I / F 201, the CPU 204, the data memory 205, the RAM 206, the ROM 207, and the like, and further includes the plastic card (base material) 2a and the IC module 20. IC card 2 is manufactured.

  Further, the IC card issuing device issues the IC card 2 described above by the IC card issuing method. For example, the IC card issuing device writes the issue information in the data memory 205 of the IC card 2 manufactured by the IC card manufacturing device and issues the IC card. The issue information is, for example, personal information.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and gist of the invention, and are also included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 ... Terminal, 2 ... IC card, 14 ... Card reader / writer, 20 ... IC module, 201 ... Communication I / F, 204 ... CPU, 205 ... Data memory, 206 ... RAM, 207 ... ROM

Claims (11)

An IC card composed of an IC module and a base material,
The IC module is
Storage means for storing a plurality of files including type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area;
A communication means for receiving a command including designated type information for designating a search target data object;
Processing means for searching for the search target data object from the plurality of stored files based on the specified type information included in the command;
IC card equipped with.   2. The IC card according to claim 1, wherein the processing unit searches the search target data object from the plurality of stored files based on designation of an entire search included in the command. The storage means stores a main file, a plurality of dedicated files belonging to the main file, and a basic file belonging to each dedicated file;
3. The IC card according to claim 1, wherein the processing unit searches the search target data object from the plurality of stored dedicated files and the basic files belonging to the dedicated files. 4.   4. The IC card according to claim 1, wherein the communication unit transmits response data including the searched data object to be searched. The processing means searches for a plurality of search target data objects from the plurality of files based on a plurality of specified type information included in the command, and response data in a predetermined format including the plurality of search target data objects Produces
The IC card according to claim 1, wherein the communication unit transmits the response data. The processing means generates a structured data object including the plurality of search target data objects based on the designation of the structured data object included in the instruction,
6. The IC card according to claim 5, wherein the communication means transmits the response data corresponding to the structured data object.   The communication means outputs the response data corresponding to the structured data object including first type information, first data length information, and a first value area including the plurality of search target data objects. The IC card according to claim 6. The first search target data object included in the value area of the structured data object includes second type information, second data length information, and second value information,
The IC card according to claim 7, wherein the second search target data object included in the value area of the structured data object includes third type information, third data length information, and third value information. An IC card manufacturing method comprising an IC module and a base material,
The IC module is
Storage means for storing a plurality of files including type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area;
A communication means for receiving a command including designated type information for designating a search target data object;
Processing means for searching for the search target data object from the plurality of stored files based on the specified type information included in the command;
An IC card manufacturing method comprising: An issuance method of an IC card that stores issuance information for an IC card constituted by an IC module and a base material and issues the IC card,
The IC module is
Storage means for storing the issue information, and storing a plurality of files including type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area;
A communication means for receiving a command including designated type information for designating a search target data object;
Processing means for searching for the search target data object from the plurality of stored files based on the specified type information included in the command;
IC card issuing method comprising: An information processing method using an IC card composed of an IC module and a base material,
Receives an instruction containing the specified type information that specifies the search object data object,
Based on the specified type information included in the command, from among a plurality of files including type information indicating the type of the value area, data length information indicating the data length of the value area, and a data object composed of the value area, An information processing method for searching for the search target data object.

Images