JP2016126441A - Portable electronic device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable electronic device capable of reducing processing time required for self-diagnosis.SOLUTION: The portable electronic device includes: an abnormality determination section; and a diagnosis processing section. The abnormality determination section determines whether any abnormality is detected in an operation made on a hardware, and stores a piece of diagnosis information which represents the determination result on the basis of hardware in a storage. When the diagnosis information is determined by the abnormality determination section as abnormal in a self-diagnosis at start-up as a determination result, the diagnosis processing section executes a diagnosis processing on a hardware relevant to the diagnosis information.SELECTED DRAWING: Figure 5

Description

  Embodiments of the present invention relate to portable electronic devices.

  In recent years, portable electronic devices such as IC cards equipped with IC (Integrated Circuit) chips have become widespread. The portable electronic device processes a command received from an external device and performs command processing for transmitting a response according to the command. There is also known a portable electronic device having a function of self-diagnosis of each function included in the device. However, in the conventional portable electronic device, the processing time required for the self-diagnosis performed at the start-up may be increased due to, for example, the enhancement of the functionality of the portable electronic device.

JP 2006-252284 A

  The problem to be solved by the present invention is to provide a portable electronic device that can reduce the processing time required for self-diagnosis.

  The portable electronic device according to the embodiment includes an abnormality determination unit and a diagnosis processing unit. The abnormality determination unit determines whether an abnormality is detected in the operation on the hardware, and stores diagnostic information indicating the determination result in the storage unit for each hardware. The diagnosis processing unit executes a diagnosis process related to the hardware corresponding to the diagnosis information when the diagnosis information determined by the abnormality determination unit is a determination result determined to be abnormal in the self-diagnosis at the time of startup. To do.

1 is an external view showing an example of an IC card according to a first embodiment. 1 is a diagram illustrating a hardware configuration example of an IC card according to a first embodiment. FIG. 3 is a diagram showing an example of the area configuration of the EEPROM according to the first embodiment. The figure which shows the example of information of the system area | region of 1st Embodiment. The block diagram which shows the function structural example of the IC card of 1st Embodiment. The figure which shows the example of data of the diagnostic information area | region of 1st Embodiment. 6 is a flowchart illustrating an example of write processing of the EEPROM according to the first embodiment. 5 is a flowchart illustrating an example of self-diagnosis processing at the time of activation according to the first embodiment. 5 is a flowchart illustrating an example of self-diagnosis processing by a self-diagnosis command according to the first embodiment. 9 is a flowchart illustrating an example of writing processing of the EEPROM according to the second embodiment. The figure which shows the example of data of the diagnostic information area | region of 3rd Embodiment. 10 is a flowchart illustrating an example of write processing of the EEPROM according to the third embodiment. The figure which shows an example of the IC card system of 4th Embodiment.

  Hereinafter, a portable electronic device according to an embodiment will be described with reference to the drawings.

(First embodiment)
FIG. 1 is an external view showing an example of an IC card 1 according to the first embodiment.
As shown in FIG. 1, the IC card 1 includes an IC module 10. When the IC card 1 is a contact IC card, the IC module 10 includes a contact portion 3 and an IC chip 100 inside. When the IC card 1 is a non-contact IC card, the IC module 10 includes an antenna unit and an IC chip 100 inside. The IC card 1 is formed, for example, by mounting an IC module 10 on a plastic card base 4 (an example of a card body). That is, the IC card 1 includes an IC module 10 and a card substrate 4 in which the IC module 10 is embedded. Further, the IC card 1 can communicate with the external device 2 via the contact unit 3.
In the present embodiment, an IC card 1 will be described as an example of a portable electronic device.

For example, the IC card 1 receives a command (processing request) transmitted from the external device 2 via the contact unit 3 and executes processing (command processing) according to the received command. Then, the IC card 1 transmits a response (processing response) that is an execution result of the command processing to the external device 2 via the contact unit 3.
Here, the external device 2 is a host device that communicates with the IC card 1, and is, for example, a reader / writer device.

The IC module 10 includes a contact portion 3 and an IC chip 100, and is a module that is traded in a form such as COT (Chip On Tape) in which a plurality of IC modules 10 are arranged on a tape.
The contact part 3 has terminals for various signals necessary for the operation of the IC card 1. Here, the various signal terminals include a terminal for receiving a power supply voltage, a clock signal, a reset signal, and the like from the external device 2 and a serial data input / output terminal (SIO terminal) for communicating with the external device 2. . The terminals supplied from the external device 2 include a power supply terminal (VDD terminal, GND terminal), a clock signal terminal (CLK terminal), and a reset signal terminal (RST terminal).

  The IC chip 100 is, for example, an LSI (Large Scale Integration) such as a one-chip microprocessor.

FIG. 2 is a diagram illustrating a hardware configuration example of the IC card 1 according to the present embodiment.
As shown in this figure, an IC chip 100 includes a UART (Universal Asynchronous Receiver Transmitter) 11, a CPU (Central Processing Unit) 12, a ROM (Read Only Memory) 13, a RAM (Random Access Memory) 14, and an EEPROM. (Electrically Erasable Programmable ROM) 15, RSA coprocessor 16, DES coprocessor 17, and AES coprocessor 18. Each component (11 to 18) is connected via an internal bus 19.

  The UART 11 performs serial data communication with the external device 2 via the SIO terminal described above. The UART 11 outputs data (for example, 1-byte data) obtained by parallel-converting the serial data signal received via the SIO terminal to the internal bus 19. The UART 11 serially converts the data acquired via the internal bus 19 and outputs it to the external device 2 via the SIO terminal. For example, the UART 11 receives a command from the external device 2 via the SIO terminal. The UART 11 transmits a response from the external device 2 via the SIO terminal.

  The CPU 12 executes programs stored in the ROM 13 or the EEPROM 15 to perform various processes of the IC card 1. For example, the CPU 12 executes command processing according to the command received by the UART 11 via the contact unit 3. The CPU 12 executes a self-diagnosis of the IC card 1 at the time of startup, for example.

The ROM 13 is a non-volatile memory such as a mask ROM, for example, and stores a program for executing various processes of the IC card 1 and data such as a command table.
The RAM 14 is a volatile memory such as SRAM (Static RAM), for example, and temporarily stores data used when performing various processes of the IC card 1. For example, the RAM 14 includes a reception buffer area 141, a transmission buffer area 142, and a work buffer area 143.

The reception buffer area 141 stores data (for example, commands) received by the UART 11.
The transmission buffer area 142 stores data (for example, a response) transmitted by the UART 11.
The work buffer area 143 stores work data (work data) of various processes executed by the CPU 12.

  The EEPROM 15 (an example of a storage unit) is, for example, an electrically rewritable nonvolatile memory (nonvolatile storage unit). The EEPROM 15 stores information used for various services (applications) using the IC card 1. The EEPROM 15 includes, for example, a diagnostic information area 30 and stores diagnostic information described later. Here, the diagnostic information is information indicating a determination result as to whether or not an abnormality has been detected in the operation with respect to the hardware (for example, the ROM 13 and the RAM 14). Details of the diagnostic information will be described later.

  The RSA coprocessor 16 is an auxiliary circuit for performing RSA encryption processing (encryption processing and decryption processing) or part of the processing at high speed. For example, the RSA coprocessor 16 is instructed by the CPU 12 and executes processing related to RSA encryption processing or RSA decryption processing.

  The DES coprocessor 17 is an auxiliary circuit for performing DES (Data Encryption Standard) encryption processing (encryption processing and decryption processing) or a part of the processing at high speed. For example, the DES coprocessor 17 is instructed by the CPU 12 and executes processing related to DES encryption processing or DES decryption processing.

The AES coprocessor 18 is an auxiliary circuit for performing AES (Advanced Encryption Standard) encryption processing (encryption processing and decryption processing) or a part of the processing at high speed. For example, the AES coprocessor 18 is instructed by the CPU 12 and executes processing related to AES encryption processing or AES decryption processing.
The internal bus 19 is a bus that performs data transfer between the units connected to the internal bus 19, for example.

Next, an example of the area configuration of the EEPROM 15 will be described with reference to FIG.
FIG. 3 is a diagram showing an example of the area configuration of the EEPROM 15 of the present embodiment.
As shown in this figure, the EEPROM 15 includes a system area A1 and a user area A2.

  The system area A1 is an information area for storing information used by the OS (Operating System) of the IC card 1. In the system area A1, for example, information is stored when the IC card 1 is issued. Further, the system area A1 stores, for example, information as shown in FIG.

FIG. 4 is a diagram illustrating an example of information in the system area A1 of the present embodiment.
In this figure, “start address” indicates, for example, the top physical address on the EEPROM 15 for storing information. “Name” indicates the name of the information (information name), and “Initial value” indicates the initial value of the information (value at the time of completion of issuance).

In the example shown in FIG. 4, “production phase information”, “ATR (Warm) information”, “ATR (Cold) information”, “diagnosis information”, and the like are stored in the system area A1. Here, ATR (Answer to Reset) is initial response information when the IC card 1 is activated (at the time of activation). “ATR (Cold) information” is ATR information at the time of cold reset, and “ATR (Warm) information” is ATR information at the time of warm reset.
The cold reset is a reset when the power supply voltage is first supplied from the contact portion 3. The warm reset is a reset when a reset signal is re-supplied to the IC card 1 after the cold reset while the supply of the power supply voltage is maintained.

  In the example shown in FIG. 4, the “start address” of “diagnosis information” is “0xXXX03D”, and the “initial value” is “0x00”. Here, “0x” indicates hexadecimal (hexadecimal number).

Returning to the description of FIG. 3, the user area A <b> 2 is an information area for storing information used for various services (applications) using the IC card 1. The user area A2 includes, for example, a file definition information area A21, a data area A22, and a free area A23.
The file definition information area A21 stores directory information that defines a file (for example, EF (Elementary File)) in the data area A22.

The data area A22 stores management information of information used for various services (applications) and a data body as a file.
The empty area A23 is an unused area. For example, the size of the area decreases as a file is added. In FIG. 3, the position P1 indicates the position of the start pointer that stores the directory information, and the position P2 indicates the position of the final pointer of the directory information (the position to be added next time). The values (information) of the start pointer and the final pointer are stored, for example, in the system area A1.

Next, a functional configuration example of the IC card 1 of the present embodiment will be described with reference to FIG.
FIG. 5 is a block diagram showing a functional configuration example of the IC card 1 of the present embodiment.
As shown in this figure, the IC card 1 (IC chip 100) includes a diagnostic information area 30 and a control unit 40.
Here, each unit shown in FIG. 5 is realized by using the hardware shown in FIG.

  The diagnostic information area 30 is a partial area in the EEPROM 15 and is information indicating a determination result as to whether or not an abnormality has been detected in the operation of the hardware included in the IC card 1 as described above. The diagnostic information area 30 stores diagnostic information for each piece of hardware, as shown in FIG. 6, indicating the determination result in each piece of hardware capable of executing self-diagnosis.

FIG. 6 is a diagram illustrating an example of data in the diagnosis information area 30 according to the present embodiment.
In this figure, the diagnostic information is 8-bit data. Here, the “bit position” indicates which position of the 8 bits of diagnostic information is “bit1” to “bit8”. “Bit information” indicates the name of diagnostic information corresponding to each bit, and “Content” indicates the meaning of “0” and “1” of each diagnostic information.

In the present embodiment, an example in which the hardware capable of executing self-diagnosis is the ROM 13, the RAM 14, the EEPROM 15, the RSA coprocessor 16, the DES coprocessor 17, and the AES coprocessor 18 will be described.
As shown in FIG. 6, each bit (“bit1” to “bit6”), which is diagnostic information in the diagnostic information area 30, includes ROM diagnostic information, RAM diagnostic information, EEPROM diagnostic information corresponding to the hardware described above, RSA diagnostic information, DES diagnostic information, and AES diagnostic information. For each bit of “bit 1” to “bit 6”, “0” is stored when the diagnosis result is determined to be normal, and “1” is stored when the diagnosis result is determined to be abnormal. Is done.
In this figure, “-(RFU: Reserved for Future Use)” indicates unused reserved bits. Therefore, “bit7” and “bit8” are fixed to “0”.

  Returning to the description of FIG. 5, the control unit 40 causes the CPU 12 to execute a program stored in the ROM 13 or the EEPROM 15 and executes various processes using the hardware described above. The control unit 40 includes, for example, a communication processing unit 41, a command processing unit 42, an abnormality determination unit 43, and a diagnosis processing unit 44.

  The communication processing unit 41 is realized by, for example, the UART 11, the CPU 12, and a program stored in the ROM 13, and transmits / receives commands and responses to / from the external device 2 through the contact unit 3, for example. For example, the communication processing unit 41 stores a command received from the external device 2 via the UART 11 in the reception buffer area 141. In addition, the communication processing unit 41 transmits, for example, the response stored in the transmission buffer area 142 to the external device 2 via the UART 11.

The command processing unit 42 executes command processing (command processing) under the control of the CPU 12. Here, the command processing indicates processing according to a command that is a processing request received from the external device 2. For predetermined processing such as encryption processing and decryption processing, the command processing unit 42 controls the RSA coprocessor 16, DES coprocessor 17, or AES coprocessor 18 to perform part of the processing under the control of the CPU 12, for example. Let it run.
Note that the command processing unit 42 causes the diagnostic processing unit 44 to execute self-diagnosis processing, for example, when a self-diagnosis command requesting processing for self-diagnosis is received.

  The abnormality determination unit 43 determines whether an abnormality has been detected in the operation on the hardware, and stores diagnostic information indicating the determination result in the diagnostic information area 30 of the EEPROM 15 for each hardware. For example, the abnormality determination unit 43 determines abnormality detection when the hardware is operated by the command processing executed by the command processing unit 42 described above. For example, when it is determined that an abnormality is detected in the command processing, the abnormality determination unit 43 stores diagnostic information indicating abnormality in the diagnosis information area 30. When the abnormality determination unit 43 determines that the abnormality is normal, the abnormality determination unit 43 indicates normality. Information is not stored in the diagnostic information area 30. If the abnormality determining unit 43 determines that an abnormality has been detected, the abnormality determining unit 43 stores “1” in the bit of the diagnostic information corresponding to the hardware. For example, when a write error (abnormality) occurs in the command process for writing data to the EEPROM 15, the abnormality determination unit 43 stores “1” in “bit 3” of the diagnostic information area 30 corresponding to the EEPROM 15.

  In addition, the abnormality determination unit 43 stores diagnosis information indicating normality in the diagnosis information area 30 when it is determined to be normal in the diagnosis processing by the self-diagnosis command described above. That is, when the abnormality determination unit 43 determines that the diagnosis process is normal in the self-diagnosis command, the abnormality determination unit 43 stores “0” in the diagnostic information bit corresponding to the hardware.

  For example, the diagnosis processing unit 44 performs self-diagnosis of the function of the IC card 1 when the IC card 1 is activated or when the above-described self-diagnosis command is received. The diagnosis processing unit 44 acquires the diagnosis information stored in the diagnosis information area 30 in the self-diagnosis at the time of activation of the IC card 1, and when the diagnosis information is a determination result determined to be abnormal, Executes diagnostic processing related to the hardware corresponding to the information. In addition, the diagnosis processing unit 44 relates to hardware corresponding to the diagnosis information when the diagnosis information stored in the diagnosis information area 30 is determined to be normal in the self-diagnosis at startup. Do not execute diagnostic processing.

  For example, when “bit1” of the diagnostic information corresponding to the ROM 13 is “1”, the diagnostic processing unit 44 executes a self-diagnosis regarding the ROM 13 in the self-diagnosis at the time of activation. Here, the self-diagnosis related to the ROM 13 is, for example, a sum check of data stored in the ROM 13. For example, when “bit1” of the diagnostic information corresponding to the ROM 13 is “0”, the diagnostic processing unit 44 omits the self-diagnosis at the start without executing the self-diagnosis regarding the ROM 13. Similarly, for the hardware other than the ROM 13, the diagnosis processing unit 44 executes or omits self-diagnosis regarding the hardware according to the value of the diagnosis information stored in the diagnosis information area 30.

The diagnosis processing unit 44 executes the following processing as self-diagnosis for each hardware.
The diagnosis processing unit 44 performs self-diagnosis on the RAM 13 as to whether a test pattern (for example, 0x00, 0x55, 0xAA, 0xFF, etc.) can be written.
Further, the diagnosis processing unit 44 performs self-diagnosis on the EEPROM 15 such as whether or not a test pattern can be written and whether or not a write voltage is normally output.

In addition, the diagnosis processing unit 44 executes, for example, a self-diagnosis mode process on the RSA coprocessor 16, the DES coprocessor 17, and the AES coprocessor 18, and whether or not a status indicating normal termination is output. Self-diagnose by Here, for example, the diagnosis processing unit 44 may determine whether or not the processing has ended normally by checking a value of a status flag indicating that the processing has ended normally. Here, the value of the status flag is included in information indicating whether or not an abnormality has been detected in the hardware operation.
The diagnosis processing unit 44 executes a self-diagnosis that is always executed at the start-up in addition to the hardware self-diagnosis that is a self-diagnosis executed according to the value of the above-described diagnosis information. Here, the self-diagnosis that is always executed at the time of startup is, for example, diagnostic processing such as self-diagnosis by software processing (such as consistency check of the system area A1).

  Further, when receiving the above-described self-diagnosis command, the diagnosis processing unit 44 executes all the diagnosis processes requested by the self-diagnosis command. That is, the diagnosis processing unit 44 executes all the diagnosis processes regardless of the diagnosis information in the diagnosis information area 30 in the self-diagnosis based on the self-diagnosis command.

Next, the operation of the IC card 1 of the present embodiment will be described with reference to the drawings.
FIG. 7 is a flowchart showing an example of the writing process of the EEPROM 15 of the present embodiment.
In the example shown in this figure, an example will be described in which the communication processing unit 41 receives a command for performing writing processing in the EEPROM 15 from the external device 2. In this case, the communication processing unit 41 stores the command received via the UART 11 in the reception buffer area 141. Then, a process (EEPROM writing process) corresponding to the command received by the command processing unit 42 is executed.

  In the EEPROM writing process, the command processing unit 42 first executes writing in the EEPROM 15 (step S101). That is, the command processing unit 42 acquires the data to be written to the EEPROM 15 and the write destination (for example, logical address) among the data stored in the reception buffer area 141. The command processing unit 42 executes a process for writing the acquired data to the write destination of the acquired EEPROM 15.

Next, the abnormality determination unit 43 determines whether or not the above-described data writing process has ended normally (normal end) (step S102). Here, the abnormality determination unit 43 may execute a verify check of the write data to determine whether or not the data has ended normally, or the data write process is executed by a predetermined subroutine call including the verify process. Then, based on the return value of the subroutine call, it may be determined whether or not the process is normally completed. Here, the return value of the subroutine call is included in information indicating whether or not an abnormality has been detected in the hardware operation. The abnormality determination unit 43 acquires a return value and determines a determination result as to whether or not normal termination has been completed based on the return value.
The abnormality determination unit 43 ends the process when the writing process ends normally (step S102: YES). In addition, when the writing process has not ended normally (step S102: NO), the abnormality determination unit 43 determines that an abnormality has been detected, and advances the process to step S103.

In step S103, the abnormality determination unit 43 stores the abnormality in the diagnosis information area 30 (EEPROM 15). That is, the abnormality determination unit 43 stores “1” in “bit 3” of the diagnostic information corresponding to the EEPROM 15. After the process of step S103, the abnormality determination unit 43 ends the process.
Note that after the writing process of the EEPROM 15 shown in FIG. 7, the command processing unit 42 stores a response including status information, which is the execution result of the process, in the transmission buffer area 142. Then, the communication processing unit 41 transmits the response stored in the transmission buffer area 142 to the external device 2 via the UART 11.

  In the example shown in FIG. 7, the writing process of the EEPROM 15 has been described as an example, but the same applies to the command process for operating other hardware.

Next, with reference to FIG. 8, the self-diagnosis process when the IC card 1 of the present embodiment is activated will be described.
FIG. 8 is a flowchart illustrating an example of the self-diagnosis process at the time of activation according to the present embodiment.
The IC card 1 executes a self-diagnosis process when activated (when activated).
As shown in this figure, the diagnosis processing unit 44 first initializes a variable i (i = 1) (step S201).

  Next, the diagnosis processing unit 44 determines whether or not “biti” of the diagnosis information is “1” (step S202). That is, the diagnosis processing unit 44 reads the value of “biti” of the diagnosis information stored in the diagnosis information area 30 and determines whether or not the value of “biti” is “1”. When “biti” is “1” (step S202: YES), the diagnosis processing unit 44 advances the process to step S203. In addition, when “biti” is “0” (step S202: NO), the diagnosis processing unit 44 advances the process to step S205.

  In step S203, the diagnosis processing unit 44 executes a self-diagnosis corresponding to “biti”. That is, the diagnosis processing unit 44 executes self-diagnosis processing related to hardware corresponding to “biti”.

  Next, the diagnosis processing unit 44 determines whether or not the diagnosis result is normal (step S204). If the diagnosis result of the self-diagnosis process is normal (step S204: YES), the diagnosis processing unit 44 advances the process to step S206. Further, when the diagnosis result of the self-diagnosis process is not normal (abnormal) (step S204: NO), the diagnosis processing unit 44 advances the process to step S205.

In step S205, the diagnosis processing unit 44 executes an abnormality process and ends the process.
In step S206, the diagnosis processing unit 44 adds “1” to the variable i and updates the variable i (i = i + 1).

  Next, the diagnosis processing unit 44 determines whether or not the variable i is larger than “6” (i> 6) (step S207). If the variable i is greater than “6” (i> 6) (step S207: YES), the diagnosis processing unit 44 advances the process to step S208. In addition, when the variable i is “6” or less (i ≦ 6) (step S207: NO), the diagnosis processing unit 44 returns the processing to step S202, and repeats the processing from step S202 to step S207.

  In step S208, the diagnosis processing unit 44 executes self-diagnosis of essential diagnosis items. Here, the self-diagnosis of the essential diagnosis item is, for example, the consistency check of the system area A1 which is the self-diagnosis by the software processing described above.

  Next, the diagnosis processing unit 44 determines whether or not the diagnosis result is normal (step S209). That is, the diagnosis processing unit 44 determines whether or not the result of the self-diagnosis of the essential diagnosis item is normal termination. If the diagnosis result is normal (step S209: YES), the diagnosis processing unit 44 ends the self-diagnosis process at the time of activation and proceeds to the next process (for example, ATR transmission process). In addition, when the diagnosis result is not normal (abnormal) (step S209: NO), the diagnosis processing unit 44 advances the process to step S205, and ends the self-diagnosis process at startup after the process of step S205.

  As described above, when the value of “biti” is “1” at the time of activation (when an abnormality has occurred in command processing or the like), the diagnosis processing unit 44 performs hardware corresponding to the “biti”. Carry out self-diagnosis. In addition, when the value of “biti” is “0” (when no abnormality occurs due to command processing or the like), the diagnosis processing unit 44 omits self-diagnosis related to the hardware corresponding to the “biti”. .

Next, the self-diagnosis process of the self-diagnosis command of the IC card 1 of this embodiment will be described with reference to FIG.
FIG. 9 is a flowchart illustrating an example of a self-diagnosis process using a self-diagnosis command according to the present embodiment.
In the example shown in this figure, an example in which the communication processing unit 41 receives a self-diagnosis command from the external device 2 will be described.

When receiving a self-diagnosis command, the command processing unit 42 first initializes a variable i (i = 1) (step S301).
Next, the command processing unit 42 causes the diagnosis processing unit 44 to execute self-diagnosis (i) (step S302). That is, the diagnosis processing unit 44 executes a diagnosis process related to hardware corresponding to “biti” of the diagnosis information stored in the diagnosis information area 30.

  Next, the abnormality determination unit 43 determines whether or not the diagnosis result of the above-described self-diagnosis (i) diagnosis process is normal (step S303). If the diagnosis result is normal (step S303: YES), the abnormality determination unit 43 advances the process to step S306. Moreover, the abnormality determination part 43 advances a process to step S304, when a diagnostic result is not normal (it is abnormal) (step S303: NO).

In step S <b> 304, the abnormality determination unit 43 stores “1” in “biti” of the diagnostic information area 30. That is, the abnormality determination unit 43 changes “biti” corresponding to the hardware of the self-diagnosis (i) determined to have an abnormality to “1”.
Next, the diagnosis processing unit 44 executes an abnormality process (step S305) and ends the process.

  In step S <b> 306, the abnormality determination unit 43 stores “0” in “biti” of the diagnostic information area 30. That is, the abnormality determination unit 43 changes “biti” corresponding to the hardware of the self-diagnosis (i) determined to be normal to “0”.

Next, the command processing unit 42 adds “1” to the variable i and updates the variable i (step S307).
Next, the command processing unit 42 determines whether or not the variable i is larger than “6” (i> 6) (step S308). If the variable i is greater than “6” (i> 6) (step S308: YES), the command processing unit 42 advances the process to step S309. Further, when the variable i is “6” or less (i ≦ 6) (step S308: NO), the command processing unit 42 returns the processing to step S302, and repeats the processing from step S302 to step S308.

  In step S309, the command processing unit 42 causes the diagnosis processing unit 44 to execute self-diagnosis of essential diagnosis items. That is, the diagnosis processing unit 44 performs self-diagnosis of essential diagnosis items. Here, the self-diagnosis of the essential diagnosis item is, for example, the consistency check of the system area A1 which is the self-diagnosis by the software processing described above.

  Next, the diagnosis processing unit 44 determines whether or not the diagnosis result is normal (step S310). That is, the diagnosis processing unit 44 determines whether or not the result of the self-diagnosis of the essential diagnosis item is normal termination. If the diagnosis result is normal (step S310: YES), the diagnosis processing unit 44 ends the self-diagnosis process using the self-diagnosis command. If the diagnosis result is not normal (abnormal) (step S310: NO), the diagnosis processing unit 44 proceeds with the process to step S305, and ends the self-diagnosis process using the self-diagnosis command after the process of step S305. .

  After the self-diagnosis process using the self-diagnosis command shown in FIG. 9, the command processing unit 42 stores a response including status information, which is the execution result of the process, in the transmission buffer area 142. Then, the communication processing unit 41 transmits the response stored in the transmission buffer area 142 to the external device 2 via the UART 11.

  As described above, when the diagnosis processing unit 44 receives a self-diagnosis command for requesting a self-diagnosis, the diagnosis processing unit 44 executes all the diagnosis processes requested by the self-diagnosis command. When the abnormality determination unit 43 determines that the determination result is normal in the diagnosis process based on the self-diagnosis command, the abnormality determination unit 43 displays the diagnosis information (for example, “0”) indicating normality in the diagnosis information region 30 (normal. Bit) corresponding to the determined hardware).

  As described above, the IC card 1 according to the present embodiment includes the abnormality determination unit 43 and the diagnosis processing unit 44. The abnormality determination unit 43 determines whether an abnormality has been detected in the operation on the hardware, and stores diagnostic information indicating the determination result in the EEPROM 15 (diagnostic information area 30) for each hardware. The diagnosis processing unit 44 responds to the diagnosis information when the diagnosis information stored in the EEPROM 15 is determined to be abnormal in the self-diagnosis at the time of startup (for example, “biti” is “1”). Execute the diagnostic process for the hardware to be used. In addition, the diagnosis processing unit 44 determines that the diagnosis information stored in the EEPROM 15 is normal in the self-diagnosis at the time of startup (for example, “biti” is “0”). Does not execute the hardware diagnostic process corresponding to the diagnostic information.

As a result, the IC card 1 according to the present embodiment executes a diagnostic process related to hardware in which an abnormality has occurred in the past in the self-diagnosis at startup, and omits a diagnostic process related to hardware in which no abnormality has occurred in the past. . Therefore, the IC card 1 according to the present embodiment can reduce the processing time required for self-diagnosis. Note that the diagnosis process related to hardware often takes longer than the diagnosis process related to software. Therefore, the IC card 1 according to the present embodiment can reduce the processing time required for the self-diagnosis appropriately while balancing with the reliability by selecting and executing the diagnostic processing related to the hardware.
In addition, since the processing time at startup is shortened by reducing the processing time required for self-diagnosis, the IC card 1 according to the present embodiment can improve the convenience.

Further, in the present embodiment, the abnormality determination unit 43 determines the detection of abnormality when the hardware is operated by command processing indicating processing corresponding to a command that is a processing request received from the external device 2.
As a result, the IC card 1 according to the present embodiment appropriately detects, for example, an abnormality due to aging of hardware by command processing, thereby reducing processing time required for proper self-diagnosis while balancing with reliability. can do.

In the present embodiment, when the abnormality determining unit 43 determines that an abnormality has been detected, the abnormality determining unit 43 stores diagnostic information (eg, “1”) indicating the abnormality in the EEPROM 15 (diagnostic information area 30), and is normal. Is determined, the diagnostic information indicating normality (for example, “0”) is not stored in the EEPROM 15.
Thereby, for example, even if it is determined that the hardware in which an abnormality has occurred is normal thereafter, the IC card 1 according to the present embodiment executes a diagnosis process related to the hardware (omitted). do not do). Therefore, the IC card 1 according to the present embodiment can improve the reliability of processing for operating hardware.

In the present embodiment, when the diagnosis processing unit 44 receives a self-diagnosis command requesting a self-diagnosis process, the diagnosis processing unit 44 executes all the diagnosis processes requested by the self-diagnosis command. And then. The abnormality determining unit 43 stores diagnostic information indicating normality in the EEPROM 15 when it is determined to be normal in the diagnostic processing by the self-diagnosis command.
As a result, the IC card 1 according to the present embodiment performs the diagnostic processing related to the hardware when the diagnostic processing related to the hardware once detected the abnormality is reconfirmed. It can be appropriately excluded from the target.

(Second Embodiment)
Next, an IC card 1 according to the second embodiment will be described with reference to the drawings.
In 1st Embodiment mentioned above, when the abnormality determination part 43 determined that the hardware was normal in command processing, the example which does not change the diagnostic information of the diagnostic information area | region 30 was demonstrated. The diagnosis information may be changed when it is determined to be normal. The IC card 1 according to the present embodiment will be described with respect to an example in which the diagnostic information in the diagnostic information area 30 is changed when it is determined that the hardware is normal in the command processing.
Note that the hardware configuration and functional configuration of the IC card 1 of the present embodiment are the same as those of the first embodiment, and a description thereof will be omitted here.

FIG. 10 is a flowchart showing an example of the writing process of the EEPROM 15 of the present embodiment.
In the example shown in this figure, as in the example shown in FIG. 7 described above, an example will be described in which the communication processing unit 41 receives a command for performing the writing process of the EEPROM 15 from the external device 2.

Also, in this figure, the processing from step S401 to step S403 is the same as the processing from step S101 to step S103 shown in FIG. 7 described above, so the description thereof is omitted here.
However, in the present embodiment, in step S402, the abnormality determining unit 43 advances the process to step S404 when the writing process is normally completed (step S402: YES).

  In step S404, the abnormality determination unit 43 stores normality in the diagnostic information area 30 (EEPROM 15). That is, the abnormality determination unit 43 stores “0” in “bit 3” of the diagnostic information corresponding to the EEPROM 15. After the process of step S404, the abnormality determination unit 43 ends the process.

Note that after the writing process of the EEPROM 15 illustrated in FIG. 10, the command processing unit 42 stores a response including status information, which is the execution result of the process, in the transmission buffer area 142. Then, the communication processing unit 41 transmits the response stored in the transmission buffer area 142 to the external device 2 via the UART 11.
In the example illustrated in FIG. 10, the writing process of the EEPROM 15 has been described as an example, but the same applies to a command process for operating other hardware.
In addition, since the self-diagnosis process and the self-diagnosis process of the self-diagnosis command at the time of activation of the IC card 1 of the present embodiment are the same as those in the first embodiment, the description thereof is omitted here.

As described above, in this embodiment, the abnormality determination unit 43 determines the detection of abnormality when the hardware is operated by command processing indicating processing corresponding to a command that is a processing request received from the external device 2. To do. When the abnormality determination unit 43 determines that the operation of the hardware is normal, the abnormality determination unit 43 stores diagnostic information indicating normality (for example, “0”) in the diagnostic information area 30 (EEPROM 15).
As a result, the IC card 1 according to the present embodiment performs the diagnostic processing related to hardware once the abnormality has been detected, when the result of reconfirmation is normal, It can be appropriately excluded from the target.

In the present embodiment, as in the first embodiment, the diagnosis processing unit 44 determines that the diagnosis information stored in the EEPROM 15 is abnormal in the self-diagnosis at startup (for example, “biti "" Is "1"), the diagnostic processing related to the hardware corresponding to the diagnostic information is executed. In addition, the diagnosis processing unit 44 determines that the diagnosis information stored in the EEPROM 15 is normal in the self-diagnosis at the time of startup (for example, “biti” is “0”). Does not execute the hardware diagnostic process corresponding to the diagnostic information.
As a result, the IC card 1 according to the present embodiment can reduce the processing time required for self-diagnosis, as in the first embodiment.

(Third embodiment)
Next, an IC card 1 according to a third embodiment will be described with reference to the drawings.
In the present embodiment, an example will be described in which the abnormality determination unit 43 changes the diagnostic information when the command processing determines that the hardware is normal a predetermined number of times.
Note that the hardware configuration and functional configuration of the IC card 1 of the present embodiment are the same as those of the first and second embodiments, and thus description thereof is omitted here. However, in the present embodiment, the data configuration stored in the diagnostic information area 30 is different from those in the first and second embodiments.

FIG. 11 is a diagram illustrating an example of data in the diagnosis information area 30 of the present embodiment.
As shown in this figure, in the present embodiment, the diagnostic information area 30 stores the above-described diagnostic information in association with the count information of each hardware.

  In FIG. 11, “ROM count information” indicates, for example, the value of the number of times when the diagnosis result of the ROM 13 is normal. The “RAM count information” indicates, for example, the value of the number of times when the diagnosis result of the RAM 14 is normal. Further, “EEPROM count information”, “RSA count information”, “DES count information”, and “AES count information” are, for example, those of the EEPROM 15, the RSA coprocessor 16, the DES coprocessor 17, and the AES coprocessor 18. The value of the number of times when each diagnosis result is normal is shown.

FIG. 12 is a flowchart showing an example of the writing process of the EEPROM 15 of the present embodiment.
In the example shown in this figure, as in the example shown in FIG. 10 described above, an example will be described in which the communication processing unit 41 receives a command for performing writing processing in the EEPROM 15 from the external device 2.

Further, in this figure, the processing from step S501 to step S503 is the same as the processing from step S401 to step S403 shown in FIG. 10 described above, so the description thereof is omitted here.
However, in the present embodiment, in step S502, the abnormality determination unit 43 advances the process to step S505 when the writing process is normally completed (step S502: YES).

  In the present embodiment, after the process of step S503, the abnormality determination unit 43 sets the EEPROM count information to “0” (step S504). That is, the abnormality determination unit 43 stores “0” in “EEPROM count information” of the diagnosis information area 30 and resets the value of the number of times when the diagnosis result of the EEPROM 15 is normal. The abnormality determination unit 43 ends the process after the process of step S504.

  In step S505, the abnormality determination unit 43 adds “+1” (adds “1”) to the value of the EEPROM count information. That is, the abnormality determination unit 43 stores a value obtained by adding “1” to the value of “EEPROM count information” in the diagnosis information area 30 and updates the value of the number of times when the diagnosis result of the EEPROM 15 is normal. To do.

  Next, the abnormality determination unit 43 determines whether or not the value of the EEPROM count information is a predetermined value (for example, “3”) (step S506). If the value of the EEPROM count information is a predetermined value (step S506: YES), abnormality determination unit 43 advances the process to step S507. Moreover, the abnormality determination part 43 complete | finishes a process, when the value of EEPROM count information is not a predetermined value (step S506: NO).

In step S507, the abnormality determination unit 43 stores normality in the diagnostic information area 30 (EEPROM 15). That is, the abnormality determination unit 43 stores “0” in “bit 3” of the diagnostic information corresponding to the EEPROM 15. After the process of step S507, the abnormality determination unit 43 ends the process.
As described above, in this embodiment, the abnormality determination unit 43 changes the diagnosis information to “0” and starts when it is determined to be normal for a predetermined number of times (for example, three times) continuously. Sometimes, the diagnosis process corresponding to the diagnosis information is omitted. That is, the abnormality determination unit 43 does not change the diagnostic information for a predetermined period (here, a period until normal is detected three times in succession, for example).

Note that after the writing process of the EEPROM 15 shown in FIG. 12, the command processing unit 42 stores a response including status information, which is the execution result of the process, in the transmission buffer area 142. Then, the communication processing unit 41 transmits the response stored in the transmission buffer area 142 to the external device 2 via the UART 11.
In the example shown in FIG. 12, the writing process of the EEPROM 15 has been described as an example, but the same applies to the command process for operating other hardware.
In addition, since the self-diagnosis process and the self-diagnosis process of the self-diagnosis command when starting the IC card 1 of the present embodiment are the same as those in the first and second embodiments, the description thereof is omitted here.

As described above, in the present embodiment, the abnormality determination unit 43 does not change the diagnostic information for a predetermined period. In other words, the abnormality determination unit 43 changes the diagnostic information when the determination result is detected to be normal for a predetermined number of times (for example, three times) continuously until the detection result is detected for the predetermined number of times continuously. The diagnostic information is not changed during this period.
As a result, the IC card 1 according to the present embodiment performs the diagnostic process relating to the hardware once the abnormality is detected without reducing the reliability of the process for operating the hardware. Can be appropriately excluded from the target of diagnostic processing.

(Fourth embodiment)
Next, an IC card 1a and an IC card system 50 according to a fourth embodiment will be described with reference to the drawings.
In the present embodiment, an example in which diagnosis information is stored outside the IC card 1a will be described.

FIG. 13 is a diagram illustrating an example of the IC card system 50 according to the present embodiment.
As shown in this figure, the IC card system 50 includes an IC card 1 a, an external device 2, and a host device 5. The external device 2 and the host device 5 are connected via a network NT, for example.
In this figure, the same components as those shown in FIGS. 2 and 5 are designated by the same reference numerals, and the description thereof is omitted.

  The host device 5 transmits / receives data to / from the IC card 1a via the external device 2. The host device 5 includes, for example, a diagnostic information storage unit 30a. The host device 5 stores the diagnostic information received from the IC card 1a via the external device 2 in the diagnostic information storage unit 30a in association with the identification information of the IC card 1a. In addition, the host device 5 transmits diagnostic information corresponding to the IC card 1a stored in the diagnostic information storage unit 30a to the IC card 1a via the external device 2, and performs diagnostic processing based on the diagnostic information. 1a is executed.

  The diagnostic information storage unit 30a (an example of a storage unit) stores the identification information of the IC card 1a and the diagnostic information in association with each other. Here, the identification information is, for example, the manufacturing number or management number of the IC card 1a. The diagnostic information is the same as the diagnostic information stored in the diagnostic information area 30 shown in FIG.

  The IC card 1a is different from the IC card 1 described above in that it includes a control unit 40a and does not include the diagnostic information area 30. The control unit 40a includes a communication processing unit 41, a command processing unit 42, an abnormality determination unit 43a, and a diagnosis processing unit 44a. Since the hardware configuration of the IC card 1a is the same as that of the IC card 1 shown in FIGS. 1 and 2, the description thereof is omitted here.

  The abnormality determination unit 43a determines whether an abnormality has been detected in the operation on the hardware, and transmits diagnostic information indicating the determination result to the external device 2 for each hardware. That is, the abnormality determination unit 43a causes the communication processing unit 41 to transmit diagnostic information indicating the determination result to the external device 2 for each hardware. Then, the external device 2 transmits diagnostic information for each hardware to the host device 5 via the network NT.

In addition, the diagnosis processing unit 44a executes a diagnosis process related to hardware instructed from the external device 2 among a plurality of hardware in the self-diagnosis at the time of activation. Here, the instruction from the external device 2 is instruction information transmitted to the external device 2 based on the diagnostic information stored in the diagnostic information storage unit 30a by the host device 5 described above. Is transmitted to the IC card 1a.
The diagnosis processing unit 44a acquires the instruction information via the communication processing unit 41, and executes a diagnosis process related to the hardware instructed based on the instruction information.

As described above, the IC card 1a according to the present embodiment includes the abnormality determination unit 43a and the diagnosis processing unit 44a. The abnormality determination unit 43a determines whether or not an abnormality is detected in the operation on the hardware, and transmits diagnostic information indicating the determination result to the external device 2 for each hardware. The diagnostic processing unit 44a executes diagnostic processing related to hardware instructed from the external device 2 among a plurality of hardware in the self-diagnosis at the time of startup.
As a result, the IC card 1a according to the present embodiment executes the diagnostic processing related to the hardware in which the abnormality has occurred in the past in the self-diagnosis at the start-up, as in the first to third embodiments. Diagnosis processing relating to hardware that has not occurred can be omitted. Therefore, the IC card 1a according to the present embodiment can reduce the processing time required for self-diagnosis.

In each of the above embodiments, an example in which each embodiment is implemented alone has been described, but the embodiments may be combined and implemented.
In each of the above embodiments, the IC card 1 (1a) includes the EEPROM 15 as a rewritable nonvolatile memory. However, the present invention is not limited to this. For example, the IC card 1 (1a) may include a flash EEPROM, a FeRAM (Ferroelectric Random Access Memory), etc. instead of the EEPROM 15.

  In each of the above embodiments, the IC card 1 (1a) has been described as communicating with the external device 2 via the contact unit 3. However, the IC card 1 (1a) communicates with the external device 2 via a contactless interface using a coil or the like. You may comprise so that it may communicate.

In each of the above-described embodiments, the example in which the IC card 1 (1a) is used as an example of the portable electronic device has been described. However, the present invention is not limited to this. The portable electronic device may be, for example, an electronic device such as an IC tag that is not a card shape.
Further, hardware to be subjected to self-diagnosis is not limited to the above-described embodiments. For example, the hardware to be subjected to self-diagnosis may include a security CPU, a tamper resistant abnormality detection circuit, and the like.

  In the third embodiment described above, the abnormality determination unit 43 determines that the hardware operation (or diagnosis processing) has been normally completed for a predetermined number of times (for example, 3 times). Although an example has been described in which the corresponding diagnosis information is changed to a value indicating normality (for example, “0”), the present invention is not limited to this. For example, the abnormality determination unit 43 indicates abnormality in diagnostic information corresponding to the hardware when a hardware operation (or diagnostic process) is terminated abnormally continuously for a predetermined number of times (for example, three times). You may make it change into a value (for example, "1").

  In the third embodiment, the example in which the predetermined period in which the diagnosis information is not changed is a period until the normal end is completed a predetermined number of times has been described. However, the present invention is not limited to this. The predetermined period during which the diagnostic information is not changed may be, for example, a period until the number of hardware operations reaches a predetermined number. That is, for example, with respect to hardware such as the EEPROM 15 that has a limited number of times of writing, the diagnostic information is changed after the number of times of writing reaches a predetermined number of times (for example, the number of times that a failure is likely to occur). May be.

  According to at least one embodiment described above, an abnormality determination unit 43 that determines whether or not an abnormality is detected in an operation on hardware and stores diagnostic information indicating the determination result in the EEPROM 15 for each hardware; In the self-diagnosis at the time of startup, when the diagnosis information determined by the abnormality determination unit 43 is a determination result determined to be abnormal, a diagnosis processing unit 44 that executes a diagnosis process related to hardware corresponding to the diagnosis information By having it, the processing time required for self-diagnosis can be reduced.

The above embodiment can be expressed as follows.
Obtaining information indicating whether an abnormality has been detected in the operation for hardware, determining whether an abnormality has been detected in the operation for hardware based on the information, and providing diagnostic information indicating the determination result An abnormality determination unit to be stored in a storage unit for each hardware; and
In the self-diagnosis at the time of startup, when the diagnosis information determined by the abnormality determination unit is acquired, and the diagnosis information is a determination result determined to be abnormal, the diagnostic processing related to the hardware corresponding to the diagnosis information A portable electronic device comprising: a diagnostic processing unit that executes

In addition, the program for realizing the function of each component included in the IC card 1 (1a) in the embodiment is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system, By executing, the processing in each configuration included in the IC card 1 (1a) described above may be performed. Here, “loading and executing a program recorded on a recording medium into a computer system” includes installing the program in the computer system. The “computer system” here includes an OS and hardware such as peripheral devices.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and gist of the invention, and are also included in the invention described in the claims and the equivalents thereof.

  DESCRIPTION OF SYMBOLS 1, 1a ... IC card, 2 ... External device, 3 ... Contact part, 4 ... Card base material, 5 ... Host device, 10 ... IC module, 11 ... UART, 12 ... CPU, 13 ... ROM, 14 ... RAM, 15 ... EEPROM, 16 ... RSA coprocessor, 17 ... DES coprocessor, 18 ... AES coprocessor, 19 ... internal bus, 30,30a ... diagnostic information area, 40,40a ... control unit, 41 ... communication processing unit, 42 ... command Processing unit 43, 43a ... Abnormality determination unit 44, 44a ... Diagnosis processing unit 50 ... IC card system 100, 100a ... IC chip 141 ... Reception buffer area 142 ... Transmission buffer area 143 ... Working Buffer area, NT ... Network

Claims (8)

It is determined whether or not an abnormality is detected in the operation for hardware, and an abnormality determination unit that stores diagnostic information indicating the determination result in the storage unit for each hardware, and
A diagnostic processing unit that executes a diagnostic process related to the hardware corresponding to the diagnosis information when the diagnostic information determined by the abnormality determination unit is a determination result determined to be abnormal in the self-diagnosis at the time of startup; A portable electronic device comprising: The diagnosis processing unit relates to the hardware corresponding to the diagnosis information when the diagnosis information stored in the storage unit is determined to be normal in the self-diagnosis at the time of startup. The portable electronic device according to claim 1, wherein diagnostic processing is not executed. The abnormality determination unit determines the detection of an abnormality when the hardware is operated by command processing indicating processing corresponding to a command that is a processing request received from an external device. Portable electronic device. When it is determined that an abnormality is detected, the abnormality determination unit stores the diagnostic information indicating abnormality in the storage unit. When the abnormality determination unit determines that the abnormality is normal, the diagnosis information indicating normality is stored in the storage unit. The portable electronic device according to any one of claims 1 to 3, wherein the portable electronic device is not stored. When the diagnostic processing unit receives a self-diagnosis command requesting a self-diagnosis process, the diagnostic processing unit executes all the diagnostic processes requested by the self-diagnosis command,
The said abnormality determination part memorize | stores the said diagnostic information which shows normal in the said memory | storage part, when it determines with it being normal in the diagnostic process by the said self-diagnosis command. The portable electronic device as described. The portable electronic device according to any one of claims 1 to 5, wherein the abnormality determination unit does not change the diagnostic information for a predetermined period. An abnormality determination unit that determines whether an abnormality is detected in the operation on the hardware and transmits diagnostic information indicating the determination result to the external device for each hardware;
A portable electronic device comprising: a diagnosis processing unit that executes a diagnosis process related to the hardware instructed from the external device among a plurality of the hardware in a self-diagnosis at startup. A storage unit for storing information;
It is determined whether or not an abnormality is detected in the operation for hardware, and an abnormality determination unit that stores diagnostic information indicating the determination result in the storage unit for each hardware, and
In the self-diagnosis at the time of start-up, when the diagnosis information determined by the abnormality determination unit and stored in the storage unit is a determination result determined to be abnormal, the diagnosis related to the hardware corresponding to the diagnosis information A portable electronic device comprising: a diagnosis processing unit that executes processing.

Images