JP2020173642A - Conversion program, conversion device and conversion method - Google Patents

Abstract

To provide a conversion program or the like capable of developing an application without a developer of the application being conscious of an AT command when the application communicates a PC/SC with an IC card and an APDU through an AT command apparatus requiring communication according to the AT command.SOLUTION: The conversion program or the like includes a configuration which receives an input of a C-APDU, adds a header and a footer of an AT command to the received C-APDU and outputs it.SELECTED DRAWING: Figure 7

Description

Related to technical fields such as programs related to data conversion between information processing terminals and communication modules.

An IC card provided with an integrated circuit (IC) provides various services to a user by executing an application program (“application”).

On the other hand, users can enjoy various services such as e-mail and video distribution by using the web browser of a personal computer connected to the Internet. That is, the user can use these services from any computer that is connected to the Internet and has a web browser installed.

On the other hand, it is important to use a web browser on a computer with security measures because there is a possibility that a private account may be used illegally or personal information or private data may be stolen. In addition, security can be enhanced by using an IC card that can securely store the user's certificate, is used as an indispensable component in the login process, and can perform two-factor authentication. Under such circumstances, Patent Document 1 discloses a technique for performing user authentication or the like using an IC card when enjoying a service with a web browser.

Japanese Unexamined Patent Publication No. 2016-144111

By the way, an IC card generally provides a service by communicating with a reader / writer (R / W (Reader / Writer)) connected to an information processing terminal. The communication method between the application of the information processing terminal and the IC card at this time will be described with reference to FIG. 1 (A). An application installed in an information processing terminal provides a service to a user through a command / response exchange (“transaction”) with an IC card. PC / SC (Personal Computer / Smart Card) is a standard API (Application Programming Interface) for using an IC card in a Windows (registered trademark) environment. The R / W reads and writes data to the IC card. An application is also installed in the IC card, executes processing according to the command, and returns a response to the source of the command.

An IC card to which the international standard ISO / IEC7816 is applied receives an APDU (Application protocol data unit) C-APDU (Command-APDU) containing a command from an application of an information processing terminal and responds to the command. The process is executed by the application installed in the IC card. Then, the IC card transmits (replies) R-APDU (Response-APDU), which is an APDU including a SW (Status Word) composed of 2 bytes according to the execution result of the process, to the application of the information processing terminal. In this way, the service is provided to the user by the transaction of exchanging commands and responses between the application of the information processing terminal and the IC card. Specifically, as shown in FIG. 2A, the C-APDU is transmitted from the application of the information processing terminal and reaches the IC card via the PC / SC and R / W. On the other hand, the R-APDU is transmitted from the IC card and reaches the application of the information processing terminal via the R / W and the PC / SC.

On the other hand, the IC card is also used as a SIM (Subscriber Identity Module) for a telecommunications carrier to identify a subscriber. The SIM is used for the telecommunications carrier and the IoT server to authenticate the IoT device when the IoT device communicates with the IoT server. Here, the communication method between the application of the IoT device and the SIM will be described with reference to FIG. 1 (B). The application installed in the IoT device executes a command / response exchange (transaction) with the SIM. The LTE communication module (LTE modem) communicates with the SIM and performs processing related to communication with a communication carrier (not shown). An application is also installed in the SIM, and the application executes processing according to the command and returns a response to the source of the command.

Since ISO / IEC7816 is applied to SIM, which is a type of IC card, C-APDU is received from the IoT device (application), processing is executed according to the command, and R-APDU is transferred to the IoT device (application). Send (reply). However, when the IoT device application sends and receives C-APDU and R-APDU to and from the LTE communication module, it is necessary to follow the AT command format (devices that need to communicate according to the AT command, such as the LTE communication module). May be called "AT command device"). Specifically, as shown in FIG. 2B, the application installed in the IoT device transmits a C-APDU with an AT command header and footer added to the LTE communication module. Upon receiving this, the LTE communication module transmits the C-APDU excluding the AT command header and footer to the SIM. On the other hand, the SIM executes processing according to the command and transmits the R-APDU to the LTE communication module. Upon receiving this, the LTE communication module adds an AT command header and footer and transmits the R-APDU to the application. That is, data to which the AT command header and footer are added is transmitted and received between the application and the LTE communication module.

That is, when the transmission destination of the C-APDU is PC / SC from the viewpoint of the application of the IoT device, the transmission is performed as it is without adding the header and footer of the AT command (Fig. 2 (A)), while the transmission destination. If is an AT command device, the AT command header and footer are added and transmitted (FIG. 2 (B)). Similarly, when receiving R-APDU from the application of the IoT device, if the source is PC / SC, it is not necessary to delete the header and footer of the AT command, while if the source is the AT command device. Will delete the header and footer of the AT command and process it. Therefore, there is a problem that the application developer needs to develop the application according to whether the direct partner for giving and receiving the APDU is a PC / SC or an AT command device, which is a heavy burden. ..

Therefore, according to the present invention, even when the application communicates with the IC card connected to the AT command device and the APDU, the application can be directly connected to the PC / SC by the application. The purpose is to provide a conversion program or the like that allows a developer to develop an application without being aware of AT commands.

In order to solve the above problems, the invention according to claim 1 makes a computer into a first receiving means for receiving input of a C-APDU, and a header and a footer for an AT command in the C-APDU received by the first receiving means. It is characterized in that it functions as an additional means for adding the above, and a first output means for outputting the C-APDU to which the header and footer of the AT command are added.

The invention according to claim 2 is the conversion program according to claim 1, wherein the computer receives an input of an R-APDU to which an AT command header and a footer are added, the second receiving means. A second method for deleting the AT command header and footer from the R-APDU to which the AT command header and footer are added received by the receiving means, and outputting the R-APDU with the AT command header and footer deleted. It is characterized in that it further functions as an output means.

The invention according to claim 3 is the conversion program according to claim 1, wherein the additional means is the C when the destination of the C-APDU received by the first receiving means is a communication module. -The AT command header and footer are added to the APDU, and the first output means outputs the C-APDU to which the AT command header and footer are added to the communication module.

The invention according to claim 4 is the conversion program according to claim 2, wherein the deletion means transmits an R-APDU to which the header and footer of the AT command received by the second reception means are added. When the original is a communication module, the header and footer of the AT command are deleted from the C-APDU, and the second output means transfers the R-APDU from which the header and footer of the AT command are deleted to the C-APDU. It is characterized by outputting to the input source of.

The invention according to claim 5 is the conversion program according to claim 4, wherein the first byte of the SW included in the R-APDU received by the second receiving means is "0x61". In this case, the holding means for holding the data received together with the SW, the [GET RESPONSE] command is included when the first byte of the SW included in the R-APDU received by the second receiving means is "0x61". An AT command header and footer are added to the C-APDU to further function as a third output means for outputting to the communication module, and the AT command header and footer received as a response to the [GET RESPONSE] command When the SW included in the added R-APDU is "0x9000", the deletion means deletes the header and footer of the AT command from the R-APDU to which the header and footer of the AT command are added. The second output means adds the data held by the holding means to the R-APDU from which the header and footer of the AT command have been deleted, and then sends the C-APDU received by the first receiving means to the transmission source. It is characterized by outputting.

The invention according to claim 6 comprises a first receiving means for receiving an input of a C-APDU, an additional means for adding an AT command header and a footer to the C-APDU received by the first receiving means, and the AT command. It is characterized by including a first output means for outputting a C-APDU to which the header and footer of the above are added.

The invention according to claim 7 is a conversion method using a conversion device, in which a header and a footer of an AT command are attached to a first reception step for receiving input of a C-APDU and a C-APDU received by the first reception step. It is characterized by including an additional step of adding and a first output step of outputting a C-APDU to which the header and footer of the AT command are added.

According to the present invention, since the header and footer of the AT command are added and output by inputting the C-APDU, the PC / SC is output by operating between the PC / SC and the AT command device. The C-APDU can be received by the AT command device. Therefore, even when the application communicates with the IC card connected to the AT command device and the APDU, the application can directly exchange the APDU with the PC / SC, and the application developer can use the PC / SC. Applications can be developed without being aware of AT commands.

(A) is a diagram showing an example of a communication method between an application of an information processing terminal and an IC card, and (B) is a diagram showing an example of a communication method between an application of an information processing terminal and a SIM. (A) is a diagram showing an example of transmission / reception of APDU between the application of the information processing terminal and the IC card, and (B) is a diagram showing an example of transmission / reception of APDU between the application of the information processing terminal and the SIM. .. It is a figure which shows the outline structure example of the IoT communication system S which concerns on this embodiment. It is a block diagram which shows the outline structure example of the microcomputer 11 which concerns on this embodiment. Is a diagram showing an example of a communication method between the application of the microcomputer 11 and the SIM according to the present embodiment. It is a figure which shows an example of transmission / reception of APDU between the application of the microcomputer 11 and SIM which concerns on this embodiment. It is a flowchart which shows an example of the conversion process by CPU 111 based on the conversion program which concerns on this embodiment. It is a sequence diagram which shows the operation example of the IoT communication system S which concerns on this embodiment. It is a sequence diagram which shows the operation example of the IoT communication system S which concerns on this embodiment. It is a figure which shows an example of transmission / reception of APDU between the application of the microcomputer 11 and SIM which concerns on a modification. It is a flowchart which shows an example of conversion processing by CPU 111 based on the conversion program which concerns on modification.

First, an embodiment of the present invention will be described. In addition, this embodiment is an example when the present invention is applied to the conversion program in the microcomputer 11 in the IoT device 1.

[1. Configuration of IoT system S]
The configuration and functional outline of the IoT communication system S will be described with reference to FIG. FIG. 3 is a block diagram showing a schematic configuration example of the IoT communication system S according to the present embodiment. The IoT communication system S includes an IoT device 1 and an IoT server 2, and the IoT device 1 and the IoT server 2 can transmit and receive data to and from each other via a network NW. The network NW is constructed by, for example, a LAN (Local Area Network), the Internet, a mobile communication network (including a base station, etc.), a gateway, and the like.

The IoT device 1 is provided with a temperature sensor (not shown), and records temperature data obtained by measuring the ambient temperature. The IoT server 2 manages temperature data transmitted from the IoT device 1 and updates programs, information, and the like stored in the IoT device 1. The data transmitted and received between the IoT device 1 and the IoT server 2 is encrypted by the key data managed by each and then communicated in order to ensure security.

[2. Configuration of IoT device 1]
The IoT device 1 includes an LTE communication module 10 (an example of a "communication module") that performs processing related to communication of the IoT device 1, a microcomputer 11 that controls the entire IoT device 1, and a SIM 12 connected to the LTE communication module 10. Consists of including.

The LTE communication module 10 communicates with the SIM 12 and performs processing related to communication with a telecommunications carrier. The LTE communication module 10 transmits / receives data according to an AT command. That is, when transmitting data such as C-APDU to the LTE communication module 10, it is necessary to add an AT command header and footer. On the other hand, when receiving data such as R-APDU transmitted from the LTE communication module 10, it is necessary to delete the header and footer of the AT command and handle the data.

The SIM 12 stores the contractor information (IMSI, etc.) used by the communication operator to authenticate the SIM 12, and the key for encrypting / decrypting the communication data communicated between the IoT server 2 and the IoT device 1. Further, the SIM 12 stores a key for encrypting / decrypting information and data used by the IoT server 2 to authenticate the IoT device 1. When the telecommunications carrier or the IoT server 2 authenticates, the application of the microcomputer 11 of the IoT device 1 is responsible for the command / response by the APDU with the SIM 12.

[3. Configuration of microcomputer 11]
FIG. 4 is a block diagram showing a schematic configuration example of the microcomputer 11 according to this embodiment. As shown in FIG. 4, the microcomputer 11 includes a CPU (Central Processing Unit) 111, a RAM (Random Access Memory) 112, a ROM (Read Only Memory) 113, an I / O unit 114, and a non-volatile memory 115. , Controls the entire IoT device 1.

The RAM 112 stores, for example, data temporarily required for the OS (Operating System) and various applications to function. For example, a flash memory or an "Electrically Erasable Programmable Read-Only Memory" can be applied to the non-volatile memory 115. The OS, various applications, conversion programs described later, and the like are stored in the ROM 113 and the non-volatile memory 115. The I / O unit 114 serves as a communication interface with the LTE communication module 10.

[4. Converter]
Next, the communication method between the application installed in the microcomputer 11 and the SIM 12 and the conversion program will be described with reference to FIGS. 5 to 7. As shown in FIG. 5, the APDU is transferred between the application 301 and the SIM 12 installed in the microcomputer 11 via the PC / SC 302, the conversion program 303, and the LTE communication module 10 (an example of the “AT command device”). .. The conversion program 303 functions as a device driver between the OS 300 and the LTE communication module 10 by being executed by the CPU 111 of the microcomputer 11.

Hereinafter, a specific description will be given with reference to FIG. First, the application 301 delivers the C-APDU to the PC / SC 302 (step S1). Next, the PC / SC 302 inputs the C-APDU into the conversion program 303 (step S2). When the conversion program 303 receives the input of the C-APDU, it performs a header / footer addition process for adding the header and footer of the AT command (step S3), and performs LTE communication with the C-APDU to which the header and footer of the AT command are added. Output to module 10 (step S4). Upon receiving this, the LTE communication module 10 interprets the header and footer of the AT command and passes the C-APDU to the SIM 12 (step S5).

The application installed in the SIM 12 executes a process in response to a command included in the C-APDU, and passes the R-APDU including the response to the LTE communication module 10 (step S6). Upon receiving this, the LTE communication module 10 adds an AT command header and footer to the R-APDU and passes it to the conversion program 303 (step S7). When the conversion program 303 receives the input of the R-APDU to which the header and footer of the AT command are added by the LTE communication module 10, the conversion program 303 performs a header / footer deletion process for deleting the header and footer of the AT command (step S8). The R-APDU is output to the PC / SC302 (step S9). When the PC / SC 302 receives the R-APDU from the conversion program 303, it hands it over to the application 301 (step S10).

That is, when the conversion program 303 receives the input of the C-APDU from the PC / SC302, the conversion program 303 adds the header and footer of the AT command to the C-APDU and outputs it to the LTE communication module 10. Further, when the conversion program 303 receives the input of the R-APDU to which the AT command header and footer are added from the LTE communication module 10, the conversion program 303 deletes the AT command header and footer and sets the R-APDU to the PC / Output to SC302.

Here, the conversion process by the CPU 111 of the microcomputer 11 based on the conversion program 303 will be described with reference to FIG. 7. FIG. 7 is a flowchart showing an example of conversion processing by the microcomputer 111.

First, the CPU 111 of the microcomputer 11 determines whether or not the input of data (for example, C-APDU) is received from the PC / SC 302 (step S101). When the CPU 111 determines that the data has been received from the PC / SC 302 (step S101: YES), the CPU 111 adds an AT command header and footer to the received data to generate transmission data (step S102).

Specifically, the CPU 111 generates an AT command (Generic UICC logical channel access + CGLA) as transmission data. For example, the AT command (AT + CGLA)
<sessionid>, <length>, <command><CR>
Consists of. The CPU 111 describes an integer value obtained as a response of the AT command (Open logical channel + CCHO) sent at the start of the session in <sessionid>, describes the length of C-APDU in <length>, and describes <command>. C-APDU is described in. <CR> is a line feed code.

In addition, it should be noted
<sessionid>, <length>, <command><CR>
In
Before <command>
<sessionid>, <length>
Is the header of the AT command,
Behind <command>
<CR>
Is the footer of the AT command.

Next, the CPU 111 outputs the transmission data generated in the process of step S102 to the LTE communication module 10 (step S103), and shifts to the process of step S101.

On the other hand, when the CPU 111 determines that the data is not received from the PC / SC 302 (step S101: NO), then whether or not the input of the data (for example, R-APDU) is received from the LTE communication module 10 is determined. Determine (step S104). When the CPU 111 determines that the data has been received from the LTE communication module 10 (step S104: YES), the CPU 111 deletes the AT command header and footer from the received data and generates transmission data (step S105).

For example, the CPU 111 can be used as a response corresponding to the AT command (AT + CGLA).
<CR><LF> + CGLA: <length>, <response><CR><LF>
<CR><LF> OK <CR><LF>
Accept.
The length of <response> is described in <length>. R-APDU is described in <response>. <LF> is a line feed code. When the CPU 111 receives the response, the CPU 111 deletes the header and footer of the AT command. In other words, the CPU 111 deletes the other parts, leaving the <response> part.

In addition, it should be noted
<length>, <response><CR><LF>
<CR><LF> OK <CR><LF>
In
Before <response>
<length>
Is the header of the AT command,
Behind <response>
<CR><LF>
<CR><LF> OK <CR><LF>
Is the footer of the AT command.

Next, the CPU 111 outputs the transmission data generated in the process of step S105 to the PC / SC 302 (step S106), and shifts to the process of step S101. On the other hand, when the CPU 111 determines that the data is not received from the LTE communication module 10 (step S104: NO), the CPU 111 proceeds to the process of step S101.

In addition to deleting step S104, in the process of step S101, it is determined whether or not the header and footer of the AT command are added to the input-accepted data, and if "YES", the step is determined. The process may be shifted to the process of S105, and if "NO", the process may be shifted to the process of step S102. Further, the conversion program 303 is a program capable of executing both additional processing and deletion processing for the header and footer of the AT command, but it is decided that each processing is divided into an additional program and a deletion program that can be executed, and the AT command The additional program may be executed when the header and footer of the AT command should be added, and the deletion program may be executed when the header and footer of the AT command should be deleted.

[5. Communication of IoT system S]
Next, an example of communication in the IoT system S will be described with reference to FIGS. 8 and 9.

First, an example of communication when the application 301 installed in the microcomputer 11 transmits the transmission data to the IoT server 2 will be described with reference to FIG.

As shown in FIG. 8, the CPU 111 (application 301) of the microcomputer 11 passes the transmission data (for example, temperature data) to be transmitted to the IoT server 2 to the SIM 12 (step S201). Specifically, the CPU 111 (application 301) selects an application for encryption / decryption installed in SIM 12, and then selects a transmission data and a C-APDU including a command for the application to encrypt the transmission data. Send.

Upon receiving the transmission data, the SIM 12 encrypts the transmission data with an encryption key based on the selected application (step S202). Next, the SIM 12 passes the encrypted transmission data to the microcomputer 11 (application 301) (step S203). Specifically, the SIM 12 transmits an R-APDU including a response including an encrypted transmission data and a SW indicating the processing result of the encryption processing.

Note that transmission data (APDU) is transmitted and received between the CPU 111 (application 301) and the SIM 12 via the PC / SC 302, the conversion program 303, and the LTE communication module 10 as described with reference to FIG.

When the CPU 111 (application 301) of the microcomputer 11 receives the encrypted transmission data, it transmits the encrypted transmission data to the IoT server 2 (step S204).

When the IoT server 2 receives the encrypted transmission data, it decrypts the encrypted transmission data with the decryption key (step S205).

Next, an example of communication when the IoT server 2 transmits transmission data to the application 301 installed in the microcomputer 11 will be described with reference to FIG. 9.

As shown in FIG. 9, the IoT server 2 encrypts the data transmitted to the IoT device 1 (for example, the data for changing the setting of the temperature sensor) with the encryption key (step S251). Next, the IoT server 2 transmits the encrypted transmission data to the IoT device 1 (step S252).

The CPU 111 (application 301) of the microcomputer 11 passes the received encrypted transmission data to the SIM 12 (step S253). Specifically, the CPU 111 (application 301) selects an encryption / decryption application installed in the SIM 12 and then decrypts the encrypted transmission data and the encrypted transmission data to the application. Sends a C-APDU containing a command to make it.

When the SIM 12 receives the encrypted transmission data, it decrypts it with the decryption key based on the selected application (step S254). Next, the SIM 12 passes the decoded transmission data to the microcomputer 11 (application 301) (step S255). Specifically, the SIM 12 transmits an R-APDU including a response including the decoded transmission data and a SW indicating the processing result of the decoding process.

Note that transmission data (APDU) is transmitted and received between the CPU 111 (application 301) and the SIM 12 via the PC / SC 302, the conversion program 303, and the LTE communication module 10 as described with reference to FIG.

As a result, the CPU 111 (application 301) of the microcomputer 11 receives the decoded transmission data.

As described above, the CPU 111 of the present embodiment (an example of the "first receiving means", "additional means", and "first output means") receives the input of the C-APDU based on the conversion program 303. The header and footer of the AT command are added to the received C-APDU, and the C-APDU with the header and footer of the AT command added is output.

Therefore, according to the conversion program 303 of the present embodiment, since the header and footer of the AT command are added and output by inputting the C-APDU, the PC / SC and the LTE communication module 10 are operated. As a result, the LTE communication module 10 can receive the C-APDU output by the PC / SC 302. Therefore, even when the application 301 communicates with the SIM (an example of the "IC card") connected to the LTE communication module 10 and the APDU, the application 301 directly exchanges the APDU with the PC / SC302. The developer of the application 301 can develop the application 301 without being aware of the AT command.

Further, the CPU 111 of the present embodiment (an example of "second receiving means", "deletion means", and "second output means") has an R- with an AT command header and footer added based on the conversion program 303. The input of the APDU is accepted, the header and footer of the AT command are deleted from the R-APDU to which the header and footer of the accepted AT command are added, and the R-APDU with the header and footer of the AT command deleted is output.

Therefore, according to the conversion program 303 of the present embodiment, the header and footer of the AT command are deleted and output by inputting the R-APDU to which the header and footer of the AT command are added. Therefore, the conversion program 303 is output. Is operated between the PC / SC 302 and the LTE communication module 10, and the header and footer of the AT command are deleted when the R-APDU with the header and footer of the AT command output by the LTE communication module 10 is received. The R-APDU can be received by the PC / SC302. Therefore, even when the application 301 communicates with the SIM (an example of the "IC card") connected to the LTE communication module 10 and the APDU, the application 301 directly exchanges the APDU with the PC / SC302. The developer of the application 301 can develop the application 301 without being aware of the AT command.

[6. Modification example]
The application 301 of the microcomputer 11 may transmit a command instructing the SIM 12 to transmit data, and the SIM 12 may transmit the data as a response to the application 301. At this time, if the data to be transmitted cannot be transmitted in one response, the SIM 12 transmits a part of the data to be transmitted as a response and a specific SW to the application 301. At this time, "0x61" is set for SW1 (the first byte of the SW) in the specific SW, and a value indicating the remaining data size is set for SW2 (the second byte of the SW). When the application 301 receives the response that SW1 is "0x61", the application 301 sends a [GET RESPONSE] command instructing the transmission of the remaining data to the SIM 12, and the SIM 12 responds to the command with the remaining data and the SW. Send a response containing. At this time, if the data to be transmitted cannot be transmitted in the response to one [GET RESPONSE] command, the data to be transmitted from the SIM 12 to the application 301 is divided and transmitted by repeating these processes. Can be done.

Therefore, when the response from the SIM 12 includes a SW whose SW1 is "0x61", the conversion program 303 in this modification does not send the response to the PC / SC302 (application 301), but instead [GET] The RESPONSE] command is transmitted to the SIM 12, the SIM 12 receives all the data to be transmitted to the application 301, and the data to be collectively transmitted is transmitted to the PC / SC 302 (application 301). Hereinafter, the communication method between the application 301 and the SIM 12 installed in the microcomputer 11 in this modification and the conversion process based on the conversion program 303 will be described with reference to FIGS. 10 and 11.

Since steps S31 to S35 in FIG. 10 are the same as steps S1 to S5 in FIG. 6, description thereof will be omitted. However, the command transmitted from the microcomputer 11 (application 301) is a command for instructing the SIM 12 to transmit some data. On the other hand, when the data to be transmitted to the microcomputer 11 (application 301) cannot be transmitted at once, the SIM 12 divides the data into R-Data1 and R-Data2 and transmits the data (here, the data is divided into two data). The case of transmission will be described, but the data can be divided into N pieces of R-Data1 to R-DataN, and then transmitted in N times.) Specifically, the SIM 12 first passes the R-APDU including the response including the SW in which the R-Data1 and the SW1 are "0x61" to the LTE communication module 10 (step S36). Upon receiving this, the LTE communication module 10 adds an AT command header and footer to the R-APDU and passes it to the conversion program 303 (step S37).

On the other hand, when the conversion program 303 determines that the SW1 included in the R-APDU to which the header and footer of the AT command received from the LTE communication module 10 is added is "0x61", the conversion program 303 temporarily holds the R-Data1. At the same time, an automatic transmission process of generating a [GET RESPONSE] command, adding an AT command header and footer to the command, and transmitting the command to the LTE communication module 10 is executed (step 38, step S39). Upon receiving this, the LTE communication module 10 deletes the header and footer of the AT command and passes the C-APDU to the SIM 12 (step S40). On the other hand, the SIM 12 passes the R-APDU including the response including the R-Data2 and the SW “0x9000” (indicating normal termination) to the LTE communication module 10 (step S41). Upon receiving this, the LTE communication module 10 adds an AT command header and footer to the R-APDU and passes it to the conversion program 303 (step S42).

When the conversion program 303 receives the input of the R-APDU to which the header and footer of the AT command are added from the LTE communication module 10 as the response of the [GET RESPONSE] command transmitted in step S39, the SW included in the conversion program 303 receives the input of the R-APDU. After confirming that it is "0x9000", the header / footer deletion process is performed (step S43). In the header / footer deletion process, the header and footer of the AT command added to the R-APDU are deleted, and the R-APDU temporarily held up to that point is added to the R-APDU (that is, the R-APDU). , R-Data1 and R-Data12 and R-APDU containing SW "0x9000") are generated. Next, the conversion program 303 outputs the R-APDU to the PC / SC 302 (step S44). When the PC / SC 302 receives the R-APDU from the conversion program 303, it hands it over to the application 301 (step S45).

That is, when the conversion program 303 receives the input of the R-APDU including the SW whose SW1 is "0x61" from the SIM12 via the LTE communication module 10, the conversion program 303 receives the input of the R-APDU including the SW whose SW is "0x9000". Until the input of the APDU is accepted, the transmission of the C-APDU including the [GET REPSONSE] command and the temporary retention of the divided data included in the R-APDU which is the response to the transmission are repeated. Then, when the input of the R-APDU (R-DataN) including the SW whose SW is "0x9000" is received, all the divided data (R-Data1 to R-DataN-1) temporarily held in the input are input. The added R-APDU is output to the PC / SC302.

Next, the conversion process by the CPU 111 of the microcomputer 11 based on the conversion program 303 in the modified example will be described with reference to FIG. FIG. 11 is a flowchart showing an example of conversion processing by the microcomputer 111 in the modified example. In FIG. 11, between the process of step S104 and the process of step S105 of FIG. 7, the process of step S151 to the process of step 158 are added, and here, the added portion will be mainly described.

First, in step S104 of FIG. 11, when the CPU 111 of the microcomputer 11 determines that the data is not received from the LTE communication module 10 (step S104: NO), the process proceeds to the process of step S101. On the other hand, when the CPU 111 determines that the data has been received from the LTE communication module 10 (step S104: YES), the SW included in the received data R-APDU is "0x61XX" (that is, the SW1 is "0x61". It is determined whether or not it is (step S151).

When the CPU 111 determines that the SW is "0x61XX" (step S151: YES), the CPU 111 stores the divided R-Datan (n is a natural number from 1 to N-1) included in the R-APDU in the non-volatile memory. It is temporarily held in 115 or RAM 112 (step S152). Next, the CPU 111 prepares a C-APDU including the [GET RESPONSE] command, adds an AT command header and a footer to the C-APDU, and generates transmission data (step S153). Next, the CPU 111 outputs the transmission data generated in the process of step S153 to the LTE communication module 10 (step S154), sets the temporary holding flag to ON (step S155), and proceeds to the process of step S101. The temporary holding flag is set to ON when the conversion program 303 temporarily holds R-Data included in the R-APDU including the SW "0x61XX".

On the other hand, when the CPU 111 determines that the SW is not "0x61XX" (for example, "0x9000") (step S151: NO), the CPU 111 then determines whether or not the temporary holding flag is on (step S151: NO). Step S156). When the CPU 111 determines that the temporary holding flag is not on (step S156: NO), the CPU 111 proceeds to the process of step S105.

On the other hand, when the CPU 111 determines that the temporary holding flag is on (step S156: YES), the CPU 111 receives AT command headers and footers from the received data (R-APDU including R-DataN and SW "0x9000"). All the data (R-Data1 to R-Data (N) temporarily held in the process of step S152 for the R-APDU (R-APDU including R-DataN and SW "0x9000") after deleting the above. -1)) is added to R-APDU (R-APDU including (R-Data1 to R-DataN and SW "0x9000") is generated as transmission data (step S157). Next, the CPU 111 sets a temporary holding flag. It is set to off (step S158), and the process proceeds to step S106.

As described above, in the CPU 111 (an example of the "holding means" and the "third output means") of this modified example, the first byte of the SW included in the received R-APDU is "1 byte" based on the conversion program 303. When it is "0x61", the R-Data received together with the SW is held, and the transmission data in which the AT command is added to the C-APDU including the [GET RESPONSE] command is output to the LTE communication module 10 and [GET RESPONSE] is output. ] When the SW included in the R-APDU with the header and footer of the AT command received as a response of the command is "0x9000", the AT from the R-APDU with the header and footer of the AT command is attached. The header and footer of the command are deleted, the previously held R-Data is added to the R-APDU from which the header and footer of the AT command have been deleted, and then the data is output to the source of the C-APDU.

That is, when the R-APDU including the response including the SW "0x61XX" is transmitted from the SIM 12, the conversion program 303 does not return the R-APDU to the microcomputer 11 (application 301), and the SIM 12 uses the microcomputer 11 (application). After acquiring all the data to be transmitted to 301), it is collectively transmitted to the microcomputer 11 (application 301). As a result, the number of communications between the microcomputer 11 (application 301) and the conversion program 303 can be reduced, and the processing time related to the transaction can be shortened.

1 IoT device 10 LTE communication module 11 Microcomputer 111 CPU
112 RAM
113 ROM
114 I / O section 115 Non-volatile memory 12 SIM
2 IoT server 300 OS
301 Application 302 PC / SC
303 conversion program

Claims (7)

Computer,
The first reception means that accepts C-APDU input,
An additional means for adding an AT command header and footer to the C-APDU received by the first reception means,
The first output means for outputting the C-APDU to which the header and footer of the AT command are added,
A conversion program characterized by functioning as. The conversion program according to claim 1.
The computer
A second reception means that accepts R-APDU input with an AT command header and footer added.
A deleting means for deleting the header and footer of the AT command from the R-APDU to which the header and footer of the AT command received by the second receiving means are added.
A second output means for outputting the R-APDU with the header and footer of the AT command deleted,
A conversion program characterized by further functioning as. The conversion program according to claim 1.
The additional means adds an AT command header and footer to the C-APDU when the destination of the C-APDU received by the first receiving means is a communication module.
The first output means is a conversion program characterized by outputting a C-APDU to which a header and a footer of the AT command are added to the communication module. The conversion program according to claim 2.
When the source of the R-APDU to which the header and footer of the AT command received by the second receiving means is added is a communication module, the deletion means removes the header and footer of the AT command from the C-APDU. Delete and
The second output means is a conversion program characterized in that the R-APDU with the header and footer of the AT command deleted is output to the input source of the C-APDU. The conversion program according to claim 4.
The computer
A holding means for holding data received together with the SW when the first byte of the SW included in the R-APDU received by the second receiving means is "0x61".
When the first byte of the SW included in the R-APDU received by the second receiving means is "0x61", the header and footer of the AT command are added to the C-APDU including the [GET RESPONSE] command. A third output means for outputting to the communication module,
To further function as
When the SW included in the R-APDU to which the header and footer of the AT command received as the response of the [GET RESPONSE] command is added is "0x9000",
The deletion means deletes the header and footer of the AT command from the R-APDU to which the header and footer of the AT command are added.
The second output means adds the data held by the holding means to the R-APDU from which the header and footer of the AT command have been deleted, and then sends the C-APDU received by the first receiving means to the transmission source. A conversion program characterized by outputting. The first reception means that accepts C-APDU input,
An additional means for adding an AT command header and footer to the C-APDU received by the first receiving means, and
The first output means for outputting the C-APDU to which the header and footer of the AT command are added, and
A conversion device characterized by comprising. It is a conversion method using a conversion device.
The first reception process that accepts C-APDU input and
An additional step of adding an AT command header and footer to the C-APDU received in the first reception step, and
The first output step of outputting the C-APDU with the header and footer of the AT command added, and
A conversion method characterized by including.