JP2537198B2 - Portable electronic devices - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Field of Industrial Application) The present invention relates to, for example, a nonvolatile data memory and a CP.
The present invention relates to a portable electronic device called an IC card, which has an IC (integrated circuit) chip having a control element such as U (central processing unit) built therein.

(Prior Art) Recently, as a new portable data storage medium, I has a nonvolatile data memory and a control element such as a CPU.
IC cards with a built-in C chip are becoming popular. This I
The C card manages the data stored in the internal data memory by the internal control element or the external device.

By the way, as an access method to this type of IC card, there is an arbitrary access method in which the data memory is divided into a plurality of areas and the areas are targeted. In this case, IC
Specific information such as the start address of the target area and the number of bytes that make up the area are registered in advance in the card.By adding the target area information to the input instruction data, the IC card can The specific information is searched for, converted into physical access information, and processed.

Here, specific information indicating the validity of the data is added to the stored data in the IC card. this is,
This is information for judging that some abnormality occurs during data writing and that the data is abnormal data during subsequent data reading. If this is a write sequence that invalidates this data when it is determined to be abnormal when writing data, for example, if the power supply voltage supplied to the IC card is momentarily stopped, At this point, control as a control element becomes impossible, so that data being written cannot be invalidated. Therefore, there is a problem that the reliability of the IC card system is reduced.

(Problems to be Solved by the Invention) As described above, there is a drawback in that the data being written cannot be invalidated at the momentary power failure.

Therefore, the present invention eliminates the above drawbacks, and provides a portable electronic device that can reliably invalidate data even when a power failure occurs during the writing of data. The purpose is to

[Structure of the Invention] (Means for Solving the Problem) When writing data, the portable electronic device of the present invention invalidates the data in advance, writes the data, and then determines that the data has been normally written. It is configured to validate the ingested data.

(Operation) Since the data is written after the data is temporarily invalidated, the data can be reliably invalidated even when a power failure occurs during the writing.

(Example) Hereinafter, one example of the present invention will be described with reference to the drawings.

FIG. 18 shows a configuration example of a card handling device to which the IC card as the portable electronic device according to the present invention is applied, which is used as a terminal device such as a home banking system or a shopping system. That is, this device is capable of connecting the IC card 1 to the control unit 3 through a card reader / writer 2 and including a CPU, and the control unit 3 includes a keyboard 4, a CRT display device 5, a printer 6, and a floppy disk device. 7
Are connected.

The IC card 1 is held by the user and refers to a personal identification number known only to the user, for example, when the user purchases a product, and stores necessary data. As shown in FIG. In addition, it is composed of a part that executes basic functions such as a read / write unit 11, a password setting / password collation unit 12, and an encryption / decryption unit 13, and a supervisor 14 that manages these basic functions. . Read / write section 11
Reads data to and from the card reader / light 2,
This function is for writing or erasing. Password setting
The password collating unit 12 has a function of storing and reading out a password set by the user, collating the password after setting the password, and granting permission for the subsequent processing. The encryption / decryption unit 13 is an encrypted or encrypted data for preventing leakage or forgery of communication data when the data is transmitted from the control unit 3 to another terminal device via a communication line, for example. To decrypt
For example, it is a function of performing data processing according to an encryption algorithm having sufficient encryption strength such as DES (Data Encryption Standard). The supervisor 14 is a function for decoding a function code or a function code added with data input from the card reader / writer 2 and selecting and executing a necessary function from the basic functions.

In order to exert these various functions, the IC card 1 has, for example, as shown in FIG. 16, a control element (for example, CPU) 15 as a control unit, and nonvolatile data in which the stored contents as a data memory unit can be erased. Memory 16, program memory
17 and a contact portion 18 for making electrical contact with the card reader / light 2, of which the portion within the broken line (control element 15, data memory 16,
The program memory 17) is composed of one IC chip. The program memory 17 is composed of, for example, a mask ROM, and stores a control program for the control element 15 having a subroutine for realizing each of the basic functions described above. The data memory 16 is used for storing various data, for example,
It is composed of EEPROM.

The data memory 16 is divided into a plurality of areas, for example, as shown in FIG. 13, and each of these areas is divided into a single block or a plurality of blocks, and each block is composed of a predetermined number of bytes. The block is processed as a unit. Further, one block is composed of property information (1 byte) and storage data. Area numbers [00 to FF] are given to the respective divided areas as shown in the figure.
Of these, in area [00], as shown in FIG. 14, the number of bytes of stored data in each block of area [01 to FF], the area start address and the area end address correspond to the area number. And remembered. For example, the start address of area [01] is aaa address, the final address is bbb address, and each block is composed of 6 bytes, and the number of stored data bytes is 5 bytes per block. Then, at the beginning of each area, there is an area for storing the address of the last byte of the last block written (hereinafter referred to as pointer information) when data is written in the area. Here, the shaded area in the figure is the location where the property information for each block is stored. The property information includes an identifier indicating whether or not the corresponding storage data is valid, and an identifier indicating whether or not the final data is stored when a series of storage data strings spans a plurality of blocks. Figure 15 shows an example of the format of property information. As shown in the figure, the 6th bit is an identifier indicating whether or not the storage data in the block is valid. If this bit is "1", it indicates that it is invalid, and if it is "0", it indicates that it is valid. Show. The 7th bit is an identifier indicating whether or not the last byte of the series of data is included. If this bit is "1", it indicates that the block does not include the last byte, and if it is "0". Indicates that the block is included. The 0th to 5th bits are dummy bits.

Next, the data writing operation to the data memory 16 in such a configuration will be described with reference to the flowchart shown in FIG. When writing data in the data memory 16, write command data having a format as shown in FIG. 2 is input. This write command data is composed of a write function code, an area number and stored data. The stored data is composed of a data string to be stored and byte number information (hereinafter referred to as data string byte number information) forming the data string. In the steady state, the card reader / writer 2 is waiting for command data. When command data is input from the card reader / writer 2 at this time, the control element 15 first writes the function code included in the command data. Check whether it is a built-in one. If it is for writing, the control element 15 searches the area [00] of the data memory 16 for the area number added to the instruction data.
If not found, the control element 15 outputs the response data indicating that there is no corresponding area, and returns to the command data waiting state.
If found, the control element 15 refers to the corresponding processing unit data. When writing this stored data in the area, the control element 15 first refers to the pointer information at the beginning of the area and confirms the address to start writing. Next, the control element 15 determines whether or not all the input storage data can be stored in the area, based on the data string byte number information in the instruction data. As a result of this judgment, when it is judged that the data cannot be stored, the control element 15 outputs the response data which means a byte number information error and returns to the instruction data waiting state. When it is determined that the data can be stored, the control element 15 checks the data string byte number information and the number of bytes forming the data string included in the current command data. As a result of this check, when the former value is larger than the latter value, the control element 15 outputs response data indicating a byte number information error, and returns to the instruction data waiting state. In other cases, the latter value is subtracted from the former value and the result is retained as the remaining amount value.

Next, the control element 15 sets the most significant bit of the bit string forming the data string byte number information to "1",
Temporarily invalidates the stored data. Next, the control element 15 divides the stored data into the number of processing unit data, and stores property information added to each of the divided data. At this time, if the remaining amount value previously held is “0”, all the input data is stored, and the most significant bit of the bit string forming the stored data string byte number information is set to “0”. By doing so, the stored data is validated, and the final address of the block containing the final byte in the stored data string is stored as pointer information. Then, the control element 15 outputs the response data indicating the end of writing,
Return to the instruction data wait state. On the other hand, if the remaining amount value is other than "0", the control element 15 does not store only the final divided data, holds it in the built-in RAM (random access memory), and sets the built-in write continuation acceptance flag. ,
The start address of the next last write block is held in the RAM as a storage start address, at the same time response data indicating continuous write acceptance is output, and the operation returns to the instruction data wait state.

Next, the continuous write operation will be described with reference to the flowchart shown in FIG. When performing continuous writing, continuous writing command data having a format as shown in FIG. 4 is input. The continuous write command data is composed of a continuous write function code and stored data. When the continuous write command data is input, the control element 15 first refers to the previous write continuous acceptance flag and confirms whether or not the flag is set. As a result, if the write continuation acceptance flag is not set, the control element 15
Outputs response data indicating a sequence error and returns to the instruction data wait state. If the write continuation acceptance flag is set, the control element 15 checks the number of bytes forming the input storage data and the previous remaining amount value. If the result of this check is that the former value is greater than the latter value,
The control element 15 outputs response data indicating a byte number information error, and returns to the instruction data waiting state. In other cases, the former value is subtracted from the latter value, and the result is held as a new remaining amount value.

Next, the control element 15 first outputs RA before inputting the stored data.
New storage data is generated by adding the last divided data held in M to the new storage data, divided by the number of processing unit data, and the property information is added to each of the divided data. Then, the data is stored based on the storage start address previously held in the RAM. At this time, if the newly retained remaining amount value is “0”, all the stored data is stored, and the most significant bit of the data string byte number information stored earlier is set to “0” and stored. The final address of the block containing the final byte in the data string is stored as pointer information. Then, the control element 15 resets the write continuation acceptance flag, outputs response data indicating the end of writing, and returns to the instruction data waiting state. On the other hand, if the remaining amount value is other than "0", the control element 15 does not store only the final divided data but holds it in the built-in RAM, sets the write continuation acceptance flag, and sets the start address of the next unwritten block. Is stored in the RAM as a storage start address, at the same time response data indicating continuous write acceptance is output, and the state returns to the instruction data wait state.

In this way, a data string that cannot be written in one transmission is stored. However, when memorizing each block,
The 7th bit of the property information to be added is set to "0". In addition, the 7th bit and the 6th bit are both set to "0" in the block in which the final divided data is stored particularly when the remaining amount value is "0".

For example, it is assumed that command data as shown in FIG. 5 (a) is input. This is write command data, and the target area is recognized as [02]. The number of processing unit bytes in area [02] is 4 bytes. First, information on the number of bytes in the input instruction data is extracted, and at the same time, the area [0
After referring to the pointer information located at the beginning of [2] and confirming that all the stored data can be stored, the most significant bit of the byte number information is set to "1" (Fig. 5b). Next, the remaining amount value is set from the byte number of the stored data and the value of the byte number information (FIG. 5c). Next, the stored data is divided by the number of processing unit bytes (FIG. 5d) and stored in area [02] as shown in FIG. 5 (e). However, since the remaining amount value is other than "0", the final divided data is not stored. Then, the address to be written next is held and the write continuation acceptance flag is set.

In this state, if continuous write command data as shown in FIG. 5 (f) is input, the number of stored data in this command data is checked, and if it is good, the remaining amount value and the number of stored data of this time are checked. A new remaining amount value is set (Fig. 5g). Next, the previously stored last divided data and the stored data input this time are combined (FIG. 5h), the stored data is divided by the number of processing unit bytes (FIG. 5i), and the previous writing is performed. It is stored according to the address to be entered (Fig. 5j).
At this time, since the remaining amount value is "0", the most significant bit of the byte number information is set to "0" and the final address is stored as pointer information.

Next, a sixth data read operation for the data memory 16 is performed.
This will be described with reference to the flowchart shown in the figure. When reading the data stored in the data memory 16, the read command data having the format shown in FIG. 7 is input.
This read command data is composed of a read function code and an area number. In the steady state, it is waiting for command data from the card reader / writer 2,
When command data is input from the card reader / writer 2 at this time, the control element 15 first confirms whether or not the function code included in the command data is for reading. If it is for reading, the control element 15 searches the area [00] of the data memory 16 for the area number added to the instruction data. If not found, the control element 15 outputs the response data indicating that there is no corresponding area, and returns to the command data waiting state. If found, the control element 15 refers to the processing unit data corresponding thereto, and at the same time stores the start address and the end address of the area in the built-in RAM. When reading the data in this area, the control element 15 first refers to the pointer information located at the beginning of the area. As a result, if all the bits of this pointer information are "1", the control element 15 recognizes that nothing is stored in this area, outputs response data indicating an unwritten area, and stores the instruction data. Return to the state. On the other hand, if all the bits of the pointer information are not "1", the control element 15 recognizes the head block of the latest data in the area based on this pointer information. Since the byte number information is stored in this head block, the control element 15 sets it as the initial value of the built-in counter. At this time, if the most significant bit of the byte number information is "1", the control element 15 recognizes that the data string following this is invalid data, and sets a built-in invalid data present flag. Next, the control element 15 checks the value set in the previous counter to see if the data string has a value that can exist in the area. As a result, when the control element 15 determines that the value cannot be present and is an illegal value, the control element 15 outputs response data indicating a byte number information error, and returns to the instruction data waiting state. When the control element 15 determines that the value is valid so that it can exist, the control element 15 reads the following data byte by byte and stores it in the built-in RAM. At this time, the counter is decremented by 1 each time 1 byte is read. However, the counter does not change when reading the property information and is not stored in RAM.

In this way, the stored data is sequentially stored in the RAM until the counter reaches "0". However, since the capacity of the RAM is limited, if the number of data stored in the RAM before the counter reaches “0” becomes this capacity, the control element 15 determines the counter value and the final address of the currently read data. Is held, and at the same time, the built-in read continuation acceptance flag is set. Then, the control element 15 adds the data string in the RAM to the response data indicating the continuous read acceptance and outputs the response data, and returns to the command data holding state. On the other hand, if the counter value is “0”, the control element 15 checks whether or not the invalid data present flag is set, and if it is not set, the data string in the RAM is added to the response data indicating the end of reading. Append and output, then return to instruction data wait state.
If the invalid data flag is set, the control element
Reference numeral 15 adds the data string in RAM to the response data that means invalid data, outputs the response data, and returns to the instruction data wait state.

Next, the continuous read operation will be described with reference to the flowchart shown in FIG. When performing continuous read, continuous read command data having a format as shown in FIG. 9 is input. This continuous read command data is composed of a continuous read function code and an area number.
When the continuous read command data is input, the control element 15 first refers to the previous read continuous acceptance flag and confirms whether or not the flag is set. As a result, if the read continuation acceptance flag is not set, the control element
15 outputs response data that means a sequence error,
Return to the instruction data wait state. When the read continuation acceptance flag is set, the control element 15 similarly reads out the data while subtracting one from the previously held address and the counter value, and stores the data in the RAM. At this time, when the counter becomes “0”, the control element 15 resets the read continuation acceptance flag, checks whether the invalid data present flag is set, and if it is not set, it means the reading end. The data string in RAM is added to the response data and output, and the unit returns to the instruction data wait state. If the invalid data present flag is set, the control element 15
Returns the command data waiting state by adding the data string in RAM to the response data meaning invalid data and outputting it. on the other hand,
When the capacity of the RAM is satisfied before the counter reaches “0”, the control element 15 holds the counter value and the final address of the read data this time, and stores the data string in the RAM as the response data that means continuous read acceptance. Append and output, then return to instruction data wait state.

For example, assume that the area (area "02") in the state as shown in FIG. 5 (j) is read by the read command data as shown in FIG. 10 (a). However, RA
It is assumed that the capacity of M is 8 bytes, for example. In this case, the data string read by this command data is a data string as shown in FIG. 10 (b), and the byte number information indicates 11 bytes. Therefore, the counter is "5" in the state stored in the RAM. Since the counter value is other than "0", this data string is added and output as the response data meaning continuous read acceptance (Fig. 10c). Then the
When the continuous read command data as shown in FIG. 10 (d) is input, a data string as shown in FIG. 10 (e) is set in the RAM. At this time, since the counter is "0", this data string is added to the response data indicating the end of reading and output (FIG. 10f).

Next, an eleventh data erasing operation for the data memory 16 is performed.
This will be described with reference to the flowchart shown in the figure. When erasing the data stored in the data memory 16, erasing command data having a format as shown in FIG. 12 is input.
This erase command data is composed of an erase function code and an area number. In the steady state, the card reader
When the command data is input from the card reader / writer 2 at this time, the control element 15 first determines whether the function code included in the command data is for erasing. Confirm. If it is for erasing, the control element 15 searches the area [00] of the data memory 16 for the area number added to the instruction data. If not found, the control element 15 outputs the response data indicating that there is no corresponding area, and returns to the command data waiting state. If found, the control element 15 refers to the start address of the area and confirms the pointer information of this area. as a result,
If all the bits of this pointer information are "1", the control element
15 recognizes that nothing is stored in this area, outputs response data indicating an unwritten area, and returns to the instruction data waiting state. On the other hand, the pointer information bit is "1"
If not, the control element 15 sets all the bits of this pointer information to "1", and outputs the response data indicating the end of erasing,
Return to the instruction data wait state.

According to the IC card as described above, at the time of data writing, the data is invalidated in advance and then the data is written, and the control element determines that the data is normally written, and the written data is validated. Even if a power failure occurs during the writing of data, the data can be reliably invalidated. Therefore, the reliability of the IC card system is improved.

In addition, in the above-described embodiment, the case where the control element, the data memory, and the program memory are configured by one IC chip has been described, but it is not necessarily configured by one IC chip, and separate IC chips are used. It may be configured.

Further, in the above-mentioned embodiment, the IC card is illustrated as the portable electronic device, but the present invention is not limited to the card-shaped one, and may be a block-shaped or pencil-shaped one, for example. Further, the hardware configuration of the portable electronic device can be variously modified without departing from the spirit of the invention.

[Effects of the Invention] As described in detail above, according to the present invention, even if a power failure occurs during the writing of data, the portable electronic device can reliably invalidate the data. Can be provided.

[Brief description of drawings]

FIG. 1 is for explaining one embodiment of the present invention. FIG. 1 is a flow chart for explaining a data write operation, FIG. 2 is a view showing a format of write command data, and FIG. 3 is a continuous write operation. 4 is a diagram showing a format of continuous write command data, FIG. 5 is a diagram explaining a concrete example of a data write operation, FIG. 6 is a flow chart explaining a data read operation, and FIG. Is a diagram showing the format of the read instruction data, FIG. 8 is a flowchart explaining the continuous read operation, FIG. 9 is a diagram showing the format of the continuous read instruction data, and FIG. 10 is a diagram explaining a specific example of the data read operation. , FIG. 11 is a flowchart for explaining the data erasing operation, FIG. 12 is a diagram showing the format of erase command data, FIGS. 13 and 14 are diagrams showing the structure of the data memory, and FIG. FIG. 16 shows a format of quality information, FIG. 16 is a block diagram showing a configuration of an IC chip incorporated in an IC card, FIG. 17 is a diagram showing functional blocks of an IC card, and FIG. 18 is a configuration of a card handling device. It is a block diagram. 1 ... IC card (portable electronic device), 2 ... card reader / writer, 15 ... control element (control section), 16 ... data memory (data memory section), 17 ... program memory, 18 ... Contact part.

Claims (1)

(57) [Claims] 1. A write command including a write command code, area designation data, a data string, and storage data including length information of the data string, and a continuous write command including a continuous write command code and a data string are received from an external device. A portable electronic device comprising a contact section for storing the data, a memory for storing the data received via the contact section, and a control section for writing data to the memory. A pointer information storage unit that is provided and stores the address of the final data, and an identification that identifies the write address in the area designated by the area designation data received via the contact unit based on the address of the pointer information storage unit Means, and each time a write command and a continuous write command are received via the contact portion. A counting means for counting the remaining amount of the data string by subtracting the length of the received data string from the length information of the data string in the write command; and the stored data in the write command received via the contact portion. Changing means for changing the specific bit of the data string to a state indicating that the data string is in an invalid state, and the storage data in the write instruction and the data string in the continuous write instruction in which the specific bit is changed to the invalid state by the changing means. A writing unit that sequentially divides the divided storage data and the data sequence in the continuous write command into a predetermined unit length in the memory based on the write address identified by the identifying unit, and the counting result by the counting unit. After the final divided data is written by the writing means when there is no data remaining, the specific bit indicating that the data string is invalid is set. Updating the data string to a state indicating that the data string is valid, and updating the address of the pointer information storage unit based on the final address of the written data string, and the result data of the counting by the counting device. When there is a remaining amount, a first response unit that outputs response data indicating that continuous write data can be received to an external device; and the updating unit updates the specific bit and the address of the pointer information storage unit. And a second response means for outputting response data indicating that writing is completed.