JP3057326B2 - IC card - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial Application Field] The present invention relates to an IC card storing both an application program for executing various functions and a test program for testing itself.

[Conventional technology]

The test program is a program for performing substantially all functional tests (product tests) in the card, and has a function of accessing an arbitrary address of a memory in the card. For this reason, high security is required for the execution of the test program so that the program and data in the IC card are illegally read and copied via the test program, and are not falsified.

Therefore, in such an IC card, the test program can be executed during the manufacturing process, but immediately after the manufacturing process is completed, the unique secret code and the unique secret code unique to the card are written into the EEPROM of the IC card. The user's personal data, etc. are written before the setting confirmation code indicating whether or not the user has passed further to the user, but after the personal identification code has been written to the EEPROM, or the user's personal data has been imported. Thereafter, measures are taken to prevent the program and data from being read by the execution of the test program.

FIG. 3 shows a test program for performing various function tests stored in a system ROM of a conventional IC card, and various functions stored in an application ROM when a card user actually uses the IC card. 9 is a flowchart showing a procedure until an application program to be executed is executed.

In the system ROM 3, the manufacturer determines whether to execute the test program 31 for performing various functional tests during the IC card manufacturing process, the test program 31 or the application program 41 stored in the application ROM 4. A branching routine 32 for selecting a program to be executed; a setting confirmation routine 34 for confirming whether or not a secret code unique to the IC card (called a unique secret code) is written in the EEPROM; PIN code and EEP input via O terminal P5
A security code confirmation routine 35 for confirming whether or not the unique security code stored in the ROM matches the memory, a memory initialization routine 36 for initializing the EEPROM when they match, and the like are stored.

On the other hand, as described above, the user actually
An application program 41 for executing various functions when using the card is stored.

After the IC card manufacturing process is completed, a unique security code and a setting confirmation code, which is a write confirmation code indicating whether or not this has been written, are stored in the EEPROM. Personal data etc. are written respectively. Based on this setting confirmation code, it is determined whether or not the unique password is written in the EEPROM.

Note that this setting confirmation code is set so as not to overlap with various bit patterns written to the EEPROM as well as the initial value of the EEPROM.

Thus, in the case of a conventional IC card, a person who knows the unique security code of the IC card or a person who knows the same by accident runs the EE by executing the test program.
When an attempt is made to read the program or personal information written in the PROM, the following processing is performed.

In FIG. 3, when a reset signal input from a reset signal terminal P3 of the IC card is received by the CPU, the CPU reads a branch routine 32 stored in advance at a predetermined address in the system ROM 3, and reads the branch routine 32. Start running.
When the execution instruction of the test program 31 is confirmed in the branch routine 32, the setting confirmation routine 34 is executed. In this setting confirmation routine 34, based on the setting confirmation code in the EEPROM, it is determined whether or not the unique secret code has been written in the EEPROM.
Execute 35. If the data is not written, for example, during the IC card manufacturing process, the test program 31
Execute

In the security code confirmation routine 35, the unique security code written in the EEPROM is compared with the security code input from the I / O terminal P5, and if both match, the memory initialization routine 36 is executed to initialize the EEPROM. Erasing, that is, deleting personal data. Then, after initializing the data in the EEPROM, the test program 31 is executed.

Of course, if the unique password does not match the password input from the outside, the operation is stopped. With this, in the conventional IC card, when the unique security code is confirmed and the test program 31 is executed, the contents of the EEPROM are initialized,
To prevent the risk of unauthorized reading of the EEPROM contents.

[Problems to be solved by the invention]

However, in the conventional IC card as described above, it usually takes several hundred milliseconds to several tens of seconds to initialize the EEPROM. After the initialization operation is stopped halfway, the unique security code is initialized, and the above-described process is repeated again in this state. After executing the setting confirmation routine 34, the test program is immediately executed along a route not passing through the initialization routine 36.
It was possible to execute the program 31 and cause a crime such as illegally reading and copying the contents of the remaining EEPROM or falsifying the contents.

The present invention has been made in view of the above circumstances, and a person who knows the unique security code intentionally or accidentally forcibly stops the operation during initialization of the EEPROM and performs a test on a route that does not pass the initialization routine. It is an object of the present invention to obtain an IC card which enables a program to be executed and prevents the contents of the user from being read even when trying to read data or the like concerning an individual user written in an EEPROM.

[Means for solving the problem]

The IC card according to the present invention is an IC card having a built-in application program for executing various functions and a test program for testing the same, and has a unique secret code assigned to itself and whether the unique secret code is written. A memory in which a write confirmation code indicating whether or not the user has been written and personal information of the user are written in different areas, and whether or not a unique password has been written based on the write confirmation code of the memory. Means for verifying the personal identification code if the personal identification code has been written, and a personal identification code for verifying the personal identification code with an externally input personal identification code; and Means for initializing an area in which the personal information of the user is written, excluding an area in which these are written, when the addresses match, Means for confirming that the area in which the personal information is written has been initialized, and the area in which the unique password and the write confirmation code have been written when the initialization has been confirmed by the means. Means for executing the test program later or when the unique password is not written in the memory.

[Action]

In the IC card of the present invention, when executing the test program, when the personal identification code and the externally input personal identification code match, the personal identification code and its setting confirmation code are first written in the contents of the memory. Initialize the area where the user's personal information is written except for the area where the user is written and erase the user's personal information. After this initialization is confirmed, the unique password and setting confirmation code are The written area will be initialized, and even if the initialization operation is stopped by means such as turning off the power, the unique security code has not yet been initialized. However, the execution of the test program is prevented directly, and even if the test program is subsequently executed, the personal data and even the personal data are fixed. PIN code, so that has already been erased even setting confirmation code.

〔Example〕

Hereinafter, the present invention will be described in detail with reference to the drawings showing the embodiments.

FIG. 1 is a block diagram schematically showing the configuration of an IC card according to the present invention. In the figure, reference numeral 10 denotes an IC card. The IC card 10 has a CPU 1 for executing and controlling each program, and a system as a memory in which a test program for performing various functional tests of the product during a manufacturing process of the IC card is stored.
ROM 3, an application ROM 4, which is a memory storing application programs for executing various functions when used by a user, a unique security code for ensuring security when executing the test program, and a unique security code. An EEPROM (Electrically Erasable Programabl) which is a nonvolatile memory in which a setting confirmation code, which is a writing confirmation code for confirming whether or not the data has been written, and personal information of a card user are written.
eROM) 5, a RAM 6 for temporarily storing data, an input / output circuit 7, and the like, which are connected to each other via a system bus 2. P1 to P5 are all terminals, P1 is a power input terminal, P2 is a ground terminal, P3 is a reset signal terminal to which a reset signal for initializing the CPU 1 is input, P4 is a clock terminal to which a clock signal is input, and P5 is This is an I / O terminal, and an input / output circuit 7 is coupled to the I / O terminal P5. Input / output circuit 7
Is configured to input and output data between the IC card 10 and an external device via the I / O terminal P5.

In the EEPROM 5, which is a non-volatile memory, at the completion of the IC card manufacturing process, a unique security code 51, a setting confirmation code 52, which is a write confirmation code indicating whether or not the unique security code has been written, and personal information of the user. Etc. are written. This setting confirmation code 52 is, like a conventional IC card,
The selection is made so as not to overlap with the initial value of the EEPROM 5 at the time of manufacturing the IC card or various bit patterns that may be set in the EEPROM 5 thereafter.

FIG. 2 is a flowchart showing a procedure up to execution of the test program of the system ROM 3 and the application program of the application ROM 4 of the IC card according to the present invention.

The reset signal input from the reset signal terminal P3
When received by the CPU 1, the CPU 1 reads the branch routine 32 stored in advance at a predetermined address in the system ROM 3, and starts executing the branch routine 32. The execution command of the test program 31 is sent from the external device to the I / O terminal P in the branch routine 32.
When it is confirmed that the input has been made through 5, C
The setting confirmation routine 34 is executed by PU1.

In this setting confirmation routine 34, it is determined whether or not the unique secret code 51 is written in the EEPROM 5 based on the setting confirmation code 52 in the EEPROM 5, and if the unique secret code 51 is written, the secret code confirmation routine is executed. Step 35 is executed, and if the data has not been written yet, for example, if the data is erased due to a trouble during the manufacturing process or after shipping the product, the test program 31 is directly executed without collating the personal identification code.

In the security code confirmation routine 35, the unique security code 51 written in the EEPROM 5 is compared with the security code input from the outside via the I / O terminal P5.
The memory initialization routine 36 'of the EEPROM 5 is executed. That is, first, the unique password 51 of the EEPROM 5 and the setting confirmation code 5
Areas other than the area where 2 is written, for example, areas where the personal information of the user is written are initialized. Subsequently, after confirming that the area has been initialized by the initialization confirmation routine 37, a security code initialization routine 38 for initializing the area in which the unique password 51 and the setting confirmation code 52 are written is executed. I do.

After that, the test program 31 is executed.

If the unique password 51 does not match the password input from the outside, the operation is stopped.

Therefore, when the test program 31 is executed, the personal information, the unique personal identification code, the setting confirmation code, and the like are all initialized. On the other hand, as described above, when it is determined that the unique password 51 has not been set, the test program is executed.
Since the personal data and the like of the user in are initialized, this prevents the contents of data relating to the card user from being read out.

Note that, in the branch routine 32, when the execution instruction of the test program stored in the system ROM 3 is not input from the external device to the I / O terminal P5, the CPU 1 executes the application program 41.

〔The invention's effect〕

With the IC card of the present invention, the test program can be executed immediately when the unique security code is not written in the memory, and when the unique security code is written in the memory, the unique security code of the memory is first used. Initialize the area where the user's personal information is written except the area where the code and the setting confirmation code are written, and then initialize the area where the unique password and the setting confirmation code are written After the test, the test program is executed. After shipment of the IC card, a person who knows the ID code of the IC card or a person who knows the ID code by accident reads the personal data in the EEPROM. Even if the initialization is interrupted by power-off or other means during the execution of the memory initialization routine and the above-described test program is executed again, the unique Since the code and the setting confirmation code have not yet been initialized, the process for directly executing the test program is not selected from the setting confirmation routine, and the memory initialization routine is executed via the password code confirmation routine. Reading of personal data and the like is prevented.

In other words, the test program is executed after the confidential main part including the personal identification code and the user's personal information is initialized, and it is ensured that the data on the user stored in the memory is read out. Is prevented.
Also, during the manufacturing process, since the unique security code has not been written yet, various test items can be tested before the product is shipped, and sufficient product inspection can be performed without any trouble. It has excellent effects.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing an internal structure of an IC card according to the present invention, FIG. 2 is a flowchart showing a procedure up to execution of a test program and an application program according to the present invention, and FIG. 9 is a flowchart showing a procedure up to execution of a test program and an application program in the IC card of FIG. 1 ... CPU, 2 ... System bus, 3 ... System ROM,
4 Application ROM, 5 EEPROM, 31 Test program, 32 Branch routine, 34 Setting confirmation routine, 35
… PIN code confirmation routine, 36 '… Memory initialization routine, 37… Initialization confirmation routine, 38… PIN code initialization routine, 41… Application program In the drawings, the same reference numerals are the same or equivalent. Show the part.

──────────────────────────────────────────────────続 き Continued on front page (58) Field surveyed (Int.Cl. ⁷ , DB name) G06K 19/073 B42D 15/10 521

Claims (1)

(57) [Claims] 1. An IC card having a built-in application program for executing various functions and a test program for testing the same, wherein a unique secret code assigned to itself and whether or not the unique secret code is written are provided. And a memory in which the user's personal information is written in a different area, and means for determining whether or not a unique password has been written based on the write check code in the memory. When the personal identification code is written, the personal identification code checking means for comparing the personal identification code with the externally input personal identification code, and the externally input personal identification code matches the personal identification code. Means for initializing an area in which the user's personal information is written in the memory excluding the area in which these are written, and Means for confirming that the area in which the information has been written has been initialized; and, when the initialization has been confirmed by the means, after the area in which the unique secret code and the write confirmation code have been written is initialized, A means for executing the test program when a unique personal identification code is not written in the memory.