JP3222619B2 - Information recording medium using key - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information recording medium using a key, and more particularly to an information recording medium using a different key for each file to be accessed.

[0002]

2. Description of the Related Art As a new information recording medium replacing a magnetic card, an IC card has attracted attention. In particular, CPU
An IC card with a built-in is expected to be used in various fields because of its high security. Generally I
The C card has three types such as RAM, ROM, and EEPROM.
There are various types of memories, all of which are accessed by the built-in CPU. The transfer of data to and from the IC card is performed by a reader / writer device. When a predetermined command is given from the reader / writer device to the IC card, the command is executed by the CPU in the IC card. For example, in the case of a data write command, data given from the reader / writer device to the IC card is written in the memory in the IC card, and in the case of a data read command, data read from the memory in the IC card is used. Is transferred to the reader / writer device.

Usually, among the three types of memories described above, R
The OM stores a program for operating the CPU, the EEPROM stores the original data,
Is used as a work area for the CPU. EEPR
Data recording in the OM is performed in file units. In order to access the file data in the EEPROM to ensure security, verification of a predetermined key is required. The CPU checks whether the key input from the reader / writer device is the correct key, and then checks the EEP.
Allow access to ROM.

[0004]

Since an IC card has a larger amount of recordable information than a magnetic card, one IC card
The card can be used for various purposes. For example, one IC card has a function as a so-called "cash card" used for dealing with a bank, a function as a so-called "credit card" used for dealing with a credit sales company, and a function used when consulting a hospital. It is also possible to provide a function as a so-called “examination card”. In this case, a bank file, a credit company file, and a hospital file are separately recorded in the EEPROM.

However, when a plurality of files are provided for a plurality of purposes, independent security is required for each file, so that a key to be collated needs to be changed for each file. Even when accessing the same file, it is necessary to change the security level between the case of executing a data read instruction and the case of executing a data write instruction. Generally, different keys are collated. It is a target. As described above, the necessity of preparing different keys for each file and each command has been increasing, and the number of keys used for one IC card tends to increase more and more. For this reason, it is necessary for the application to remember which key is required to execute a specific command for a specific file, and handling of the key becomes complicated. A problem is emerging.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an information recording medium using keys which can simplify the handling of a plurality of keys.

[0007]

(1) The first invention of the present application is directed to an information recording medium for recording data in file units, a first recording unit for recording a file,
To access files recorded in the first recording unit
Key reference information that indicates the type of key that needs to be
A second recording unit for recording and a specific file selected from outside
When an instruction to select is given,
Key reference information from the second recording unit,
Means for outputting the issued key reference information to the outside .

(2) The second invention of the present application is the first invention according to the first invention, wherein key reference information for one file and
And different keys for each instruction to be executed
The key reference information indicating the type of
It is something to keep .

[0009]

In the information recording medium according to the present invention, key reference information indicating the type of key that needs to be collated to access this file is recorded for each file. When an instruction to select a specific file is given from the outside, key reference information on the selected file is output to the outside. Therefore, externally,
You can immediately recognize which key is needed to access the selected file. For this reason, it is not necessary for the external application to remember information as to which key is required for which file, and the handling of keys can be simplified.
In addition, if the key reference information indicates the type of key required for each instruction to be executed, the external application can remember the information "which key is required to execute which instruction". There is no need to keep it.

[0010]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the illustrated embodiments. FIG. 1 is a block diagram showing a state where a general IC card 10 is connected to a reader / writer device 20. IC
In the card 10, an I / O device 11 for connecting to a reader / writer device 20, a CPU 12, a RAM 13,
The ROM 14 and the EEPROM 15 are built in, and the space between the IC card 10 and the reader / writer device 20 is
They are connected by I / O lines. I / O device 11
Has a function of transmitting and receiving data to and from the reader / writer device 20. The CPU 12 receives a command given from the reader / writer device 20 via the I / O device 11,
Do this. Of the three types of memory, the RAM 13 is a volatile memory and is used as a work area of the CPU 12. ROM 14 and EEPROM 15
Are all non-volatile memories, whereas the ROM 14 is read-only, while the EEPROM can be rewritten at any time. Therefore, the ROM 14 stores C
A program to be executed by the PU 12 is prepared.
The OM 15 stores various information (file directory, file directory,
User data, etc.) are recorded.

As shown in FIG. 2, information is recorded on a file-by-file basis in the EEPROM 15, and a directory is prepared for each file. In this directory, information necessary for accessing the file (for example, the start address of the file, the record length, the number of written records, etc.) is recorded. In the example shown in FIG. 2, two files A and B are prepared, information for accessing the file A is recorded in the directory a, and information for accessing the file B is recorded in the directory b. Has been recorded.

A feature of the present invention is that, in a part of each directory, key reference information indicating the type of key that needs to be collated to access the file is recorded, and the file is selected from outside. In this case, the key reference information is output to the outside. For example,
Key reference information as shown in FIG. 3 is prepared in a part of the directory a. The key reference information prepared in this directory a indicates the type of key to be collated to access the file A. Note that key reference information for accessing the file B is prepared in the directory b.

In this embodiment, the key reference information is composed of four pieces of division information of levels 1 to 4, and each piece of division information is composed of eight bits.
Here, levels 1 to 4 indicate security levels, and more specifically correspond to four instructions as shown in FIG. That is, level 1 indicating the lowest security level corresponds to the read command. This command is a command for instructing a process of reading data from file A. When this command is executed, specific data in file A is read to reader / writer device 20 side. Level 2 indicating the next security level corresponds to a postscript command. This command is a command for instructing a process of appending data to the file A. When this command is executed, new data given from the reader / writer device 20 is transferred to the unwritten area in the file A. Is additionally written to Level 3 which shows higher security level
Corresponds to a rewrite instruction. This instruction is file A
The instruction instructs the process of rewriting the data in the file. The difference between the write-once instruction and the rewrite instruction is that the former is an instruction for additionally writing in an unwritten area, whereas the latter is an instruction for performing so-called “overwrite” on an already written area. By this “overwriting”, old data is rewritten with new data. As described above, since the latter is a command that involves erasing old data, the security level is set one level higher than the former. Level 4, which indicates the highest security level, corresponds to the issued instruction. This instruction is an instruction for issuing processing for adding a new use to this IC card. When this processing is executed, E
New files and directories are created in the EPROM 15. For example, in the case where a function as a medical examination card for a hospital is further added to an IC card having a function as a cash card for a bank and a credit card for a credit company, this issuance instruction is used to make a "medical card" as a "medical card". Issue processing will be performed.

After all, the four section areas of the key reference information shown in FIG. 3 correspond to different instructions. Further, the information of one partitioned area is composed of 8-bit information, where each bit corresponds to one key. Therefore, if 8-bit information is used, 8 bits
Although it is possible to correspond to various types of keys, in this embodiment, only five high-order bits of the 8-bit information are used to correspond to five types of keys. As shown in FIG. 3, the "card user key" associated with the first bit
Is a key (so-called PIN) for specifying the user of this IC card. The "card issuer key" associated with the second bit is a key for specifying the issuer of this IC card. For example, if file A is a bank file, the card for file A This is the key given to the issuing bank. The “authentication key” associated with the third bit is the IC card 1
This key is used to authenticate that the reader / writer device 20 connected to “0” is a correct device. The “dealer key” associated with the fourth bit is a key used to identify the dealer (the branch in the case of a bank) where the reader / writer device 20 is installed. The "person in charge key" associated with the fifth bit is a key used to identify the person in charge at the card issuer (bank). Of course, each key mentioned above is for convenience of explanation,
This is shown as an embodiment, and any other key may be associated.

Now, each bit of the key reference information defined in this way indicates the type of key required when executing the corresponding command for the corresponding file. More specifically, bit “1” indicates that the key needs to be collated, and bit “0” indicates that the key is not required to be collated. For example, in the example shown in FIG. 3, the key reference information for level 1 is “1100000”.
0 ". This indicates that when executing a read command for file A, it is necessary to verify the card user key and the card issuer key.
Similarly, levels 2, 3, and 4 indicate the types of keys that need to be collated when executing a postscript instruction, a rewrite instruction, and an issue instruction, respectively.

A feature of the present invention is that such key reference information is prepared, and when the user selects to access a specific file from outside, the key reference information about the file is output to the outside. The point is to do so. In other words, a program for causing the CPU 12 to perform such a process is written in the ROM 14. For example, consider the case where the IC card 10 is inserted into a cash dispenser of a bank. The cash dispenser has a built-in reader / writer device 20, and the reader / writer device 20 is operated by an application program for performing banking business. Now, assuming that the file A is a file prepared for a bank transaction, the reader / writer device 20 gives an instruction to the IC card 10 to select the file A. When the CPU 12 receives this instruction, the EEPR
The key reference information is read from the directory a in the OM 15 and sent to the reader / writer device 20 side. Thus, the application program on the reader / writer device 20 side can obtain information indicating the type of key required to access the bank transaction file A in the IC card 10. Therefore, it is not necessary for the application program to remember information about such a key.

The key reference information passed to the application program as described above can be used in various formats. For example, as shown in FIG.
The type of key required to execute each command may be displayed on a display screen connected to the reader / writer device 20. With such a display, the operator can immediately recognize which key is required for executing a predetermined command. Alternatively, each time a specific command is input, the type of key required for that command may be displayed on the display. For example, when a read command is input, as shown in FIG.
Information indicating what key is required to execute this read command can be displayed. The operator may input necessary keys based on this display. When it is confirmed that an “authentication key” for confirming whether or not the reader / writer device 20 is correct is used, the authentication key prepared in the reader / writer device 20 is automatically replaced. It is also possible to perform processing for sending the information to the IC card 10 side. As described above, if the key reference information on the selected file is obtained on the reader / writer device 20 side, it can be used in various forms.

Although the present invention has been described based on the illustrated embodiment, the present invention is not limited to this embodiment, but can be implemented in various other modes. For example, the configuration of the key reference information shown in FIG. 3 is an example, and the key reference information may be prepared in any other format. In the embodiment shown in FIG. 4, one instruction corresponds to each of the four levels 1 to 4. However, a plurality of instructions may correspond to one level. Although the above-described embodiment is an example in which the present invention is applied to an IC card, the present invention is widely applicable to other information recording media.

[0019]

As described above, according to the information recording medium using the key according to the present invention, when an instruction to select a specific file is given from the outside, it is necessary to perform collation to access the selected file. Since the key reference information indicating the type of a certain key is output to the outside, the handling of a plurality of keys can be further simplified.

[Brief description of the drawings]

FIG. 1 shows a general IC card 10 connected to a reader / writer 2
It is a block diagram showing the state connected to 0.

FIG. 2 is a diagram showing an example of a file configuration in an EEPROM 15 shown in FIG.

FIG. 3 is a diagram showing an example of key reference information prepared in a directory a shown in FIG. 2;

FIG. 4 is a diagram showing a correspondence between four levels constituting each key reference information shown in FIG. 3 and each instruction;

FIG. 5 is a diagram showing an example of a use mode of key reference information output from the IC card 10 to the reader / writer device 20 in FIG.

FIG. 6 is a diagram showing another example of a use mode of the key reference information output from the IC card 10 to the reader / writer device 20 in FIG.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 ... IC card 11 ... I / O device 12 ... CPU 13 ... RAM 14 ... ROM 15 ... EEPROM 20 ... Reader / writer device A, B ... File a, b ... Directory

────────────────────────────────────────────────── ─── Continuation of the front page (56) References JP-A-4-171554 (JP, A) JP-A-4-205082 (JP, A) JP-A-62-200442 (JP, A) 16830 (JP, B2) (58) Field surveyed (Int. Cl. ⁷ , DB name) G06K 17/00-19/077 G06F 12/14 320

Claims (2)

(57) [Claims] 1. A data recording medium for recording data in units of files, a first recording unit for recording the file, access to the first recording unit recorded file
Key reference information that indicates the type of key that must be verified
A second recording unit for recording information and an instruction to select a specific file from outside
Key reference information for the selected file
Read from the second recording unit, and read the read key reference information.
An information recording medium using a key , comprising: means for outputting to the outside . 2. The information recording medium according to claim 1, wherein the key reference information for one file is a file.
Different for each instruction executed after the
Key reference information indicating the type of key is recorded in the second recording unit.
An information recording medium using a key, wherein