JP3636749B2 - Software design work support device for information recording media - Google Patents

Description

[0001]
[Industrial application fields]
The present invention relates to a software design work support device for an information recording medium, and more particularly to a device that supports file design work and verification work performed when a portable information recording medium such as an IC card is issued.
[0002]
[Prior art]
Portable information recording media represented by IC cards are attracting attention as new information recording media that can replace conventional magnetic cards. In particular, an IC card with a built-in CPU can be used in a state in which a high level of security is ensured, and is expected to be used in various fields. In general, an IC card has three types of memory such as RAM, ROM, and EEPROM, all of which are accessed by a built-in CPU. Data exchange to the IC card is performed by a reader / writer device. When a predetermined command is given to the IC card from the reader / writer device, this command is executed by the CPU in the IC card. For example, if it is a data write command, the data given from the reader / writer device to the IC card is written to the memory in the IC card. If it is a data read command, the data read from the memory in the IC card. Is transferred to the reader / writer device.
[0003]
In order to ensure security for data written in the IC card, a personal identification key is usually used. In other words, in order to access a specific file in the IC card, it is set in advance which key needs to be unlocked, and the password set in the IC card and the password entered from the outside. The design is such that a specific key is unlocked only when the code matches. Therefore, the IC card generally stores a key file for recording a personal identification code in addition to a data file for recording data according to the user's application. The file has a hierarchical structure.
[0004]
Therefore, when a new IC card is issued, what data file and key file are created in what hierarchical structure, how much capacity is allocated to each file, and a specific file is accessed. For this, a file design work is required to determine items such as which secret key should be collated. In addition, it is necessary to verify whether or not sufficient security is ensured for the designed IC card. Conventionally, such software design work has been carried out as manual desk work. In other words, an engineer who designs software designs the hierarchical structure of files to be created, capacity allocation, key verification conditions, etc. on paper, and also verifies whether sufficient security is ensured. I was going.
[0005]
[Problems to be solved by the invention]
However, such software design work as a manual desk work requires a great deal of labor and skill, and there has been a problem that a large workload is imposed on a skilled designer. In particular, the market for portable information recording media, including IC cards, will continue to grow, and demand for manual file creation and verification as manual desk work will increase. It is expected that the IC card issue processing that follows this will become difficult.
[0006]
SUMMARY OF THE INVENTION An object of the present invention is to provide a support device that supports software design work of an information recording medium and can reduce the burden on a design worker.
[0007]
[Means for Solving the Problems]
(1) In the first aspect of the present invention, information is recorded using a plurality of files in which a hierarchical structure is defined, and each file is accessed in a manner corresponding to this instruction by giving a predetermined instruction from the outside. Work to design software for information recording media that can be used and set security information indicating which key needs to be unlocked to enable file access in each mode A device for supporting
A display device for presenting various information to an operator;
Input means for inputting instructions from the operator;
Based on an instruction from the input means, for each file, a file content setting means for setting a file content including a file name, a file type, a hierarchical structure, a capacity, and security information;
File content storage means for storing the set file content;
Status storage means for storing a status indicating whether each key is unlocked or locked;
Status setting means for setting a status based on an instruction from the input means;
Based on an instruction from the input means, a file / instruction selection means indicating that a predetermined selection instruction should be executed for a predetermined selection file;
Whether the selected file can be accessed in a mode according to the selection command, security information about the selected file stored in the file content storage unit, status stored in the status storage unit, Determining whether to display the determination result on the display device,
Is provided.
[0008]
(2) According to a second aspect of the present invention, in the support device according to the first aspect described above,
In order to actually create the file set by the file content setting means in the information recording medium for testing, a command group instructing file creation based on the storage content in the file content storage means is generated, and this command group Is further provided with an actual file creation instructing unit having a function of giving the information to the test information recording medium.
[0009]
[Operation]
According to the support device of the present invention, file contents such as file name, file type, hierarchical structure, capacity, and security information are stored as data in the file content storage means for the file to be designed. And the verification work about the designed file content can be performed using the data stored in this file content storage means. That is, the verification operator can freely set the unlocked / locked state for each key by giving a predetermined instruction to the status setting means, and can also set a predetermined value for the file / command selecting means. By giving this instruction, it is possible to simulate whether or not a predetermined command can be executed on a predetermined file on the information recording medium. For example, when simulating a situation where a specific command is given to a specific file with a specific key unlocked, whether or not the given command can be executed according to the set security condition, It is obtained on the display device as a determination result of the availability determination means.
[0010]
Further, after the verification work is completed, a command group for creating a file as designed in the information recording medium can be automatically generated by the real file creation instruction means. If this instruction group is given to the test information recording medium, a file as designed can be created in the test information recording medium, and the test information recording medium can be used to perform a test in a state closer to an actual transaction form. It becomes possible.
[0011]
【Example】
Hereinafter, the present invention will be described based on embodiments shown in the drawings. Here, an embodiment in which the present invention is applied to an IC card will be described. First, a general IC card structure and an access procedure for the IC card using the reader / writer device will be briefly described.
[0012]
FIG. 1 is a block diagram showing a state in which a general IC card 10 is connected to a reader / writer device 20. The IC card 10 includes an I / O device 11 for connecting to the reader / writer device 20, a CPU 12, a RAM 13, a ROM 14, and an EEPROM 15, and the IC card 10 and the reader / writer device 20. Are connected by I / O lines. The I / O device 11 has a function of transmitting / receiving data to / from the reader / writer device 20. The CPU 12 receives a command given from the reader / writer device 20 via the I / O device 11 and executes it. Of the three types of memory built in the IC card 10, the RAM 13 is a volatile memory and is used as a work area for the CPU 12. The ROM 14 is a fixed memory that cannot be rewritten, and records basic program routines necessary for operating the CPU 12. The EEPROM 15 is a non-volatile memory that can be rewritten at any time, and stores data according to the user's application, a password code necessary for accessing this data, and the like. The object of the file design work in the present invention is a file to be stored in the EEPROM 15.
[0013]
In this embodiment, three types of files are stored in the EEPROM 15. In other words, it is possible to define a file having a hierarchical structure by accommodating a data file containing data according to the user's application, a key file containing a code necessary for accessing the file, and other files. There are three types of folder files. The folder file actually has only a function as a container for accommodating a data file, a key file, or another folder file, and is different from a general “file”. For convenience of explanation, it will be handled as a file in the same way as a data file and a key file. If another folder file is accommodated in the folder file, and another folder file is accommodated therein, a file having an arbitrary hierarchy can be defined.
[0014]
FIG. 2 is a block diagram showing an example of a plurality of file structures defined with such a hierarchy. Here, the master file MF, data files D1 to D3 and key files K1 and K2 accommodated in the master file MF belong to the top layer. Further, the folder file F1 and the data file D4 and the key file K3 accommodated therein belong to the second hierarchy, and the folder files F2 and F3 and these are accommodated in the third hierarchy. Data files D5 to D7 and key file K4 belong.
[0015]
Next, a general procedure for software design work of an IC card having such a file structure is shown in the flowchart of FIG. First, in step S1, file design work is performed. Here, for each file shown in FIG. 2, the file name, file type (data file, key file or folder file), hierarchical structure (where in the hierarchy shown in FIG. 2), capacity, The file contents such as security information (which key needs to be unlocked to access this file in a predetermined manner) are set.
[0016]
Next, the file verification work in step S2 is performed. This file verification operation is mainly an operation for checking whether the security of the file contents designed in step S1 is sufficient. The actual usage form of the IC card in the real world is very complicated, and it is necessary to set complicated security information according to it. Normally, security settings are made so that different key combinations are required for each individual file and for each access mode for that file. For example, to access the file D1 in the “read” mode, the keys K1 and K2 need to be unlocked. To access the file D1 in the “write” mode, the keys K2, K3 are required. It is necessary to make a setting such as unlocking. The file verification operation in step S2 is an operation for confirming whether sufficient security can be ensured by such setting.
[0017]
As a result of the file verification work in step S2, if it is recognized that the security is insufficient, the process returns to step S1 through step S3, and the file design work is performed again. On the other hand, if it is recognized that sufficient security is ensured, the command creation work of step S4 is executed through step S3, and further, the test work with the test IC card in step S5 is executed. As shown in the block diagram of FIG. 1, all external actions on the IC card 10 are performed by transmitting data in a predetermined command format from the reader / writer device 20. Therefore, in order to create a file as designed in the test IC card in step S1, it is necessary to transmit a command for creating such a file from the reader / writer device 20 to the IC card 10. The command creation work in step S4 is a work for creating this command. By giving the created command to the IC card 10, a file as designed is created in the test IC card 10, and the test work in step S <b> 5 is performed using this test IC card.
[0018]
Thus, if there is any problem as a result of the test using the actual IC card in step S5, the process returns to step S1 through step S6, and the file design work is performed again. On the other hand, if there is no problem as a result of the test, the process proceeds to step S7 through the actual card issuing stage through step S6. That is, an individual IC card is issued to each individual.
[0019]
Now, the support device according to the present invention is a device that supports the work from steps S1 to S4 in the work shown in FIG. Hereinafter, the configuration and operation of this support apparatus will be described in detail.
[0020]
FIG. 4 is a block diagram showing the basic configuration of the support apparatus according to the present invention. The basic components of this support device are a display device 30, a processing device 40, an input means 50, and an actual file creation instruction means 60. The processing device 40 includes a file content storage unit 41, an availability determination unit 42, a status storage unit 43, a file content setting unit 44, a file / command selection unit 45, and a status setting unit 46. Each of these components is actually constituted by a computer and its peripheral devices. In other words, the availability determination unit 42, the file content setting unit 44, the file / command selection unit 45, the status setting unit 46, and the actual file creation instruction unit 60 are all components realized by incorporating predetermined software into the computer. The file content storage means 41 and the status storage means 43 are components realized by the internal or external storage device of the computer. The display device 30 is a display connected to the computer, and the input means 50 is an input device such as a mouse or a keyboard connected to the computer. Note that the reader / writer device 70 and the test IC card 80 are not elements constituting the support device, but are illustrated for explaining the process of step S5 in the flowchart of FIG.
[0021]
Various information for the operator is presented on the display device 30, and various instructions from the operator are input from the input means 50. The file content setting unit 44 has a function of setting the file content of each file based on an instruction from the input unit 50, and the set file content is stored in the file content storage unit 41. In this embodiment, the file contents are constituted by the file name, file type, hierarchical structure, capacity, and security information. The status storage unit 43 stores a status indicating whether each key is unlocked or locked, and the status setting unit 46 sets the status based on an instruction from the input unit 50. Further, the file / instruction selection means 45 gives information specifying the predetermined selection file and the predetermined selection instruction to the availability determination means 42 based on an instruction from the input means 50. The permission determination means 42 determines whether or not the selected file can be accessed in a mode according to the selection command, security information about the selected file stored in the file content storage means 41, and status storage means 43. And a function of displaying the determination result on the display device 30. The real file creation instructing unit 60 has a function of generating a command group instructing file creation based on the file contents stored in the file content storage unit 41 and giving the command group to the reader / writer device 70. When this command group is given from the reader / writer device 70 to the test IC card 80, a file as designed in the test IC card 80 is generated.
[0022]
Next, a procedure for performing the software design work shown in FIG. 3 using this support apparatus will be described. Here, the following explanation will be given by taking as an example the case of designing a file having the hierarchical structure shown in FIG.
[0023]
First, the file design work in step S1 is performed by inputting the file name, file type, hierarchical structure, capacity, and security information from the input means 50 for each file to be designed. For example, as shown in FIG. 2, if 14 files are created under the uppermost master file, information as shown in the table of FIG. 5 is input for each of the 14 files. That's fine. In this example, the file type is indicated by symbols D (data file), K (key file), and F (folder file), the hierarchical structure is indicated by the file name of the parent file for each file, and the capacity is 4 It is indicated by a digit capacity value (specific numerical values are omitted).
[0024]
On the other hand, although the security information is not shown in the table of FIG. 5, for example, information shown in FIG. In this example, in order to access this file in each mode for each of the four modes of reading, appending, updating, and issuing, for each individual file, any of the eight types of keys 1 to 8 is used. Is set as security information. In FIG. 6, black squares indicate keys that need to be unlocked, and white squares indicate keys that do not need to be unlocked. For example, when executing an instruction to access this file in a read mode Indicates that it is necessary to unlock the three keys 1, 4, and 5.
[0025]
Any access mode may be defined for the file, but in this embodiment, the “read mode” for reading information from the file and the “additional information” for writing information to the file are added. A mode, an “update mode” that rewrites information on a file, and an “issue mode” that performs a process of issuing or discarding a lower-level file to a file. It is defined and security information is set separately for each. As described above, when four types of access modes are defined and eight keys are used, the security information to be set for each file becomes considerably complicated as shown in FIG. However, since this support device is configured to display a table as shown in FIG. 6 on the screen of the display device 30 and accept input from the operator, the setting work of this security information is very simple. become.
[0026]
Thus, when the file design work in step S1 is completed, information as shown in FIG. 5 (for security information, information shown in FIG. 6 for each file) is stored in the file content storage means 41. . Therefore, the file verification work in step S2 can be efficiently performed using the information in the file content storage means 41. In other words, the worker performs an input for setting the status from the input unit 50 to the status setting unit 46. This status indicates the unlocked / locked state of the keys 1 to 8 and is stored in the status storage means 43. For example, if the operator inputs “unlock keys 1, 4, 5”, keys 1, 4, 5 are unlocked in status storage means 43 as shown in FIG. The locked state is recorded. In this embodiment, the status setting means 46 has a function of displaying the status table shown in FIG. 7 on the display device 30, and by moving and clicking the mouse cursor in each square of the table. The state in the square (black: unlocked / white: locked) can be reversed. Therefore, the operation of setting the statuses of the eight keys 1 to 8 is very simple.
[0027]
The file verification operation is performed by trying whether a predetermined command can be executed on a predetermined file in a predetermined status. For example, as shown in FIG. 7, in the status where the three keys 1, 4, 5 are unlocked, the operator uses the input means 50 to send the “read command for the file D 1 to the file / command selecting means 45. It is assumed that an input indicating “execution” is performed. Then, the file / instruction selection means 45 gives the information that the selection file = “D1” and the selection instruction = “read instruction” to the availability determination means 42. The availability determination unit 42 determines whether or not the combination of the given selection file and selection command can be executed based on the data in the file content storage unit 41 and the status in the status storage unit 43. For example, if the information shown in FIG. 6 is recorded as security information about the selected file D1 in the file content storage means 41, and the information shown in FIG. 7 is recorded as the status in the status storage means 43, Since the condition for executing the selected instruction is satisfied (the information in FIG. 6 indicates that the unlocking of the keys 1, 4 and 5 is necessary for executing the instruction in the reading mode, and the status in FIG. In this case, the keys 1, 4, 5 are unlocked), and the availability determining means 42 displays “executable” on the display device 30. On the other hand, when the selected instruction is an instruction in another access mode, a display indicating “unexecutable” is performed.
[0028]
In IC cards used for real-world transactions, very complicated security settings are made for each file. Therefore, the file verification operation in step S2 is very important for confirming whether or not sufficient security is ensured for all files.
[0029]
As a result of the file verification work in step S2, if it is recognized that the security is insufficient, the process returns to step S1 through step S3, and the file design work is performed again. On the other hand, if it is recognized that sufficient security is ensured, the command creation work of step S4 is executed through step S3. That is, the actual file creation instruction unit 60 creates a predetermined command group based on the information in the file content storage unit 41. By giving this command group to the test IC card 80 via the reader / writer device 70, a file as designed is created in the test IC card 80. Thus, the test work in step S5 is performed using the test IC card 80. If there is no problem in this test, the actual card issuing process is performed in step S7 after step S6, which is the same as the conventional procedure.
[0030]
As described above, if the support device according to the present invention is used, among the operations shown in FIG. 3, the operations from step S1 to S4 can be performed very efficiently. In particular, the file verification operation in step S2 is performed with a predetermined file in a state where an arbitrary status is set by clicking with a mouse on a corresponding portion of the status table as shown in FIG. 7 displayed on the screen of the display device 30. If an instruction for selecting an instruction is input, whether or not the selected instruction can be executed for the selected file is immediately displayed on the screen of the display device 30, so that a smooth operation is possible.
[0031]
In short, if the support apparatus according to the present invention is used, the file design work in step S1 and the file verification work in step S2 can be performed as a computer simulation, in a form close to the test work by the test IC card in step S5. Test becomes possible. In addition, since the test operation in step S5 is a test using the actual test IC card 80, an operation for unlocking a predetermined key is sent from the reader / writer device 70 to the IC card side. However, in the file verification operation in step S2, as described above, each key is clicked by a simple operation of clicking a predetermined portion of the status table displayed on the display screen as shown in FIG. It is possible to freely set the unlocking / locking state.
[0032]
As mentioned above, although this invention was demonstrated based on the Example shown in figure, this invention is not limited only to this Example, It can implement in a various aspect other than this. In particular, the block diagram shown in FIG. 4 shows the concept of the present invention separately for each block for convenience of explanation, and the actual support device is not necessarily in hardware or software. It is not necessary to have a configuration divided into such blocks.
[0033]
【The invention's effect】
As described above, by using the support device according to the present invention, it is possible to support the software design work of the information recording medium and reduce the burden on the design worker.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a state in which a general IC card 10 is connected to a reader / writer device 20. FIG.
FIG. 2 is a diagram illustrating an example of a file definition having a hierarchy.
FIG. 3 is a flowchart showing a general procedure for IC card software design work;
FIG. 4 is a block diagram showing a basic configuration of a support device according to the present invention.
FIG. 5 is a table showing an example of file contents set by file content setting means 44 in the support apparatus shown in FIG. 4;
6 is a diagram showing an example of setting contents in a security information column in the table of FIG. 5. FIG.
7 is a diagram showing an example of a status set by status setting means 46 in the support apparatus shown in FIG.
[Explanation of symbols]
10 ... IC card
11 ... I / O device
12 ... CPU
13 ... RAM
14 ... ROM
15 ... EEPROM
20: Reader / writer device
30 ... Display device
40 ... Processing device
41. File content storage means
42 ... Availability determination means
43 ... Status storage means
44 ... File content setting means
45 ... File / command selection means
46 ... Status setting means
50 ... Input means
60 ... Real file creation instruction means
70. Reader / writer device
80 ... IC card for testing
MF ... Master file
D1 to D7 ... Data file
K1-K4 ... key file
F1-F3 ... Folder file

Claims (2)

Information is recorded using a plurality of files in which a hierarchical structure is defined, and each file can be accessed in a manner corresponding to this command by giving a predetermined command from the outside, and file access in each mode An information recording medium for setting and using security information indicating which key needs to be unlocked in order to enable the software to support the work of designing the software,
A display device for presenting various information to an operator;
Input means for inputting instructions from the operator;
Based on an instruction from the input means, for each file, a file content setting means for setting a file content including a file name, a file type, a hierarchical structure, a capacity, and security information;
File content storage means for storing the set file content;
Status storage means for storing a status indicating whether each key is unlocked or locked;
Status setting means for setting the status based on an instruction from the input means;
Based on an instruction from the input means, a file / instruction selection means indicating that a predetermined selection instruction should be executed for a predetermined selection file;
Whether or not the selected file can be accessed in a mode corresponding to the selection command is stored in the security information about the selected file stored in the file content storage unit and in the status storage unit. Determining whether or not to display the determination result on the display device;
A software design work support apparatus for an information recording medium, comprising: The support apparatus according to claim 1,
In order to actually create the file set by the file content setting means in the information recording medium for testing, a command group instructing file creation based on the storage content in the file content storage means is generated, and this command group A software design work support apparatus for an information recording medium, further comprising: an actual file creation instruction means having a function of providing the information to the test information recording medium.

Images