JP3692882B2 - IC card expiration date confirmation method, application execution method, and storage medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention stores an IC card expiration date confirmation method, an IC card expiration date confirmation program storage medium, an application storage method, an application storage program storage medium, an application storage / execution method, and an application storage / execution program In particular, when a card issuer / service provider wants to impose time restrictions on the use or functions of applications for applications stored on IC cards, IC card expiration date confirmation method in IC card system, storage medium storing IC card expiration date confirmation program, application storage method, and storage storing application storage program when application expiration date is checked Body and a storage medium storing an application storing and executing method and application storage and execution program.
[0002]
[Prior art]
In the conventional IC card system, most IC cards do not provide a method for setting an expiration date for an application, and at present, the application can be used until the IC card is suspended.
[0003]
Also, in an IC card that can set an expiration date for an application, the current time is obtained from a local device such as an IC card terminal, and compared with the expiration date set for the application, Checking is done.
[0004]
In addition, there is no expiration date other than the expiration date for both the IC card and the application, and its functions are fully usable / impossible after the expiration date, and flexible ICs such as step-by-step expiration dates. Card / application operation is not performed.
[0005]
[Problems to be solved by the invention]
For this reason, in the prior art, it is possible to easily extend the expiration date of the application illegally by changing the time of the device. Therefore, the application provider provides an application with an expiration date, and after the expiration date. Even if you want to ban the use of other applications, its operation is not guaranteed.
[0006]
Further, in the conventional technology, when the expiration date of the IC card comes, the card becomes unusable, and the expiration date cannot be set for each application.
[0007]
The present invention has been made in view of the above points, and prevents fraud with respect to an expiration date. A method for checking an expiration date in reliability and a function corresponding to the expiration date are individually provided in an IC card / application. IC card expiry date confirmation method, storage medium storing an IC card expiry date confirmation program, application storage method, storage medium storing an application storage program An object of the present invention is to provide an application storage / execution method and a storage medium storing an application storage / execution program.
[0008]
[Means for Solving the Problems]
FIG. 1 is a diagram for explaining the principle of the present invention.
[0009]
The present invention confirms the expiration date of the application in an IC card system that includes an IC card, a server, and an IC card terminal that allows the IC card and the server to communicate with each other and can communicate with each other. In the IC card expiry date confirmation method for
When storing an application on an IC card,
The expiration date information of the application stored in the IC card is stored in the IC card (step 1)
Connect the IC card and server online (Step 2)
The condition information for executing the application including the current time is transmitted from the server to the IC card (step 3).
In the application stored in the IC card or the control means of the IC card, the expiration date of each application in the card is checked based on the current time (step 4),
Based on the result of the expiration date check, the expired application of the IC card is stopped or the function is limited (step 5).
[0010]
The present invention (Claim 1) is an expiration date confirmation method in an IC card that stores one or more applications and has a card manager.
The IC card is connected to the server, and the IC card receives the current time and the encrypted time obtained by encrypting the current time from the server,
The card manager compares the decryption time obtained by decrypting the encryption time with the current time and passes the current time to the application when they match.
The application is compared with the current time and the expiration date set in the application and stored in the IC card,
If the expiration date is found in the comparison, the application is stopped or the function is restricted in the IC card.
[0013]
The present invention (claims) 2 ) In an IC card that stores one or more applications and has a card manager, a server Connect to The Stored in IC card The In an application execution method for executing an application,
The IC card is
Of the IC card Realizable by the card manager The expiration date for each card function is kept in memory,
Said server Receive the current time and application execution command from
By referring to the memory based on the received current time, the card function with a valid period is extracted,
Held in memory Realized by the application By referring to the application deadline information that represents the expiration date for each application function, the application function whose deadline is valid is extracted based on the received current time,
Based on the correspondence relationship with the card function that each application function depends on, which is held in the memory, an application function that can be executed within the range of the card function with the valid period is selected from the application functions with the valid period. Identify,
The received application execution command is executed within the range of the application function in which the specified deadline is valid.
[0014]
The present invention (claims) 3 ) Stores one or more applications and has a card manager Connect to the IC card and send the application execution command of the application stored in the IC card server An application execution method in
Said server But,
IC card Realizable by the card manager Holds card expiration information that represents the expiration date for each card function,
Connect to the IC card, receive the identification information of the IC card,
By referring to the card expiration information based on the current time, the card function whose expiration date is valid is extracted,
Realized by the application By referring to the application deadline information that represents the expiration date for each application function, the application function whose deadline is valid is extracted based on the current time,
Based on the correspondence with the card function on which each application function depends, an application function that can be executed within the range of the card function with the valid period is identified from the application functions with the valid period,
An application execution command is generated within the range of the application function for which the specified time limit is valid, and the generated application execution command is transmitted to the IC card that has accepted the connection.
[0025]
As described above, in the present invention, the current time is not acquired from the terminal as in the prior art, and when the IC card is online connected to the server, the current time is acquired from the server. Comparison is made with the expiration date, and for an expired application, the application is stopped to prevent fraud.
[0026]
Thereby, since the target for acquiring the current time is the server, the operation of the current time in the terminal is invalidated, and it becomes possible to acquire a reliable current time.
[0027]
Furthermore, by signing or stirring the current time received from the server with a key, it is possible to take measures against impersonation and tampering, and to acquire the current time more safely.
[0028]
In addition, by making it possible to set a plurality of time limits for IC cards and applications, it becomes possible for card issuers and service providers to flexibly issue cards and provide applications.
[0029]
Furthermore, by storing only necessary functions when storing an application, it is possible to efficiently use the memory of the IC card.
[0030]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 2 shows the system configuration of the present invention. The system shown in the figure includes a server 100 and an IC card 200.
[0031]
The IC card 200 includes a nonvolatile memory that can store an application, a CPU that executes the application, and a card manager CM that manages applications in the IC card. Although not shown, the IC card 200 and the server 100 are connected via an IC card terminal to enable communication. In the IC card system according to the present invention, it is assumed that an expiration date can be set for each application stored in the memory of the IC card 200.
[0032]
In the above configuration, when the IC card 200 is online connected to the server 100, the server 100 transmits the current time and the like to the IC card 200, and compares the expiration date with the current time inside the IC card 200. If it is before the time, the application is stopped. This prevents fraud.
[0033]
In addition, as a method of setting a plurality of expiration dates for the IC card 200, one or more expiration dates including the expiration date of the IC card 200 and a function of the IC card that can be used in a period delimited by the expiration date. The description is stored in the memory when the card is issued, and for each application, if necessary, a description of the application functions that can be used in one or more time limits including the expiration date and the period delimited by the time limit is stored in the memory. And refer to the information and the current time when the application is executed to perform appropriate application operation according to the description.
[0034]
Alternatively, when the service providing server holds or makes available the time limit information of the IC card 200 and the time limit information of the application, the server 100 references and checks them, and the server 100 transmits an appropriate execution command. By doing so, perform appropriate application operations according to the description.
[0035]
When the application is stored, the service providing server 100 or the IC card 200 checks the functions available in the IC card 200 after the current time, and stores only the functions of the application corresponding to those functions.
[0036]
【Example】
Embodiments of the present invention will be described below with reference to the drawings.
[0037]
Below, each Example is described based on the structure shown in FIG.
[0038]
In FIG. 2, the IC card has a card manager (CM) 110 and applications AP1, AP2, AP3, AP4 stored in a memory. It is assumed that expiration dates UT1 and UT2 are set for AP1 and AP2, respectively, and that AP2 has already passed the expiration date.
[0039]
The application identifiers of AP1 and AP2 are APid1 and APid2. However, the number of applications stored in the IC card 200 and the number of applications having an expiration date are not limited to the following embodiments, and are arbitrary.
[0040]
[First embodiment]
In the present embodiment, an example will be described in which the application checks the expiration date and the card manager stops.
[0041]
FIG. 3 is a diagram for explaining a case where the AP according to the first embodiment of this invention performs an expiration date check.
[0042]
When the IC card 200 is connected online with the server 100 by activation of the AP 1, the server 100 transmits the current time Ts to the IC card 200.
[0043]
The card manager (CM) 210 of the IC card 200 receives the current time Ts and transfers it to the AP1 and AP2.
[0044]
AP1 returns OK because UT1 is greater than Ts, and AP2 returns code NG indicating expiration to the card manager (CM) 210 because UT2 is equal to or less than Ts. The card manager (CM) 210 issues a stop command to AP2 to stop AP2. After the stop, the execution of the application AP1 is continued.
[0045]
[Second Embodiment]
In the present embodiment, an example will be described in which an application checks and stops an expiration date.
[0046]
FIG. 4 is a diagram for explaining an expiration date check according to the second embodiment of this invention.
[0047]
When the IC card 200 is connected online with the server 100 by activation of the AP 3, the server 100 transmits the current time Ts to the IC card 200.
[0048]
The card manager (CM) 210 of the IC card 200 receives the current time Ts and transmits it to the AP1 and AP2. AP1 returns OK to the card manager (CM) 210 because UT1 is larger than Ts. Since UT2 is equal to or less than Ts, AP2 stops AP2 and returns a signal notifying that it has stopped to card manager (CM) 210. After the stop, execution of AP3 is continued.
[0049]
[Third embodiment]
In the present embodiment, an example in which the card manager (CM) 210 performs an expiration date check and stop will be described.
[0050]
FIG. 5 is a diagram for explaining an expiration date check according to the third embodiment of this invention.
[0051]
The card manager (CM) 210 has an application management table and registers the identification number APid1 and the expiration date UT1 of AP1 and the identification number APid2 and the expiration date UT2 of AP2 in association with each other.
[0052]
When the IC card 200 is connected online with the server 100 by the activation of the AP 2, the server 100 transmits the current time Ts to the IC card 200.
[0053]
The card manager (CM) 210 of the IC card 200 receives the current time Ts, and obtains the expiration dates UT1 and UT2 of AP1 and AP2 from the application management table.
[0054]
The card manager (CM) 210 compares Ts and UT1, and does nothing because UT1 is larger than Ts. The card manager (CM) 210 compares Ts and UT2, and since UT2 is equal to or less than Ts, it issues a stop command to AP2 and stops AP2.
[0055]
At this time, AP2 which is the application that is activated first is stopped, and thus AP2 activation is canceled.
[0056]
[Fourth embodiment]
In this embodiment, an example will be described in which the server 100 specifies a check target application and the application checks the expiration date.
[0057]
FIG. 6 is a diagram for explaining an expiration date check according to the fourth embodiment of this invention.
[0058]
When the IC card 200 is connected online with the server 100 by the activation of AP1, the server 100 transmits to the IC card 200 the current time Ts and the check target application ID CK_APid.
[0059]
Here, when CK_APid is APid1, the card manager (CM) 210 of the IC card 200 receives the current time Ts and APid1, and transmits the current time Ts only to AP1.
[0060]
AP1 returns OK because UT1 is greater than Ts.
[0061]
Since AP2 is not checked, it has expired but is not stopped. Thereafter, the execution of the application AP1 is continued.
[0062]
[Fifth embodiment]
In this embodiment, an example will be described in which the server 100 specifies a check target application and the card manager (CM) 210 checks the expiration date.
[0063]
FIG. 7 is a diagram for explaining an expiration date check according to the fifth embodiment of this invention.
[0064]
The card manager (CM) 210 has an application management table, and registers the AP1 identification number APid1 and the expiration date UT1, and the AP2 identification number APid2 and the expiration date UT2 in association with each other.
[0065]
When the IC card is connected online with the server 100 by the activation of AP2, the server 100 transmits the current time Ts and the application ID CK_APid to be checked to the IC card 200.
[0066]
Here, when CK_APid is APid2, the card manager (CM) 210 of the IC card 200 receives the current time Ts and APid2, and obtains the expiration date UT2 of AP2 from the application management table.
[0067]
The card manager (CM) 210 compares Ts and UT2, and since UT2 is equal to or less than Ts, it issues a stop command to AP2 and stops AP2.
[0068]
At this time, AP2 which is the application that is activated first is stopped, and thus AP2 activation is canceled.
[0069]
[Sixth embodiment]
In the present embodiment, an example in which the server 100 agitates the current time with a common key and transmits it to the IC card 200 will be described.
[0070]
FIG. 8 is a diagram for explaining the operation during transmission of the current time according to the sixth embodiment of the present invention.
[0071]
The server 100 and the IC card 200 have a common key.
[0072]
When the IC card 200 is connected to the server 100 online by the activation of the AP 4, the server 100 transmits to the IC card 200 the current time Ts and Sig_Ts obtained by stirring the current time Ts and the common key Sk with MD5 or the like.
[0073]
The card manager (CM) 210 of the IC card 200 receives the current time Ts and Sig_Ts, decodes the agitated signal Sig_Ts, and obtains Tsd and Skd. The card manager (CM) 210 compares Sk and Skd, confirms the signature of the server 100, and compares Tsd and Ts to confirm that no falsification has been performed, and then determines Ts as AP1 and AP2. Send to.
[0074]
AP1 returns OK to the card manager (CM) 210 because UT1 is larger than Ts. Further, since UT2 is equal to or lower than Ts, AP2 stops AP2 and returns a signal notifying that it has stopped to card manager (CM) 210.
[0075]
After the stop, the execution of the application AP4 is continued.
[0076]
[Seventh embodiment]
In the present embodiment, an example will be described in which the server 100 transmits the current time signed with a secret key.
[0077]
FIG. 9 is a diagram for explaining the operation when the current time is transmitted according to the seventh embodiment of the present invention.
[0078]
The server 100 has a secret key Pr, and the IC card 200 has a corresponding public key Pu.
[0079]
When the IC card 200 is connected online with the server 100 by the activation of AP3, the server 100 transmits to the IC card 200 the current time Ts and Sig_Ts signed at the current time Ts with the secret key Pr.
[0080]
The card manager (CM) 210 current time Ts and Sig_Ts of the IC card 200 are received, and Sig_Ts is verified using the public key Pu to obtain Tsd. The card manager (CM) 210 compares Tsd and Ts and confirms that no falsification has been performed, and then transmits Ts to AP1 and AP2.
[0081]
AP1 returns OK to the card manager (CM) 210 because UT1 is larger than Ts. Since AP2 is equal to or less than Ts, AP2 is stopped and a signal notifying that the AP2 has been stopped is returned to the card manager (CM) 210.
[0082]
After the stop, the execution of the application AP3 is continued.
[0083]
[Eighth embodiment]
In the present embodiment, an example in which a part of the function is limited without stopping the expired application will be described.
[0084]
In the first to seventh embodiments, instead of the application or the card manager (CM) 210 stopping the application, a part of the function is limited.
[0085]
[Ninth Embodiment]
In this embodiment, application storage will be described.
[0086]
FIG. 10 shows a configuration of an application storage system that performs an expiration date check in the IC card according to the ninth embodiment of the present invention.
[0087]
In this embodiment, the IC card 200 communicates with the service providing server 100 via the IC card terminal 300. The memory 203 of the IC card 100 stores information regarding the expiration date of the card and the functions that can be used / impossible before the expiration date.
[0088]
In this embodiment, two expiration dates are set as a card expiration date (hereinafter referred to as CT1) and a card grace period (hereinafter referred to as CT2). At this time, there is a magnitude relationship of CT0 <CT1 <CT2.
[0089]
In the IC card 100, among the possible functions A, B, C, D, and E, the functions A, B, and C are valid during the period from CT0 to CT1 (hereinafter referred to as the card valid period), and CT1 and subsequent CT2 It is assumed that the functions A and D are valid during the period up to this time (hereinafter referred to as a card grace period), there is no valid function after CT2, and the card is suspended.
[0090]
An example of the card expiration date information in this embodiment is shown in FIG. FIG. 12 shows the temporal relationship between each time limit and the function.
[0091]
To store an application, first, the IC card sends application identification information and the like to the server 100 to make an application storage request. The server 100 transmits the current time Ts, but transmits information Sig_Ts created using information signed with the private key of the service provider of the server 100 to the IC card 200 in order to prevent falsification and impersonation. Sig_ts is verified with the public key of the service provider in the IC card 200 (or information Sig_Ts obtained by mixing Ts with the key is transmitted and decrypted in the IC card 200).
[0092]
After verifying the validity of Ts by such a method, Ts is compared with the expiration date of the card stored in the memory 203 in the card function determination device to determine which period Ts belongs to. The
[0093]
In this embodiment, Ts belongs to the card validity period. The card function determination device 202 acquires the card valid period to which Ts belongs and the functions that can be used in the period thereafter, that is, A, B, C, D from the card expiration information, and the function identification information is obtained from the server 100. Notify
[0094]
The server 100 extracts a part having a function corresponding to the functions A, B, C, and D of the IC card 200 from the application using the application configuration device 102 (a part having a function corresponding to the function E of the IC card) Delete) and configure and send application, application storage information, etc.
[0095]
The IC card 200 receives an application, application storage information, and the like from the server 100 and stores the application.
[0096]
[Tenth embodiment]
In this embodiment, application storage will be described.
[0097]
FIG. 13 shows the configuration of an application storage system that performs an expiration date check in the server according to the tenth embodiment of the present invention.
[0098]
In this embodiment, the IC card 200 communicates with the service providing server 300 via the IC card terminal 300.
[0099]
Further, the card time limit information and the temporal relationship between each time limit and the function are the same as those in the ninth embodiment, and are shown in FIGS. The card expiration information shown in FIG. 12 is also held by the service providing server 100.
[0100]
To store an application, first, the IC card 200 transmits card identification information, application identification information, and the like to the server 100 to make an application storage request. Based on the card identification information, the card function determination device 104 extracts the expiration date information of the card, compares the current time Ts with the expiration date of the card, and determines to which period Ts belongs. In this embodiment, Ts belongs to the card validity period. The card function determination device 104 acquires the card valid period to which Ts belongs and the functions that can be used in the subsequent period, that is, A, B, C, and D, from the card expiration information, and sets the function identification information to the application configuration Notify the device 102. The application configuration apparatus 102 extracts a part having a function corresponding to the functions A, B, C, and D of the IC card 200 from the application (deleting a part having a function corresponding to the function E of the IC card), Configure and send application and application storage information.
[0101]
The IC card 200 receives an application and application storage information from the server 100 and stores the application.
[0102]
[Eleventh embodiment]
In this embodiment, execution of an application will be described.
[0103]
FIG. 14 shows a configuration of an application execution system that performs an expiration date check in the IC card according to the eleventh embodiment of the present invention.
[0104]
In this embodiment, the IC card 200 communicates with the service providing server 100 via the IC card terminal 300 as in the ninth embodiment. Further, it is assumed that the card expiration information shown in FIG. It is assumed that the applications AP1 and AP2 are already stored in the IC card 200 during the card expiration date.
[0105]
Further, since the application AP2 has a time limit, when the application AP2 is stored, information on the time limit of the application AP2 and functions that can be used / unavailable by the time limit are stored in the memory of the IC card. In the present embodiment, two deadlines are set as the deadline for the application AP2, namely, the AP2 validity period (hereinafter referred to as AT1) and the AP2 grace period (hereinafter referred to as AT2). Then, at the time of comparison, there is a magnitude relationship of AT0 <AT1 <AT2. Among the possible functions a, c, d in the application, the functions a, c, d are valid during the period from AT0 to AT1 (hereinafter referred to as AP2 valid period), and the period from AT1 to AT2 ( In the following description, it is assumed that the functions a and c are valid during the AP2 grace period), and there is no valid function after AT2, and the application AP2 is suspended.
[0106]
In the application function information, which IC card function each application function depends on is described using the function identification information of the IC card 200. It is assumed that the functions a, c, and d of the application are functions that can be used when the functions A, C, and D of the card are possible. An example of application deadline information in the present embodiment is shown in FIG. FIG. 16 shows the temporal relationship between each time limit and function.
[0107]
When the IC card 200 is connected online with the server 100 to execute the application AP2, the server 100 transmits an application execution command, the current time Ts, and the like to the IC card 200. At this time, at least Ts is not transmitted as it is, and information Sig_Ts created using information signed with the secret key of the service provider of the server 100 is transmitted to the IC card 200 in order to prevent falsification and impersonation. Sig_Ts is verified with the public key of the service provider in the IC card 200 (or information Sig_Ts obtained by mixing Ts with the key is transmitted and decrypted in the IC card 200).
[0108]
After verifying the validity by such a method, the execution command is passed to the AP execution determination device 206, and Ts is passed to the card function determination device 202 and the application function determination device 205.
[0109]
The card function determination device 202 compares Ts with the expiration date of the card stored in the memory 203, and determines to which period Ts belongs. In this embodiment, Ts belongs to the card grace period. The card function determination device 202 acquires functions that can be made during the card grace period to which Ts belongs, that is, A and D from the card expiration information, and passes the function identification information to the application function determination device 205.
[0110]
The application function determination device 205 compares Ts with the application time limit information and determines to which period Ts belongs. In this embodiment, Ts belongs to the AP2 effective period. The application function determination device 205 acquires whether the application is valid during the AP2 valid period to which Ts belongs, that is, whether a, c, d are obtained from the application deadline information and the IC card function on which the function depends can be executed. To identify currently active application features. Since a depends on A, c depends on C, and d depends on D, and only the functions A and D are valid, the functions executable by the application are a and d. This information is sent to the AP execution determination device 206.
[0111]
The AP execution determination device 206 executes the application AP2 when the application can be executed with only possible functions in accordance with the application execution instruction Ex.
[0112]
[Twelfth embodiment]
In this embodiment, execution of an application will be described.
[0113]
FIG. 17 shows the configuration of an application execution system that performs an expiration date check in the server according to the twelfth embodiment of the present invention.
[0114]
In this embodiment, the IC card 200 communicates with the service providing server 100 via the IC card terminal 300. Further, the card valid information, the application time limit information, and the time relationship between each time limit and the function are the same as those in the above-mentioned eleventh embodiment, and are shown in FIGS. The card term information shown in FIG. 11 is also held by the service provider. The application deadline information shown in FIG. 11 is held by the service providing server 100, not the IC card.
[0115]
When the IC card 200 is connected online with the server 100 in order to execute the application AP2, the server 100 passes the current time Ts to the card function determination device 104 and the application function determination device 106.
[0116]
Based on the card identification information, the card function determination device 104 extracts the expiration date information of the card, compares Ts with the expiration date of the card stored in the memory 203, and determines to which period Ts belongs. . In this embodiment, Ts belongs to the card grace period. The card function determination device 104 acquires the functions that can be made during the card grace period to which Ts belongs, that is, A and D from the card expiration information, and passes the function identification information to the application function determination device 106.
[0117]
The application function determination device 106 compares Ts and application time limit information, and determines to which period Ts belongs. In this embodiment, it is assumed that Ts belongs to the AP2 valid period. The application function determination device 106 obtains the functions that the application can perform in the AP2 valid period to which Ts belongs, that is, a, c, d from the application time limit information, and whether the IC card function on which the function depends can be executed. To identify currently active application features. Since a depends on A, c depends on C, and d depends on D, and only the functions A and D are valid, the application execution instruction generation device 107 executes the execution instruction only with the functions that are currently possible. Is transmitted to the IC card 200.
[0118]
In the AP execution device 207, the IC card 200 executes the application AP2 in accordance with the received execution command.
[0119]
Moreover, although the said Example was demonstrated based on FIGS. 2-17, when the said server and the operation | movement performed with an IC card are constructed | assembled as a program and this invention is implemented, it is utilized as a server. The present invention can be easily realized by installing in a disk device connected to a computer, a portable storage medium such as a floppy disk or CD-ROM, and a memory of an IC card.
[0120]
The present invention is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the claims.
[0121]
【The invention's effect】
As described above, according to the present invention, the following effects can be obtained.
[0122]
(1) By acquiring the current time from the server, the expiration date can be reliably checked, and the expired application can be stopped.
[0123]
(2) In an IC card having a plurality of applications, it is possible to collectively manage the expiration dates of the plurality of applications.
[0124]
(3) In an IC card having a plurality of applications, the expiration date can be checked by starting another application without checking the expiration date by checking the expiration date every time the server is connected to the server. it can.
[0125]
(4) By specifying an application by the server, it is possible to check the expiration date of each application individually.
[0126]
(5) Since a plurality of time limits can be set for the IC card and the application, the card issuer and the service provider can flexibly issue the card and provide the application.
[0127]
(6) Further, by storing only necessary functions when storing an application, the memory of the IC card can be used efficiently.
[0128]
(7) IC card and application deadline management can be performed on the service provider side or the IC card side.
[Brief description of the drawings]
FIG. 1 is a diagram for explaining the principle of the present invention.
FIG. 2 is a system configuration diagram of the present invention.
FIG. 3 is a diagram for explaining a case where an AP according to the first embodiment of the present invention performs an expiration date check.
FIG. 4 is a diagram for explaining an expiration date check according to the second embodiment of this invention.
FIG. 5 is a diagram for explaining an expiration date check according to a third embodiment of this invention.
FIG. 6 is a diagram for explaining an expiration date check according to a fourth embodiment of this invention.
FIG. 7 is a diagram for explaining an expiration date check according to a fifth embodiment of the present invention.
FIG. 8 is a diagram for explaining an operation when a current time is transmitted according to a sixth embodiment of the present invention.
FIG. 9 is a diagram for explaining an operation at the time of current time transmission according to a seventh embodiment of the present invention.
FIG. 10 is a configuration diagram of an application storage system that performs an expiration date check in an IC card according to a ninth embodiment of the present invention.
FIG. 11 is an example of card expiration information according to the ninth embodiment of this invention.
FIG. 12 is a diagram showing temporal relationships between functions and time limits in the ninth and tenth embodiments of the present invention.
FIG. 13 is a configuration diagram of an application storage system that performs an expiration date check in the server according to the tenth embodiment of the present invention.
FIG. 14 is a configuration diagram of an application execution system that performs an expiration date check in an IC card according to an eleventh embodiment of the present invention.
FIG. 15 is an example of application time limit information according to the eleventh embodiment of the present invention;
FIG. 16 is a diagram showing temporal relationships between functions and time limits in the eleventh and twelfth embodiments of the present invention.
FIG. 17 is a configuration diagram of an application execution system that performs an expiration date check in a server according to a twelfth embodiment of the present invention.
[Explanation of symbols]
100 servers
101 time
102 Application component device
103 Card expiration information
104 Card function judgment device
106 Application Function Judgment Device
107 Application Command Generation Device
200 IC card
201 Current time verification / decoding device
202 Card function judgment device
203 memory
204 Application storage device
205 Application Function Judgment Device
206 Application execution determination device
207 Application execution device
210 Card Manager (CM)

Claims (5)

An expiration date confirmation method for an IC card that stores one or more applications and has a card manager,
The IC card is connected to the server, and the IC card receives the current time and the encrypted time obtained by encrypting the current time from the server,
The card manager compares the decryption time obtained by decrypting the encryption time with the current time and passes the current time to the application when they match.
The application is compared with the current time and the expiration date set in the application and stored in the IC card,
When the expiration date is expired in the comparison, the IC card expiration date management method, wherein the application is stopped or the function is restricted in the IC card. In an IC card having a card manager to store one or more applications, an application execution method for executing the applications stored to connect to the server to the IC card,
The IC card is
The expiration date for each card function that can be realized by the card manager of the IC card is held in the memory,
Receiving the current time and the application execution command from the server ;
By referring to the memory based on the received current time, the card function with a valid period is extracted,
By referring to the application expiration date information that represents the expiration date for each application function that can be realized by the application held in the memory, the application function whose expiration date is valid is extracted based on the received current time,
Based on the correspondence relationship with the card function that each application function depends on, which is held in the memory, an application function that can be executed within the range of the card function with the valid period is selected from the application functions with the valid period. Identify,
The received application execution command is executed within a range of application functions for which the specified deadline is valid. An application execution method in a server for storing one or more applications , connecting to an IC card having a card manager , and transmitting an application execution instruction of the application stored in the IC card,
The server is
Holds card expiration information indicating the expiration date for each card function that can be realized by the card manager of the IC card,
Connect to the IC card, receive the identification information of the IC card,
By referring to the card expiration information based on the current time, the card function whose expiration date is valid is extracted,
By referring to the application deadline information that represents the expiration date for each application function that can be realized by the application, the application function whose deadline is valid is extracted based on the current time,
Based on the correspondence with the card function on which each application function depends, an application function that can be executed within the range of the card function with the valid period is identified from the application functions with the valid period,
An application execution method that generates an application execution command within a range of the application function for which the specified deadline is valid, and transmits the generated application execution command to an IC card that has accepted a connection.   A computer-readable storage medium storing a program for causing a computer to execute each procedure of the IC card expiration date confirmation method according to claim 1.   A computer-readable storage medium storing a program for causing a computer to execute each procedure of the application execution method according to claim 2.

Images