JP3709702B2 - IC card, IC card connection device, IC card system, and program execution control method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card, an IC card connection device, an IC card system, and an IC card. Program in of Execution An IC card, an IC card connection device, an IC card system, and an IC card capable of ensuring the security of an IC card with a built-in rewritable memory, in particular program of Execution It relates to a control method.
[0002]
[Prior art]
In an IC card that needs to ensure high security, an OS (Operating System) used is fixed according to standards and specifications, and is stored in the IC card in the form of a mask ROM.
There is also known an IC card configured to store an OS program in an EEPROM in order to more easily correspond to a custom product.
[0003]
[Problems to be solved by the invention]
However, in the configuration in which the program is stored in the mask ROM, the mask ROM must be newly manufactured each time the program is changed, and thus there is a problem that it takes time and cost to manufacture the mask ROM chip.
[0004]
On the other hand, in an IC card of a type that stores a program in a rewritable EEPROM or the like, the program can be easily rewritten and can be flexibly adapted to program change, but it is difficult to ensure high security because it is easy to rewrite. There was a problem of becoming.
[0005]
SUMMARY OF THE INVENTION An object of the present invention is to provide an IC card, an IC card connection device, an IC card system, and an IC card that can easily cope with program changes at low cost and can ensure high security. An object is to provide a method for controlling an IC card.
[0006]
[Means for Solving the Problems]
In order to solve the above-described problem, the configuration according to claim 1 includes a program storage unit that stores program data in an updatable manner, and an original authentication data that is generated and stored based on the program data. Authentication data generating and storing means, and authentication data by performing a predetermined operation on the original authentication data for the program data corresponding to the program instructed to be executed from the outside among the program data stored in the program storing means Authentication data generating means for generating, a determination means for determining whether or not the reference authentication data inputted from the outside matches the authentication data, and based on the determination, the reference authentication data and the authentication data And an execution prohibiting means for prohibiting the execution of the program when there is a mismatch. It is set to.
[0007]
The configuration described in claim 2 is the configuration described in claim 1, wherein the original authentication data generation means generates the original authentication data by compressing the program data.
The configuration according to claim 3 is based on the configuration according to claim 1 or 2, wherein the authentication data generating means generates and outputs random number data, and the random number data and the original authentication data. And encryption means for generating authentication data by performing predetermined encryption processing set in advance.
[0008]
The configuration according to claim 4 is the configuration according to claim 3, wherein the encryption means corresponds to key data storage means capable of storing a plurality of key data necessary for encryption, and key instruction data input from the outside. And encryption processing means for performing the encryption processing using the key data.
[0009]
The configuration according to claim 5 corresponds to the configuration according to any one of claims 1 to 4, wherein the program data is handled at a stage where the program data inputted from the outside is stored in the program storage means. An executable program setting means for setting as non-executable program data that does not permit execution of the program to be executed is provided.
[0010]
The configuration according to claim 6 is the configuration according to claim 5, wherein the executable program setting means can execute the non-executable program data when the original authentication data is generated for the non-executable program data. It is characterized by being set as program data.
[0011]
The configuration according to claim 7 is an IC card connection device connected to the IC card according to any one of claims 1 to 6, wherein the program data stored in the program storage unit includes: The program data corresponding to the program to be executed is specified, a program execution instruction means for instructing the IC card to execute the program data, and the original authentication data corresponding to the specified program is previously used as original reference authentication data. Original reference authentication data storing means for storing; reference authentication data generating means for generating the reference authentication data by performing the same operation as the predetermined operation in the authentication data generating means for the original reference authentication data; Reference authentication data output means for outputting the reference authentication data to the determination means;
It is characterized by having.
[0012]
The configuration according to claim 8 is an IC card connection device connected to the IC card according to claim 4, and corresponds to a program to be executed among the program data stored in the program storage means. Program execution instruction means for specifying the program data to be executed and instructing the IC card to execute the program data, and original reference authentication data storage means for storing the original authentication data corresponding to the specified program in advance as original reference authentication data A key data storage unit that stores a plurality of the key data, a key instruction data output unit that outputs the key instruction data to the encryption unit, key data corresponding to the key instruction data, and the IC card The input random number data and the original Standard A reference authentication data generating unit that performs the same processing as the encryption processing unit based on authentication data and generates the reference authentication data; and a reference authentication data output unit that outputs the reference authentication data to the determination unit; It is characterized by having.
[0013]
According to a ninth aspect of the present invention, the IC card according to any one of the first to sixth aspects and the IC card connecting device according to the seventh aspect are provided. According to a tenth aspect of the present invention, there is provided an IC card according to the fourth aspect and a host device according to the eighth aspect.
[0014]
The configuration according to claim 11 is a storage means for storing program data in an updatable manner in advance. And control means for executing a program based on the program data stored in the storage means IC card with Program in of Execution In the control method, The control means is An original authentication data generating step for generating original authentication data unique to the program data based on the stored program data; The control means is An authentication data generating step for generating authentication data by performing a predetermined operation on the original authentication data; The control means is A determination step of determining whether or not the input reference authentication data matches the generated authentication data; The control means is Based on the determination, when the reference authentication data matches the authentication data, an execution permission step of permitting execution of a program corresponding to the program data is provided.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Next, preferred embodiments of the present invention will be described with reference to the drawings.
[1] Outline configuration of IC card system
FIG. 2 shows a schematic block diagram of the IC card system of FIG. 1.
The IC card system 1 includes an IC card 2 and an IC card connection device 3 that rewrites program data for the IC card 2 and performs various processes based on output data of the IC card 2.
[0016]
The IC card connection device 3 includes an IC card reader / writer 3A that reads / writes data in the IC card 2, an IC card connection device body 3B that performs various processes, and a display device 3C that displays various information. , And is configured.
[0017]
[2] Outline configuration of IC card
FIG. 2 shows a schematic block diagram of the IC card.
The IC card 2 includes a CPU 11 that controls the entire IC card 2, a coprocessor 12 that can perform a modular multiplication operation that is necessary for encryption processing, a ROM 13 that stores a boot program and various fixed data, It is configured to include an EEPROM 14 that can electrically rewrite data and store program data and the like in an updatable manner, and a RAM 15 that temporarily stores various data.
[0018]
Further, the IC card 2 has a high potential side power supply terminal VCC and a low potential side power supply terminal GND for supplying power from outside, a reset terminal RST for inputting a reset signal from the IC card connection device 3 side, and an IC card connection. An I / O terminal I / O for transmitting / receiving data to / from the apparatus 3 and a clock terminal CLK to which a system clock signal is input from the IC card connection apparatus 3 are provided.
[0019]
[3] File structure in EEPROM
Here, the file structure in the EEPROM 14 will be described with reference to FIGS.
The EEPROM 14 is roughly configured to include a system management area 21 and a data storage area 22.
[0020]
[3.1] Configuration of system management area
The system management area 21 includes a program storage file area 25 in which a program storage file 31 corresponding to various information about the storage area and storage state of the actual program data is stored, and an encryption key used for encryption processing. A key storage file area 26 in which a key storage file 32 corresponding to various information is stored, and a seed file area 27 in which a seed file 33 corresponding to information for generating random numbers is stored. Yes.
[0021]
[3.1.1] Program storage file format
FIG. 4A shows the format of the program storage file.
The program storage file 31 includes file number data 35 corresponding to the file number assigned to the program data, storage head address data 36 representing the head address where the program data corresponding to the file number data 35 is actually stored, A final address data 37 representing the final address where program data corresponding to the file number data 35 is actually stored, and a compressed value storage representing compressed data obtained by applying a predetermined compression process to the program data The address data 38 and an execution flag 39 indicating whether or not the program data corresponding to the file number data 35 is executable program data are configured.
[0022]
[3.1.2] Key storage file format
FIG. 4B shows the format of the key storage file.
The key storage file 32 includes file number data 41 corresponding to the file number assigned to the encryption key data, and storage start address data 42 representing the start address where the encryption key data corresponding to the file number data 41 is actually stored. And storage final address data 43 representing the final address where the encryption key data corresponding to the file number data 41 is actually stored, and key type data 44 representing the type of the encryption key data. Yes.
[0023]
[3.2] Configuration of data storage area
The data storage area 22 stores a program file area 46 in which a program file 45 corresponding to the program storage file 31 is stored, and encryption key data in which encryption key data 47 corresponding to the key storage file 32 is stored. And an encryption key data area 48.
The program file 45 includes program data 49 corresponding to an actual program and compressed value data 50 obtained by subjecting the program data 49 to predetermined compression processing.
[0024]
[4] Operation explanation
Next, operations from the program data storage process of the IC card 2 to the execution process based on the program data stored in the IC card will be described with reference to FIGS.
[0025]
FIG. 5 shows a main process flowchart of the IC card 2.
First, the CPU 11 of the IC card 2 performs reception processing for receiving data such as command data from the IC card connection device 3 via the I / O port (step S1).
[0026]
Next, the CPU 11 determines whether or not the data received in the reception process includes continuous data (step S2).
If the determination at step S2 includes continuous data, the CPU 11 proceeds to the process at step S9 described later.
[0027]
If it is determined in step S2 that continuous data is not included, the CPU 11 determines whether the received data is execution command data (step S3).
Here, execution command data designates the file number of program data already stored in the EEPROM 14 and already in an executable state, and executes a program corresponding to the program data. It is an instruction for.
[0028]
If it is determined in step S3 that the received data is execution command data, execution command processing described later is performed (step S4), response processing (step S5), and transmission processing to the IC card connection device side are performed ( Step S6), the process ends.
[0029]
If the received data is not execution command data in the determination in step S3, the CPU 11 determines whether the received data is executable command data (step S7). Here, the executable command data is an instruction for specifying the file number of the program data that has already been stored in the EEPROM 14 but is not yet executable, and makes the program data executable. It is.
[0030]
If it is determined in step S7 that the received data is executable command data, executable command processing described later is performed (step S8), response processing (step S5), and transmission processing to the IC card connection device side are performed. hand
(Step S6), the process ends.
[0031]
If the received data is not executable command data in the determination in step S7, the CPU 11 determines whether the received data is stored command data (step S9). Here, the stored command data is an instruction for storing new program data in the EEPROM 14.
[0032]
If it is determined in step S9 that the received data is stored row command data, a storage command process (to be described later) is performed (step S10), a response process (step S5) and a transmission process to the IC card connection device side are performed. (Step S6), the process ends.
[0033]
If the received data is not stored command data in the determination in step S9, the CPU 11 determines whether the received data is random command data for requesting random number generation (step S11). Here, the random number command data is a command for generating a random number and outputting it to the IC card connection device 3.
[0034]
If it is determined in step S11 that the received data is random number command data, random number generation command processing described later is performed (step S12), response processing (step S5), and transmission processing to the IC card connection device side are performed.
(Step S6), the process ends.
[0035]
If it is determined in step S11 that the received data is not random command data, it is determined that the corresponding command data does not exist, and an error process such as error notification is performed, and a response process (step S5). And the transmission process with respect to the IC card connection apparatus side is performed (step S6), and the process is terminated.
[0036]
[4.1] Stored command processing
Next, the storage command process will be described with reference to FIGS.
Prior to the description of the storage command process, the data format of the storage command data will be described with reference to FIG. In FIG. 6A, the numbers in parentheses are the number of bytes of the corresponding data.
[0037]
The storage command data 51 includes 1 [byte] instruction data 52 indicating that the data is the storage command data 51 and a 2 [byte] file number for specifying the program data to be stored. Data 53, length data 54 representing the length of program data to be stored, and 1 to 65535 [bytes] of program data 49 which is continuous data and is actually stored are configured. .
[0038]
FIG. 7 shows a processing flowchart of the storage command processing.
The CPU 11 determines whether or not the data received from the IC card connection device 3 is continuous data, that is, whether or not the data is program data 49 (step S21).
If it is determined in step S21 that the received data is not continuous data (step S; No), the program file area corresponding to the file number corresponding to the file number data 53 is the head portion of the stored command data 51. It is determined whether or not the program data 49 can be stored in 46, that is, whether or not there is an area corresponding to the file number and the program data 49 is not already stored in the area (step S22). ).
[0039]
If it is determined in step S22 that there is no area corresponding to the file number, or if the program data 49 is already stored in the area (step S22; No), the corresponding error processing is performed. The process ends.
If it is determined in step S22 that an area corresponding to the file number exists and the program data 49 is not stored in the area, a storage head address is set (step S23).
[0040]
Then, the CPU 11 sets a storage address for storing the program data 49 received from the IC card connection device 3 (step S24), and stores the program data 49 as a part of the program file 45 in the set storage address ( In step S25), the execution flag 39 of the corresponding program storage file 31 is turned off (= “0”, for example) (step S26).
[0041]
If it is determined in step S21 that the data received from the IC card connection device 3 is continuous data (step S21; Yes), the received data is data constituting the program data 49. 49 is set (step S24), the data constituting the program data 49 is stored at the set storage address (step S25), and the execution flag of the corresponding program storage file 31 is stored. 39 is turned off (step S26).
[0042]
When data constituting all the program data 49 is received, the file number data 35 of the corresponding program storage file 31 and the storage start address indicating the start address of the program file area 46 where the program data 49 is actually stored are stored. Response processing for updating the data 36 and the final address data 37 representing the final address in the program file area 46 where the program data 49 is actually stored is performed (step S5), and the program data 49 is received and stored. A transmission process for notifying the IC card connecting device 3 of the fact is performed (step S6).
[0043]
As described above, the program data 49 transmitted from the IC card connection device 3 is stored in the program file area 46 of the EEPROM 14.
However, at this time, the execution flag 39 of the program storage file 31 corresponding to the stored program data 49 is off, so that the program is a non-executable program that cannot be executed.
[0044]
[4.2] Executable command processing
Next, executable command processing will be described with reference to FIGS.
Prior to the description of the executable command process, the data format of the executable command data will be described with reference to FIG. In FIG. 6B, the number of bytes of the corresponding data is in parentheses.
[0045]
Executable command data 56 is an executable state among 1 [byte] instruction data 57 indicating that the data is executable command data 56 and program data 49 stored in the program file area 46 of the EEPROM 14. 2 [bytes] file number data 58 for specifying the program data 49 to be set.
[0046]
FIG. 8 shows a flowchart of the executable command process.
First, the CPU 11 searches the program file 45 in the program file area 46 based on the program storage file 31 corresponding to the file number corresponding to the file number data 58 of the executable command data 56 received from the IC card connection device 3. To determine whether or not the program data 49 to be processed has already been stored in the program file area 46 corresponding to the executable command data 56 received from the IC card connection apparatus 3 (step). S31).
[0047]
If it is determined in step S31 that no program data 49 is stored in the program file area 46 corresponding to the file number, or if program data 49 for which executable command processing has already been completed is stored (step S31). No), since there is no processing target, the corresponding error processing is performed (step S37), and the processing is terminated.
[0048]
If it is determined in step S31 that the program data 49 to be processed is already stored in the program file area 46 corresponding to the file number, the compressed value data 50 that should be obtained by compressing the program data is stored. The compression start address in the program file area 46 is set (step S32).
[0049]
Next, program compression is performed for each address (step S33), and whether or not the address of the current compression target data is the final address of the program data 49, that is, the current compression target data is the final data of the program data 49. It is determined whether or not there is (step S34).
[0050]
If it is determined in step S34 that the current address of the compression target data is not the final address of the program data 49 (step S34; No), the process returns to step S33 to perform the compression process of the data at the next address. Transition.
[0051]
If it is determined in step S34 that the current address of the compression target data is the final address of the program data 49, the obtained compressed value data is stored, and the storage address of the compressed data is stored in the program storage file 31. The value storage address data 38 is set (step S35), and the execution flag 39 of the program storage file 31 is turned on (= “1”, for example).
[0052]
As a result, the program data 49 corresponding to the program storage file becomes executable program data, and can be executed if it is authenticated as legitimate program data in the program execution command processing described later.
[0053]
[4.3] Execution command processing
Next, execution command processing will be described with reference to FIGS.
Prior to the description of the execution command process, the data format of the execution command data and the random number generation command will be described with reference to FIGS. 6C and 6D. In FIG. 6C and FIG. 6D, the numbers in parentheses are the number of bytes of the corresponding data.
[0054]
As shown in FIG. 6D, the execution command data 62 is to be executed with 1 [byte] of instruction data 63 indicating that the data is execution command data 62 for executing the program data. A key including 2 [bytes] file number data 64 for specifying program data and encryption key information necessary for generating authentication data necessary for executing the program data 49 specified by the file number data 64 Key file number data 65 for specifying the storage file 32, length data indicating the length of reference authentication data 67, which will be described later, and reference authentication data 67 of 8 to 128 [bytes]. Yes.
[0055]
In this case, the length of the reference authentication data 67 is generally 64 [bytes] when DES is used as an encryption method and 1024 [bytes] when RAS is used.
As shown in FIG. 6C, the random number generation command data 59 includes instruction data 60 of 1 [byte] indicating that the data is random number generation command data 59 for generating a random number, and a random number as a seed. In order to be generated in software using the file 33, 2 [bytes] seed file number data 61 for specifying a seed file to be used is provided.
[0056]
FIG. 9 shows a process flowchart of the execution command process.
First, the IC card connection device 3 transmits random number generation command data 59 to the CPU 11 prior to transmission of the execution command data 62.
As a result, the CPU 11 reads the seed file 33 corresponding to the seed file number data 61 from the seed file area 27 of the EEPROM 14, generates a random number (step S12), and generates random number transmission data as a response process (step S5). Then, random number data is transmitted to the IC card connection device 3 (step S6).
[0057]
Next, the IC card connection device 3 transmits the execution command data 62 to the CPU 11.
Thereby, the CPU 11 refers to the program storage file 31 corresponding to the file number data of the received execution command data 62, and determines whether or not the execution flag 39 is turned on (step S41).
If the execution flag 39 is OFF in the determination in step S41 (step S41; No), the program data 49 corresponding to the file number data is in a non-executable state, and therefore corresponding error processing is performed (step S41). S49), the process ends.
[0058]
If the execution flag 39 is ON in the determination in step S41 (step S41; Yes), the program file area 46 in the EEPROM 14 is searched to determine whether the corresponding program file 45 exists (step S42). ).
[0059]
If it is determined in step S42 that the corresponding program file 45 does not exist (step S42; No), an error process such as notification to that effect is performed (step S49), and the process ends.
If it is determined in step S42 that the corresponding program file 45 exists (step S42; Yes), the stored compressed value data 50 is read with reference to the compressed value storage address data 38 of the program storage file 31 ( Step S43), by combining the generated random number data with the read compressed value data 50, the original authentication code data is generated (Step S44). As a combination method, a simple arithmetic operation, a logical operation such as an exclusive OR operation, or the like can be considered.
[0060]
As a result, even if the compressed value data 50 is the same, the original authentication code data is different, and it is difficult to obtain the compressed value data 50 even if the original authentication code data is analyzed.
Next, the CPU 11 searches the corresponding key storage file 32 based on the key file number data 65 of the execution command data 62, and determines whether or not the search has been completed (step S45).
[0061]
If it is determined in step S45 that the key storage file corresponding to the key file number data 65 cannot be searched (step S45; No), the encryption processing described later cannot be performed, and the corresponding error processing (step S39) is performed and the process is terminated.
[0062]
If it is determined in step S45 that the key storage file corresponding to the key file number data 65 can be searched (step S; Yes), based on the storage head address data 42, the storage final address data 43, and the key type data, The encryption key data 47 is read from the data area 48 below the encryption, and the original authentication code data is encrypted by the coprocessor 12 using the encryption key data 47 to generate the authentication code data (step S46).
[0063]
More specifically, when the RSA encryption algorithm is used, the original authentication code data (= compressed value data + random number) is obtained by the coprocessor 12 using the encryption key N and the encryption key e (d) included in the encryption key data 47. Authentication code data is obtained by performing a power-residue operation on (data).
[0064]
By the way, prior to the generation of the authentication code data on the IC card 2 side, the IC card connection device 3 obtains compressed value data (hereinafter referred to as reference compressed value data) obtained by compressing the program data 49 in advance. deep. This reference compressed value data is equal to the compressed value data 50 when the program data stored in the EEPROM 14 of the IC card 2 is regular program data that has not been tampered with.
[0065]
Then, the IC card connection device 3 generates original reference authentication code data by combining the random number data transmitted from the IC card 2 side. As a coupling method, the same method as that performed on the IC card 2 side is used.
Further, when using the RSA encryption algorithm, the IC card connection device 3 uses the encryption key N and the encryption key e (d) corresponding to the key file corresponding to the key file number data in the execution command data to be transmitted. Reference authentication code data is obtained by performing a power-residue operation on the reference authentication code data (= reference compression value data + random number data).
[0066]
The IC card connection device 3 transmits the reference authentication code data to the IC card 2 as the reference authentication data 67 of the execution command data 62.
As a result, the CPU 11 compares the reference authentication code data 67 included in the execution command data 62 with the generated authentication code data, and checks whether the reference authentication code data 67 matches the generated authentication code data. Is determined (step S47).
[0067]
If the reference authentication code data 67 and the generated authentication code data do not match in the determination in step S47, the CPU 11 is an unauthorized one in which the program data 49 stored in the EEPROM 14 is falsified. Since there is a possibility, the corresponding error processing is performed (step S49), the processing is terminated, and the program is not executed.
[0068]
If it is determined in step S47 that the reference authentication code data 67 matches the generated authentication code data, the program data 49 stored in the EEPROM 14 is authenticated as normal program data, and the program data Is executed (step S48), response processing such as generation of transmission data (step S5) and transmission of transmission data to the IC card connection device 3 (step S6) are performed, and the processing is terminated.
[0069]
[5] Modification of embodiment
In the above description, when the IC card connection device 3 transmits the reference authentication code data to the IC card, the execution command data includes the reference authentication code data, but the request is received from the IC card 2 side. It is also possible to transmit as another data when there is.
[0070]
As a compression method for generating original authentication code data (or original reference authentication code data), generally known one-way hash functions such as MD4, MD5, and SHA can be used.
Further, although encryption processing is performed as an arithmetic processing when generating authentication code data from original authentication code data (or reference authentication code data from original reference authentication code data), authentication code data (or reference authentication code is easily processed). Any arithmetic processing can be applied as long as it is processing that cannot generate (data).
[0071]
The encryption process is not limited to RSA, and other encryption processes such as DES and FEAL can be used.
Further, in the above description, the random number generation is performed by software, but it is also possible to use a random number generator configured by hardware such as a random number generation IC. In this case, it is not necessary to use the seed file described above.
[0072]
In the above description, the EEPROM is used as the memory for storing the program data. However, any storage device such as NVRAM that is nonvolatile and can easily update data may be used.
[0073]
[6] Effects of the embodiment
As described above, the original authentication data is generated by combining the compressed value data obtained by compressing the program data and the generated random number data, and then the original authentication data is encrypted and actually authenticated. Since the authentication data for performing the authentication is generated, it is not necessary to store the authentication data in the IC card, so that the authentication data does not leak outside.
[0074]
In addition, since encryption processing that requires complicated calculation is used to generate authentication code data, it is difficult to tamper with authentication code data, and therefore it is very difficult to illegally execute stored program data. Thus, it is possible to realize a program execution function with high security.
[0075]
On the other hand, if the regular program data is written, it is possible to easily write to the EEPROM so that it can be executed in a state where security is ensured. Can be done.
[0076]
【The invention's effect】
According to the present invention, the IC card generates authentication data for actual authentication by performing predetermined processing such as compression processing and encryption processing, calculation, etc. on the stored program data. Therefore, it is not necessary to store the authentication data in the IC card, and the authentication data does not leak to the outside, so that high security can be ensured.
[0077]
Further, since a predetermined calculation process that requires a complicated calculation is required to generate the authentication code data necessary for executing the program corresponding to the program data, it is difficult to tamper with the authentication code data. It becomes very difficult to illegally execute the stored program data, and a highly secure program execution function can be realized.
[0078]
Furthermore, since program storage means such as an EEPROM is used for storing program data so that the program data can be updated, it is possible to cope with program changes easily and at low cost. it can.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram of an IC card system according to an embodiment.
FIG. 2 is a schematic configuration diagram of an IC card.
FIG. 3 is an explanatory diagram of a data storage state in an EEPROM;
FIG. 4 is an explanatory diagram of data formats of a program storage file and a key storage file.
FIG. 5 is a flowchart of an outline process according to the embodiment.
FIG. 6 is an explanatory diagram of a data format of each command data.
FIG. 7 is a process flowchart of a storage command process.
FIG. 8 is a process flowchart of an executable command process.
FIG. 9 is a process flowchart of an execution command process.
[Explanation of symbols]
1 IC card system
2 IC card
3 IC card connection device
11 CPU
12 Coprocessor
13 ROM
14 EEPROM
15 RAM
21 System management area
22 Data storage area
25 Program storage file area
26 Key storage file area
27 file areas
31 Program storage file
32 Key storage file
33 types of files
35 File number data
36 Storage start address data
37 Last address data stored
38 Compressed value storage address data
39 execution flag
41 File number data
42 Store start address data
43 Last address data stored
44 Key type data
45 program files
46 Program file area
47 Encryption key data
48 Encryption key data area
49 Program data
50 Compressed value data
51 Stored command data
56 Executable command data
59 Random number generation command data
60 Execution command data

Claims (11)

Program storage means for storing program data in an updatable manner;
Original authentication data generation and storage means for generating and storing original authentication data unique to the program data based on the program data;
Authentication data generation means for generating authentication data by performing a predetermined operation on the original authentication data for the program data corresponding to the program instructed to be executed from the outside among the program data stored in the program storage means When,
Discriminating means for discriminating whether or not the reference authentication data inputted from the outside matches the authentication data;
Based on the determination, if the reference authentication data and the authentication data do not match, execution prohibiting means for prohibiting execution of the program,
An IC card characterized by comprising: The IC card according to claim 1, wherein
The original authentication data generating means generates the original authentication data by compressing the program data. In the IC card according to claim 1 or 2,
The authentication data generation means generates random number data and outputs random number generation means;
Encryption means for generating the authentication data by performing a predetermined encryption process set in advance based on the random number data and the original authentication data;
An IC card characterized by comprising: In the IC card according to claim 3,
The encryption means includes key data storage means capable of storing a plurality of key data necessary for encryption,
Encryption processing means for performing the encryption processing using the key data corresponding to the key instruction data input from the outside;
An IC card characterized by comprising: In the IC card according to any one of claims 1 to 4,
When the program data input from the outside is stored in the program storage means, the program storage means is provided with executable program setting means for setting the program data as non-executable program data that does not permit execution of the corresponding program. Characteristic IC card. In the IC card according to claim 5,
The executable card setting means sets the non-executable program data as executable program data when the original authentication data is generated for the non-executable program data. An IC card connection device connected to the IC card according to any one of claims 1 to 6,
Program execution instruction means for specifying the program data corresponding to the program to be executed out of the program data stored in the program storage means and instructing the IC card to execute the program data;
Original standard authentication data storage means for previously storing the original authentication data corresponding to the specified program as original standard authentication data;
Reference authentication data generating means for generating the reference authentication data by performing the same calculation as the predetermined calculation in the authentication data generating means for the original reference authentication data;
Reference authentication data output means for outputting the reference authentication data to the determination means;
An IC card connection device comprising: An IC card connection device connected to the IC card according to claim 4,
Program execution instruction means for specifying the program data corresponding to the program to be executed out of the program data stored in the program storage means and instructing the IC card to execute the program data;
Original standard authentication data storage means for previously storing the original authentication data corresponding to the specified program as original standard authentication data;
Key data storage means for storing a plurality of the key data;
Key instruction data output means for outputting the key instruction data to the encryption means;
Reference authentication for generating the reference authentication data by performing the same processing as the encryption processing means based on the key data corresponding to the key instruction data, the random number data input from the IC card, and the original reference authentication data Data generation means;
Reference authentication data output means for outputting the reference authentication data to the determination means;
An IC card connection device comprising: An IC card according to any one of claims 1 to 6;
An IC card connection device according to claim 7;
An IC card system comprising: An IC card according to claim 4;
The IC card connection device according to claim 8,
An IC card system comprising: In an execution control method for a program in an IC card , comprising storage means for preliminarily storing program data and control means for executing a program based on the program data stored in the storage means ,
An original authentication data generation step in which the control means generates original authentication data unique to the program data based on the stored program data;
An authentication data generating step in which the control means generates authentication data by performing a predetermined operation on the original authentication data;
A determining step for determining whether or not the input reference authentication data matches the generated authentication data;
Said control means, on the basis of the determination, if the reference authentication data and the authentication data match, the execution permission step of permitting execution of the program corresponding to the program data,
A program execution control method comprising:

Images