JP3718565B2 - IC card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention is, for files stored in the memory, to an IC card capable of searching whether owns the information for the specified pattern and the same pattern.
[0002]
[Prior art]
FIG. 5 is a block diagram showing a configuration of a conventional IC card and a connection relationship between the IC card and a reader / writer device.
A conventional IC card 10 normally includes an I / O interface 11, a CPU 12, a ROM 13, a RAM 14, and an EEPROM 15. The I / O interface 11 is an input / output circuit for transmitting and receiving data, and the CPU 12 communicates with the reader / writer device 20 via the I / O interface 11. A program to be executed by the CPU 12 is stored in the ROM 13, and the CPU 12 controls the IC card 10 based on this program. The RAM 14 is a memory used as a work area when the CPU 12 performs such overall control. On the other hand, the EEPROM 15 is a memory for storing original data to be recorded on the IC card 10.
[0003]
FIG. 6 is a block diagram showing a hierarchical structure in the EEPROM 15 shown in FIG. The EEPROM of this embodiment is composed of three layers. The three hierarchies are a first layer MF (Master File), a second layer DF (Dedicated File), and a third layer EF (Elementary File). MF is a file of the entire data memory. The MF is a file for storing data common to each application (service). For example, information such as the name, address, and telephone number of the owner of the IC card 10 is recorded. The DF is a dedicated file, and the DF is set for each application. The EF is a basic file, and there are two types: IEF that stores data that is interpreted and executed when the CPU manages and controls the IC card, and WEF (working basic file) that stores data used by the application.
[0004]
All accesses to the memories 13, 14, and 15 in the IC card 10 are performed via the CPU 12, and these memories cannot be directly accessed from the outside. That is, when a predetermined “command” is given from the reader / writer device 20 to the CPU 12, the CPU 12 interprets and executes this “command” and returns the result as a “response” to the reader / writer device 20. Become.
[0005]
When the reader / writer device 20 wants to know the contents of a specific WEF, the IC card 10 must be notified of the file ID of the WEF, and the IC card 10 must be selected. Furthermore, when the reader / writer device 20 wants to know only specific information, not the entire information of the selected file, the reader / writer device 20 must notify the IC card 10 of the record ID or offset address in which the information is written. I must. When the offset address or the like is notified, the IC card 10 reads the information written in the offset address and transmits it to the reader / writer device 20.
[0006]
On the other hand, if the reader / writer device 20 does not know the record ID or offset address in which the requested information is written, the entire contents of the WEF are received from the IC card 10 and the content of the file is confirmed on the reader / writer device 20 side. Had to do. Furthermore, if the file ID of the WEF that owns the necessary information is not known, the contents of all the WEFs in the DF must be received from the IC card 10 and the contents must be examined.
[0007]
[Problems to be solved by the invention]
However, with the above-described conventional IC card, the communication speed with the reader / writer device is relatively slow, around 9600 bps, and enormous time is required to transmit all the information of one basic file to the reader / writer device. It becomes. For this reason, when there is no information such as an offset address in which a WEF file ID or required information is written in the reader / writer device, there is a problem that the information cannot be actually obtained from the IC card.
[0008]
Recently, there is an increasing demand for the common use of one IC card in a plurality of institutions. As an example, one IC card may be used as a medical record for recording treatment histories at a plurality of medical institutions. In such a case, for reasons such as safe management of the medical chart, each medical institution usually provides and uses a WEF separately. On the other hand, before giving a drug to a patient, a doctor needs to check whether another medical institution has been given anything that causes harmful side effects in relation to the drug. Therefore, it is desirable for doctors to be able to refer to WEF managed by other medical institutions, but if all WEF contents can be referred to unconditionally, there is a problem that patient privacy is impaired. .
[0009]
SUMMARY OF THE INVENTION An object of the present invention is to provide an IC card that can quickly check whether there is specific information in a file without compromising security.
[0012]
[Means for Solving the Problems]
In order to solve the above-mentioned problem, the invention of claim 1 is a retrieval means for retrieving information having the same pattern as an externally specified pattern from the contents of the file in an IC card storing a file in a memory. And a transmission means for transmitting the address where the information is stored to the outside when the search means finds the information, and the search means records the number of times the information is found. And a number specifying means for storing a value specified by an instruction from the outside, wherein the transmission means reaches a value stored in the number specifying means when the value recorded in the number recording means In this case, the address at which the information found last is stored is transmitted to the outside.
[0013]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments according to the present invention will be described in more detail with reference to the drawings.
(First embodiment)
First, a first embodiment of an IC card according to the present invention will be described. This embodiment is the same as the conventional IC card in the hardware configuration, but searches for data having the same pattern as the specified pattern in the transparent WEF specified by the current EF or the short EF-ID. Thus, it differs from a conventional IC card in that it has a function of transmitting the retrieved data position as a response. The above function is exhibited by receiving a SEARCH command from the reader / writer device 20 and processing it.
[0014]
FIG. 1 is a diagram illustrating an APDU of a SEARCH command.
The first to fourth bytes of the SEARCH command are a command class (CLA), a type code (INS), and parameters (P1, P2) in order. The parameters P1 and P2 specify the offset address (hereinafter referred to as “search start address”) at the head of the area to be searched in the search target WEF. That is, when the eighth bit (b8) of the parameter P1 is 0, P1 and P2 specify the address where the search is to be started with the remaining 15 bits. On the other hand, when b8 of the parameter P1 is 1, the upper 5 bits of P1 specify the short EF-ID, and the 8 bits of P2 specify the search start address.
[0015]
The data field subsequent to the sixth bit is information on a pattern to be searched. The data field is composed of a 2-byte search end file address, a 2-byte search interval byte number, a 1-byte search number, and search data (search pattern) having an arbitrary number of bytes. The meaning of each piece of information constituting these data fields will be described in detail in the description relating to FIG.
The fifth bit LC is data field length (number of bytes) information.
[0016]
FIG. 2 is a flowchart showing the operation of the IC card 10 when receiving and processing a SEARCH command.
If there is a SEARCH command from the reader / writer device 20, the CPU 12 performs a pre-execution check (S501), and if there is an error, sends a message to that effect (S503). The pre-execution check is performed as to whether the parameters P1 and P2 of the command are appropriate, whether the contents of the LC and the data field are consistent, or the like. For example, when the value of LC is less than 6 or contradicts the size of the data field, the SEARCH command does not include appropriate information, and an error message to that effect is transmitted.
[0017]
Next, a read file is designated (S504). When b8 of P1 is 1, a file search subroutine is specified using a file search subroutine with a short EF-ID. To the short EF-ID search subroutine, the file entry address (CRT-DF) of the current DF, the short EF-ID of the EF to be searched, and the file type (WEF in this embodiment) are passed as arguments.
[0018]
The CPU 12 searches for the designated file (S505). Hereinafter, the specific method will be described with reference to FIG. FIG. 3 is a diagram showing a file storage image in the EEPROM 15. In the figure, CRT-DP is a pointer indicating the address of the file entry of the stored directory address at the top of all stored directory addresses. In the EEPROM 15, a system information area and an MF directory are stored in order from the largest address, and directories such as WEF are stored without a gap. The short EF-ID search subroutine refers to the file directory in order from CRT-DF to CRT-DP, and is a WEF with CRT-DF as the parent DF, and the lower 5 bits of the file ID match the short EF-ID. Search for things.
[0019]
As a result of the above search, if the search error or the searched file is a record format WEF (S506 in FIG. 2), the corresponding message is transmitted (S507, S521), and the command is terminated. Other than the above, the address of the searched file is set to the current EF address of the RAM 14 (S508).
[0020]
Next, the read file is checked (S510). If there is an error, a message to that effect (S511) is transmitted (S521).
Check items include CRC check of the data area when the current EF address of the RAM 14 is 0000h, the search start address or the search end address exceeds the write-aware pointer, and the search start address exceeds the search end address. It is an error.
[0021]
“When the current EF address of the RAM 14 is 0000h” means that the current EF address is not selected. This case is processed as an error when the short EF-ID is not specified.
“When the search start address or search end address exceeds the right-ahead pointer” is handled as an error because the wrong range is specified as the search range beyond the area where the data is actually stored Because. In addition, even when “the search start address exceeds the search end address”, the content of the command is inconsistent, so error processing is performed.
The reason why the error message is transmitted in the case of “data area CRC check error” is to warn the reader / writer device that the data stored in the WEF originally has an abnormality.
[0022]
In S512, the search start position of the search file is acquired by referring to the parameters P1 and P2 of the SEARCH command. When b8 of P1 is 1, the 8 bits of P2 are recognized as an offset address from the beginning of the file, and are set as a reading start position when performing a search. When b8 of P1 is 0, (the lower 7 bits of P1) + (a total of 15 bits of P2) is recognized as an offset address from the beginning of the file, and is set as a reading start position. Here, it is confirmed again whether or not the search start address exceeds the write append pointer. If it exceeds (S514), a message to that effect is transmitted (S515, S521).
Next, the search end address is checked (S516). It is confirmed that the search end address does not exceed the write append pointer (or file end). If it exceeds, the write append pointer (or file end) is set to the search end address (S517).
[0023]
Next, the CPU 12 searches for data (S518). The search key (pattern) is search data after the 6th byte from the top of the Data Field, and the search key length (search pattern length) is LC-5. When (search address) + (search key length) exceeds the search end address, the search is ended, a message to that effect is transmitted, and the command is ended. The comparison method is performed by a complete match of the search key length (search pattern length). If matching data is found for the search number (S519), the 2-byte offset address in the data file and a normal message are transmitted (S521), and the process ends. If they do not match, the address is advanced by the interval size (the number of search interval bytes specified in the data field of the command), and the next search is performed (S518).
[0024]
(Modification of the first embodiment)
The processing content of the SEARCH command described in the first embodiment can be modified in various ways. FIG. 4 is a flowchart showing a modification of the processing content of the SEARCH command. The processing content of the SEARCH command in this modification is different from that of the first embodiment in that there is processing (S522, S523) for newly confirming the number of search pattern discovery between S519 and S521.
In this modification, when the same data as the search pattern specified in the search of S518 and S519 is found, 1 is added to the found number N stored at a predetermined address on the RAM 14 (S522). Next, it is determined whether or not the found number N is greater than or equal to the search number specified in the command data field (S523). If the number N of discoveries is equal to or greater than the search number, the process of S521 is performed. That is, the address of the data found at the number of times specified by the search number is transmitted to the reader / writer device 20. In other cases, the process returns to S518 and the search is continued.
[0025]
As described above, when the SEARCH command is executed, the IC card according to the first embodiment of the present invention and the modification thereof searches for information of the same pattern as the pattern specified in the selected WEF, and as a result, When information of the same pattern is found, the offset address of the information is transmitted as a response to the outside. Therefore, in this embodiment, only specific information can be read from the WEF whose format is unknown. That is, if the offset address of the area where the specific information is stored is first obtained using the SEARCH command, only the specific information is read from the WEF by using a READ BINARY command or the like based on the offset address. be able to. In other words, in the present embodiment, when specific information is acquired from a WEF whose format is unknown, the communication time can be suppressed to the minimum necessary by avoiding the need to read out all of its contents to the outside, and promptly It is possible to acquire the specific information.
[0026]
Further, the present embodiment increases the utility value of an IC card when one IC card is used for multiple purposes in a plurality of systems. Here, as an example, consider a case where one IC card can be used simultaneously in two financial systems. In this case, from the viewpoint of protecting the cardholder's privacy, access by the B financial system should not be allowed for the WEF recording the transaction details of the A financial system. On the other hand, as for the B financial system, when lending to the cardholder, it is necessary to confirm in advance whether or not the cardholder has a borrowing from another financial institution and to ensure the safety of the transaction. .
[0027]
In such a case, if each of the financial systems A and B allows each WEF to execute the SEARCH command using “borrowed money” as a search pattern, each financial system will receive a cardholder from another financial institution. It is possible to check whether or not money is borrowed. In addition, since the SEARCH command returns only the offset address of the area where the search pattern matches as a response, other information of the WEF is known to other financial institutions, and there is no possibility that privacy will be violated. As described above, this embodiment can improve the safety of transactions using an IC card without impairing the characteristic of confidentiality of the IC card.
[0028]
In the present embodiment, it is possible to specify an area to be searched by the SEARCH command. Therefore, when the area to be searched is clear, it is possible to avoid unnecessary use of searching for an unnecessary area and to reduce the search time by specifying it.
Further, in the SEARCH command, the number of search interval bytes can be specified. Therefore, even if the search area is the same, the search speed can be appropriately adjusted according to the content of the search pattern or the importance of the search item.
Furthermore, a search number can be specified in the SEARCH command. Therefore, it is possible to obtain the offset address of information having the same pattern as the search pattern appearing at an arbitrary number of times in the WEF.
[0029]
(Other embodiments)
The present invention is not limited to the above embodiment. The above-described embodiment is an exemplification, and the present invention has substantially the same configuration as the technical idea described in the claims of the present invention, and any device that exhibits the same function and effect is the present invention. It is included in the technical scope of the invention.
[0030]
For example, in the above-described embodiment, a case where a transparent structure WEF is searched has been described. However, this does not mean that the search target is limited. The target of the SEARCH command may be, for example, a record structure WEF. In this case, instead of specifying the offset address where the search should be started by the command parameters P1 and P2, the record number is specified only by the parameter P2.
[0031]
【The invention's effect】
As described above in detail, according to the present invention, it is possible to confirm whether or not specific information is stored for a file whose contents are unknown. Then, it is possible to search for information having the same pattern as the search pattern appearing any number of times in the file.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an APDU of a SEARCH command.
FIG. 2 is a flowchart showing the operation of the IC card 10 when receiving and processing a SEARCH command.
FIG. 3 is a diagram showing a file storage image in the EEPROM 15;
FIG. 4 is a flowchart showing a modification of the processing content of the SEARCH command.
FIG. 5 is a block diagram showing a configuration of a conventional IC card and a connection relationship between the IC card and a reader / writer device.
6 is a block diagram showing a hierarchical structure in the EEPROM 15. FIG.
[Explanation of symbols]
11 I / O interface 12 CPU
13 ROM
14 RAM
15 EEPROM
20 Reader / writer device

Claims (1)

For IC cards that store files in memory,
Search means for searching for information having the same pattern as the externally designated pattern from the contents of the file;
Transmission means for transmitting the address where the information is stored to the outside when the search means finds the information;
The search means includes
Number-of-times recording means for recording the number of times the information was found;
A number of times designation means for storing a value designated by an instruction from the outside, and
When the value recorded in the number recording means reaches the value stored in the number designation means, the transmission means transmits the address where the information found last is stored to the outside. IC card characterized by this.

Images