JP4549731B2 - Multi-application IC card with command code that is commonly used by applications - Google Patents

Description

  The present invention relates to an IC card in which a semiconductor integrated circuit (hereinafter referred to as an IC chip) is embedded in a credit card-sized plastic card, and more particularly to a multi-application type IC card capable of mounting a plurality of applications in a rewritable memory.

  An IC card is a card that embeds an IC chip in a credit card-sized plastic card and records data in the memory of the IC chip. In recent years, IC cards have been widely applied to cash cards, credit cards, electronic money, and the like.

  Conventionally, it has been the mainstream to install a single software, that is, an application in a read only memory (hereinafter referred to as ROM) for each IC card, so a single IC card has only a single function. IC card was necessary for each application. For this reason, the user must always have a plurality of IC cards, which is very inconvenient. In order to solve this problem, multi-application type IC cards capable of incorporating a plurality of applications into one IC card are now becoming mainstream.

  A multi-application IC card is an IC card in which a plurality of applications can be mounted in a rewritable memory. A multi-application operating system (hereinafter referred to as OS) that performs basic processing on a ROM provided in an IC chip. ), And one or more applications are mounted on an electrically erasable and rewritable ROM (Electrically Erasable Programmable Read Only Memory, hereinafter referred to as EEPROM), which is also included in the IC chip. .

  By mounting applications in rewritable memory, multiple applications used by users can be mounted on a single IC card, and applications can be added after IC card manufacture, unnecessary applications can be deleted, and It is also easy to expand application functions.

  However, in the above-mentioned multi-application type IC card, even if the command code used by the application is the same, it is necessary to mount all the application data in a rewritable memory. When mounted on a rewritable memory, a plurality of the same command codes are mounted on the rewritable memory, and there is a problem that the rewritable memory cannot be used efficiently.

In order to solve this problem, for example, in Patent Document 1, a rewritable memory is divided into an application code area for storing an application code and an application data area used by the application code, thereby managing the same process. In the case of an application that performs the above, an invention that efficiently uses a rewritable memory by sharing application code and individualizing only data is disclosed.
JP 2003-202111 A

  However, if a common command code that is commonly used by each application is implemented in a rewritable memory as an application, if the common command code is selected and executed alone, the application data may be destroyed or the application data may be altered. There was a fear.

  In view of the above-described problems, the present invention efficiently implements a rewritable memory by mounting a common command code commonly used by applications mounted on a rewritable memory as an application on the same rewritable memory. Another object of the present invention is to provide a multi-application type IC card that cannot be used alone and that an application that stores a common command code is used.

A first problem-solving means for solving the above-described problem is that an application having identification information indicating a type and a common code application storing a command code used in common by the application are mounted in the rewritable memory, and an external Command execution means for processing a command received from a terminal using a command code stored in the common code application, and used to select one of the plurality of applications. When the identification information of the application is a value indicating the common code application, the multi-application type IC card includes at least a selection command for canceling the process of selecting the application.

  According to the first problem solving means, the common code application is mounted in a rewritable memory of a multi-application type IC card, and the multi-application type IC card includes the command execution means, so that the application has the common code. Commands can be processed using the command code stored in the application, and there is no need to duplicate the command code that is duplicated between the applications in the rewritable memory, and the rewritable memory is used efficiently. it can.

Further, according to the first problem solving means, the selection command executes the application selection process based on the identification information, so that the common code application can be prevented from being selected and executed alone, and the common code can be prevented. It is possible to prevent destruction of application data or falsification of application data due to execution of an application command code alone.

  According to the above-described invention, by mounting the common code application in a rewritable memory, the rewritable memory can be used efficiently, and the selection command provided in the multi-application type IC card is By executing the application selection process based on the identification information, if the application to be selected is the common code application, the selection process is stopped and the application data is destroyed or the application is executed by executing the common code application alone. It is possible to prevent falsification of data.

  Preferred embodiments of the present invention will be described below in detail with reference to the drawings.

  First, the software and data structure of the multi-application IC card of this embodiment will be described. First, the software structure of the multi-application IC card and the structure of the IC chip will be described. FIG. 1 is a diagram for explaining the software structure of a multi-application IC card, and FIG. 2 is a diagram for explaining the structure of an IC chip.

  As shown in FIG. 1, the basic structure model of a multi-application type IC card includes an IC chip 10, a multi-application OS 20, an application 30, and a common code application 31 that stores command codes that are commonly used by the application 30.

  FIG. 2 is a structural diagram of the IC chip 10. The IC chip 10 includes a central processing unit 11 (hereinafter referred to as “CPU”), a read-only memory 12 (hereinafter referred to as “ROM”), and an EEPROM 13 (Electrically Erasable Programmable Read-Only Memory) as rewritable memory. A random access memory 14 (hereinafter referred to as RAM) as a volatile memory and an I / O circuit 15 for communicating data with an external terminal (not shown).

  The present invention does not limit the specifications of the IC chip 10, and the IC chip 10 having specifications suitable for the use of the IC card can be selected. For example, the capacities of the ROM 12 and the EEPROM 13 are not limited, and the rewritable memory may be a memory other than the EEPROM such as a ferroelectric memory or a flash memory. The IC chip 10 may include other devices (not shown) such as a timer circuit, a cryptographic operation circuit, or a coprocessor circuit.

  The multi-application OS 20 controls a function for mounting the application 30 and the common code application 31 on the EEPROM 13, a function for deleting the application 30 and the common code application 31 mounted on the EEPROM 13, and an I / O circuit 15 to control an external terminal (not shown). This is software having basic functions for operating an IC card such as a function for communication. Generally, the code of the multi-application OS 20 is stored in the ROM 12.

  In the embodiment of the present invention, in addition to the above-described contents, the multi-application OS 20 selects the application 30 (including the common code application 31) installed in the EEPROM 13 and the command code stored in the common code application 31. And at least command execution means 22 for executing.

  The application 30 is software designed for a certain use, and one or a plurality of applications 30 required by the user are mounted on the EEPROM 13. Note that the application 30 to be mounted is generally described in an intermediate language supported by the multi-application OS 20.

  The common code application 31 is an application that stores a command code (eg, a password authentication command code, a data read / write command code, etc.) that is duplicated among the applications 30. The common code application 31 does not have data by itself, and uses the data of the selected application 30 when the command code described in the common code application 31 is executed.

  The application 30 or the common code application 31 mounted on the EEPROM 13 has application information 40 as information on which the application 30 or the common code application 31 is mounted. The application information 40 is stored in the EEPROM 13 by the multi-application OS 20 when the application 30 or the common code application 31 is mounted on the EEPROM 13.

  FIG. 3 is a diagram for explaining the application information 40 stored in the EEPROM 13. The application information 40 includes an application name 41 that is information for identifying the application 30 (or the common code application 31), an application code storage address 42 that is an address that stores an application code (or a code of the common code application 31), an application Application data storage address 43 which is an address storing data used by 30 codes, identification information 44 as identification information for identifying the type of application 30 (or common code application 31), and common code application 31 used by application 30 A common use code name 45 is stored as information to be specified.

  Also, as shown in FIG. 3, each element (for example, application name 401) stored in the application information 40 is provided with a tag 410 to a tag 450 indicating the contents of the element, and the tag is used. Thus, the multi-application OS 20 can grasp the contents of the elements stored after the tag.

  For example, when the tag 410 is “2F01h” (h indicates hexadecimal notation), the data stored after “2F01h” is determined to be the application name 41.

  The application name 41 is information for identifying the application 30 (or common code application 31) such as AID (Application Identification Data) defined in the ISO 7816 standard, and is also information used when selecting the application 30. .

  The application program storage address 42 is an address of the EEPROM 13 on which the code of the application 30 (or the code of the common code application 31) specified by the application name 41 is mounted.

  The application data storage address 43 is an address of the EEPROM 13 in which data used by the code of the application 30 is stored. As described above, since the common code application 31 has no data, the application data storage address 43 is not stored in the application information 40 of the common code application 31.

  The identification information 44 is information for identifying the common code application 31 and the application 30. By setting the identification information 44 of the common code application 31 and the identification information 44 of the application 30 to different values, the common code can be determined from the value of the identification information 44. The application 31 and the application 30 can be identified.

  The use common code name 45 is information for specifying the common code application 31 used by the application 30, and stores the application name 41 of the common code application 31 used by the application 30. By storing the use common code name 45, the common code application 31 used by the application 30 can be set. When the application 30 does not use the common code application 31, the use common code name 45 is not stored in the application information 40.

  The selection command 21 provided in the multi-application OS 20 is a command for selecting one application from a plurality of applications stored in the EEPROM 13.

  In addition to the above-described functions, the selection command 21 according to the present embodiment investigates the value of the identification information 44 included in the application specified by the selection command message transmitted from the external terminal (not shown), and the value of the identification information 44 is In the case of a value meaning the common code application 31, a function for canceling the application selection process is provided.

  The command execution means 22 provided in the multi-application OS 20 has a function of processing a command message received from an external terminal (not shown) using the common code application 31.

  When receiving a command message from an external terminal (not shown), the command execution means 22 delegates the command processing to the application 30. If the command cannot be processed by the application 30, the command execution unit 22 checks the use common code name 45 included in the application information 40 of the selected application 30. When the use common code name 45 is stored in the application information 40, the command execution unit 22 delegates the received command message to the common code application 31 specified by the use common code name 45.

  When delegating the processing of the received command message to the common code application 31, the common code application 31 processes the data of the application 30 by passing the application data storage address 43 together with the command message to the common code application 31. Can do.

<Description of IC card operation>
From here, the operation of the IC card configured as described above will be described. FIG. 4 is a flowchart showing the procedure of application selection processing, and FIG. 5 is a flowchart showing the procedure of command processing received from an external terminal not shown.

  First, the procedure of application selection processing will be described in detail with reference to FIG. When the multi-application OS 20 receives a selection command message from an external terminal (not shown) (step S100), the selection command 21 provided in the multi-application OS 20 is identification information 44 included in the application information 40 of the application indicated by the selection command message. Is investigated (step S110).

  The selection command 21 determines from the identification information 44 read in step S110 whether the application indicated by the selection command message is the common code application 31 (step S120).

  If the identification information 44 read in step S120 is information indicating the common code application 31, the process proceeds to step S140, a message indicating that the application cannot be selected is transmitted to an external terminal not shown, and the application selection process is terminated.

  If the identification information 44 read in step S120 is information indicating the application 30, the process proceeds to step S130, and the selection command 21 selects the application 30 indicated by the selection command message (step S130). Thus, the selection processing procedure of the application 30 is completed.

  Next, command processing procedures received from an external terminal will be described with reference to FIG. When a command message is received from an external terminal (not shown) with the application 30 selected (step S200), the command execution means 22 of the multi-application OS 20 delegates the processing of the command message to the selected application 30. (Step S210). Note that the command code of the application 30 is indicated by the application code storage address 42 of the application information 40.

  When the command message processing is executed by the application 30, the command processing procedure ends. When the application 30 cannot process the command, the process proceeds to step S230 (step S220).

  If the command 30 cannot be processed by the application 30 in step S220, the command execution means 22 checks the usage common code name 45 included in the application information 40 of the selected application 30 (step S230).

  If the use common code name 45 is set in the application information 40 investigated in step S230, the process proceeds to step S250, and if not set, the process proceeds to step S280, and the command processing is interrupted (step S240).

  If the use common code name 45 is set in the application information 40 in step S240, the command execution means 22 checks the identification information 44 of the common code application 40 indicated by the use common code name 45 (step S250).

  If the identification information 44 of the common code application 40 indicated by the use common code name 45 investigated in step S250 is not a value that means the common code application 40, the process proceeds to step S280, the command processing is stopped, and the common code application 40 is meant. If it is a value to be processed, the process proceeds to step S270 (step S260).

  If the identification information 44 of the common code application 40 indicated by the use common code name 45 in step S260 is a value that means the common code application 40, the command execution means 22 indicates the common code application 40 indicated by the use common code name 45. The processing of the received command is delegated (step S270).

  As described so far, according to the embodiment of the present invention, the rewritable memory is efficiently used by mounting the common code application 31 in the rewritable memory (the EEPROM 13 in the present embodiment). be able to.

  In addition, since the multi-application IC card includes the command execution unit 22, commands that cannot be processed by the application 30 are processed by the common command application 31.

  Furthermore, when the selection command 21 provided in the multi-application type IC card executes the application selection process based on the identification information 44, if the application to be selected is the common code application 31, the application selection process is canceled. .

The figure for demonstrating the basic structure model of software and data. The figure for demonstrating the structure of IC chip. The figure for demonstrating application information. The figure for demonstrating the selection procedure of an application. The figure for demonstrating the execution procedure of a command.

Explanation of symbols

10 IC chip 12 ROM
13 EEPROM
20 Multi-application OS
21 selection command 22 command execution means 30 application 31 common code application 40 application information 41 application name included in application information 42 application code storage address included in application information 43 application data storage address included in application information 44 included in application information Identification information 45 Use common code name included in application information

Claims (1)

An application having identification information indicating a type and a common code application storing a command code used in common by the application are mounted in the rewritable memory, and processing of a command received from an external terminal is stored in the common code application. Command execution means for processing using the stored command code, and used for selecting one application from among the plurality of applications, and the identification information of the selected application indicates the common code application In the case of a value, the multi-application type IC card has at least a selection command for canceling the process of selecting the application.

Images