JP4784138B2 - IC card and IC card program - Google Patents

Description

  The present invention relates to an IC card having a plurality of different communication interfaces, and more particularly, to an IC card that can handle a transaction for switching communication I / Fs, and a program mounted on the IC card.

  A dual interface IC card having two different communication I / Fs, a contact interface (hereinafter referred to as I / F, I / F: InterFace) and a non-contact I / F, includes a contact IC card and a non-contact IC card as one IC. It is a highly convenient IC card that can be combined into a card.

  In Patent Document 1, in order to further enhance the convenience of the dual interface IC card, it has the same function and sufficient security whether it is driven by a contact I / F or non-contact I / F. A dual interface IC card capable of realizing the function is disclosed.

  However, in the conventional dual interface IC card, as described in Patent Document 1, each time the communication I / F is switched, the volatile memory (for example, RAM: Random Access Memory) of the IC chip is initialized. Therefore, if the communication I / F is switched during the execution of the transaction, the information indicating the execution status of the application stored in the volatile memory is lost, and after the communication I / F is switched, There was a case where the processing before switching the communication I / F had to be executed again, and there was a lot of time loss.

For example, when data can be read only when the user's fingerprint collation is successful, even if fingerprint collation is performed with a stable contact I / F of the power supply, high-speed data communication is possible. When reading data with the I / F, the fingerprint collation must be performed again with the non-contact I / F.
Japanese Patent Laid-Open No. 11-272824

  In view of the above-described problems, the present invention has a plurality of different communication I / Fs such as a dual interface IC card having a contact I / F and a non-contact I / F, and a plurality of I / Fs in the same application. Even if the communication I / F is switched during the execution of the transaction in the IC card that can be accessed from the IC card, the application execution status is not lost until the transaction is completed. The purpose is to provide a program.

First invention for solving the present invention described above, a plurality of different communication interfaces, an IC card that can be accessed from the plurality of communication interfaces in the same application, the application as a flow of a transaction, at least The command of the application and the communication interface on which the command is executed have profile information described in the order of execution of the command, and before the processing of the command is finished and the IC card performs a response operation, When the communication interface is switched when the next command is executed with reference to the profile information, the execution status of the application being executed is indicated, and the information is erased when the power of the IC card is turned off. Stored in the storage element The execution information stored in the rewritable nonvolatile memory of the IC card is saved and the execution information is saved by referring to the rewritable nonvolatile memory of the IC card after the IC card is activated. In this case, the IC card is provided with cache means for returning the execution information to a predetermined location .

  According to the first invention, the IC card includes the cache unit, and when the communication interface is switched, the communication interface is saved / returned to the rewritable nonvolatile memory so that the communication interface Even when switching, the execution information is not lost. Here, the storage element from which information is erased when the power of the IC card is turned off means a volatile memory (for example, RAM) provided in the IC chip of the IC card or a register of the CPU.

Further , the IC card receives an instruction from a host system by the application having the profile information and the cache unit performing an operation of saving / restoring the execution information based on the profile information. In addition, when the communication interface is switched, the execution information can be automatically saved / restored in the rewritable nonvolatile memory of the IC card.

Further, a second invention to solve the present invention described above, a plurality of different communication interfaces, an IC card program implemented in an IC card that can be accessed from the plurality of communication interfaces in the same application, The application has, as a transaction flow, at least the command of the application and the communication interface on which the command is executed have profile information described in the execution order of the command, and the IC card program includes: An execution status indicating an application execution status, the execution information stored in a storage element from which information is erased when the power of the IC card is turned off, and the execution information from the non-volatile memory of the IC card Returned to the place The evacuation module refers to the profile information before the processing of the command is completed and the IC card performs a response operation, and the communication interface in which the next command is executed. Comparing the communication interface with which the IC card has been activated; if the communication interface in which the next command is executed is different from the communication interface with which the IC card has been activated, execute A step of sequentially saving information to a rewritable non-volatile memory of the IC card, wherein the return module executes the execution in the non-volatile memory of the IC card after the activation of the IC card Checking whether information is stored, said execution in a non-volatile memory When the broadcast is stored, a program for an IC card, wherein the step of returning the execution information in place, a city is a program to be executed sequentially.

  According to the above-described present invention, the same application can be accessed from a plurality of I / Fs having a plurality of different communication I / Fs such as a dual interface IC card having a contact I / F and a non-contact I / F. In an IC card, even if the communication I / F is switched during the execution of a transaction, the execution status of the application is not lost until the transaction is completed, and the program mounted on the IC card Can provide.

From here, refer to the figure for an embodiment of a dual interface IC card (hereinafter abbreviated as IC card) to which the present invention is applied and which can handle a transaction for switching a communication interface (hereinafter referred to as I / F: InterFace). The details will be described.

In the present embodiment, when the communication I / F is switched, the IC card autonomously saves / restores execution information, which is information indicating the execution status of the application, to the rewritable nonvolatile memory. It is.

  FIG. 1 is a diagram for explaining the external appearance and internal structure of an IC card to which the present invention is applied. As shown in FIG. 1A, an IC card 1 is a card in which an IC chip 2 is mounted on a cash card size card. In the present invention, the IC chip 2 is connected to a terminal device and a contact terminal not shown. This is a dual interface IC chip including a contact I / F that communicates via 2a and a non-contact I / F that communicates wirelessly with a terminal device (not shown).

  FIG. 1B is a diagram for explaining the internal structure of the IC card 1. When the antenna 2 b is connected to the IC chip 2 mounted on the IC card 1 and the IC card 1 operates with a non-contact I / F. The antenna 2b is used for wireless communication with an external terminal not shown.

  FIG. 2 is a hardware structure diagram of the IC chip 2 mounted on the IC card 1. The IC chip includes a central processing unit 20 (hereinafter referred to as CPU), a bus 26 via a bus 26, a read only memory 21 (hereinafter referred to as ROM), and an EEPROM 23 (Electrically as rewritable memory). Erasable Programmable Read-Only Memory), random access memory 22 (Random Access Memory, hereinafter referred to as RAM) as volatile memory, and contact I / F circuit 24 for communicating data with a terminal device (not shown), A non-contact I / F circuit 25 or the like is connected.

  The present invention does not limit the specifications of the IC chip 2, and an IC chip 2 having specifications suitable for the application of the IC card 1 can be selected. For example, the capacities of the ROM 21 and the EEPROM 23 are not limited, and the rewritable memory may be a memory other than the EEPROM such as a ferroelectric memory or a flash memory. Further, the IC chip 2 may include other devices (not shown) such as a timer circuit, a cryptographic operation circuit, or a coprocessor circuit.

  FIG. 3 is a diagram illustrating the application 3 mounted on the IC card 1. The application 3 includes three commands 30a to 30c, a cache manager 31, profile information 32, execution information 33, and a cache file 34.

  The application 3 is a program designed for a specific application (for example, a login system to a computer). The application 3 to be executed is a selection command (for example, conforming to the ISO7816 standard) transmitted from a terminal device not shown. Specified SELECT command).

  In FIG. 3, the application 3 has commands 30a to 30c. The commands 30a to 30c are commands (for example, data writing / reading, data stored in the IC card 1) transmitted to the IC card 1 by a terminal device not shown. A program in which a code for processing the CPU 20 of the IC card 1 is described. In the future, when the commands 30a to 30c are not distinguished from each other, they are described as the command 30.

  Each of the commands 30a to 30c has a command identifier for identifying the commands 30a to 30c (for example, CLA and INS defined in the ISO7816 standard). The command commands 30a to 30c in FIG. Command identifiers “A”, “B”, and “C” are added.

  In FIG. 3, the execution information 33 included in the application 3 indicates the execution status of the application 3 and is information stored in a storage element from which information is erased when the power of the IC card 1 is turned off. This is information required when the application 3 is resumed, such as the security status stored in the RAM 22 and described in the ISO 7816 standard, or the program counter of the CPU 20.

  In FIG. 3, the cache manager 31 included in the application 3 is a cache provided in the EEPROM 23 when the communication I / F is switched according to the transaction flow described in the profile information 32. This is a program having a function to save / restore to the file 34.

  In the profile information 32 referred to by the cache manager 31, processing information indicating the contents of processing executed by the IC card 1 is arranged in the execution order as a transaction flow in which processing for switching the communication I / F is executed. . In the present embodiment, at least a command identifier of the command 30 to be executed and a communication I / F to execute the command 30 are stored in one piece of processing information.

From here, an example of the profile information 32 will be described with reference to FIG. FIG. 4 is a diagram showing an example of the profile information 32. In the profile information 32, processing information 32b is stored in association with a number 32a indicating the execution order. In the processing information 32b, the command identifier 32c of the command 30 and the communication I / F 32d when the command 30 is executed are stored. is described.

  According to the profile information 32 of FIG. 4, in the transaction flow in which the process of switching the communication I / F is executed, the command 30 a with the contact I / F and the command identifier “A” is executed first, and then the contact I / F. This is a flow in which a command 30b having a command identifier “B” is executed at / F, and a command 32c having a command identifier “C” is finally executed at a non-contact I / F.

  In addition, in the present embodiment, in order for the cache manager 31 to manage the progress of the transaction indicated by the profile information 32, the profile information 32 includes a transaction log 32e that stores a flag indicating completion of processing information. Is provided.

  When the cache manager 31 completes the process indicated by the process information 32c in accordance with the flow indicated by the profile information 32, the cache manager 31 indicates that the process information 32c is completed at the location of the transaction log 32e corresponding to the completed process information 32c. Write a flag. The cache manager 31 can know the communication I / F when the next command is executed by referring to the transaction log 32e.

  For example, in the profile information 32 of FIG. 4, “1” in the transaction log 32e indicates completion, and “0” indicates incomplete. In FIG. 4, the completed process information 32b is the process information of the numbers “1” and “2”, the process information 32b to be executed next is the process information of the number “3”, and the number “3”. The processing information indicates that the communication I / F 32d is switched from the contact I / F to the non-contact I / F.

  From here, it returns to description of the cache manager 31 of FIG. When the cache manager 31 processes the command transmitted from the terminal device, the communication I / F in which the next command 30 is executed is referred to as the communication I / F in which the IC card 1 is activated with reference to the profile information 32. If they are different, the execution information 33 is temporarily saved in the cache file 34. Then, after saving the execution information 33 to the cache file 34, the IC card 1 performs a response operation to a command transmitted from a terminal device (not shown).

  Then, when the communication I / F is switched and the application 3 is designated by the selection command described above, the cache manager 31 restores the execution information 33 temporarily saved in the cache file 34 to a predetermined location.

  Even if the cache manager 31 saves / restores the execution information 33 to the cache file 34 based on the profile information 32, the terminal device (not shown) executes the procedure for switching the communication I / F of the IC card 1. The execution information 33 is not erased from the IC card 1.

  From here, the procedure by which the cache manager 31 saves / restores the execution information 33 will be described in detail with reference to the drawings. FIG. 5 is a flowchart showing a procedure for the cache manager 31 to save / restore the execution information 33.

  The first step S10 of this operation is a step in which the IC card 1 receives a command from a terminal device (not shown) and executes the received command. And step S11 is a step which reflects the execution result of step S10 in the transaction log of the profile information 32, and updates a transaction log.

  The next step S12 is a step of confirming whether the executed command is the last command indicated by the profile information 32. If the command is not the final command, the process proceeds to step S13. If the command is the final command, the transaction log of the profile information 32 is initialized in step S18, and the IC card 1 performs a response operation to the command transmitted from the terminal device. Exit.

  In step S13 executed when the command is not the final command in step S12, the cache manager 31 checks the profile information 32, and when the next command is executed from the processing information executed next, the communication I / F is executed. This is a step for checking whether or not. When the communication I / F is not switched, the process returns to step S10, and when switched, the process proceeds to step S14.

  Step S14 executed when the communication I / F is switched is a step of saving the execution information 33 to the cache file 34 of the EEPROM 23.

  Step S15 to be executed next is a step in which the communication I / F is switched and the application 3 is selected again. When the communication I / F is switched, the IC card 1 executes a predetermined process such as initialization of the volatile memory, and the application 3 is selected again by the selection command described above.

  Step S16 to be executed next is a step in which the cache manager 31 confirms whether or not the execution information 33 is saved in the cache file 34. When the execution information 33 is not saved in the cache file 34, the process returns to step S10. When the execution information 33 is saved, the process proceeds to step S17.

In the next step S17, the cache manager 31 returns the execution information 33 saved in the cache file 34 to a predetermined location. After the cache manager 31 returns the execution information 33 , the process returns to step S10.

The figure explaining the external appearance and internal structure of an IC card. The hardware structure figure of the IC chip mounted in an IC card. The figure explaining the application mounted in IC card in 1st Embodiment. The figure which showed an example of profile information. The flowchart which showed operation | movement of the cache manager.

1 IC card 2 IC chip 20 CPU
22 RAM
23 EEPROM
3 Application 30 Command 31 Cache Manager 32 Profile Information 33 Execution Information 34 Cache File

Claims (2)

A plurality of different communication interfaces, an IC card that can be accessed from the plurality of communication interfaces in the same application,
The application has profile information in which at least the command of the application and the communication interface on which the command is executed are described in the execution order of the command as a transaction flow,
Before the processing of the command is completed and the IC card performs a response operation, the profile information is referred to, and when the communication interface is switched when the next command is executed, the application being executed The execution information stored in the storage element in which information is erased when the power of the IC card is turned off is saved in the rewritable nonvolatile memory of the IC card, and the IC card is activated Cache means for referring back to the rewritable nonvolatile memory of the IC card and returning the execution information to a predetermined location when the execution information is saved,
An IC card characterized by comprising: A plurality of different communication interfaces, a program for the IC card to be mounted in an IC card that can be accessed from the plurality of communication interfaces in the same application, the application as a flow of a transaction, at least, the command of the application And the communication interface on which the command is executed have profile information described in the execution order of the command, the IC card program indicates the execution status of the application, and the IC card is turned off. An evacuation module that evacuates execution information stored in a storage element from which information is erased, and a restoration module that restores the execution information from a nonvolatile memory of the IC card to a predetermined location. Before the processing of the command is completed and the IC card performs a response operation, referring to the profile information, the communication interface in which the next command is executed, and the communication in which the IC card is activated A step of comparing the interface, and if the communication interface in which the next command is executed is different from the communication interface in which the IC card is activated, the execution information is rewritable and nonvolatile in the IC card And a step of confirming whether or not the execution information is stored in a non-volatile memory of the IC card after the activation of the IC card, When the execution information is stored in the memory, the execution information Step of returning to the place, the program for an IC card, which is a program for executing the city in order.

Images