JP5293113B2 - SEMICONDUCTOR DEVICE, SEMICONDUCTOR DEVICE CONTROL METHOD, AND SEMICONDUCTOR DEVICE CONTROL PROGRAM - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a semiconductor device for avoiding a malfunction caused by a laser attack, and to provide a method and a program for controlling the semiconductor device. <P>SOLUTION: The semiconductor device (101) for processing data information includes: a data information reading command processing means (102a) for processing a data information reading command; and a data information reading means (102b) for reading data information from the semiconductor device (101). The data information reading command processing means (102a) includes: argument converting means (S2, S20) for converting the argument of the data information reading command into the address information of the data information of the semiconductor device (101); and an argument input means (S3) for inputting values which are the same as the address information to the data information reading means (102b) as at least two or more arguments. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

  The present invention incorporates an IC (integrated circuit) chip having a control element such as a writable and rewritable nonvolatile memory and a CPU (Central Processing Unit), for example, and a command input from an external device The present invention relates to a semiconductor device such as an IC card that executes various processes based on (command), a semiconductor device control method, and a semiconductor device control program.

  Recently, as a portable electronic device, an EEPROM as a nonvolatile memory, a RAM as a volatile memory, a CPU as a control element for accessing (reading or writing data, etc.) the memory, and the CPU An IC card having a ROM storing an operation program and the like and having an IC chip having means for writing and reading data based on a command (instruction) supplied from the outside is used in various industries. Yes.

In general, when this type of IC card receives a data write command from an external device (IC card reader / writer), the data added to the command is written to an area designated by the command of the nonvolatile memory. It has become.

When a data read command is received from an external device, the target data is retrieved from the nonvolatile memory, and when the corresponding data exists, the data is read from the head for the data length. .

In recent years, IC cards equipped with IC chips instead of magnetic cards have begun to spread in fields requiring high security, such as credit cards and cash cards. An IC card on which such an IC chip is mounted reads and writes data with or without contact with an external device. Further, in order to make it difficult to decode data when it is read and received by a third party, the data is encrypted and read / written when the data is read / written from / to an external device.

  However, attacks that prevent execution of program instructions have occurred due to attacks by radiation, flash, light, laser, glitch, or otherwise. Such attacks change the instructions that are executed, resulting in inexecution or inaccurate execution of certain parts of the program.

  When the program is executed, an attack by, for example, laser, glitch, or electromagnetic radiation changes the instruction code executed by the processor, eg, any instruction codeop is converted to codeop 00h (BRSET0 in 6805, NOP in AVR) . That is, the program instruction is replaced with an inoperable instruction. Thus, certain sections of code fail to execute or execute irregularly, resulting in the execution of inoperable instructions rather than a security processing sequence in an operating system for smart cards, for example. Attacks can interfere with processor operation and cause untimely jumps in program memory.

Therefore, various countermeasures (anti-tamper countermeasures) have been considered recently for countermeasures against so-called tampering attacks such as illegally reading data in an internal nonvolatile memory for counterfeiting or falsification of IC cards. . Among them, there is a method of detecting that data has been tampered with by duplicating data written to the nonvolatile memory (see, for example, Patent Document 1).

There is also a method for checking the instruction code itself (see, for example, Patent Document 2).
JP-A-4-339614 Special table 2007-513422 gazette

  However, until now, the instruction code itself has been checked, but the value for executing the instruction has not been checked.

  For example, when the function A receives a laser attack at the moment of calling the function B, if the argument a of the function B is changed by the laser attack, the function B has caused a malfunction until now (see FIG. 9). ).

  When the function B has a function of outputting certain data in the IC card, there is a possibility that important data may be output outside the IC card when subjected to a laser attack.

  Therefore, the present invention provides a semiconductor device capable of avoiding a malfunction due to a laser attack by duplicating arguments and generating a check code between functions even when a laser attack is received. An object of the present invention is to provide a semiconductor device control method and a semiconductor device control program.

  In order to solve the above problems, the present invention employs the following configuration.

That is, the invention according to claim 1 is a data information read command processing means for processing a data information read command which is a command for requesting to read personal identification information as the data information in the semiconductor device (101) for processing data information. (102a) and data information reading means (102b) for reading the data information from the semiconductor device (101) in response to a request from the data information reading command processing means (102a). The command processing means (102a), when receiving the data information read command, converts argument of the data information read command into address information of the data information of the semiconductor device (101), argument conversion means (S2, S20), Decrease the same value as the address information Also includes an argument input means (S3) for inputting to the data information reading means (102b) as two or more arguments, and the data information reading means (102b) When the data information is read from the address information of the semiconductor device (101) indicated by the argument (S8), the data information is output to the data information read command processing means (102a) (S9), and the arguments are different Includes an output means (S11) for outputting abnormality information to the data information read command processing means (102a) , wherein the data information read command processing means obtains password information from the data information read command, and obtains the obtained information. The password information does not match the data information input from the data information reading means. Expediently, and outputs the abnormality information to the processing means calls the data information read-command processing means.

Further, according to a second aspect of the present invention, in the semiconductor device (101) according to the first aspect, the data information read command processing means (102a) generates check code information based on the address information (S21). The argument input means inputs at least one or more of the check code information and the address information to the data information reading means (102b) as arguments (S22), and the data information reading means (102b) The check code information is generated based on the information (S26), and when the check code information is different from the check code information input as the argument, the output means reads the abnormality information into the data information The data is output to the command processing means (102a) (S31).

Furthermore, the invention according to claim 3 is the semiconductor device (101) according to claim 1 , wherein the data information read command processing means (102a) is configured to check code based on address information in which the password information is stored. The information is generated (S34), and the argument input means inputs at least one of the check code information and the address information in which the password information is stored into the data information reading means (102b) as an argument ( In S35, the data information read command processing means (102a) receives the data information output from the data information reading means (102b) (S35), and the password information matches the input data information. If not (S36), the data information read command processing means (102a) is called. The outputs an abnormality information to the processing means (S39) that is characterized.

Furthermore, the invention according to claim 4 is a method for controlling a semiconductor device (101) for processing data information, wherein a data information reading command for processing a data information reading command which is a command for requesting reading of personal identification information as the data information. A command processing step (102a) and a read data information reading step (102b) for reading the data information from the semiconductor device (101) in response to a request in the data information reading command processing step (102a), In the data information read command processing step (102a), when the data information read command is received, the argument conversion step (S2, S20) converts the argument of the data information read command into the address information of the data information of the semiconductor device (101). ) And the ad An argument input step (S3) for inputting to the data information reading step (102b) with at least two arguments having the same value as the data information as an argument, and input in the data information reading step (102b) If the arguments are the same, the data information is read from the address information of the semiconductor device (101) indicated by the argument (S8), and the data information is output to the data information read command processing means (102a) (S9). And an output step (S11) for outputting abnormality information to the data information read command processing step when the arguments are different, and in the data information read command processing step, password information is obtained from the data information read command. Acquired and input the obtained personal identification information and the data information reading process The when said data information does not match, and outputs the abnormality information to the processing means calls the data information read command processing step.

Furthermore, the invention according to claim 5 is the data information for processing the data information read command which is a command for requesting the computer included in the semiconductor device (101) for processing the data information to read the personal identification information as the data information. A read command processing means (102a), which functions as read data information reading means (102b) for reading the data information from the semiconductor device (101) in response to a request from the data information read command processing means (102a); When the data information read command processing means (102a) receives the data information read command, the data information read command processing means (102a) converts the argument of the data information read command into address information of the data information of the semiconductor device (101) (S2, S20) The data information reading means (102b) functions as the argument input means (S3) for inputting the same value as the response information as at least two arguments to the data information reading means (102b). Are the same, the data information is read from the address information of the semiconductor device (101) indicated by the argument (S8), and the data information is output to the data information read command processing means (102a) (S9). When the arguments are different, function as output means (S11) for outputting abnormality information to the data information read command processing means (102a), and the data information read command processing means performs a password from the data information read command. Information is acquired, the acquired password information and the data information reading means When said data information is et input do not match, characterized by Rukoto to function so as to output the abnormality information to the data information processing unit calls the read command processing means.

Further, in the invention according to claim 6 , the semiconductor device (101) according to any one of claims 1 to 3 is an IC card (101) on which an IC (Integrated Circuit) chip (102) is mounted. It is characterized by.

  According to the present invention, even when a laser attack is performed on an argument, a normal operation of reading data information is performed only when the argument is doubled and the two arguments are equal. It can be avoided.

  In addition, according to the present invention, even when a laser attack is performed on an argument, since the argument is duplicated and the normal operation of reading data information is performed only when the two arguments are equal, It becomes possible to avoid malfunction.

  Furthermore, according to the present invention, even when a laser attack is performed on an argument, the argument (including the function) can execute an abnormal operation detection using a check code in the process of calling the function. Since the normal operation of reading the data information is performed only when the check code (including the function) is the same in the process of calling the function, the laser attack can be detected.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

  However, the present invention can be implemented in many different modes, and those skilled in the art can easily understand that the modes and details can be variously changed without departing from the spirit and scope of the present invention. Is done. Therefore, the present invention is not construed as being limited to the description of this embodiment mode. Note that in all the drawings for describing the embodiments, the same portions or portions having similar functions are denoted by the same reference numerals, and repetitive description thereof is omitted.

(Embodiment 1)
In this embodiment, an apparatus configuration and a flowchart for realizing a function of preventing a laser attack in the present invention will be described.

  FIG. 1 shows a block diagram of an IC card including an IC chip which is a target to be equipped with a function for preventing a laser attack in the present invention.

  In FIG. 1, the IC card 101 includes an arithmetic circuit 106 and an analog unit 115. The arithmetic circuit 106 includes a CPU 102 (also referred to as a central processing unit; also referred to as an MPU (micro processor)), a ROM 103 (also referred to as a read only memory), and a RAM 104 (random access memory). An auxiliary arithmetic unit 124, a non-volatile memory 125 such as a flash memory, and a controller 105. The analog unit 115 includes an antenna 107, a resonance circuit 108, a power supply circuit 109, a reset circuit 110, a clock generation circuit 111, a demodulation circuit 112, a modulation circuit 113, and a power management circuit 114. The controller 105 includes a CPU interface 116 (CPUIF), a control register 117, a code extraction circuit 118, and an encoding circuit 119. In FIG. 1, for the sake of simplification of explanation, the received signal 120 and the transmitted signal 121 are shown separately as communication signals. However, in actuality, they are superimposed on each other between the IC card 101 and the reader / writer device. Are sent and received at the same time. The reception signal 120 is received by the antenna 107 and the resonance circuit 108 and then demodulated by the demodulation circuit 112. The transmission signal 121 is transmitted from the antenna 107 after being modulated by the modulation circuit 113. Note that the received signal and the transmitted signal are expressions mainly on the IC card side, and it is added that the IC card receives an external signal and transmits the signal to the outside. In this specification, the signal received by the IC card from the reader / writer, in other words, the signal transmitted by the reader / writer is called an external signal, and the IC card receives the external signal and the reader / writer transmits it. This is called external signal transmission / reception.

  Although FIG. 1 illustrates the case of non-contact, if “analog portion (115) + code extraction circuit (118) + encoding circuit (119)” is considered as “input / output portion”, FIG. The whole can be considered as a contact IC card. Thus, this embodiment can be considered not only as a non-contact IC card but also as an embodiment of a contact IC card.

  The ROM 103 is a program that functions when processing the received data received from the reader / writer (function A, data that is part of the data information read command processing means (102a) according to the present embodiment, which is a laser attack prevention program). Function B as information reading processing means and function C as a part of data information reading command processing means (102a) are stored, and RAM 104 stores processing data when the program functions. The ROM 103 includes a mask ROM, the RAM 104 includes a static memory (SRAM), a dynamic memory (DRAM), and the like, and the nonvolatile memory 125 includes a flash memory such as a NAND flash memory and a NOR flash memory. . The nonvolatile memory 125 stores data such as history, information such as a password, and stores (stores) data that can be a target of a laser attack.

  It is also possible to configure the storage area with a nonvolatile memory 125 instead of the ROM 103 and / or the RAM 104 to be provided in the storage area.

  For example, the function A, function B, and function C according to this embodiment for protecting information from laser attacks are stored in the non-volatile memory 125, and when a malfunction occurs in the function A, function B, or function C, it is always possible from the outside. The function A, the function B, and the function C can be freely rewritten.

  FIG. 2 shows the address space of the RAM 104 stored in the ROM 103. The ROM 103 includes a function A which is a part of the data information reading command processing means (102a) according to the present embodiment, which is a laser attack prevention program, a function B as the data information reading processing means, and a data information reading command processing means (102a). Are stored in the function C, but these functions are executed on the CPU 102. FIG. 2 shows the data information read command processing means (102a) developed on the CPU 102 and the data information read. Function A, function B, and function C as the processing means (102b) are shown.

  The operations of these functions A, B, and C will be described in more detail in the flowcharts described later.

  In addition, the data (history etc.) and the code number information that are targets of laser attack stored in the non-volatile memory 125 area described in the flowchart described later are shown together with the address.

  The RAM 104 has a transmission data register 203 and a reception data register 204. The transmission data register 203 has a function of storing data transmitted by the IC card. The reception data register 204 has a function of storing data received by the IC card. Since the RAM 104 has a smaller amount of information than the ROM 103, its area is small.

  An example of a configuration of a signal transmitted from the reader / writer to the IC card, in other words, a signal received by the IC card will be described. The received signal is a signal having SOF (Start Of Frame; start of frame), flag, command, data, CRC (also referred to as cyclic redundancy check), EOF (End Of Frame; end of frame). SOF and EOF simply indicate the start and end of the signal. The flag has modulation type information such as ASK and FSK. The data includes data to be decrypted. The CRC has information on a unique code generated from the data in order to prevent misidentification of the data.

[Embodiment 1]
Next, the operation of the program having the function of preventing the laser attack in the CPU 102 in FIG. 2 will be described in correspondence with the flowcharts in FIGS.

  FIG. 3 is a flowchart showing the operation of the function A which is a part of the data information read command processing means of this embodiment. The function A is a function for processing a data read command, and has a file name to be read as an argument.

  In step S1, the function A as the data information read command processing means acquires a file name to be read as an argument from the data read command, and starts a data read operation.

  In step S2, the function A as the data information read command processing means converts the file name to be read into the address (100) of the nonvolatile memory 125.

  In step S3, an argument A = 100 and an argument B = 100 are set, and a function B as a data information reading processing unit is called.

  In step S4, data information is acquired from the function B as the data information reading processing means, the acquired data is output, and output processing is executed.

  In step S4, the operation of the CPU 102 is shifted to a data read command.

  FIG. 4 is a flowchart showing the operation of the function B which is the data information reading processing means of the present embodiment in which arguments are duplicated. The function B has a function of abnormally ending when the duplicated argument is changed by a laser attack.

  In step S6, the function B as the data information reading processing means is called from the function A or the function C that is the data information reading command processing means, and acquires the argument A and the argument B.

  In step S7, the function B as the data information reading processing means compares the acquired value of the argument A and the value of the argument B. If the value of argument A matches the value of argument B (step S7: YES), the process proceeds to step S8. If the value of argument A does not match the value of argument B (step S7: NO), the process proceeds to step S10. move on.

  In step S8, the function B as the data information reading processing means reads data information from the address (100) specified by the argument.

  In step S9, the function B as the data information reading processing means executes an output (return) process for outputting (returning) the data information read in step S8 to the function A or the function C as the data information reading processing command means. .

  In step S10, the operation of the CPU 102 is transferred to the function A or function C as data information read processing command means.

  In step S11, the function B as the data information reading processing means executes an output process for outputting the abnormality information to the function A or the function C as the data information reading processing command means.

  FIG. 5 is a flowchart showing the operation of the function C, which is a part of the data information read command processing means of the present embodiment and serves as a password information comparison function for comparing password information. The function C has a function of abnormally ending when the read duplex password information has been changed by a laser attack.

  In step S12, the function C as the data information read command processing means obtains an execution instruction for the inquiry process of the personal identification number information from the data read command.

  In step S13, personal identification number information is acquired from the data read command.

  In step S14, an argument A = 200 and an argument B = 200 are set, and a function B as a data information reading processing unit is called.

  In step S15, the function C as the data information reading command processing means includes the personal identification number information acquired in step S13, and in step S14, the personal identification number information as the personal identification number information acquired from the function B as the data information reading processing means. It is judged whether or not. If the personal identification number information acquired in step S13 matches the personal identification number information as the personal identification number information acquired from the function B as the data information reading processing means in step S14 (step S15: YES), the process proceeds to step S16. If it does not match (step S15: NO), the process proceeds to step S18.

  In step S16, the information on which the code number information is identical (successful inquiry of the code number information) is returned to the data read command process that called the function C as the data information read command processing means in step S12.

  In step S17, the operation of the CPU 102 is shifted to the data read command that calls the function C as the data information read command processing means in step S12.

  In step S18, the function C as the data information read command processing means executes an output process for outputting the abnormal information (information indicating that the personal identification number information does not match) to the data read command process.

  Note that this embodiment can be implemented in combination with any of the other embodiments in this specification as appropriate.

[Embodiment 2]
Next, the operation when a check code is added in the operation of the program having a function of preventing the laser attack in the CPU 102 in FIG. 2 will be described as the second embodiment in correspondence with the flowcharts of FIGS. .

  FIG. 6 is a flowchart showing an operation when a check code is given in the function A which is a part of the data information read command processing means of this embodiment. The function A is a function for processing a data read command, and has a file name to be read as an argument and calculates a check code.

  In step S19, the function A as the data information read command processing means acquires a file name to be read as an argument from the data read command, and starts a data read operation.

  In step S20, the function A as the data information read command processing means converts the file name to be read into the address (100) of the nonvolatile memory 125.

  In step S21, the function A as the data information read command processing means calculates (generates) a check code at the address (100).

  In step S22, an argument A = 100 and an argument B = (check code calculated in step S21) are set, and a function B as data information reading processing means is called.

  In step S23, the data information is acquired from the function B as the data information reading processing means, the acquired data is output, and the output process is executed.

  In step S24, the operation of the CPU 102 is shifted to a data read command.

  FIG. 7 is a flowchart showing the operation of the function B which is the data information reading processing means of this embodiment to which a check code is assigned. The function B has a function of terminating abnormally when the check code has been changed due to a laser attack.

  In step S25, the function B as the data information reading processing means is called from the function A or the function C that is the data information reading command processing means, and acquires the argument A and the argument B.

  In step S26, the function B as the data information reading processing means calculates (generates) a check code at the address (100).

  In step S27, the function B as the data information reading processing means compares the check code calculated in step S25 with the value of the argument B (check code acquired in step S25). If the check code calculated in step S25 matches the value of argument B (step S27: YES), the process proceeds to step S28, and if the check code calculated in step S25 does not match the value of argument B (step S27: NO). ) Proceeds to step S31.

  In step S28, the function B as the data information reading processing means reads data information from the address (100) designated by the argument.

  In step S29, the function B as the data information reading processing means executes an output (return) process for outputting (returning) the data information read in step S28 to the function A or the function C as the data information reading processing command means. .

  In step S30, the operation of the CPU 102 is transferred to the function A or the function C as the data information reading process command means.

  In step S31, the function B as the data information reading processing means executes an output process for outputting the abnormality information to the function A or the function C as the data information reading processing command means.

  FIG. 8 is a flowchart showing a part of the data information reading command processing means of the present embodiment, which is an operation of the function C as a personal identification number information comparison function for comparing personal identification number information and a check code is given. is there. The function C has a function of terminating abnormally when the read check code has been changed by a laser attack.

  In step S32, the function C as the data information read command processing means obtains an execution instruction for the reference number information inquiry process from the data read command.

  In step S33, personal identification number information is acquired from the data read command.

  In step S34, the function C as the data information read command processing means calculates (generates) a check code at the address (200).

  In step S35, a check code of argument A = 200, argument B = address (200) is set, and function B as data information reading processing means is called.

  In step S36, the function C as the data information reading command processing means matches the personal identification number information acquired in step S33 with the personal identification number information acquired from the function B as the data information reading processing means in step S35. Determine whether. If the personal identification number information acquired in step S33 matches the personal identification number information acquired from function B as the data information reading processing means in step S35 (step S36: YES), the process proceeds to step S37. In (Step S36: NO), the process proceeds to Step S39.

  In step S37, the information on which the personal identification number information is identical (successful inquiry of the personal identification number information) is returned to the data reading command processing that called the function C as the data information reading command processing means in step S32.

  In step S38, the operation of the CPU 102 is shifted to the data read command that calls the function C as the data information read command processing means in step S32.

  In step S39, the function C as the data information read command processing means executes an output process for outputting the abnormality information (information indicating that the personal identification number information does not match) to the data read command process.

  Note that this embodiment can be implemented in combination with any of the other embodiments in this specification as appropriate.

  As described above, in the IC chip having the function of preventing the laser attack according to the present invention, it is not necessary to recreate the IC chip from the mask design stage due to the change in the specification accompanying the change in the method of preventing the laser attack. It was. Therefore, the manufacturing cost can be reduced and the manufacturing time can be shortened. Further, there is no concern that the IC chip that has been remade due to the change in the mask design has a defect.

  Further, conventionally, when manufacturing an IC chip having a function of preventing a laser attack, a circuit for preventing the laser attack is sometimes mounted. However, by adopting the present invention, the function of preventing the laser attack is stored as a program in a read-only memory or a non-volatile memory, so that an IC chip is provided rather than a case where a circuit having a function of preventing the laser attack is provided separately. Can be miniaturized. For this reason, the yield due to the reduction in the number of transistors by the weight reduction of the IC chip, the cost reduction accompanying the increase in the number of IC chips that can be manufactured from one substrate, and the circuit having the function of preventing the laser attack. It can contribute to improvement.

As described above, the semiconductor device of the present invention may be provided and used in any goods, in addition to a license, insurance card, commuter pass, cash card, credit card, electronic key, It can be used for electronic money.

  3 to 8 are recorded in advance on a recording medium such as a hard disk or recorded in advance via a network such as the Internet, and this is read out and executed by a general-purpose microcomputer or the like. Accordingly, it is possible to cause the general-purpose microcomputer or the like to function as the CPU according to the embodiment.

  Furthermore, the present invention is not limited to the first and second embodiments, and various modifications can be made within the scope of the gist of the present invention.

  Further, it is to be understood that the embodiments described and illustrated herein are exemplary only and should not be considered as limiting the scope of the present invention. Other changes and modifications may be made in accordance with the spirit and scope of the invention.

It is a block diagram which shows the whole semiconductor device (101) which concerns on embodiment of this invention. It is a figure which shows the function outline | summary of the function which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the function A which concerns on Embodiment 1 of this invention. It is a flowchart which shows the function B operation | movement which concerns on Embodiment 1 of this invention. It is a flowchart which shows operation | movement of the function C which concerns on Embodiment 1 of this invention. It is a flowchart which shows operation | movement of the function A which concerns on Embodiment 2 of this invention. It is a flowchart which shows the function B operation | movement which concerns on Embodiment 2 of this invention. It is a flowchart which shows operation | movement of the function C which concerns on Embodiment 2 of this invention. It is a figure which shows the concept of the laser attack concerning this invention.

Explanation of symbols

101 IC card 106 arithmetic circuit 102 CPU 102
103 ROM
104 RAM
DESCRIPTION OF SYMBOLS 105 Controller 107 Antenna 108 Resonance circuit 109 Power supply circuit 112 Demodulation circuit 113 Modulation circuit 114 Power management circuit 115 Analog part 125 Non-volatile memory such as flash memory

Claims (6)

In a semiconductor device that processes data information,
Data information read command processing means for processing a data information read command which is a command for requesting to read personal identification information as the data information;
Data information reading means for reading the data information from the semiconductor device in response to a request from the data information read command processing means,
The data information read command processing means, when receiving the data information read command, converts an argument of the data information read command into address information of the data information of the semiconductor device;
The same value as the address information as at least two arguments, and an argument input means for inputting the data information reading means,
The data information reading means reads the data information from the address information of the semiconductor device indicated by the argument when the inputted arguments are the same, and outputs the data information to the data information read command processing means. And output means for outputting the abnormal information to the data information read command processing means when the arguments are different ,
The data information read command processing means acquires password information from the data information read command, and if the acquired password information and the data information input from the data information read means do not match, the data information What is claimed is: 1. A semiconductor device comprising: outputting abnormality information to a processing unit that has called an information reading command processing unit . The semiconductor device according to claim 1,
The data information reading command processing means generates check code information based on the address information, and the argument input means inputs at least one check code information and the address information as arguments to the data information reading means. The data information reading means generates the check code information based on the address information, and when the check code information is different from the check code information input as the argument, the output means A semiconductor device characterized in that the abnormality information is output to the data information read command processing means. The semiconductor device according to claim 1,
The data information read command processing means generates check code information based on address information in which the password information is stored, and the argument input means stores at least one check code information and the password information. The address information is input to the data information reading means as an argument, and the data information read command processing means is supplied with the data information output by the data information reading means, and the password information is input to the data information reading command processing means. If the data information does not match, the semiconductor device outputs the abnormality information to the processing means that called the data information read command processing means. In a control method of a semiconductor device for processing data information,
A data information read command processing step for processing a data information read command which is a command for requesting to read personal identification information as the data information;
A read data information reading step for reading the data information from the semiconductor device in response to a request in the data information read command processing step;
In the data information read command processing step, upon receiving the data information read command, an argument conversion step of converting an argument of the data information read command into address information of the data information of the semiconductor device;
The same value as the address information as at least two or more arguments, comprises the argument input step of inputting to said data information reading step,
In the data information reading step, when the inputted arguments are the same, the data information is read from the address information of the semiconductor device indicated by the argument, and the data information is read with respect to the data information reading command processing step. An output step of outputting abnormality information to the data information read command processing step when the argument is different ,
In the data information read command processing step, the password information is acquired from the data information read command, and if the acquired password information and the data information input in the data information read step do not match, the data A method for controlling a semiconductor device, comprising: outputting abnormality information to a processing unit that has called an information reading command processing step . A computer included in a semiconductor device for processing data information;
Data information read command processing means for processing a data information read command, which is a command for requesting to read personal identification information as the data information;
In response to a request from the data information read command processing means, the data information is read from the semiconductor device, and functions as read data information reading means.
The data information read command processing means, when receiving the data information read command, converts an argument of the data information read command into address information of the data information of the semiconductor device;
The same value as the address information as at least two arguments, function as an argument input means for inputting to the data information reading means,
The data information reading means reads the data information from the address information of the semiconductor device indicated by the argument when the inputted arguments are the same, and outputs the data information to the data information read command processing means. , If the arguments are different, function as output means for outputting the abnormal information to the data information read command processing means ,
The data information read command processing means acquires password information from the data information read command, and if the acquired password information does not match the data information input from the data information read means, the data information reading command processing means to function so as to output the abnormality information to the calling processing means a control program wherein a Rukoto. Wherein a billing the semiconductor device according to any one of claim 1 to 3 is an IC card with IC (Integrate the Circuit) chip.

Images