JP5444143B2 - Portable electronic device and IC card - Google Patents

Description

  Embodiments described herein relate generally to a portable electronic device and an IC card having an API (Application Programming Interface) that exchanges information between a hardware (HW) module and an AP (Application Program).

  In general, an IC card used as a portable electronic device includes a card-like main body formed of plastic or the like and an IC module embedded in the main body. The IC module has an IC chip. The IC chip has a nonvolatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory) or a flash ROM that can hold data even in the absence of a power source, and a CPU that executes various operations.

  The IC card is excellent in portability and can perform communication with an external device and complicated calculation processing. Further, since it is difficult to forge, the IC card is assumed to store highly confidential information and be used for a security system, electronic commerce, and the like.

  The IC card operates by being supplied with power, a magnetic field, and a clock from a host terminal.

With existing IC cards, the detection module installed in the IC card detects whether the power, magnetic field, and clock supplied from the outside are sufficient for the operation of the IC card. It was operating, and if it wasn't enough, it stopped the operation.

JP 2009-48642 A

  However, the IC card is connected to various host terminals such as a mobile phone terminal, a television receiver, and an automatic ticket gate to exchange information. The power, magnetic field, and clock supplied from these upper terminals differ depending on the environment and conditions in which the upper terminals are used. For example, since the power supply of a mobile phone terminal is limited, the power supply voltage supplied from the mobile phone terminal is low. Therefore, the operation cannot be performed when the combination of the IC card and the application does not correspond to the condition. Further, when the power supply voltage supplied is high and the clock frequency is high, the temperature inside the IC card rises. As a result, the temperature detection module detects a high temperature and the operation of the IC card stops.

  On the other hand, even if there is a sufficient margin for the supplied power, magnetic field, and clock, and the IC card can be operated with a high voltage and high clock, if such a high load state continues, the power consumption Increases, increasing the power load of the terminal supplying the power.

  On the other hand, in the IC card, the memory density is increased and the CPU speed is increased. As a result, IC cards that allow addition / deletion of applications via a transmission / reception interface after IC card issuance have appeared. If the application is described in a high-level language and conforms to the same IC card platform specification, the application can be mounted regardless of the type of LSI. However, even if the IC card platform specifications are the same, the environment in which applications operate is diverse as described above, and there are performance differences among LSIs. Depending on the IC card, application functions can be executed completely. There were restrictions such as no application or unstable application operation.

  Accordingly, there is a need for portable electronic devices and IC cards that can flexibly cope with a wide variety of operating environments.

  According to an embodiment of the present invention for solving the above problems, a receiving unit that receives a command from an external device, an application unit that executes a process corresponding to the received command, and a specific processing function are implemented by hardware. A hardware module unit having a plurality of configured modules, an API (application programming interface) unit for controlling the module based on an instruction from the application unit, obtaining the result, and returning the result to the application unit; A portable electronic device is provided that includes a transmission unit that acquires a processing result of the command from the application unit and transmits the command processing result to the external device.

The figure which shows the structure of the processing system using the IC card of this Embodiment. The figure for demonstrating the structural example of the IC card of this Embodiment. The figure which shows the connection terminal structure of the communication part of the IC card of this Embodiment. The figure which shows the software structural example of the IC card of a prior art. The figure which shows the software structural example of the IC card of this Embodiment. The figure which shows the command transmission / reception sequence example in a prior art. The figure which shows the command transmission / reception sequence example in this Embodiment. The figure which shows the example of the input parameter corresponding to each module of a HW module part.

(First embodiment)
Hereinafter, the portable electronic device of the present embodiment will be described with reference to the drawings. In this embodiment, the portable electronic device is described as an IC card, but is not limited to an IC card.

  FIG. 1 is a diagram showing a configuration of a processing system 100 using an IC card according to the present embodiment. The processing system 100 includes an IC card 101, a card reader / writer 102, a terminal 103, a keyboard 104, a monitor 105, and a printer 106. The IC card 101 can be connected to a card reader / writer 102. The terminal 103 is configured by connecting a card reader / writer 102, a keyboard 104, a monitor 105, and a printer 106.

  The card reader / writer 102 is an interface device for communicating with the IC card 101. The card reader / writer 102 performs power supply, clock supply, reset control, and data transmission / reception with respect to the IC card 101.

  The terminal 103 inputs various commands to the IC card 101 via the card reader / writer 102. For example, when the IC card 101 receives a data write command from the card reader / writer 102, the IC card 101 performs a process of writing the received data into the internal nonvolatile memory. Further, the terminal 103 reads data from the IC card 101 by transmitting a read command to the IC card 101. The terminal 103 performs various processes based on the data received from the IC card 101.

  The monitor 105 is controlled by the terminal 103 and displays various information. The keyboard 104 converts an operation performed by an operator of the processing system 100 into a signal and outputs the signal to the terminal 103. The printer 106 prints out information from the terminal 103.

FIG. 2 is a diagram for explaining a configuration example of the IC card 101 according to the present embodiment.
The IC card 101 includes a card-shaped main body and an IC module 200 built in the main body. The IC module 200 is provided with a memory unit 200a, an HW (hardware) module unit 200b, a control element 201, and a communication unit 206.

  The control element 201 includes, for example, a CPU, a register, and the like, and performs overall control of processing in the IC card 101. The communication unit 206 executes communication processing with the card reader / writer 102. The communication method is not limited to the contact method, and any of a wireless method, a SWP method, and a USB method may be adopted.

  The memory unit 200a includes a nonvolatile data memory 202, a working memory 203, a program memory 204, and a coprocessor memory 205 whose stored contents can be erased.

  The data memory 202 is used for storing various data, and is composed of, for example, an EEPROM or a flash memory. The working memory 203 is a memory for temporarily storing processing data when the control element 201 performs processing, and is configured by a RAM or the like, for example. The program memory 204 is configured by a mask ROM, for example, and stores a program of the control element 201 and the like. The coprocessor memory 205 is a memory for temporarily storing processing data when performing cryptographic processing, and includes, for example, a RAM.

  The HW module unit 200b includes a cryptographic module 207 that performs cryptographic processing, a random number generation module 208 that generates random numbers, a voltage detection module 209 that detects a power supply voltage supplied to a power supply terminal, and a clock frequency supplied to a clock terminal. A clock detection module 210 that detects the temperature state of the IC card 101, and an internal clock module 212.

  The cryptographic module 207 performs cryptographic calculation. The cryptographic module 207 includes, for example, a DES, RSA, AES coprocessor, a transposition circuit, and the like. The random number generation module 208 generates a random number. The voltage detection module 209 detects the voltage value of the supplied power, and transmits a signal for stopping the operation of the IC card 101 to the control element 201 when the voltage is out of the IC card operable range set in advance. . The clock detection module 210 detects the supplied clock frequency, and transmits a signal for stopping the operation of the IC card 101 to the control element 201 when the clock frequency is out of the IC card operable range set in advance.

  The temperature detection module 211 detects the temperature of the IC card 101, and outputs a signal to the control element 201 to stop the operation of the IC card 101 when the temperature of the IC card 101 deviates from a preset IC card operable range. Send. The internal clock module 212 generates a clock (defined as an internal clock) used inside the IC card configuration example 200 separately from a clock (defined as an external clock) supplied from the card reader / writer 102. The control element 201 and the modules 207 and 208 of the HW module unit 200b are supplied.

  FIG. 3 is a diagram illustrating a connection terminal configuration of the communication unit 206 of the IC card 101 according to the present embodiment. As described above, the communication method of the communication unit 206 is not limited to the contact method, and any of a wireless method, a SWP method, and a USB method may be employed.

  The power supply terminal 301 receives supply power from the card reader / writer 102. The reset terminal 302 receives a reset signal from the card reader / writer 102. The clock terminal 303 receives a clock supplied from the card reader / writer 102. The ground terminal 305 is grounded via the card reader / writer 102. The communication terminal 307 exchanges communication signals with the card reader / writer 102. Note that the unused terminals 304, 306, and 308 may be used as communication terminals by the I wireless type, SWP type, and USB type.

  FIG. 4 is a diagram illustrating a software configuration example of a conventional IC card. The IC card 101 includes a communication driver unit 401, an IC card OS unit 402, and an application unit 403 as software.

  The communication driver unit 401 controls the communication unit 206. The IC card OS unit 402 performs control of the HW mounted on the IC card, memory management, application management, and command management. The application unit 403 executes processing corresponding to the received command.

  FIG. 5 is a diagram illustrating a software configuration example of the IC card according to the present embodiment. The IC card 101 includes a communication driver unit 501, an IC card OS unit 502, an application unit 503, and an API library unit 504 as software.

  The communication driver unit 501 controls the communication unit 206. The IC card OS unit 502 performs control of the HW mounted on the IC card, memory management, application management, and command management. The application unit 503 executes processing corresponding to the received command. The API library unit 504 includes an API (Application Programming Interface). The API is a set of instructions and functions that can be used by the software application. Applications A, B, and C of the application unit 503 can use the communication unit 206, the encryption module 207, the random number generation module 208, the detection modules 209, 210, and 211, and the internal clock module 212 using the API. In other words, the API has a function of acquiring and exchanging information between the application unit 503 and the HW module unit.

  The applications A, B, and C are IC card applications written in a high-level language. The communication unit 206 receives the applications A, B, and C as data. The IC card OS unit 502 can add / delete applications A, B, and C to the IC card 101 even after the IC card is issued. Applications A, B, and C can be mounted on different IC cards that conform to the same high-level language specifications. Here, in the present embodiment, the high-level language means a programming language that is less dependent on the configuration of the OS and IC card than the machine language and assembly language.

  Next, the operation of the IC card 101 will be described.

  As shown in the processing system 100 using the IC card in FIG. 1, the IC card 101 is connected to a card reader / writer 102. When the connection method is a contact method, the connection terminal of the IC card 101 shown in FIG. 3 and the corresponding terminal of the card reader / writer 102 are connected. When the connection is completed, the card reader / writer 102 supplies power and a clock to the IC card 101 and transmits a reset signal (RST). The IC card 101 detects that the supplied power supply, clock, and temperature are within a preset operable range by a detection circuit, and outputs a signal (ATR) notifying that a reset signal has been received at the reset terminal 302. It transmits from the communication terminal 307. If any one of the power source, clock, and temperature is outside the operable range, the detection module detects that and the operation of the IC card 101 stops.

  Thereafter, the card reader / writer 102 and the IC card 101 transmit and receive data via the communication terminal.

  FIG. 6 is a diagram illustrating an example of a command transmission / reception sequence in the prior art.

  After the above initial response is completed and an application for executing processing on the IC card 101 is activated, the card reader / writer 102 transmits a command to the IC card 101. In step 601, the communication driver unit 401 receives received data including a command. In step 602, the communication driver unit 401 executes reception processing. The communication driver unit 401 interprets the protocol included in the received data and extracts command data. The communication driver unit 401 converts the extracted command data into a format used by the IC card OS unit 402 and the application unit 403, and transmits the converted command data to the IC card OS unit 402 in step 603.

  In step 604, the IC card OS unit 402 executes a process corresponding to the received command data as a command process. An application is assigned for each command processing. In step 605, the IC card OS unit 402 calls a function for executing the corresponding processing. The function is a process for directly controlling the HW, for example, executing cryptographic calculation or rewriting the contents of the memory. In step 606, the application executes the specified function. The function is executed under the control of the IC card OS unit 402. That is, the HW module unit is controlled by the IC card OS unit 402. In step 607, the application unit 403 returns the result of executing the function to the IC card OS unit 402 as a return value.

  In step 608, the IC card OS unit 402 converts the return value into a communication format, and adds a status word indicating whether or not the command processing is successful to generate response data. In step 609, the IC card OS unit 402 transmits response data to the communication driver unit 401. In step 610, the communication driver 401 executes transmission processing for adding information necessary for communication with the card reader / writer, such as protocol information, to the response data 609. In step 611, the card reader / writer 102 receives the transmission data transmitted from the communication driver unit 401.

  As described above, in the conventional technique, the HW module unit 200b including the detection modules 209, 210, and 211 is controlled by the IC card OS unit 402. Therefore, if the handling of the HW module is to be changed, it is necessary to change the IC card OS unit 402 so as to match it. Further, when an application is added later, the IC card OS unit 402 must be regulated to handle the HW module with the application to achieve matching.

  FIG. 7 is a diagram illustrating an example of a command transmission / reception sequence according to the present embodiment.

  After the initial response is completed and an application for executing processing on the IC card 101 is activated, the card reader / writer 102 transmits a command to the IC card 101. In step 701, the communication driver unit 501 receives received data including a command. In step 702, the communication driver unit 501 executes reception processing. The communication driver unit 501 extracts command data by interpreting the protocol included in the received data. The communication driver unit 501 converts the extracted command data into a format used by the IC card OS unit 502 and the application unit 503, and transmits the converted command data to the IC card OS unit 502 in step 703.

  In step 704, the IC card OS unit 502 confirms whether the received command data is a command to be processed by an activated application. If the confirmation is OK, the received command data is transmitted to the application unit 503 in step 705. Therefore, the IC card OS unit 502 does not execute an operation of interpreting command data and designating a function for controlling the HW module as in the conventional case.

  In step 706, the application belonging to the application unit 503 checks whether the received command includes an instruction for controlling the HW module. If such an instruction is included, in step 707, the application transmits the input parameter to the API library unit 504. It is possible to specify which HW module is controlled by this input parameter. For example, when there is an API for acquiring information from the detection circuit in the API library unit 504, when it is desired to acquire a voltage from the voltage circuit, the input parameter is set to 01 and the API is started. When it is desired to acquire the number of clocks from the clock circuit, the input parameter is set to 02 and the API is activated.

  In step S708, the API executes an API process. In the API process, the API analyzes the input parameter, converts the input parameter into an input parameter that can be processed by the corresponding HW module, and transmits the input parameter to the HW module unit 200b. Further, the processing result from the HW module unit 200b is received.

  Information exchange between the API and the HW module unit 200b will be specifically described. For example, when the power supply voltage is detected, in step 709, the API transmits an input parameter indicating an instruction “detect how many volts the currently generated voltage is” to the HW module unit 200b. In step 710, the HW module unit 200b measures the power supply voltage, and in step 711, transmits the measured power supply voltage value to the API.

  FIG. 8 is a diagram illustrating an example of input parameters corresponding to each module of the HW module unit 200b. Note that the operation cutoff instruction described in each detection module in FIG. 8 is an instruction to enable the function of each detection module to block the operation of the IC card 101. For example, the clock detection module 210 has a function of stopping the operation of the IC card 101 when the number of clocks exceeds the range of 1 MHz to several MHz. The API can also instruct such an operation interruption.

  In step 712, the API belonging to the API library unit 504 transmits a return value to the application. The API sets a code indicating the voltage value as a return value when the voltage can be normally acquired, and sets a code indicating that as a return value when the voltage cannot be normally set. The application proceeds with processing according to the returned return value. For example, when examining whether or not the power supply voltage is a state that is a restriction on software execution, the application acquires a voltage value detected using the voltage detection module 209 via an API belonging to the API library unit 504, and Determine if the software is executable. The application can call another API according to the processing result to execute the next processing, or can call the API repeatedly.

  Conventionally, as shown in FIG. 6, the IC card OS unit 502 controls the HW module. However, as described above, the IC card 101 can more flexibly control the HW module by configuring the application to control the HW module via the API.

  For example, it is assumed that the voltage values that the card reader / writer 102 can supply to the IC card 101 are three levels of 5V, 3V, and 1.8V, and the card reader / writer 102 supplies 5V. The API returns a return value (= “0x03”). This return value (= “0x03”) means that all the HW modules can be executed under this voltage (= 5 V), and there is no restriction on the execution of software. As described above, the application can execute not only the voltage value currently supplied by the card reader / writer 102 but also all the HW modules mounted on the IC card 101 based on the acquired return value. You can also know.

  In addition, since the power supply voltage is sufficiently supplied to 5 V, 3 V, and 1.8 V, the application determines that encryption processing that generally increases power consumption and high clock operation can be executed. Furthermore, the application determines that a series of processing can be performed at high speed using these functions.

  In step 713, the application creates a command execution result and transmits it to the IC card OS unit 502. The command execution result includes a value acquired by the operation of the HW module, the result of whether the operation of the HW module is successful, or the like. In step 714, the IC card OS unit 502 creates response data by response processing, and transmits it to the communication driver unit 501 in step 715. In addition to the command execution result, the response data is appended with a status word defined by the IC card standard indicating whether or not the command processing is successful.

  In step 716, the communication driver unit 501 generates transmission data by adding protocol information such as protocol information necessary for communication with the card reader / writer 102 to the response data 715. In step 717, the communication driver unit 501 performs transmission processing on the card reader / writer 102.

  As described above, the application determines the environment in which the IC card 101 operates based on the measurement value of the HW module. The physical quantity used for determining the operating environment includes the temperature around the IC card 101, the power supply voltage supplied to the IC card 101 from the outside, the clock frequency, and the like. The application also restricts the operation of the HW module by this measured value. The HW modules subject to operation restrictions include an encryption module 207, a random number generation module 208, an internal clock module 212, and the like.

  Next, the command processing executed by the application can be flexibly configured as described below. The application can flexibly select a processing method based on the supplied voltage / clock information.

  (1) The internal clock module is controlled by the API that controls the HW module according to the supplied voltage / clock, and the internal clock is changed. When the voltage is lower than the predetermined value or the clock frequency is lower than the predetermined value, the internal clock frequency is lowered.

  (2) The supportable encryption key length is changed according to the supplied voltage and clock. When the voltage is higher than the predetermined value or the clock frequency is higher than the predetermined value, the encryption key length is increased. When the voltage is low or the clock frequency is low, the encryption key length is shortened.

  (3) It is determined whether the application can be executed according to the supplied voltage / clock. If the application cannot be executed, an error is transmitted. For example, when the voltage is equal to or higher than a predetermined voltage and the clock frequency is equal to or higher than the predetermined frequency, the hardware cryptographic module can be used, and otherwise, the hardware cryptographic module cannot be used and an error is transmitted.

  (4) It is determined whether the application can be executed according to the supplied voltage / clock. If the application is not executable, the value of the executable voltage / clock is returned as response data. For example, when the voltage is equal to or lower than the predetermined voltage or the clock frequency is equal to or lower than the predetermined frequency, the use of the hardware cryptographic module is disabled, and the predetermined voltage and the predetermined frequency are set in the response data.

  (5) Determine whether the application can be executed according to the supplied voltage / clock. If not, execute the functions of the internal clock module, cryptographic module, and random number generation module so that the application can be executed. Stop sequentially by controlling API. For example, when the voltage falls below the first predetermined value, the internal clock module is first stopped. Further, when the voltage falls below the second predetermined value, the cryptographic module is stopped. Then, when the voltage becomes equal to or lower than the third predetermined value, the random number generation module is stopped.

  (6) It is determined whether the application can be executed according to the supplied voltage / clock. If the application cannot be executed, execution of the HW module is prohibited and an alternative function by software is used. For example, when the voltage is a predetermined voltage or less or the clock frequency is a predetermined frequency or less, the cryptographic module and the random number generation module are switched from the hardware function to the software function. That is, a cryptographic processing function by software is used for the cryptographic module, and a random number generating function by software is used for the random number generating module.

In addition, the portable electronic device of this embodiment can have the following functions.
When it is determined in the API processing that software continuation execution is impossible, a specific result is output to the outside without passing control to the software processing that called the API.
If it is determined that the software cannot be continuously executed due to insufficient supply power, and the operation of the cryptographic module cannot be continued and an instruction from the outside cannot be processed, the fact that the power supply is insufficient is output to the outside.

[effect]
According to the embodiment described above, various effects can be achieved.

The application can acquire the status of the HW module and control the operation of the application with reference to the restrictions of the IC card. Therefore, the application can execute an optimum operation suitable for the state of the IC card system. For example, if the power supply voltage is high and stable and there are no restrictions, it is possible to increase the application execution speed by increasing the internal clock, and use the function of the hardware cryptographic module. It is also possible to perform cryptographic calculation processing at high speed.
On the other hand, if the operation of the HW module is limited because the power supply voltage is low and unstable, for example, if the cryptographic module does not operate unless the voltage is low and the clock is lowered, the application uses an API that controls the internal clock module. The power consumption can be reduced by lowering the internal clock to slow down the execution speed, stopping the use of the cryptographic module execution API, and switching the cryptographic processing to software processing.
The fact that such correspondence can be added, deleted, and changed flexibly is a remarkable effect.

  The application runs on an IC card that conforms to the same high-level language specification. Then, the application can detect the HW state by an API conforming to the high-level language specification, acquire restrictions on software execution, and control the hardware. For this reason, an application can be programmed without being aware of individual hardware specifications.

  Note that the functions described in the above-described embodiments are not limited to being configured using hardware, and can be realized by causing a computer to read a program describing each function using software. Each function may be configured by appropriately selecting either software or hardware.

Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage.
Various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.
The invention described in the scope of the claims at the beginning of the present application is added below.
[1]
A receiver for receiving commands from an external device;
An application unit that executes processing corresponding to the received command;
A hardware module unit having a plurality of modules each having a specific processing function configured by hardware;
An API (Application Programming Interface) unit for controlling the module based on an instruction from the application unit, obtaining the result, and returning the result to the application unit;
A transmission unit that acquires a processing result of the command from the application unit and transmits the processing result to the external device;
A portable electronic device comprising:
[2]
At least one module detects information about an environment in which the portable electronic device operates;
The application unit selects a method for executing processing corresponding to the command based on information on the environment acquired through the API unit.
The portable electronic device according to [1], characterized in that
[3]
The hardware module unit is a module that detects information about the environment.
A clock detection module for detecting a clock frequency supplied from the outside, a temperature detection module for detecting the ambient temperature of the portable electronic device, and a voltage detection module for detecting a power supply voltage supplied from the outside The portable electronic device according to [2].
[4]
The hardware module unit includes a cryptographic module that processes generation and decryption of a cipher, and a random number generation module that generates a random number,
The portable electronic device according to [2], wherein the application unit executes processing by selecting whether or not the cryptographic module and the random number generation module can be operated based on information on the environment, or software alternatives. apparatus.
[5]
The hardware module unit further includes an internal clock module that generates an internal clock of the portable electronic device,
The application part is
When the power supply voltage acquired from the voltage detection module through the API unit is equal to or higher than a first predetermined value, the clock frequency generated by the internal clock module through the API unit is increased.
When the power supply voltage acquired from the voltage detection module via the API unit is equal to or smaller than a second predetermined value smaller than the first predetermined position, the clock frequency generated by the internal clock module via the API unit is set. The portable electronic device according to [3], which is reduced.
[6]
An IC module having each part according to any one of [1] to [5];
An IC card body containing the IC module and
An IC card characterized by comprising:
[7]
The IC card according to [6], wherein the application unit is configured by software whose source program is a high-level language, and the software can be added or deleted.

  DESCRIPTION OF SYMBOLS 101 ... IC card, 102 ... Reader / writer, 103 ... Terminal, 104 ... Keyboard, 105 ... Monitor, 106 ... Printer, 200 ... IC module, 200a ... Memory part, 200b ... Hardware module part, 201 ... Control element, 202 ... Data memory 203 ... Working memory 204 ... Program memory 205 ... Copro memory 206 ... Communication unit 207 ... Cryptographic module 208 ... Random number generating module 209 ... Voltage detection module 210 ... Clock detection module 211 ... Temperature detection module 212, an internal clock module, 501, a communication driver unit, 503, an application unit, and 504, an API library unit.

Claims (6)

A receiver for receiving commands from an external device;
An application unit that executes processing corresponding to the received command;
A hardware module unit having a plurality of modules each having a specific processing function configured by hardware;
An API (Application Programming Interface) unit for controlling the module based on an instruction from the application unit, obtaining the result, and returning the result to the application unit;
And a transmission unit for transmitting to the external device to obtain the processing result of the command from the application section
At least one module detects information about an environment in which the portable electronic device operates;
The application unit selects a method for executing processing corresponding to the command based on information about the environment acquired through the API unit.
A portable electronic device characterized by that. The hardware module unit is a module that detects information about the environment.
A clock detection module for detecting a clock frequency supplied from the outside, a temperature detection module for detecting the ambient temperature of the portable electronic device, and a voltage detection module for detecting a power supply voltage supplied from the outside The portable electronic device according to claim 1 . The hardware module unit includes a cryptographic module that processes generation and decryption of a cipher, and a random number generation module that generates a random number,
2. The portable electronic device according to claim 1 , wherein the application unit executes processing by selecting whether or not the cryptographic module and the random number generation module are operable based on information related to the environment, or software alternatives. apparatus. The hardware module unit further includes an internal clock module that generates an internal clock of the portable electronic device,
The application part is
Wherein when API unit power supply voltage obtained from the voltage sensing module via the first predetermined value or more, to increase the clock frequency the internal clock module generates via the API unit,
When the power supply voltage acquired from the voltage detection module via the API unit is equal to or smaller than a second predetermined value smaller than the first predetermined position, the clock frequency generated by the internal clock module via the API unit is set. portable electronic device according to claim 2, characterized in that cause decreased. The application part is configured by software source program in a high level language, the software may add, portable electronic device according to any one of claims 1 to 4, characterized in that they can remove. An IC module having each part according to any one of claims 1 to 5,
An IC card comprising: an IC card main body storing the IC module.

Images