JP5882637B2 - Thin client type reading device, communication system, control method, and program - Google Patents

Description

The present invention relates to a thin client type reading device, a communication system, a control method, and a program.

  In recent years, a thin client type reader / writer (thin client type RW) has been proposed. The thin client type RW is connected to a server via a network, receives command information for a non-contact IC card (non-contact IC card) created by the server from the server, and receives the received command information for a non-contact IC. To be transferred to the card.

Here, in a system including a thin client type RW (an example of a reading device), a server (an example of an information processing device), and a non-contact IC card (an example of a medium), command information that requires encryption (an example of instruction information) When communication is performed, a serial number (sequence number) for managing a communication sequence is encrypted together with command information in the server.
Therefore, in the event of a communication error between the thin client type RW and the non-contact IC card, it is necessary to manage the communication sequence. Therefore, the new sequence number is encrypted together with the command information in the server, and the thin client type The data is transmitted to the RW, and communication between the thin client type RW and the non-contact IC card is performed again.
For this reason, if a communication error occurs even once between the thin client type RW and the non-contact IC card, the thin client type RW waits for encrypted command information from the server connected via the network. It takes a lot of time for recovery. For example, during the recovery, there is a problem that the non-contact IC card is out of a range (communication range) in which communication with the thin client type RW is possible and necessary communication is not completed.

  The present invention has been made in view of such problems, and an object thereof is to more appropriately control communication when instruction information from an information processing apparatus is transmitted to a storage medium.

Therefore, the reading device according to the present invention is a thin client-type reading device, and storage means for storing encryption key information notified from the information processing device and shared between the information processing device and the medium; Transmission means for encrypting a card command including a sequence number for managing a communication sequence notified from the information processing apparatus based on the encryption key information stored by the storage means and transmitting the encrypted card command to the medium. And the transmission means updates the sequence number included in the card command when the response to the transmitted card command is not received from the medium within a set period, and adds the encryption key information to the encryption key information. Based on this, the card command is re-encrypted and transmitted to the medium .

The communication system according to the present invention is a communication system including an information processing device, a medium, and a thin client type reading device, and the information processing device is shared between the information processing device and the medium. Key notification means for notifying the thin client type reading device of the encryption key information, and command notification means for notifying the thin client type reading device of a card command including a sequence number for managing a communication sequence. The thin client-type reading device notifies the information processing device based on the storage unit that stores the encryption key information notified from the information processing device and the encryption key information stored by the storage unit. Transmitting means for encrypting the transmitted card command and transmitting it to the medium, wherein the transmitting means transmits within a set period of time. When a response to the card command is not received from the medium, the sequence number included in the card command is updated, and the card command is re-encrypted based on the encryption key information and transmitted to the medium. .
The communication system according to the present invention is a communication system including an information processing device, a medium, and a thin client type reading device, and the information processing device is shared between the information processing device and the medium. A thin client type reading device, comprising: a notification means for encrypting a plurality of card commands including sequence numbers for managing different communication sequences based on the encryption key information, and notifying the thin client type reading device; The apparatus includes a transmission unit that transmits the first card command of the plurality of card commands notified by the notification unit to the medium, and the transmission unit is configured to respond to the transmitted card command within a set period. If no response is received from the medium, the next card command of the plurality of card commands is transmitted to the medium. That.

  Note that the present invention may be a system, a recording medium, or the like.

  ADVANTAGE OF THE INVENTION According to this invention, communication at the time of transmitting the instruction information from information processing apparatus to a storage medium can be controlled more appropriately.

It is a figure which shows an example of a structure of a communication system. It is a figure which shows an example of a hardware structure of each apparatus. It is a figure which shows an example of a structure of the module of each apparatus. It is a figure which shows an example of the sequence of a communication system. It is a figure which shows an example of the flowchart which concerns on the process at the time of reception. It is a figure which shows an example of the sequence of a communication system. It is a figure which shows an example of the flowchart which concerns on the process at the time of reception.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
FIG. 1 is a diagram illustrating an example of a configuration of a communication system according to the present embodiment. The communication system includes a server 100, an RW (reader / writer) 200, and a medium 300. The server 100 is an example of an information processing apparatus (computer). The RW 200 is an example of a reading device (computer). The medium 300 is an example of a storage medium (computer), and is a contactless IC card, a mobile phone having a wallet function, a mobile phone having a PDA function, a mobile terminal, or the like.
The server 100 and the RW 200 are communicably connected via the network 900. Note that the form of communication is not limited to a specific form such as wired, wireless, or a mixture of wired and wireless. In addition, the RW 200 and the medium 300 perform wireless communication. For example, a carrier is transmitted from the RW 200, power is supplied to the medium 300 by electromagnetic induction, and communication is performed between the RW 200 and the medium 300 by carrier modulation.

Next, the hardware configuration of each apparatus will be described with reference to FIG. FIG. 2 is a diagram illustrating an example of a hardware configuration of each apparatus.
FIG. 2A is a diagram illustrating an example of a hardware configuration of the server 100. The server 100 includes a central processing unit (CPU) 110, a read only memory (ROM) 120, a random access memory (RAM) 130, a hard disk drive (HDD) 140, an input / output device 150, and an interface (I / F) 160. Consists of including.

The CPU 110 controls the entire server 100. For example, the CPU 110 executes various programs stored in the ROM 120 and realizes the functions of the server 100 described later.
The ROM 120 stores various data such as various programs and data used in various processes. The ROM 120 is an example of a storage device that stores various data. The RAM 130 functions as a main memory and work area for the CPU 110. The RAM 130 is an example of a temporary storage device that temporarily stores various data.
The HDD 140 is an example of an external storage device having a large capacity storage area. The input / output device 150 includes a display, a mouse, a keyboard, and the like, and inputs or outputs data in response to an operation (user operation) by a user such as a mouse or a keyboard. The I / F 160 is a communication interface for performing wired or wireless communication, and is connected to the network 900 via various cables such as a LAN cable, for example.

FIG. 2B is a diagram illustrating an example of a hardware configuration of the RW 200. The RW 200 includes a CPU 210, a ROM 220, a RAM 230, an RF (Radio Frequency) circuit 240, an ANT (antenna) 250, and an I / F 260.
The CPU 210 controls the entire RW 200. For example, the CPU 210 executes various programs stored in the ROM 220 and realizes the functions and flowcharts of the RW 200 described later.

The ROM 220 stores various data such as various programs and data used in various processes. The ROM 220 is a memory in which data can be electrically written and erased, such as an EEPROM (Electrically Erasable and Programmable Read Only Memory). The ROM 220 is an example of a storage device that stores various data. The RAM 230 functions as a main memory and work area for the CPU 210. The RAM 230 is an example of a temporary storage device that temporarily stores various data.
The RF circuit 240 exchanges high-frequency signals with the ANT 250, supplies power, and modulates and demodulates data. The ANT 250 radiates (transmits) a high-frequency signal (high-frequency energy) to space as a radio wave (electromagnetic wave). The ANT 250 converts (receives) a radio wave (electromagnetic wave) in space into a high frequency signal (high frequency energy). The I / F 260 is a communication interface for performing wired or wireless communication. For example, the I / F 260 is connected to the network 900 via various cables.

FIG. 2C is a diagram illustrating an example of a hardware configuration of the medium 300. The medium 300 includes a CPU 310, a ROM 320, a RAM 330, an RF circuit 340, and an ANT 350.
The CPU 210 controls the entire medium 300. For example, the CPU 310 executes various programs stored in the ROM 320 and realizes the functions of the medium 300 described later.

The ROM 320 stores various data such as various programs and data used in various processes. The ROM 320 is an example of a storage device that stores various data. The RAM 330 functions as a main memory and work area for the CPU 310. The RAM 330 is an example of a temporary storage device that temporarily stores various data.
The RF circuit 340 exchanges high-frequency signals with the ANT 350, supplies power, and modulates and demodulates data. The ANT 350 emits (transmits) a high-frequency signal (high-frequency energy) to space as a radio wave (electromagnetic wave). The ANT 350 converts (receives) a radio wave (electromagnetic wave) in space into a high frequency signal (high frequency energy).

Next, the module configuration of each apparatus will be described with reference to FIG. FIG. 3 is a diagram illustrating an example of a module configuration of each apparatus. The function of each module is realized by each program being executed by each CPU of each device. However, some or all of the functions of each module may be realized by dedicated hardware.
FIG. 3A is a diagram illustrating an example of a module configuration of the server 100. The server 100 includes a control unit 170, a storage unit 180, and a communication unit 190.
The control unit 170 controls the storage unit 180 and the communication unit 190 to control the entire server 100. The storage unit 180 reads and writes data in the storage device such as the RAM 130 and the HDD 140 based on an instruction from the control unit 170. The communication unit 190 communicates with the RW 200 via the I / F 160 based on an instruction from the control unit 170. For example, the communication unit 190 transmits various commands to the RW 200 via the I / F 160 under the control of the control unit 170.

FIG. 3B is a diagram illustrating an example of the configuration of the module of the RW 200. The RW 200 includes a control unit 270, a storage unit 280, and a communication unit 290.
The control unit 270 controls the storage unit 280 and the communication unit 290 to control the RW 200 as a whole. The storage unit 280 reads, writes, and the like with respect to data in a storage device such as the ROM 220 and the RAM 230 based on an instruction from the control unit 270. For example, the storage unit 280 acquires data in the ROM 220 under the control of the control unit 270.
The communication unit 290 communicates with the server 100 via the I / F 260 based on an instruction from the control unit 270. For example, the communication unit 290 receives various commands from the server 100 via the I / F 260 and notifies the control unit 270 of the various commands. Further, the communication unit 290 communicates with the medium 300 via the RF circuit 240 and the ANT 250 based on an instruction from the control unit 270. For example, the communication unit 290 transmits a card command to the medium 300 under the control of the control unit 270 via the RF circuit 240 and the ANT 250.

FIG. 3C is a diagram illustrating an example of a module configuration of the medium 300. The medium 300 includes a control unit 370, a storage unit 380, and a communication unit 390.
The control unit 370 controls the storage unit 380 and the communication unit 390, and controls the entire medium 300. The storage unit 380 performs reading, writing, and the like of data in storage devices such as the ROM 320 and the RAM 330 based on instructions from the control unit 370.
The communication unit 390 communicates with the RW 200 via the RF circuit 340 and the ANT 350 based on an instruction from the control unit 370. For example, the communication unit 390 performs processing on the card command under the control of the control unit 370, and transmits the processing result (response to the card command) to the RW 200 via the RF circuit 340 and the ANT 350.

Next, communication control in the communication system will be described with reference to FIG. FIG. 4 is a diagram illustrating an example of a sequence of the communication system.
First, the server 100 generates a relay command (authentication A) including an instruction (authentication command A) for the server 100 to acquire information required for authentication of the medium 300, and transmits the generated relay command (authentication A) to the RW 200. (SQ5). When receiving the relay command (authentication A), the RW 200 transmits the authentication A command included in the relay command (authentication A) to the medium 300 (SQ10).
Upon receiving the authentication A command, medium 300 calculates authentication A information required for authentication and transmits an authentication A response including authentication A information to RW 200 (SQ15). When receiving the authentication A response, the RW 200 transmits the relay response (authentication A) to the server 100 (SQ20). When the server 100 receives the relay response (authentication A), the server 100 authenticates the medium 300 based on the authentication A information included in the relay response (authentication A).

Further, the server 100 generates an authentication B command including the authentication B information required for authentication of the server 100 by the medium 300, generates a relay command (authentication B) including the generated authentication B command, and generates the generated relay command (authentication). B) is transmitted to RW200 (SQ25). When receiving the relay command (authentication B), the RW 200 transmits the authentication B command included in the relay command (authentication B) to the medium 300 (SQ30).
Upon receiving the authentication B command, the medium 300 authenticates the server 100 based on the authentication B information, and transmits an authentication B response including the result to the RW 200 (SQ35). When receiving the authentication B response, the RW 200 transmits the relay response (authentication B) to the server 100 (SQ40).
Through the above-described processing, mutual authentication between the server 100 and the medium 300 is performed.

When the medium 300 authenticates the server 100, the medium 300 generates a transaction key (an example of encryption key information) used for encryption and decryption in this communication (SQ45). In addition, when receiving the authentication B response, the server 100 generates a transaction key used for encryption and decryption in this communication (SQ50). That is, the transaction key is shared between the server 100 and the medium 300. The mutual authentication method and the transaction key sharing method are not limited to the above-described configuration, and other known methods may be used.
Then, the server 100 generates a key notification command including the transaction key, and transmits the generated key notification command to the RW 200 (SQ55). When receiving the key notification command, the RW 200 stores the transaction key in the RAM 230 and transmits a key notification response to the server 100 (SQ60). If the server 100 determines that the key notification response is not received from the RW 200 within a certain time, the server 100 transmits the key notification command to the RW 200 again.

Then, the server 100 generates an instruction command (an example of instruction information) indicating an instruction to the medium 300, and includes the generated instruction command and a sequence number (an example of management information) that can identify communication related to the instruction command. A relay command is generated, and the generated relay command is transmitted to the RW 200 (SQ65). When receiving the relay command, RW 200 stores the instruction command and the sequence number in RAM 230, and adds the sequence number to the instruction command (SQ70). Subsequently, the RW 200 reads the transaction key stored in the RAM 230, encrypts the instruction command to which the sequence number is added using the transaction key, and generates a card command (an example of encryption instruction information) (SQ75).
Subsequently, the RW 200 transmits the generated card command to the medium 300 (SQ80: an example of a first transmission step). On the other hand, when receiving the card command, the medium 300 decrypts the card command using the transaction key to obtain an instruction command and a sequence number, and performs processing based on the instruction command and the sequence number. Then, when the processing is completed, the medium 300 updates the sequence number, encrypts the updated sequence number and the processing result using the transaction key, and transmits the result to the RW 200 as a card response (SQ85). FIG. 4 shows an example in which a communication error has occurred and the card response has not been received by the RW 200.

Further, after transmitting a card command to the medium 300, the RW 200 reads the instruction command and the sequence number stored in the RAM 230 when a certain time has elapsed without receiving a card response corresponding to the card command, and the sequence number And the updated sequence number is added to the instruction command (SQ90). Subsequently, the RW 200 reads the transaction key stored in the RAM 230, encrypts the instruction command to which the sequence number updated using the transaction key is added, and generates a card command (SQ95).
Subsequently, the RW 200 transmits the generated card command to the medium 300 (SQ100: an example of a second transmission step). On the other hand, when receiving the card command, the medium 300 decodes the card command into an instruction command and a sequence number, and performs processing based on the instruction command and the sequence number. Subsequently, the medium 300 updates the sequence number, encrypts the updated sequence number and the processing result using the transaction key, and transmits the result as a card response to the RW 200 (SQ105).
And RW200 will transmit to the server 100 as a relay response, if a card response is received (SQ110). Note that the RW 200 may decrypt the card response using the transaction key and then transmit it to the server 100 as a relay response.

Next, processing when the RW 200 receives a key notification command and a relay command (processing upon reception) will be described with reference to FIG. FIG. 5 is a diagram illustrating an example of a flowchart related to the reception process.
First, the control unit 270 receives a command from the server 100 (S5). Subsequently, the control unit 270 determines whether or not the received command is a key notification command (S10). At this time, if the control unit 270 determines that the command is a key notification command, the process proceeds to S15. If the control unit 270 determines that the command is not a key notification command, the process proceeds to S25.

In S15, the control unit 270 extracts the transaction key from the key notification command and stores it in the RAM 230. Subsequently, the control unit 270 transmits a key notification response to the server 100 (S20), and ends the process.
In S25, the control unit 270 determines whether the received command is a command that requires encryption, more specifically, a relay command including an instruction command and a sequence number. At this time, when determining that the command requires encryption, the control unit 270 extracts the instruction command and the sequence number from the relay command, stores them in the RAM 230, and moves the process to S30. On the other hand, if the control unit 270 determines that the command does not require encryption, the control unit 270 moves the process to S50 using the command as a card command.

In S <b> 30, the control unit 270 determines whether a transaction key is stored in the RAM 230. At this time, the control unit 270 moves the process to S40 if it is determined that it is stored, and moves the process to S35 if it is determined that it is not stored. In S35, the control unit 270 transmits information indicating an error to the server 100, and ends the process.
In S40, the control unit 270 reads the instruction command and the sequence number from the RAM 230, updates the sequence number, and adds the updated sequence number to the read instruction command. Subsequently, the control unit 270 reads the transaction key from the RAM 230, and generates a card command by encrypting the instruction command with the sequence number added using the transaction key (S45).

In S50, the control unit 270 transmits a card command to the medium 300. Subsequently, the control unit 270 determines whether or not the reception of the card response from the medium 300 corresponding to the transmitted card command is completed (S55). At this time, if the control unit 270 determines that the reception is completed, the process proceeds to S60, and if it is determined that the reception is not completed, the process proceeds to S65.
In S60, the control unit 270 transmits the card response as a relay response to the server 100, and ends the process. In S65, the control unit 270 determines whether or not a certain time has elapsed since the card command was transmitted. At this time, the control unit 270 moves the process to S70 if it is determined that a certain time has elapsed, and moves the process to S55 if it is determined that the certain time has not elapsed.
In S70, the control unit 270 determines whether or not the transmitted card command is an encrypted card command. At this time, if the control unit 270 determines that the command is an encrypted card command, the process proceeds to S40. If the control unit 270 determines that the command is not an encrypted card command, the process proceeds to S50.

  According to the configuration described above, it is possible to carry out retransmission control of a card command for a communication error occurring between the medium 300 and the RW 200 alone.

<Second Embodiment>
In the present embodiment, a simpler configuration for performing retransmission control of a card command for a communication error occurring between the medium 300 and the RW 200 as compared with the configuration shown in the first embodiment will be described.
In the present embodiment, the same components as those in the first embodiment are denoted by the same reference numerals, and the description thereof is omitted as appropriate. In addition, since the structure of a sequence and a process at the time of reception is mainly different, these are demonstrated.
First, the sequence will be described with reference to FIG. FIG. 6 is a diagram illustrating an example of a sequence of the communication system. Note that the processing from SQ5 to SQ50 is the same as the processing of the sequence of the first embodiment, and thus the description thereof is omitted.

In SQ205, the server 100 generates a plurality of card commands. More specifically, the server 100 acquires transmission number information indicating the sequence number stored in the HDD 140 and the number of times the card command is transmitted. Subsequently, the server 100 generates a card command by encrypting the instruction command to which the updated sequence number is added based on the acquired sequence number and the transmission count information.
For example, when the acquired sequence number is “0” and the transmission count information is “3”, the server 100 encrypts the instruction command to which the sequence number “1” is added, the card command A, and the sequence number “3”. Card command B in which the instruction command to which "" is added is encrypted, and card command C in which the instruction command to which the sequence number "5" is added are encrypted. Here, the card command A, the card command B, and the card command C are card commands having the same instruction command but different sequence numbers.
Note that the transmission count information is registered in advance by an operation of the input / output device 150 by an administrator, and can be changed as appropriate.

Then, the server 100 transmits the relay command including a plurality of card commands to the RW 200 (SQ210). When receiving the relay command, the RW 200 extracts the top card command from the relay command and transmits the extracted top card command to the medium 300 (SQ215). The RW 200 transmits the next card command to the medium 300 every time it determines that a certain time has elapsed since the card command was transmitted (SQ220, SQ225).
Further, when receiving the card command, the medium 300 reads the transaction key from the RAM 230, decrypts the card command using the transaction key to obtain an instruction command and a sequence number, and performs processing based on the instruction command and the sequence number. Subsequently, when the processing is completed, the medium 300 updates the sequence number, encrypts the updated sequence number using the transaction key and the processing result, and transmits the encrypted result to the RW 200 as a card response (SQ230).
And RW200 will transmit to the server 100 as a relay response, if a card response is received from the medium 300 (SQ235).

Next, reception processing will be described with reference to FIG. FIG. 7 is a diagram illustrating an example of a flowchart relating to the reception process.
First, the control unit 270 receives a relay command from the server 100 (S105). Subsequently, the control unit 270 transmits one card command included in the relay command to the medium 300. More specifically, since the card commands are relay commands in ascending order of sequence numbers in the server 100, the control unit 270 sequentially transmits from the card command at the head of the relay command.
The method for determining (designating) the order of transmission is not limited to the above-described configuration. For example, in the server 100, order information indicating the order of transmission may be associated with the card command, and the control unit 270 may transmit the card command to the medium 300 according to the order information.

Subsequently, the control unit 270 determines whether or not the reception of the card response from the medium 300 is completed (S115). At this time, if the control unit 270 determines that the reception is completed, the process proceeds to S120, and if it is determined that the reception is not completed, the process proceeds to S125.
In S120, the control unit 270 transmits the card response as a relay response to the server 100, and ends the process. At this time, the control unit 270 includes transmitted information indicating the number of times the card command has been transmitted in the relay response. The server 100 reads out the result of the decryption using the transaction key and the sequence number from the received relay response and checks the consistency. The sequence number is stored in the HDD 140 and is used when generating a relay command that requires the next encryption.

In S125, control unit 270 determines whether or not a certain time has elapsed since the card command was transmitted. At this time, if the control unit 270 determines that a certain time has elapsed, it moves the process to S130, and if it determines that the certain time has not elapsed, it moves the process to S115.
In S130, the control unit 270 determines whether or not there is a card command (retry message information) that has not been transmitted among a plurality of card commands included in the received relay command. At this time, if it is determined that the control unit 270 exists, the process proceeds to S110, and if it is determined that it does not exist, the process proceeds to S135.
In S135, the control unit 270 transmits information indicating an error to the server 100, and ends the process.

  According to the configuration described above, it is possible to carry out retransmission control of a card command for a communication error occurring between the medium 300 and the RW 200 alone. Furthermore, according to the above-described configuration, it is not necessary to perform processing relating to encryption in the RW 200, so that it is possible to make the RW 200 that secures retransmission control at a certain level or more while simplifying the configuration of the RW 200.

Further, the present embodiment is not limited to the configuration described above. For example, in SQ205, the server 100 transmits all card commands as one relay command, but the configuration is not limited to this.
For example, the server 100 may be configured to transmit the first card command to the RW 200 as a relay command, and then transmit the remaining card command (retry message information) to the RW 200 as a relay command.
According to this configuration, the time until the medium 300 starts processing the first instruction command can be further shortened, and the situation where the necessary communication is not completed due to the medium 300 being out of the communicable range occurs. The frequency of performing can be further reduced.

In this embodiment, the retransmission control of a command that requires encryption has been described. However, similar retransmission control can be applied to a command that does not require encryption.
For example, in SQ205, the server 100 generates an instruction command including an instruction to the medium 300 that does not require encryption, and generates a card command (plaintext command) including the generated instruction command. That is, the server 100 acquires transmission count information indicating the number of times the plaintext command stored in the HDD 140 is transmitted, and generates a number of plaintext commands corresponding to the acquired transmission count information.
In SQ210, the server 100 transmits the generated plaintext commands to the RW 200 as relay commands. In SQ 215, when the RW 200 receives the relay command, the RW 200 extracts one plaintext command from the relay command and transmits the extracted single plaintext command to the medium 300. Further, every time the RW 200 determines that a certain time has elapsed since the transmission of the plain text command, the RW 200 transmits the next plain text command to the medium 300 (SQ220, SQ225).

<Third Embodiment>
In the present embodiment, a simpler configuration for performing retransmission control of a card command for a communication error occurring between the medium 300 and the RW 200 as compared with the configuration shown in the second embodiment will be described.
In the present embodiment, the same components as those of the second embodiment are denoted by the same reference numerals, and the description thereof is omitted as appropriate. Since the reception process is mainly different, the reception process will be described, but the illustration is omitted.
In the reception process of this embodiment, when the control unit 270 receives a card response, the processes of S115, S120, and S125 are deleted from the reception process of the second embodiment, and the process of S135 is replaced with normal termination. A process of transmitting the relay response to the server 100 at an appropriate timing is adopted. That is, the control unit 270 sequentially transmits all card commands extracted from the relay command to the medium 300 regardless of the presence / absence of a card response from the medium 300.

In other words, the processing performed by the medium 300 based on a card command or the like is not limited. For example, the card command includes an identifier that can identify the instruction command, and the medium 300 determines based on the identifier whether the decrypted instruction command has already been processed.
Then, when it is determined that the medium 300 has already been performed, the instruction command processing is not performed, and the result of the processing already performed and the updated sequence number are transmitted to the RW 200 as a card response, or processing that has already been performed. Is processed according to the instruction command, and the result of this process and the updated sequence number are transmitted to the RW 200 as a card response.
In any case, the medium 300 includes the sequence number obtained by updating the decrypted sequence number together with the instruction command in the card response.

  According to the configuration described above, it is possible to make the RW 200 that secures retransmission control at a certain level or more while further simplifying the configuration of the RW 200 of the present embodiment as compared to the RW 200 of the second embodiment.

<Other embodiments>
The configurations of the above-described embodiments can be appropriately combined and employed.

  As described above, according to the configuration described above, it is possible to more appropriately control communication when instruction information from the information processing apparatus is transmitted to the storage medium.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

100 server 200 RW
300 medium

Claims (10)

A thin client type reading device,
Storage means for storing encryption key information shared between the information processing apparatus and the medium notified from the information processing apparatus;
Based on the encryption key information stored by the storage unit, a transmission unit that encrypts a card command including a sequence number for managing a communication sequence notified from the information processing apparatus and transmits the encrypted card command to the medium;
Have
When the transmission means does not receive a response to the transmitted card command from the medium within a set period, it updates the sequence number included in the card command, and based on the encryption key information, A thin client type reading device that re-encrypts the card command and transmits it to the medium . A communication system including an information processing device, a medium, and a thin client type reading device,
The information processing apparatus includes:
Key notification means for notifying the thin client type reading device of encryption key information shared between the information processing apparatus and the medium;
Command notifying means for notifying the thin client type reading device of a card command including a sequence number for managing a communication sequence;
Have
The thin client type reading device is:
Storage means for storing the encryption key information notified from the information processing apparatus;
Based on the encryption key information stored by the storage unit, the card command notified from the information processing apparatus is encrypted and transmitted to the medium;
Have
When the transmission means does not receive a response to the transmitted card command from the medium within a set period, it updates the sequence number included in the card command, and based on the encryption key information, A communication system for re-encrypting the card command and transmitting it to the medium. A communication system including an information processing device, a medium, and a thin client type reading device,
The information processing apparatus includes:
Based on encryption key information shared between the information processing apparatus and the medium, a plurality of card commands including sequence numbers for managing different communication sequences are encrypted and notified to the thin client type reading apparatus. Having a notification means to
The thin client type reading device is:
Transmission means for transmitting the first card command of the plurality of card commands notified by the notification means to the medium;
A communication system for transmitting a next card command of the plurality of card commands to the medium when the transmission means does not receive a response to the transmitted card command from the medium within a set period. The transmitting unit transmits the card command having the smallest sequence number to the medium as the first card command among the plurality of card commands notified by the notifying unit, and the transmitted card command within a set period. 4. The communication system according to claim 3, wherein when a response to is not received from the medium, a card command having a sequence number next to the card command among the plurality of card commands is transmitted to the medium as a next card command. The transmission means does not receive a response to the transmitted card command from the medium within a set period, and when there are untransmitted card commands among the plurality of card commands, the plurality of card commands The communication system according to claim 3 or 4, wherein the next card command is transmitted to the medium. The notifying means notifies the thin client type reading device of one card command encrypted based on the encryption key information, and thereafter manages different communication sequences based on the encryption key information. Encrypts a plurality of card commands including a sequence number to be notified to the thin client type reading device,
The transmitting means transmits the one card command notified by the notifying means to the medium, and if the response to the one card command is not received from the medium within a set period, the notifying means The communication system according to claim 3, wherein a first card command among the notified card commands is transmitted to the medium. A control method executed by a thin client type reading device,
A storage step of storing, in a storage device, encryption key information shared between the information processing device and the medium notified from the information processing device;
A transmission step of encrypting a card command including a sequence number for managing a communication sequence notified from the information processing device based on the encryption key information stored in the storage device in the storage step and transmitting the encrypted card command to the medium When,
Including
In the transmission step, when a response to the transmitted card command is not received from the medium within a set period, the sequence number included in the card command is updated, and based on the encryption key information, A control method for re-encrypting the card command and transmitting it to the medium. A control method in a communication system including an information processing device, a medium, and a thin client type reading device,
A key notification step in which the information processing device notifies the thin client type reading device of encryption key information shared between the information processing device and the medium;
A command notification step in which the information processing apparatus notifies the thin client type reading apparatus of a card command including a sequence number for managing a communication sequence;
A storage step in which the thin client type reading device stores the encryption key information notified from the information processing device in a storage device;
The thin client type reading device encrypts the card command notified from the information processing device based on the encryption key information stored in the storage device in the storage step, and transmits to the medium When,
Including
In the transmission step, when the thin client type reading device does not receive a response to the transmitted card command from the medium within a set period, the sequence number included in the card command is updated. A control method for re-encrypting the card command based on the encryption key information and transmitting it to the medium. A control method in a communication system including an information processing device, a medium, and a thin client type reading device,
The information processing device encrypts a plurality of card commands including sequence numbers for managing different communication sequences based on encryption key information shared between the information processing device and the medium, and the thin client A notification step for notifying the type reading device;
The thin client type reading device transmits a first card command of the plurality of card commands notified in the notification step to the medium; and
Including
In the transmission step, when the thin client type reading device does not receive a response to the transmitted card command from the medium within a set period, the next card command of the plurality of card commands is Control method to send to the medium. On the computer,
A storage step of storing, in a storage device, encryption key information shared between the information processing device and the medium notified from the information processing device;
A transmission step of encrypting a card command including a sequence number for managing a communication sequence notified from the information processing device based on the encryption key information stored in the storage device in the storage step and transmitting the encrypted card command to the medium When,
A program for executing
In the transmission step, when a response to the transmitted card command is not received from the medium within a set period, the sequence number included in the card command is updated, and based on the encryption key information, A program for re-encrypting the card command and transmitting it to the medium.

Images