JP6520090B2 - IC card system, IC card and IC card management device - Google Patents

Description

  The present invention relates to a technology for updating subscriber information stored in an IC card mounted on a terminal device using a mobile network.

  An IC card mounted with an integrated circuit chip is required to have various security functions, and a representative security function required for the IC card is secure message. The secure message required for the IC card is the communication data between the host device and the IC card using key information stored in the IC card to protect the communication data between the host device and the IC card. Patent Document 1 has already been disclosed as an invention relating to a secure message of an IC card.

  It is called SIM (Subscriber Identity Module), UIM (User Identity Module), USIM (Universal Subscriber Identity Module), etc., and the IC card installed in the terminal using the mobile network has the function related to this secure message, When registering contractor information related to a contractor who has contracted with a carrier of the mobile network, in the IC card, the contractor information is securely registered in the IC card using this secure message.

  If the terminal device using the mobile network is a mobile device such as a mobile phone or a smartphone, the IC card can be attached to or detached from the mobile device. Therefore, if the IC card attached to the mobile device is changed, a subscriber who uses the mobile device If the terminal using the mobile network is a stationary device such as a smart meter, the IC card is built in the stationary device, so the contractor using the stationary device is changed. When doing this, it is necessary to access the IC card built in the stationary device via the mobile network and update the contractor information stored in the IC card.

  FIG. 8 is a diagram for explaining the process of updating the contractor information via the mobile network. When updating the contractor information via the mobile network, the device of the administrator who manages the IC card mounted on the terminal stores the IC card mounted on the terminal for updating the contractor information After the processing of deleting the contractor information of the current contractor from the IC card is executed (S20), the processing of writing the contractor information concerning the new contractor into the IC card is executed (S21).

  The IC card mounted on the terminal device using the mobile network is designed to use key information included in the contractor information stored in the IC card for the secure message. If the contractor information of the current contractor is deleted from the card, the secure message can not be executed. Therefore, when the contractor information is not stored in the IC card, the administrator's key information written in advance in the IC card is a secure message The IC card is designed to be used for

  According to this, before the contractor information related to the current contractor is deleted, the key information used by the IC card for the secure message becomes the key information of the current contractor. In addition, before the contractor information related to the current contractor is deleted and the contractor information on the new contractor is written, the key information that the IC card uses for the secure message becomes the key information of the administrator. Furthermore, at a stage after the contractor information of the new contractor is written, the key information used for the secure message by the IC card becomes the key information of the new contractor.

  If the process is not interrupted in the middle of updating the contractor information via the mobile network, the device of the administrator who manages the IC card changes the key information used in the secure message according to the contents described above, thereby the IC card Although the contractor information of the IC card can be updated without an error related to the secure message occurring on the side, if the process is interrupted while updating the contractor information, the administrator of the IC card management Since the device can not determine the key information used by the IC card, an error relating to the secure message occurs on the IC card side, and the contractor information stored in the IC card can not be updated.

Patent No. 4306235 gazette

  Therefore, the present invention provides a system capable of resuming the process of updating the contractor information even if the process is interrupted while updating the contractor information via the mobile network, and the IC card and device required in this system. The purpose is to

A first invention for solving the above-mentioned problems comprises a contractor information file storing contractor information relating to a contractor of a mobile network and command management means for managing execution of a command for accessing the contractor information file And deleting the contractor information of the current contractor from the IC card, and writing the contractor information pertaining to the new contractor to the IC card. An IC card system comprising at least an IC card management apparatus provided with contractor information updating means for updating the contractor information stored in the IC card via a mobile network by executing the processing. .
In the contractor information file of the IC card, a secure message is provided as a security attribute in which a command for which access to the contractor information file is permitted and a security condition indicating a condition for permitting execution of the command are written. Security attributes for normal processing specified at least as security conditions for commands, and security attributes for exception processing with commands for permitting execution when security conditions for secure messages are not satisfied and the security conditions Two are set. Then, when the command management means receives the command for accessing the contractor information file, the command management means refers to the security attribute for the normal process, confirms whether the security condition of the received command is satisfied, and the received command If the security condition relating to the secure message specified in is not satisfied, the security attribute for exception processing is referred to, and the security condition for the received command is satisfied in the security attribute for exception processing. , Execute the received command.
In addition, if the contractor information updating means of the IC card management device is executing a process of updating the contractor information stored in the IC card via a mobile network, the interruption may occur in the IC card. said by using the commands executed by the security attributes for exception processing that is set in the contract's information file is permitted, a process that read the contract information that is stored in the IC card, the contract If read user information, after identifying the key information corresponding to the subscriber information, and resume the process of updating the subscriber information using the specified key information securely message, the subscriber information or, if that fails, the key information corresponding to the process to resume the contractor information for updating the subscriber information using the key information administrator secure message Identify and to resume the process of updating the subscriber information.

  Furthermore, the second invention for solving the above-mentioned problems is an IC card constituting the IC card system described in the first invention, and the third invention for solving the above-mentioned problems is the first invention It is an IC card management apparatus which comprises the described IC card system.

  According to the present invention described above, even if the processing is interrupted on the way of updating the contractor information via the mobile network and the IC card management device side can not determine the key information of the IC card, the contractor information of the IC card Since the command described in the security attribute for exception processing set in the file operates, the contractor information update means of the IC card management device uses this command to contract the contractor stored in the IC card. The information can be read, the key information corresponding to the contractor information can be specified, and the process of updating the contractor information can be resumed.

FIG. 1 is a diagram for explaining the configuration of an IC card system according to an embodiment of the present invention. The figure which explains the hardware constitutions of the IC card. IC card block diagram. A diagram for explaining security attributes for exception processing. The figure which demonstrates the operation | movement which IC card manages execution of a command. FIG. 2 is a block diagram of an IC card management device. FIG. 6 is a diagram for explaining the operation of the IC card management device when exception processing is performed. A figure explaining processing which updates contract person information via a mobile network.

  We will now describe preferred embodiments of the present invention. The following description does not limit the scope of the present invention, but is described to aid understanding.

  1 is a view for explaining the configuration of the IC card system 1 according to the present embodiment, FIG. 2 is a view for explaining the hardware configuration of the IC card 2, FIG. 3 is a block diagram of the IC card 2, FIG. 5 illustrates the security attribute for exception processing, FIG. 5 illustrates the operation of the IC card 2 managing command execution, FIG. 6 illustrates the block diagram of the IC card management apparatus 4, and FIG. 7 illustrates the exception. It is a figure explaining operation of IC card management device 4 at the time of processing.

  As illustrated in FIG. 1, the IC card system 1 according to the present embodiment incorporates the IC card 2 storing subscriber information and the IC card 2 and performs data communication using the mobile network 5. Terminal device 3 and an IC card management device 4 for managing the IC card 2 built in the terminal device 3, and the terminal device 3 and the IC card management device 4 are connected via the mobile network 5 ing.

  First, the terminal device 3 that performs data communication using the mobile network 5 will be described. The terminal device 3 according to the present embodiment is a stationary device, and as a specific form, a smart meter used for power management or the like, a car navigation corresponding to an emergency notification, and the like can be considered. The terminal device 3 that performs data communication using the mobile network 5 can use a commercially available product according to the application, and thus the terminal device 3 performs data communication using the mobile network 5 although not described in detail here. The terminal device 3 has a reader / writer function of performing data communication with the IC card 2 incorporated in the terminal device 3.

  Next, the IC card 2 built in the terminal device 3 that performs data communication using the mobile network 5 will be described. The IC card 2 built in the terminal device 3 is a card called SIM (Subscriber Identity Module), UIM (User Identity Module) or USIM (Universal Subscriber Identity Module), and is mounted on the substrate of the terminal device 3 Types (eg, Embedded SIM) have also been developed.

  An integrated circuit chip is mounted on the IC card 2, and as shown in FIG. 2, this integrated circuit chip is a central processing unit CPU 2a (Central Processing Unit) and a read only memory ROM 2b (Read-Only Memory). ) RAM2c (Random Access Memory) which is volatile memory, NVM 2d which is an electrically rewritable non-volatile memory, Co-Proccessor 2e which is an arithmetic circuit specialized for cryptographic operation, and an external device (here, a terminal I / F 2 f (Inter-Face) for communicating with the device 3).

  Further, as illustrated in FIG. 3, the IC card 2 built in the terminal device 3 using the mobile network 5 is a contractor information file which is a file for storing contractor information including key information of the contractor. 21 is stored in NVM 2 d. In the contractor information file 21, there are set a security attribute in which a command 26 which is permitted to access the contractor information file 21 and a security condition which permits the execution of the command 26 are described. Further, the RAM 2 c of the IC card 2 stores a security status 27 which reflects the processing result relating to the security condition and is collated with the security attribute.

  Generally, there is one security attribute set in one file, but in the IC card 2 of this embodiment, a security attribute for normal processing at least a secure message is specified as a security condition of the command 26. 22. Set in the contractor information file 21 two of a command 26 which permits execution when the security condition relating to the secure message is not satisfied and a security attribute 23 for exception processing in which the security condition is described Then, even if an error related to a secure message occurs, only the command 26 described in the security attribute 23 for exception processing operates without the need for a secure message, so that the mobile network 5 can be IC card management when the process to update contractor information is interrupted In location 4 side to be able to perform resume exception handling process for updating subscriber information.

  FIG. 4 is a view for explaining the security attribute 23 for exception processing. In the security attribute 23 for exception processing illustrated in FIG. 4, a select file command, which is a command 26 for selecting a file, and a read command, which is one of commands 26 for reading information stored in the file, are executable. And no security condition is set for these commands 26. That is, these commands 26 can operate even if the IC card management apparatus 4 can not determine the key information, and the other commands 26 do not operate. The security condition enclosed in parentheses in FIG. 4 is the security condition set in the normal processing security attribute 22 which is not the exception processing security attribute 23, and in the normal processing security attribute 22, the secure message is succeeded. Otherwise, the read command will not work.

  The identifier of the read command described in the security attribute 23 for exception processing is preferably different from the identifier of the read command described in the security attribute 22 for normal processing, and the security attribute 23 for exception processing In the read command described, it is desirable to shorten the data length that can be read from the file.

  In addition, the IC card 2 contained in the terminal device 3 using the mobile network 5 is an IC card 2 as a means by which the hardware resources of the IC card 2 and the computer program mounted on the IC card 2 cooperate with each other. Command management means 20 for managing the execution of command 26 in addition to command 26 for accessing files stored in NVM 2 d, secure message means 25 for executing the above-mentioned secure message function, and transmission control for data communication with terminal device 3 Means 24 are provided.

  The secure message means 25 included in the IC card 2 is a means for encrypting or decrypting communication data between the higher-level device (here, the IC card management device 4) and the IC card 2 using Co-Proccessor 2e. . The key information used by the secure message means 25 included in the IC card 2 is the key information included in the contractor information, but only when the contractor information is not recorded in the NVM 2 d of the IC card 2, the security included in the IC card 2 The key information used by the message means 25 is the key information of the administrator. The manager's key information is written in advance in the NVM 2 d or the ROM 2 b of the IC card 2.

  The transmission control means 24 included in the IC card 2 is a means for operating the I / F 2 f to perform data communication with the terminal device 3 in accordance with a predetermined transmission control protocol, and a secure message is indicated by data concerning the transmission control protocol When it is detected, the encrypted data received by the IC card 2 is decrypted by the secure message means 25, and the data transmitted by the IC card 2 is encrypted by the secure message means 25.

  The command management means 20 included in the IC card 2 is means for managing the execution of the command 26 received from the terminal device 3, and referring to FIG. 5, the command management means 20 of the IC card 2 managing the execution of the command 26 The operation will be described. When the transmission control means 24 included in the IC card 2 receives the command 26 (S1), the command management means 20 of the IC card 2 sets the security attribute 22 for normal processing set in the file to be accessed and the time By comparing the security status 27, it is confirmed whether the security condition of the received command 26 is satisfied (S2). The file to be accessed is either the file selected at this time or the file indicated by the parameter of the received command 26.

  If the security condition of the received command 26 is satisfied, the command management means 20 of the IC card 2 executes the received command 26 and transmits a response indicating the execution result of the received command 26 (S6), This procedure ends.

  If the security condition of the received command 26 is not satisfied, the command management means 20 of the IC card 2 checks whether the file to be accessed is the contractor information file 21 (S3). If the file to be accessed is not the contractor information file 21, the command management means 20 of the IC card 2 transmits an error response indicating that the security condition of the received command 26 is not satisfied (S7), This procedure ends.

  If the file to be accessed is the contractor information file 21, the command management means 20 of the IC card 2 confirms whether the security condition not satisfied is the secure message under the security condition of the received command 26 (S4) ). If the security condition which is not satisfied is not a secure message in the security condition of the received command 26, the command management means 20 of the IC card 2 transmits an error response indicating that the security condition of the command 26 is not satisfied. (S7), this procedure ends.

  If the security condition not satisfied is the secure message under the security condition corresponding to the received command 26, the command management means 20 of the IC card 2 sets the security attribute 23 for exception processing and the security status 27 at this time. In comparison, it is checked whether the security condition of the received command 26 is satisfied in the security attribute 23 for exception processing (S5).

  In the security attribute 23 for exception processing, when the security condition of the received command 26 is satisfied, the command management means 20 of the IC card 2 executes the received command 26 and indicates the execution result of the received command 26. The response is sent (S6), and the procedure ends. Also, in the security attribute 23 for exception processing, when the security condition of the command 26 is not satisfied, the command management means 20 of the IC card 2 sends a response indicating that the security condition of the command 26 is not satisfied. After transmitting to the device 3 (S7), this procedure ends.

  Next, the IC card management device 4 will be described. The IC card management device 4 is a device realized using a general-purpose server, and the hardware configuration of the IC card management device 4 will not be described in detail here. As illustrated in FIG. 5, the IC card management device 4 according to the present embodiment executes the process described in FIG. 8 as a means by which the hardware resources and the computer program installed in the server cooperate with each other. The contractor information updating means 40 for updating the contractor information stored in the IC card 2 and the contractor DB 41 (DB: DataBase) storing the contractor information for each contractor. In the present embodiment, the key information of the administrator stored in advance in the IC card 2 is stored in the contractor DB 41.

  From here, exception processing executed by the contractor information updating means 40 of the IC card management device 4 according to the present embodiment will be described. The contents of the process of updating the contractor information via the mobile network 5 by the contractor information update means 40 of the IC card management device 4 are the same as the contents described in FIG. Only exception processing performed when processing is interrupted while updating contractor information via the mobile network 5 will be described.

  If the process is interrupted while updating the contractor information via the mobile network 5, the contractor information update means 40 of the IC card management device 4 starts exception processing. In the exception process, the contractor information updating means 40 of the IC card management device 4 first acquires the contractor information stored in the contractor information file 21 of the IC card 2 (S10). When acquiring the contractor information stored in the contractor information file 21 of the IC card 2, the contractor information updating unit 40 of the IC card management device 4 selects the file to be accessed as the contractor information file 21. After transmitting the command to the IC card 2 via the mobile network 5, the read command for reading the information of the contract information file is transmitted to the IC card 2 via the mobile network 5. The contractor information read out from the IC card 2 may not be all contractor information, and may be only information (for example, subscriber identification information) that the contractor can understand.

  Next, the contractor information updating means 40 of the IC card management device 4 refers to the contractor information stored in the contractor DB 41, and based on the contractor information acquired from the IC card 2, key information used in the secure message. And execute the process of identifying (S11). In this process, the contractor information updating means 40 of the IC card management device 4 selects the key information of the current contractor when the contractor information acquired from the IC card 2 is the contractor information of the current contractor. Further, when the contractor information acquired from the IC card 2 is the contractor information of a new contractor, the contractor information updating means 40 of the IC card management device 4 selects key information of the new contractor. In addition, when the contractor information updating means 40 of the IC card management device 4 can not acquire the contractor information from the IC card 2, that is, when the contractor information is not stored in the contractor information file 21, Select administrator key information.

  Next, the contractor information updating means 40 of the IC card management device 4 resumes the processing of updating the contractor information from the processing corresponding to the specified key information by using the specified key information in the secure message (S12) . If the specified key information is the current contractor's key information, S20 of FIG. 8 is not executed. Therefore, the contractor information updating means 40 of the IC card management device 4 uses the IC of the current contractor's key information. From the process of deleting from the card 2 (S20 of FIG. 8), the process of updating the contractor information is resumed. Further, if the specified key information is the administrator's key information, S20 of FIG. 8 is executed but S21 is not executed. Therefore, the contractor information updating means 40 of the IC card management device 4 From the process of writing the key information of the new contractor into the IC card 2 (S21 in FIG. 8), the process of updating the contractor information is resumed. Further, if the specified key information is the key information of the new contractor, S21 of FIG. 8 is being executed, and therefore the contractor information update means 40 of the IC card management device 4 updates the contractor information. Resume from processing to end processing.

  According to the IC card system 1 according to the present embodiment, the process is interrupted on the way of updating the contractor information via the mobile network 5, and the key information of the IC card 2 can not be determined on the IC card management device 4 side. Also, since the command 26 described in the security attribute 23 for exception processing set in the contractor information file 21 of the IC card 2 operates, the IC card management device 4 sets the security attribute 23 for exception processing. If the contractor information stored in the IC card 2 is read using the command 26 described, the IC card management device 4 identifies key information corresponding to the contractor information and updates the contractor information Processing can be resumed.

1 IC card system 2 IC card 20 command management means 21 contractor information file 22 security attribute for normal processing 23 security attribute for exception processing 24 transmission control means 25 secure message means 26 command 27 security status 3 terminal device 4 IC card management Device 40 Contractor Information Updating Means 41 Contractor DB
5 Mobile network

Claims (3)

A contractor information file storing contractor information relating to a contractor of a mobile network and command management means for managing execution of a command for accessing the contractor information file, implemented in a terminal device using the mobile network Via the mobile network by executing the process of writing the contractor information related to the new contractor into the IC card after deleting the IC card and the contractor information of the current contractor from the IC card At least an IC card management apparatus comprising contractor information updating means for updating the contractor information stored in the IC card,
In the contractor information file of the IC card, a secure message is provided as a security attribute in which a command for which access to the contractor information file is permitted and a security condition indicating a condition for permitting execution of the command are written. Security attributes for normal processing specified at least as security conditions for commands, and security attributes for exception processing with commands for permitting execution when security conditions for secure messages are not satisfied and the security conditions Of two are set,
When the command management means of the IC card receives a command for accessing the contractor information file, it refers to the security attribute for the normal process, confirms whether the security condition of the received command is satisfied, and receives If the security condition related to the secure message specified in the executed command is not satisfied, the security attribute for exception processing is referred to, and the security condition for the received command is satisfied in the security attribute for exception processing. Then execute the received command,
The contractor information update unit of the IC card management apparatus executes the processing for updating the contractor information stored in the IC card via a mobile network, and when interruption occurs, the contract of the IC card who the information is set in the file by using the commands that run in the security attributes for exception processing is permitted, a process that read the contract information that is stored in the IC card, the subscriber information the If read, after identifying the key information corresponding to the subscriber information, and resume the process of updating the subscriber information using the specified key information in a secure message, not read the subscriber information If the administrator's key information is used for a secure message, resume the process of updating the contractor information,
IC card system characterized by
  An IC card constituting the IC card system according to claim 1. An IC card management apparatus constituting the IC card system according to claim 1.

Images