JP6862734B2 - Storage medium device and program - Google Patents

Description

The present invention relates to a storage medium device and a program.

At the issuing stage of an IC (Integrated Circuit) card, data is written to the IC card by an IC card issuing machine (data writing device) (see, for example, Patent Document 1).

JP-A-2007-206765

The data of the file stored in the IC card has a structure of being further stored in an area of one or more unit data called a record. However, control regarding whether or not data can be written in the IC card is performed on a file-by-file basis. Therefore, even if an error occurs in writing data in record units, this cannot be grasped by the IC card. Under these circumstances, if the data writing device cannot grasp the occurrence of an error related to data writing in record units, an IC card with an inadequate data storage state will be issued. Become.

The present invention has been made in view of such circumstances, and an object of the present invention is to enable the storage medium device itself to manage the writing result of unit data in a file stored in the storage medium device.

One aspect of the present invention that solves the above-mentioned problems is a storage medium that stores a file containing one or more unit data associated with write completion identification information, a communication unit that communicates with the data writing device, and the above. In response to the writing of the unit data to the storage medium in response to the data writing instruction from the data writing device, the writing completion identification information corresponding to the written unit data is written. It is a storage medium device including an identification information control unit that rewrites from a state indicating that the data has not been written to a state indicating that writing has been completed.

One aspect of the present invention that solves the above-mentioned problems includes a storage medium that stores a file containing one or more unit data associated with write completion identification information, and a communication unit that communicates with the data writing device. In response to the writing of the unit data to the storage medium by the data writing device on the computer as the storage medium device, the writing completion identification information corresponding to the written unit data is written. This is a program for functioning as an identification information control unit that rewrites from a state indicating that the data has not been written to a state indicating that writing has been completed.

As described above, according to the present invention, it is possible to obtain the effect that the storage medium device itself can manage the writing result of the unit data in the file stored in the storage medium device.

It is a figure which shows the memory mapping example about the storage area of the storage medium included in the IC card in this embodiment. It is a figure which shows the structural example of the file stored in the storage medium of this embodiment. It is a figure which shows the state transition example of the writing completion flag in this embodiment. It is a figure which shows the example of the case where three records are stored in a file as the state transition of the write completion flag in this embodiment. It is a figure which shows the structural example of the IC card in this embodiment. It is a flowchart which shows the example of the processing procedure executed by the IC card of this embodiment.

Hereinafter, the present embodiment will be described with reference to the drawings.
[Data structure in the storage medium of the IC card]
Hereinafter, an IC card (an example of a storage medium device) as an embodiment of the present invention will be described with reference to the drawings.
The IC card of the present embodiment is provided with a storage medium inside, and is configured to be capable of communicating with an external communication device such as an IC card issuing device or a reader / writer. The IC card executes data writing or reading to the storage medium according to the control of the external communication device by communicating with the external communication device.

Data is managed in file units on the storage medium of the IC card. FIG. 1 shows a mapping example for the storage area of the storage medium 103 included in the IC card of the present embodiment. As shown in the figure, the storage area of the storage medium 103 includes a file management area AR1, a system area AR2, and a user data area AR3.

The file management area AR1 is an area in which file management information for managing data stored in the system area AR2 and the user data area AR3 is stored in file units. As an example, the file management area AR1 in the present embodiment may store file management information corresponding to the FAT (File Allocation Table) file system.

The system area AR2 is an area in which system information such as an OS (Operating System) and various setting information is stored.
The user data area AR3 is an area in which user data used by the application is stored. The data of the file is stored in the user data area AR3.
The storage area of the storage medium 103 may include areas other than the file management area AR1, the system area AR2, and the user data area AR3.

FIG. 2 shows an example of the structure of the file FL. As shown in the figure, the file FL has a structure including a file header and a data area.
A predetermined parameter related to the file is stored in the file header.
Data as a file is stored in the data area. In the present embodiment, the file stored in the data area has a record structure in which records having a fixed length are arranged. In such a record structure, data (record data: an example of unit data) is stored for each record. The record data stored in the record has contents according to a predetermined definition, as illustrated below. That is, one file contains one or more records, and each record stores, for example, data of a type according to a predetermined definition.
In the present embodiment, the case where the maximum number of records that can be stored in the data area of the file FL is "8" will be given as an example. In the figure, an example is shown in which eight records # 1 to # 8 corresponding to the maximum number of records that can be stored are stored in the data area of the file FL.

Further, in the present embodiment, the write completion flag area FLA is arranged at a predetermined position in the file header.
An example of the write completion flag area FLA corresponding to the file FL of FIG. 2 will be described with reference to FIG. As shown in FIG. 3A, the write completion flag area FLA is formed by arranging eight write completion flags of each 1 bit corresponding to each bit position b1 to b8. The corresponding write completion flags for each bit position b1 to b8 are associated with records # 1 to # 8, respectively.
The write completion flag indicates whether or not the writing of record data to the corresponding record is completed. In the following description, the write completion flag of the present embodiment is defined as an example in which "0" indicates that the writing is not completed and "1" indicates that the writing is completed. I will list it.

For example, at the stage immediately before the IC card starts a session with the IC card issuing device, as shown in FIG. 3A, all eight write completion flags are reset to "0" in the initial state. There is.
Then, when the IC card issuing device instructs the writing of the file FL, the IC card writes the data of the file FL to the storage medium 103. At this time, the IC card sequentially writes record data to the record area arranged in the data area of the file FL to be written according to the designation of the IC card issuing device.
Then, in the process of executing the data writing as described above, the IC card sets a write completion flag corresponding to the record in which the record data writing is completed each time the writing of the record data to the record is completed. Rewrite from "0" to "1". As a result, if all the record data corresponding to each of the eight records of records # 1 to # 8 in the file FL are successfully written, as shown in FIG. 3B, eight bits are used for each of the bit positions b1 to b8. A state is obtained in which all the writing completion flags are set to "1". That is, the write completion flag of the bit positions b1 to b8 in the write completion flag area FLA indicates that the writing of the record data to all of the records # 1 to # 8 is completed.

On the other hand, although not shown, if there is a record # 1 to # 8 in which the record data is not written at the stage when the writing corresponding to the file FL unit is completed, the writing is not performed. The write completion flag at the bit position corresponding to the record remains "0". Specifically, when record data is not written only to record # 3 among records # 1 to # 8, the write completion flags at bit positions b1, b2, and b4 to b8 are set to "1", respectively. However, the write completion flag at the bit position b3 is in the "0" state. In this case, the write completion flag of the bit positions b1 to b8 in the write completion flag area FLA completes the writing of the record data for the records # 1, # 2, and # 4 to # 8, but the record # 3 is written. It is shown that the record data has not been written.

Further, an example of the write completion flag area FLA corresponding to the case where the maximum number of records that can be stored in the file FL is 8 and the record in the file FL is less than 8 will be described.
As a specific example, FIG. 4 shows an example of the write completion flag area FLA corresponding to the case where the file FL stores three records. Even when the number of records stored in the file FL is 3 and less than 8, the write completion flag area FLA is formed by 8 bits corresponding to the maximum number of records that can be stored.
Then, in the initial state of the write completion flag, each write completion flag at the bit positions b1 to b8 is reset as shown in FIG. 4 (A). That is, "0" is set for each of the 3-bit write completion flags corresponding to the bit positions b1 to b3, indicating that the writing is not completed. On the other hand, "1" is set for each of the 5-bit write completion flags corresponding to the bit positions b4 to b8 that the records do not correspond to. That is, invalidation is achieved by indicating that writing has already been completed at the initialization stage.

Then, in response to the instruction by the IC card issuing device to write the data to a certain file FL, the IC card writes the record data of three records when writing the data of the designated file FL. As a result, in the write completion flag area FLA in the initial state shown in FIG. 4 (A), as shown in FIG. 4 (B), the write completion flags of the three bits of the bit positions b1 to b3 start from "0", respectively. By being rewritten to "1", the write completion flag corresponding to all of the bit positions b1 to b8 becomes "1". As a result, the write completion flag in the write completion flag area FLA indicates that the writing to all the records in the file FL has been completed.

On the other hand, although not shown, if there is a record # 1 to # 3 in which the record data is not written at the stage when the data writing of the file FL is completed, the record in which the writing is not performed is performed. The write completion flag of the bit position corresponding to is still "0", indicating that the record data has not been written.

The write completion flag area FLA in FIGS. 3 and 4 has a fixed length according to the number of bits corresponding to the maximum number of records that can be stored in the file FL. However, the write completion flag area may have a variable length having a number of bits corresponding to the number of records stored in the file FL, for example.

The value of each write completion flag in the write completion flag area FLA is returned to the initial state when the session executed under the state where communication with the IC card issuing device is established is completed, for example. Is initialized. Alternatively, the initialization of each write completion flag in the write completion flag area FLA may be performed at a predetermined stage until the session is started in response to the establishment of communication with the IC card issuing device, for example. ..
Further, the write completion flag area FLA is stored in the file header of the file FL as shown in FIG. That is, the write completion flag area FLA in FIG. 2 shows an example stored in the structure of the file FL.
However, for example, the write completion flag area FLA may be associated with the file FL and then stored in a predetermined area of the storage medium 103 as individual information not included in the file FL. In this case, the write completion flag area FLA may be stored in the volatile RAM area. By setting the write completion flag area FLA area in the non-volatile area in this way, for example, the transaction is completed, the communication with the IC card issuing device is cut off, and the power supply to the IC card is stopped. The value of each write completion flag in the write completion flag area FLA can be reset according to the above.

[IC card configuration example]
Subsequently, a configuration example of the IC card 100 according to the present embodiment will be described with reference to FIG. In the figure, the IC card issuing device 200 (an example of a data writing device) is shown together with the IC card 100.

First, the IC card issuing device 200 will be described. The IC card issuing device 200 is a device that performs an issuing process related to issuing the IC card 100. As an issuing process, the IC card issuing device 200 can execute file generation for creating a file storage area for storing file FL data on the storage medium 103 included in the IC card 100. Then, the IC card issuing device 200 can write the file data to the file storage area created by the file generation. When writing the data of the file FL, the IC card issuing device 200 specifies the data in the user data area AR3 in record units and writes the data (record data).

Next, the IC card 100 of the figure will be described. The IC card 100 in the figure includes a communication unit 101, a control unit 102, and a storage medium 103.
The communication unit 101 executes communication with the IC card issuing device 200.
The control unit 102 executes various controls on the IC card 100. The function as the control unit 102 is realized, for example, by the CPU (Central Processing Unit) included in the IC card 100 executing the program stored in the storage medium 103.
The control unit 102 in the present embodiment includes a data writing unit 121, an identification information control unit 122, and a state transition control unit 123 as functional units related to writing data stored in the storage medium 103.

The data writing unit 121 writes data to the storage medium 103 in response to a command transmitted from the IC card issuing device 200. At this time, the data writing unit 121 writes record data in record units for the user data area AR3 in the file FL. Then, the data writing unit 121 of the present embodiment determines whether or not the record data to be written has been written in response to the data writing instruction from the IC card issuing device 200. Judgment is made based on the write completion flag (an example of write completion identification information). The data writing unit 121 writes data when it is determined that the writing is not completed, and prevents the data from being written when it is determined that the writing is completed.

The identification information control unit 122 has a write completion flag corresponding to the written record data in response to the record data being written to the storage medium 103 in response to the data writing instruction from the IC card issuing device 200. Is rewritten from a state indicating that writing has not been performed to a state indicating writing completion.

The state transition control unit 123 controls the state transition of the IC card 100. Here, the "state" controlled by the state transition control unit 123 is the state (status) of the IC card 100 set in response to a command or the like from the IC card issuing device 200 in one session, for example, in one session. Transitions such as "idle (0x00)", "select (0x01)", "Write Complete (0x02)" ... "end (0xXX)".
The state transition control unit 123 determines whether or not the writing of the record data to all the records required for the state transition is completed based on the writing completion flag, and the writing of the record data to all the records is completed. The state transition is prohibited when it is determined that the record data has not been written, and the state transition is permitted when it is determined that the writing of the record data to all the records has been completed.

The storage medium 103 stores various types of information used by the control unit 102. As described above, the storage medium 103 of the present embodiment stores the file having the structure shown in FIG. 2 after the area shown in FIG. 1 is set. The hardware supported by the storage medium 103 may be, for example, EEPROM (Electrically Erasable Programmable Read-Only Memory) or flash memory.

[Example of processing procedure]
Subsequently, an example of the processing procedure executed by the IC card 100 in the present embodiment will be described with reference to the flowchart of FIG. The process shown in the figure corresponds to a sequence executed by the IC card 100 in response to a certain command in a session.

In the IC card 100, the data writing unit 121 confirms the command execution conditions corresponding to the commands received from the IC card issuing device 200 (step S101). In confirming the command execution condition, the data writing unit 121 refers to the value of the command execution condition flag corresponding to the command code received this time. The command execution condition flag indicates whether the command can be executed or cannot be executed for each corresponding command code.

As a result of confirming the command execution conditions in step S101, the data writing unit 121 determines whether or not the process in response to the command can be executed (step S102).
When the process in response to the command can be executed (step S102-YES), the data writing unit 121 searches for a record in the file FL to be written as a response to the command (step S103). The data writing unit 121 determines whether or not the record to be written has been searched as a result of the search in step S103 (step S104).

When the record to be written is searched by step S103 (step S104-YES), the data writing unit 121 confirms the value of the write completion flag for each record to be written (step S105). At this time, the data writing unit 121 accesses the file FL including the record to be written, and confirms the value of the writing completion flag in the writing completion flag area FLA stored in the file header.

As a result of checking the write completion flag in step S105, the data writing unit 121 determines whether or not there is at least one record for which writing has already been completed (write completion record) (step S106).

Here, when the process in response to the command cannot be executed (step S102-NO), the data writing unit 121 executes the process corresponding to the execution condition error (step S107). Specifically, the data writing unit 121 prevents the data writing process after responding to the command from being executed in step S107. Further, the data writing unit 121 may notify the IC card issuing device 200 of the occurrence of an execution condition error.

Further, even if the command execution condition flag indicates that the command can be executed, the record to be written corresponding to the command is stored in the storage medium 103 because the command is originally not compatible with the IC card 100. May not exist in. In such a case, as a result of searching the record to be written in step S103, it is determined that at least a part of the record to be written does not exist (step S104-NO). In this case, the data writing unit 121 executes the process corresponding to the execution condition error (step S107).

Further, even if the command execution condition flag indicates that the record can be executed and the record to be written exists in the storage medium 103, the command is supported in the session with the IC card issuing device 200 this time. The record to be written may have already been written. In this case, as a result of checking the write completion flag in step S105, it is determined that there is a write completion record (step S106-YES). In the present embodiment, it is not allowed that the record data is written to the same record a plurality of times in one session. Therefore, the data writing unit 121 in this case executes the process corresponding to the execution condition error (step S107). This prevents the record data from being written multiple times for the same record in one session.

On the other hand, as a result of checking the write completion flag in step S105, it is determined that there is no write completion record, that is, all of the records to be written have not been written yet (step S106-NO). , The data writing unit 121 executes the following processing.
That is, the data writing unit 121 executes the writing of the record data stored in one of the records to be written (step S108). The data writing unit 121 transfers the written record data to the IC card issuing device 200 via the communication unit 101.

The identification information control unit 122 rewrites the write completion flag corresponding to the record of the written record data in response to the writing of the record data being executed in step S108 (step S109). That is, the identification information control unit 122 changes the write completion flag corresponding to the record of the written record data from "0" indicating that the writing has not been completed to "1" indicating that the writing has been completed. To do.

The data writing unit 121 determines whether or not the writing of the record data for the last record among the records to be written has been completed by writing the record data in step S108 this time (step S110).
If the record data has not yet been written to the last record (step S110-NO), the data writing unit 121 returns the process to step S108. As a result, the record data is written for one of the records to be written to which the record data has not been written yet, and the corresponding write completion flag is rewritten.

On the other hand, when the writing of the record data for the record designated as the last write target is completed (step S110-YES), the state transition control unit 123 completes the writing corresponding to each of the records to be written as a response to the command. Check the value of the flag (step S111).
From the confirmation result in step S111, the state transition control unit 123 determines whether or not the writing of the record data for all the records to be written to be written as a response to the command is completed (step S112).

When any of the records to be written as a response to the command is not written in step S108 due to an error in specifying the record to be written by the IC card issuing device 200, an error in writing data on the data writing unit 121 side, or the like. There is. In such a case, the corresponding write completion flag is not rewritten in step S108 for the record that was not written. In this case, as a result of the confirmation in step S111, it is determined that the writing has not been completed for all the records to be written (step S112-NO).
When it is determined that the writing of all the records to be written is not completed in this way, the state transition control unit 123 executes the process corresponding to the state transition error (step S113). Specifically, the state transition control unit 123 prevents the transition to the next state according to the completion of writing the data in response to this command. That is, the state transition control unit 123 in this case controls to prohibit the transition to the next state. Further, the state transition control unit 123 may notify the IC card issuing device 200 that a state transition error has occurred.

On the other hand, when it is determined that the writing is completed for all the records to be written (step S112-YES), the state transition control unit 123 controls so that the transition to the next state is performed (step S112-YES). Step S114). That is, the state transition control unit 123 in this case controls to allow the transition to the next state.

As described above, the IC card 100 in the present embodiment is capable of managing the write completion flag corresponding to each record stored in the file FL stored in the storage medium 103. This makes it possible for the IC card 100 itself to determine whether or not the writing of data for each record in one session has been completed.

In addition, the IC card 100 does not write the data when the writing completion flag indicates that the writing to the record to be written has been completed prior to writing the data. (Step S105, step S106, step S107). This prevents the occurrence of a problem that the same record in the file FL is written multiple times even if the writing of the file FL is permitted according to the satisfaction of the command execution condition, for example. be able to. Further, by such control, in addition to preventing the occurrence of a problem, it is possible to prevent data writing due to access to the unauthorized storage medium 103 after the command execution condition is satisfied, for example.
Further, the IC card 100 confirms the write completion flag at the stage when the writing of the record data to the record designated as the writing target is completed, and if the writing to all the records to be written is not completed, the next The transition to the state of is not performed (prohibited) (steps S111, S112, S113). As a result, in the IC card 100 of the present embodiment, it is possible to prevent the occurrence of a problem that the data is transferred to the next state even though the writing of data under a certain state is not properly completed. Further, even if the command execution condition is cleared by a fake command, for example, if the record to be written is specified differently, a state transition error occurs and the state transition does not occur, so that fraud can be effectively prevented.
In the present embodiment, the prevention of the occurrence of defects and the prevention of fraud as described above can be realized by the IC card 100 itself without relying on the higher-level IC card issuing device 200.

Data writing (including rewriting) to the IC card 100 may be performed by the control of a reader / writer or the like even in the operation stage after the IC card is issued. The above-mentioned management of the write completion flag in the IC card 100 of the present embodiment, and the record write control and the state transition control based on the write completion flag may be applied even in the operation stage.

The above-mentioned IC is recorded by recording a program for realizing the function as the above-mentioned IC card 100 on a computer-readable recording medium, reading the program recorded on the recording medium into a computer system, and executing the program. The processing as the card 100 may be performed. Here, "loading a computer system with a program recorded on a recording medium and executing it" includes installing the program on the computer system. The term "computer system" as used herein includes hardware such as an OS and peripheral devices. Further, the "computer system" may include a plurality of computer devices connected via a network including a communication line such as the Internet, WAN, LAN, and a dedicated line. Further, the "computer-readable recording medium" refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, or a CD-ROM, or a storage device such as a hard disk built in a computer system. As described above, the recording medium in which the program is stored may be a non-transient recording medium such as a CD-ROM. The recording medium also includes an internal or external recording medium that can be accessed from the distribution server to distribute the program. The code of the program stored in the recording medium of the distribution server may be different from the code of the program in a format that can be executed by the terminal device. That is, the format stored in the distribution server does not matter as long as it can be downloaded from the distribution server and installed in a form that can be executed by the terminal device. The program may be divided into a plurality of parts, downloaded at different timings, and then combined by the terminal device, or the distribution server for distributing each of the divided programs may be different. Furthermore, a "computer-readable recording medium" is a volatile memory (RAM) inside a computer system that serves as a server or client when a program is transmitted via a network, and holds the program for a certain period of time. It shall also include things. Further, the above program may be for realizing a part of the above-mentioned functions. Further, it may be a so-called difference file (difference program) that can realize the above-mentioned function in combination with a program already recorded in the computer system.

100 IC card, 101 communication unit, 102 control unit, 103 storage medium, 121 data writing unit, 122 identification information control unit, 123 state transition control unit, 200 IC card issuing device

Claims (4)

A storage medium containing one or more unit data associated with the write completion identification information and storing a file for storing the write completion identification information in an area different from the area for storing the unit data.
The communication unit that communicates with the data writing device,
In response to the writing of the unit data to the storage medium in response to the data writing instruction from the data writing device, the writing completion identification information corresponding to the written unit data is written. It is equipped with an identification information control unit that rewrites from a state indicating that it has not been written to a state indicating that writing has been completed.
The writing completion identification information is a storage medium device controlled so as to be in an initial state when communication with the data writing device is not established. In the state transition of the storage medium device, it is determined based on the writing completion identification information whether or not all the unit data required for the state transition has been written, and the writing of all the unit data is completed. The first aspect of claim 1 further includes a state transition control unit that prohibits the state transition when it is determined that the data has not been written, and permits the state transition when it is determined that the writing of all the unit data has been completed. The storage medium device according to the description. Based on the writing completion identification information, it is determined whether or not the unit data to be written is completed in response to the data writing instruction from the data writing device, and the writing is completed. The invention according to claim 1 or 2, further comprising a data writing unit that writes data when it is determined that the data has not been written, and does not write data when it is determined that the writing has been completed. Storage medium device. A storage medium containing one or more unit data associated with the write completion identification information and storing a file for storing the write completion identification information in an area different from the area for storing the unit data, and a data writing device. A computer as a storage medium device equipped with a communication unit that communicates with
In response to the writing of the unit data to the storage medium by the data writing device, the writing completion identification information corresponding to the written unit data is written from the state indicating that the writing is not performed. It is a program to function as an identification information control unit that rewrites to a state indicating completion.
The write completion identification information is a program controlled so as to be in an initial state when communication with the data writing device is not established.

Images