JP7326873B2 - COMMUNICATION SYSTEM, SERVER APPARATUS, DEVICE APPARATUS, COMMUNICATION METHOD, AND PROGRAM - Google Patents

Description

The present invention relates to a communication system, server apparatus, device apparatus, communication method, and program.

2. Description of the Related Art In recent years, there are systems that collect environmental data such as temperature and humidity, imaging data, and the like (hereinafter referred to as environmental data and the like) at various locations. In such a system, devices equipped with sensors are provided at various locations. The device apparatus is provided with a sensor, acquires environmental data and the like by the sensor, and transmits the acquired data to the server apparatus, thereby collecting the data. Moreover, in such a system, a microcomputer chip called SE (Secure Element) may be incorporated in or connected to the device in order to strengthen the security of the device. A microcomputer chip has a storage area with higher confidentiality than a general device and a calculation function specialized for encryption, and can store communication data on behalf of the device and perform processing to encrypt and decrypt communication data. do.
Patent Literature 1 discloses a technique in which a microcomputer chip determines the validity of a repeater that relays communication data. In Patent Document 2, in order to strengthen security, a device such as a PC (Personal Computer) or a mobile phone is connected by embedding a microcomputer chip, and when transmission/reception is performed between the host server and the microcomputer chip, the device A technique is disclosed in which a device converts communication data into a data format compatible with a communication destination.

JP 2017-33225 A JP-A-2005-92533

However, in order to strengthen security, the functions of microcomputer chips tend to become more complex, and the types and number of data exchanged between host servers and microcomputer chips often increase and specifications change. For this reason, it is necessary to convert the data format according to the type of data, or to deal with specification changes, which causes the problem of increasing the processing performed by the device.

The present invention has been made in view of such a situation, and its object is to suppress an increase in the processing load of the device even when the exchange of communication between the microcomputer chip and the server device becomes complicated. It is to provide a communication system, a server apparatus, a device apparatus, a communication method, and a program that can

In order to solve the above-described problems, one aspect of the present invention provides a communication system including a device apparatus and a server apparatus, wherein the device apparatus is in a first format or in a second format different from the first format. and a second control unit that communicates with the first control unit in the second format, wherein the server device communicates with the first format an instruction generation unit that generates a first instruction corresponding to the instruction generation unit; an instruction conversion unit that converts the first instruction generated by the instruction generation unit into the second format; and the device converts data in the first format to If the specification assumes reception, the first command is transmitted to the device, and if the specification assumes that the device receives data in the second format, the a communication unit configured to transmit a second command corresponding to the second format converted by the command conversion unit to the device; If the specification assumes that data in one format is received, the first command received from the server device is converted into the second command corresponding to the second format and sent to the second control unit. and transmitting the second instruction received from the server apparatus to the second control unit when the device apparatus has a specification that assumes that the data of the second format is received. It is a communication system that

Further, one aspect of the present invention is the communication system described above, wherein the command conversion unit converts the first command to the second command using command conversion information that associates the first command with the second command. Convert to 2 formats.

Further, one aspect of the present invention is the communication system described above, and when there are a plurality of the device apparatuses that communicate with the server apparatus, the command conversion unit is arranged so that each of the device apparatuses and each of the device apparatuses Using the device information associated with the corresponding second format, the first command is converted into the second format supported by the second control unit of the communication destination device.

Further, one aspect of the present invention is the communication system described above, wherein the server device further includes a response conversion unit that converts a response corresponding to the second format into the first format, The first control unit transmits to the server device a second response in the second format in response to the second command received from the second control unit, and the communication unit of the server device transmits the second response from the device apparatus, and the response conversion unit of the server apparatus converts the second response into the first format.

Further, one aspect of the present invention is the above-described communication system, wherein the response conversion unit of the server device converts a response corresponding to the second format and the response corresponding to the first format. The information is used to convert the response in the second form to the first form.

Further, one aspect of the present invention is the communication system described above, wherein the first control unit of the device determines whether the response received from the second control unit is a response used by the device, A response determination unit for determining whether the response is used by the server device is provided.

Also, one aspect of the present invention is the communication system described above, wherein the second format is a data format conforming to ISO7816.

Further, according to one aspect of the present invention, a first control unit that communicates with a server device in a first format or a second format different from the first format; A server apparatus communicating with a device apparatus having a second control unit communicating with a control unit, the first generation unit generating a first command corresponding to the first format, and generated by the first generation unit a command conversion unit for converting the received first command into the second format; When the specification is based on the assumption that the device apparatus receives the data in the second format, the second command corresponding to the second format converted by the command conversion unit is transmitted to the and a communication unit for transmitting to a device apparatus.

According to another aspect of the present invention, there is provided a device apparatus that communicates with the server apparatus described above, wherein the device apparatus communicates with the server apparatus in a first format or in a second format different from the first format . 1 control unit, and a second control unit that communicates with the first control unit in the second format, wherein the first control unit of the device unit is configured so that the device unit communicates with the first control unit. If the specification assumes reception of format data, the first command received from the server device is converted into the second command corresponding to the second format and transmitted to the second control unit. and if the specification assumes that the device apparatus receives the data in the second format, the command in the second format received from the server device is transmitted to the second control unit. It is a device apparatus characterized.

Further, one embodiment of the present invention includes: a first control unit that communicates with a server device in a first format or a second format different from the first format; 1 control unit and a second control unit that communicates with a server apparatus that communicates with a device apparatus, wherein an instruction generation unit of the server apparatus generates a first instruction corresponding to the first format. , the command conversion unit of the server device converts the first command generated by the command generation unit into the second format, and the communication unit of the server device converts the data in the first format to the device device If the specification assumes reception, the first command is transmitted to the device, and if the specification assumes that the device receives data in the second format, the A second command corresponding to the second format converted by the command conversion unit is transmitted to the device, and the first control unit of the device converts the second command received from the server to the second format. 2 control unit.

Further, one embodiment of the present invention is a communication method for a device apparatus having a first control unit and a second control unit that communicate with the server apparatus described above, wherein the first control unit communicates with a first format , or communicates with the server device in a second format different from the first format , the second control unit communicates with the first control unit in the second format, and The first control unit of the device unit converts the first command received from the server unit into the second format when the device unit is designed to receive data in the first format. If the specification is based on the assumption that the data in the second format is converted to the corresponding second command and transmitted to the second control unit, and the device receives the data in the second format, the A communication method characterized by transmitting a command of a second format to the second control unit.

Further, one embodiment of the present invention includes: a first control unit that communicates with a server device in a first format or a second format different from the first format; an instruction generating step for causing a computer of a server apparatus communicating with a device apparatus having a second control unit communicating with a first control unit to generate a first instruction corresponding to the first format; a command conversion step of converting the first command into the second format; and if the specification assumes that the device receives the data in the second format, the second command corresponding to the second format converted by the command conversion step is transmitted to the device and a communication process that causes the device to transmit.

Further, in one embodiment of the present invention, a computer of a device device having a first control unit and a second control unit that communicates with the server device described above is provided with a first format by the first control unit , or a first communication step of causing communication with the server device in a second format different from the first format ; and a second format different from the first format by the second control unit, In the second communication step of communicating with the device, if the specification assumes that the device apparatus receives the data in the first format, the first command received from the server apparatus is transferred to the second format is converted into the second command corresponding to the second format and transmitted to the second control unit, and if the specification is based on the assumption that the device receives the data in the second format, the data received from the server A program for executing a transmission step of transmitting the command of the second format to the second control unit.

According to the present invention, even if communication between the microcomputer chip and the server apparatus becomes complicated, an increase in the processing load on the device apparatus can be suppressed. Further, by changing the program of the server device, the specification of the data to be transmitted to the microcomputer chip can be changed without changing the program of the control chip, so the flexibility of the system can be enhanced.

1 is a system configuration diagram showing an example configuration of a communication system 1 according to an embodiment; FIG. 3 is a block diagram showing an example of the configuration of the control chip 20 of the embodiment; FIG. 3 is a block diagram showing an example of the configuration of a microcomputer chip 30 of the embodiment; FIG. 4 is a block diagram showing an example of the configuration of a server device 40 of the embodiment; FIG. It is a figure which shows the example of a structure of instruction conversion information 420A of embodiment. It is a figure which shows the example of a structure of the instruction conversion information 420B of embodiment. It is a figure which shows the example of a structure of the response conversion information 421 of embodiment. 4 is a diagram showing an example of the configuration of device information 422 according to the embodiment; FIG. 4 is a sequence diagram showing an example of the flow of operations in the communication system 1 of the embodiment; FIG. 4 is a sequence diagram showing an example of the flow of operations in the communication system 1 of the embodiment; FIG. 4 is a sequence diagram showing an example of the flow of operations in the communication system 1 of the embodiment; FIG. 4 is a sequence diagram showing an example of the flow of operations in the communication system 1 of the embodiment; FIG.

Hereinafter, a communication system, a server device, a communication method, and a program according to embodiments will be described with reference to the drawings.

FIG. 1 is a system configuration diagram showing an example of the configuration of a communication system 1 according to an embodiment. The communication system 1 includes, for example, a plurality of devices 10 (devices 10-1, 10-2, . . . 10-N), a server 40, and a communication network 50. FIG. N is any natural number.

The device apparatus 10 and the server apparatus 40 are communicably connected via a communication network 50 . Communication between the device apparatus 10 and the server apparatus 40 is, for example, HTTP (Hyper Text Transfer Protocol) or HTTPS (HTTP Secure). In the following description, the data format (data format) used in communication between the device apparatus 10 and the server apparatus 40 is referred to as "first format".

The device apparatus 10 is, for example, a sensor terminal apparatus that transmits environmental data and the like to the server apparatus 40 . The device apparatus 10 includes, for example, a communication module (not shown), a sensor module (not shown), a control chip 20, and a microcomputer chip 30. The communication module communicates with the server device 40 via the communication network 50 . The sensor module is a module for measuring (sensing) various data, and includes, for example, a temperature sensor for measuring temperature and an imaging camera. Here, the control chip 20 is an example of a "first control unit". The microcomputer chip 30 is an example of a "second controller".

A case in which the control chip 20 and the microcomputer chip 30 are incorporated as separate IC chips in the device apparatus 10 will be described below as an example, but the present invention is not limited to this. For example, the device 10 may incorporate a single IC chip having the functions of the control chip 20 and the microcomputer chip 30 respectively.

The control chip 20 comprehensively controls the device apparatus 10 . The control chip 20 outputs data from the server device 40 received by the communication module to the microcomputer chip 30 . The control chip 20 transmits the data acquired from the microcomputer chip 30 to the server device 40 via the communication module. Communication between the microcomputer chip 30 and the control chip 20 is performed, for example, in a data format called APDU (Application Protocol Data Unit). An international standard called ISO7816 has been enacted in order to make the APDU compatible. In the following description, the data format used for communication between the microcomputer chip 30 and the control chip 20 is called "second format".

The microcomputer chip 30 is a chip (semiconductor device) having an integrated circuit mounted on a semiconductor substrate, which is called an IC chip, SE (secure element), secure IC chip, secure chip, secure IC, secure microcomputer, or the like. is. The microcomputer chip 30 may be an IC card or a SIM card (Subscriber Identity Module Card) in which the functions of the microcomputer chip 30 are mounted on card material such as plastic. In this case, the microcomputer chip 30 is detachably attached via a contact portion (not shown) of an IC card or SIM card provided in the device 10 .

The microcomputer chip 30 performs security-related processing in communication between the device apparatus 10 and the server apparatus 40 . As an example of security-related processing, the microcomputer chip 30 performs, for example, data encryption processing and decryption processing of the encrypted data. Encrypting environmental data that the device unit 10 transmits to the server unit 40 . The microcomputer chip 30 acquires environmental data from the control chip 20 , encrypts the acquired environmental data, and outputs the encrypted data to the control chip 20 . Also, the microcomputer chip 30 decrypts the encrypted data transmitted from the server device 40 to the device device 10 . The microcomputer chip 30 acquires encrypted data received by the communication module via the control chip 20 . The microcomputer chip 30 decrypts the acquired encrypted data and outputs the decrypted data to the control chip 20 . As a result, the control chip 20 can encrypt environment data and the like to be sent to the server device 40 and decrypt encrypted data sent from the server device 40 without exposing the encryption key from the microcomputer chip 30. Therefore, security in communication with the device apparatus 10 is strengthened. The configuration of the microcomputer chip 30 will be described later in detail.

The server apparatus 40 receives environmental data and the like from the device apparatus 10, accumulates the received communication data, and provides various services. The various services here are services that present accumulated data. This is a service that displays images and the like.

The server device 40 communicates with the microcomputer chip 30 and, for example, performs processing (authentication processing) for confirming the legitimacy of the microcomputer chip 30 . The server device 40 requests a certificate from the microcomputer chip 30, for example. A certificate is an electronic data set created by a certificate authority or the like and recording sender identification information and a public key. Server device 40 receives the certificate of microcomputer chip 30 as a response from microcomputer chip 30 .

Here, the first format and the second format are formats different from each other. In other words, if the data format sent from the server device 40 to the control chip 20 remains unchanged, the content of the data cannot be understood on the microcomputer chip 30 side. For this reason, in conventional communication systems, a control chip converts the data format of data received from the communication source into a data format compatible with the communication destination, and then transmits the converted data to the communication destination. . For example, a conventional control chip converts data in a first format from a server device into data in a second format and outputs the converted data to a microcomputer chip. Further, the conventional control chip converts the data in the second format from the microcomputer chip into the data in the first format and transmits the converted data to the server device (see Patent Document 2).

On the other hand, in the present embodiment, the server device 40 converts the data in the first format into the second format and transmits the data converted into the second format to the device device 10 . The control chip 20 of the device unit 10 outputs the data in the second format from the server device to the microcomputer chip 30 without converting the data format. Also, the control chip 20 transmits the data in the second format from the microcomputer chip 30 to the server device 40 without converting the data format. As a result, the server device 40 and the microcomputer chip 30 can communicate with each other without the control chip 20 performing data format conversion processing.

The communication network 50 is, for example, a communication network including some or all of the Internet, a WAN (Wide Area Network), a LAN (Local Area Network), a provider device, a radio base station, a dedicated line, and the like.

FIG. 2 is a block diagram showing an example of the configuration of the control chip 20 of the embodiment. The control chip 20 includes a communication unit 21, a storage unit 22, and a control unit 23, for example. The communication unit 21 communicates with the microcomputer chip 30 and the communication module of the device 10 . The storage unit 22 is implemented by, for example, a HDD (Hard Disc Drive), flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), or RAM (Random Access Memory). The storage unit 22 stores programs for realizing the functions of the control chip 20 and various data.

The control unit 23 controls the control chip 20 in an integrated manner. The control unit 23 includes, for example, a determination unit 230 and a device processing unit 231 . The determination unit 230 is an example of a “response determination unit”.

The determination unit 230 determines whether or not the communication data received by the communication unit 21 is data addressed to the device apparatus 10 . Data addressed to the device 10 is data that the device 10 uses for various processes. The data not addressed to the device 10 is data that the device 10 does not use for various processes, such as data that is used for processing of other devices (server device 40, etc.).

Communication data received by the device apparatus 10 includes data notified from the server apparatus 40 and data notified from the microcomputer chip 30 . The data notified from the server device 40 is a “command” indicating an instruction from the server device 40 to the microcomputer chip 30 . The data notified from the microcomputer chip 30 is a "response" indicating the result of executing the process for the "command".

Any method may be used by the determination unit 230 to determine whether or not the data is addressed to the device apparatus 10, but it is desirable to use an easy method so as not to increase the processing load. In other words, it is desirable that the determination unit 230 determines whether or not the data is addressed to the device apparatus 10 without grasping the contents of the data notified from the microcomputer chip 30 .

For example, the determination unit 230 sends a response to the command (data notified from the microcomputer chip 30) to the device device 10 according to a value set in a predetermined position of the data (command) notified from the server device 40. It is determined whether or not.

For example, if the first format is HTTP, the server device 40 indicates which of the device device 10 or the server device 40 should use the response to the command in "Content-Type" in the HTTP response header. Set information.
The server apparatus 40 sets "application/response-for-server" to "Content-Type" when allowing the device apparatus 10 to use the response to the command. On the other hand, the server apparatus 40 sets "application/response-for-mcu" to "Content-Type" when allowing the device apparatus 10 to use the response to the command.

When data (command) is notified from the server device 40 , the determination unit 230 causes the storage unit 22 or the like to store information set in “Content-Type” of the notified data. Next, when a response to the command is notified from the microcomputer chip 30, the determination unit 230 refers to the information set in the stored “Content-Type” to determine whether the response is the device 10 It is determined whether or not the address is addressed. The determination section 230 outputs the determination result to the device processing section 231 .

The device processing unit 231 performs various types of processing performed by the device apparatus 10 .
For example, when the determining unit 230 determines that the data notified from the microcomputer chip 30 to the control chip 20 is data addressed to the device apparatus 10, the device processing unit 231 grasps the contents of the data and Perform processing according to When the determination unit 230 determines that the data notified from the microcomputer chip 30 to the control chip 20 is not the data addressed to the device apparatus 10, the device processing unit 231 processes the data without grasping the content of the data. Send to the server device 40 . Similarly, when the determination unit 230 determines that the data notified from the server device 40 is the data addressed to the device device 10, the device processing unit 231 grasps the content of the data and performs processing according to the content. process. When the determination unit 230 determines that the data notified from the server device 40 is not the data addressed to the device device 10, the device processing unit 231 transmits the data to the microcomputer chip 30 without grasping the contents of the data. Output.

As described above, in this embodiment, the determination unit 230 determines whether the data is addressed to the device apparatus 10, and if the device processing unit 231 determines that the data is not addressed to the device apparatus 10, the content of the data is not grasped. It is possible to suppress the processing load compared to the case of grasping the contents of all data.

FIG. 3 is a block diagram showing an example of the configuration of the microcomputer chip 30 of the embodiment. The microcomputer chip 30 includes, for example, a microcomputer communication section 31 , a microcomputer storage section 32 , and a microcomputer control section 33 . The microcomputer communication unit 31 connects to the control chip 20 via, for example, I2C (I-squared-C, Inter-Integrated Circuit) and communicates with the control chip 20 . The microcomputer storage unit 32 is implemented by, for example, an HDD, flash memory, EEPROM, or RAM. The microcomputer storage unit 32 stores programs for realizing the functions of the microcomputer chip 30 and various data. The microcomputer storage unit 32 stores command information 320 . The command information 320 is information about commands. The command here is an instruction (processing request) to the microcomputer chip 30 notified from the server device 40, and is data corresponding to the second format. The command is, for example, an APDU command conforming to ISO7816. The command information 320 is, for example, information that associates a command with a process (command process) according to the command.

The microcomputer control unit 33 controls the microcomputer chip 30 in an integrated manner. The microcomputer control section 33 includes, for example, a command processing section 330 and a response generation section 331 .
The command processing unit 330 performs processing according to commands notified from the server device 40 . The command processing unit 330 acquires the command of the second format via the microcomputer communication unit 31, for example. The command processing unit 330 refers to the command information 320 based on the acquired command, grasps the processing corresponding to the command, and performs the processing corresponding to the command.
Response generator 331 generates a response. The response here is the execution result of executing the process according to the command, and is data corresponding to the second format. The response is, for example, an APDU response conforming to ISO7816. The response generation unit 331 generates a response according to the execution result of the process according to the command by the command processing unit 330 .

FIG. 4 is a block diagram showing an example of the configuration of the server device 40 of the embodiment. The server device 40 includes, for example, a server communication section 41 , a server storage section 42 and a server control section 43 . The server communication unit 41 communicates with the device 10 via the communication network 50 . The server communication unit 41 , for example, transmits data (instruction) in the second format to the device apparatus 10 . The server communication unit 41 receives data (response) in the second format from the device apparatus 10 .

The server storage unit 42 is implemented by, for example, an HDD, flash memory, EEPROM, or RAM. The server storage unit 42 stores programs for realizing the functions of the server device 40 and various data. The server storage unit 42 includes command conversion information 420, response conversion information 421, and device information 422, for example.

The instruction conversion information 420 is information for converting a first-format instruction into a second-format instruction. (see Figure 5). The response conversion information 421 is information for converting a response in the second format into a first format. (see Figure 6). The device information 422 is information about each device 10 communicating with the server 40 . The device information 422 is, for example, information that associates the device 10 with the specifications of the device and the data format supported by the microcomputer chip 30 of the device (see FIG. 7).

The server control unit 43 controls the server device 40 in an integrated manner. The server control unit 43 includes, for example, an instruction generation unit 430, an instruction conversion unit 431, a response conversion unit 432, and a server processing unit 433. The command generation unit 430 generates a first format command to be notified from the server device 40 to the microcomputer chip 30 . The instruction generation unit 430 outputs the generated instruction of the first format to the instruction conversion unit 431 .

The instruction conversion unit 431 converts the instruction in the first format into the second format. The instruction conversion unit 431 refers to the instruction conversion information 420 based on the first format instruction generated by the instruction generation unit 430, and obtains the second format instruction corresponding to the first format instruction. , transforms instructions of the first form into the second form.

Here, in this embodiment, the server device 40 communicates with the microcomputer chips 30 of the plurality of device devices 10 . Each of the devices 10 may include a device with specifications designed to receive data in the first format from the server 40, like conventional devices. If data in the second format is transmitted to such a device, it is possible that the microcomputer chip 30 will not be notified of the correct content and communication will not be established because the data cannot be handled.

Also, it is conceivable that the second format supported by each microcomputer chip 30 is a different format. For example, one microcomputer chip 30 communicates with a specific APDU command, but another microcomputer chip 30 can communicate with a command conforming to another APDU specification different from the above. be done. In such a case, even if a command with a different specification APDU is sent to the microcomputer chip 30 corresponding to a command of a certain specific APDU, the microcomputer chip 30 does not understand the contents of the command and communication is established. It is possible not to.

As a countermeasure, the command conversion unit 431 conforms to the specifications of the device 10 of the notification destination when converting the command in the first format into the second format. For example, the command conversion unit 431 refers to the device information 422 based on the identification information of the device 10 of the notification destination, so that the control chip 20 of the device 10 receives data in the first format as in the conventional art. It is determined whether the specification assumes that the data of the second format is received as in the present application. The command conversion unit 431 does not convert the command in the first format into the second format when the specification assumes that the device 10 of the notification destination receives the data in the first format.

On the other hand, if the device 10 of the notification destination has specifications that assume the reception of data in the second format, the instruction conversion unit 431 determines the specifications of the APDU that the microcomputer chip 30 of the device corresponds to. The command conversion unit 431 acquires the specifications of the APDU that the microcomputer chip 30 of the device corresponds to, for example, by referring to the device information 422 based on the identification information of the device 10 of the notification destination. In this case, the device information 422 stores, for each device 10 with which the server 40 communicates, information indicating specifications of APDUs that the microcomputer chip 30 of the device supports.

The command conversion unit 431 refers to the command conversion information 420 based on the APDU specifications supported by the microcomputer chip 30 of the device 10 of the notification destination, and converts the command into the second format according to the APDU specifications supported by the microcomputer chip 30 . Convert. In this case, the instruction conversion information 420 is created for each APDU specification that the microcomputer chip 30 can support.

The configuration of the instruction conversion information 420 will be described with reference to FIGS. 5 and 6. FIG.
FIG. 5 is a diagram showing an example of the configuration of command conversion information 420A for commands for selecting files. Here, an example of an instruction for instructing selection of a file in which the identifier of the IC chip (microcomputer chip 30) manufacturer is stored will be described.

As shown in FIG. 5, the command conversion information 420A includes, for example, items of server-side command and microcomputer-side command. A server-side command indicates a first format command (first command) that the server device 40 supports. A microcomputer-side instruction indicates a second format instruction (second instruction) that the microcomputer chip 30 supports. The example of FIG. 5 shows a case where the microcomputer-side instruction is an APDU command conforming to ISO7816. The command conversion information 420A may be generated for each combination of the first format that the server device 40 can support and the second format that the microcomputer chip 30 can support.

The server-side command "SELECT IC MAKER ID", that is, the command of the first format indicating the instruction to select the file indicating the identifier of the IC chip manufacturer includes the microcomputer-side command "0x00, 0xA4, 0x00, 0x0C, 0x02, 0x2F , 0x11”.
The first byte of the microcomputer-side instruction indicates that the APDU complies with ISO7816. The second byte indicates an instruction to select a file. The 3rd byte indicates that the file is selected by the file identifier. The 4th byte indicates that the selected file information is not included in the response. The 5th byte indicates that the data size of the file identifier is 2 bytes. The 6th and 7th bytes indicate that the identifier of the IC chip manufacturer is specified as the file identifier.
When the microcomputer chip 30 receives the microcomputer-side instruction (command), it interprets the content of the received command and selects a file indicating the identifier of the IC chip manufacturer.

FIG. 6 is a diagram showing an example of the configuration of command conversion information 420B for a certificate acquisition command. Here, a first form of instruction indicating an instruction to obtain a certificate after PIN verification will be illustrated and described. PIN is a personal identification number stored in the microcomputer chip 30 .

As shown in FIG. 6, the command conversion information 420B includes respective items of a server-side command and a microcomputer-side command, similar to the command conversion information 420A, and indicates a case where the microcomputer-side command is an APDU command conforming to ISO7816. ing. The command conversion information 420 may be generated for each combination of the first format that the server device 40 can support and the second format that the microcomputer chip 30 can support.

A plurality of microcomputer-side commands correspond to the server-side commands "GET CERTIFICATE" and "PIN (={1, 2, 3, 4})". The plurality of microcomputer-side instructions corresponding to the server-side instructions for acquiring the certificate after PIN verification are composed of, for example, a PIN (Personal Identification Number) verification instruction and a certificate-related instruction. The instructions for PIN verification include commands to select the file in which the PIN is stored and to verify the PIN. In this example, the files are acquired in two steps. The certificate-related instructions include commands for selecting a certificate file, checking the data size of the certificate file, and reading the certificate file. If the size of data that can be read by the control chip 20 at one time exceeds the data size of the certificate file, the data is read using multiple read commands according to the data size of the certificate file.

FIG. 7 is a diagram showing an example of the configuration of response conversion information 421 according to the embodiment. The response conversion information 421 includes, for example, each item of microcomputer-side response and server-side response. The microcomputer-side command indicates a second format response (second response) that the microcomputer chip 30 supports. The server-side response indicates a first format response (first response) that the server device 40 supports. The example of FIG. 6 shows a case where the microcomputer-side response is an APDU response conforming to ISO7816. The response conversion information 421 may be generated for each combination of the second format compatible with the microcomputer chip 30 and the first format compatible with the server device 40 .

As shown in the example of FIG. 7, the second format of the response of the microcomputer side "0x90, 0x00", that is, the command processing response does not include data and indicates that the processing has been completed normally, includes the server side command response of the first type "SELECT FINISH".

FIG. 8 is a diagram showing an example of the configuration of device information 422 according to the embodiment. The device information 422 includes, for example, each item of device name, device ID, command data format, response data format, and corresponding second format. The device name indicates the name of each device 10 with which the server device 40 communicates. The device ID indicates identification information that uniquely identifies each device 10 .

The data format of the command indicates the data format of the command that the control chip 20 of the device unit 10 supports. If the control chip 20 is designed with specifications that assume that the server device 40 will notify the command of the first format, information indicating the "first format" is stored in the item. In the case where the control chip 20 is designed according to specifications assuming that the command of the second format is notified from the server device 40, information indicating "second format" is stored in the item.

The data format of the response indicates the data format of the response that the control chip 20 of the device unit 10 supports. If the control chip 20 is designed to send a response in the first format to the server device 40, information indicating "first format" is stored in the item. If the control chip 20 is designed to send a response in the second format to the server device 40, information indicating "second format" is stored in the item.

The corresponding second format specification indicates the second format specification that the microcomputer chip 30 of the device unit 10 supports. If the microcomputer chip 30 has specifications corresponding to a command of a specific APDU, the item stores information indicating the specifications of the APDU.

Here, the flow of operations in the communication system 1 will be described with reference to FIGS. 9 to 12. FIG. FIG. 9 is a sequence chart showing the flow of processing regarding file selection in the communication system 1 of the embodiment.

First, the server device 40 uses the command generation unit 430 to generate a first format command "SELECT IC MAKER ID" for selecting a file storing identifiers of IC chip manufacturers (step S10).
Next, the server device 40 converts the first format command "SELECT IC MAKER ID" to the second format command "0x00, 0xA4, 0x00, 0x0C, 0x02, 0x2F, 0x11" (see FIG. 5). command corresponding to the microcomputer-side instruction #1 shown (hereinafter referred to as command #1) (step S11).

On the other hand, the control chip 20 notifies the server device 40 of confirming the presence or absence of a command (command presence/absence confirmation) (step S12). In response, the server device 40 transmits the second format command #1 converted in step S11 to the control chip 20 (step S13).

The control chip 20 outputs the second format command #1 notified from the server device 40 to the microcomputer chip 30 without converting the data format (step S14). The microcomputer chip 30 performs processing corresponding to the command #1 of the second format notified from the control chip 20 by the command processing unit 330 (step S15). The microcomputer chip 30 uses the response generator 331 to generate a second format response (for example, "0x90, 0x00") according to the result of the command processing executed by the command processor 330 (step S16). The microcomputer chip 30 transmits the response of the second format to the control chip 20 (step S17).

The control chip 20 transmits the response in the second format received from the microcomputer chip 30 to the server device 40, and notifies the server device 40 of whether or not there is an instruction (step S18). The server device 40 converts the response in the second format received from the control chip 20 into the first format by the response conversion unit 432, and determines the contents of the response. When the processing ends normally, the server device 40 notifies the control chip 20 that the command has been completed (command completion notification) (step S20).

FIG. 10 is a sequence diagram showing the flow of processing related to certificate acquisition in the communication system 1 of the embodiment.
First, the server device 40 causes the command generation unit 430 to generate the first format command “GET CERTIFICATE” and “PIN (={1, 2, 3 , 4})” (step S100).
Next, the server device 40 converts the 1st format command generated in step S100 into a plurality of 2nd format commands (corresponding to the microcomputer side commands #1 to #5 shown in FIG. ) (step S101).

The server device 40 transmits the second format command #1 converted in step S101 to the control chip 20 (step S102). Although omitted in this sequence diagram, before step S102, a notification for confirming the presence or absence of an instruction by the control chip 20, which corresponds to the processing shown in step S12 in FIG. 5, is performed.

The control chip 20 outputs the second format command #1 notified from the server device 40 to the microcomputer chip 30 without converting the data format (step S103). The microcomputer chip 30 interprets the second format command #1 notified from the control chip 20 by the command processing unit 330 (command #1 interpretation) (step S104). The process of interpreting command #1 is the process of generating a command process and a response corresponding to the command process, which corresponds to steps S15 and S16 in FIG. 5 described above.

The microcomputer chip 30 transmits the response of the second format to the control chip 20 (step S105). The control chip 20 transmits the second format response received from the microcomputer chip 30 to the server device 40 (step S106). Although omitted in this sequence diagram, in step S106, as in step S18 of FIG. 5, a response is sent and a notification is sent to confirm whether or not there is an instruction from the control chip 20. FIG.

For commands #2 to #5, the same processing as that shown in steps S102 to S106 for command #1 is performed (steps S107 to 116). Command #5 is an instruction to read the data size of the file in which the certificate is stored. For this reason, when the reading process corresponding to command #5 ends normally, the data size of the file is indicated in the response to command #5.

The server device 40 converts the response in the second format to the command #5 into the first format (step S117). Server device 40 generates a command in the first format according to the response converted to the first format (step S118). The server device 40, for example, generates a number of data read commands according to the data size of the file.

The server device 40 converts the generated first format command into the second format (corresponding to the microcomputer side commands #6 and #7 shown in FIG. 6, hereinafter referred to as commands #6 and #7) (step S119). ). The server device 40 transmits command #6 to the control chip 20 (step S120).

Here, if the obtained data of the certificate is used by the control chip 20, the server device 40 does not need to obtain the data of the certificate. In this case, the server device 40 sets information indicating that the response to the command is addressed to the device device 10 at a predetermined position of the data to be transmitted to the control chip 20 . For example, the server device 40 sets “application/response-for-mcu” to “Content-Type” of the HTTP response header of data to be transmitted to the control chip 20 .

The determination unit 230 of the control chip 20 determines that "application/response-for-mcu" is set to "Content-Type" in the data including the command #6 in the second format notified from the server device 40. Therefore, it is determined that the response to the command #6 is addressed to the device apparatus 10 (step S121).

Since the processing shown in steps S122-S123 is the same as the processing shown in steps S102-S105, the description thereof will be omitted.

The control chip 20 uses the device processing unit 231 to perform processing according to the response to the command #6 (step S124). The device processing unit 231 causes the storage unit 22 to store, for example, data included in the response to command #6 (data indicating part of the certificate). The device processing unit 231 transmits to the server apparatus 40 the result of executing the process according to the response to the command #6 (execution result transmission) (step S125).

The server device 40 interprets the execution result notified from the control chip 20 (step S126). For example, if the execution result indicates that a part of the certificate has been successfully stored in the control chip 20, the server device 40 transmits an instruction (command #7) to read the next data. to decide.

Since the processing shown in steps S127 to S132 is the same as the processing shown in steps S120 to S125, the description thereof will be omitted.

FIG. 11 is a sequence diagram showing the flow of processing when the microcomputer chip 30 fails to terminate normally due to a failure in the file selection processing shown in FIG. This sequence assumes that the microcomputer chip 30 is out of order. Since the processing shown in steps S210 to S214 in FIG. 11 is the same as the processing shown in steps S10 to S14 in FIG. 8, description thereof will be omitted.

Since the microcomputer chip 30 is out of order, the command processing unit 330 cannot normally process the command #1 (step S215). Also, the response generator 331 generates a second format response (for example, "0xFF, 0xFF") indicating that the command #1 processing did not end normally (step S216). The microcomputer chip 30 transmits the response of the second format to the control chip 20 (step S217).

The control chip 20 transmits the second format response received from the microcomputer chip 30 to the server device 40 without judging the content of the response received from the microcomputer chip 30 (that the response did not end normally), and gives the server device 40 a command. (step S218). The server device 40 converts the response in the second format received from the control chip 20 into the first format by the response conversion unit 432, and determines the contents of the response. If the process does not end normally, the server device 40, for example, resends the command #1 to the control chip 20 (step S220).

FIG. 12 is a sequence diagram showing the flow of processing when a communication error occurs in the file selection processing shown in FIG. In this sequence, it is assumed that a communication error has occurred at the connection between the control chip 20 and the microcomputer chip 30 . Since the processing shown in steps S310 to S316 in FIG. 12 is the same as the processing shown in steps S10 to S16 in FIG. 8, description thereof will be omitted.

The microcomputer chip 30 transmits the response in the second format to the control chip 20, but the response is not transmitted to the control chip 20 due to, for example, an abnormality occurring in the communication path connecting the control chip 20 and the microcomputer chip 30 ( step S317).

If the control chip 20 does not receive a response within a predetermined time after transmitting the command #1 to the microcomputer chip 30 in step S314, it assumes that the response has not been transmitted for some reason, and ends normally. A second format response (for example, "0xFF, 0xFF") indicating that there is no command is transmitted to the server device 40, and a notification is sent to the server device 40 to confirm the presence or absence of the command (step S318).

Since the processing shown in steps S319 and S320 is the same as the processing shown in steps S219 and S220, the description thereof will be omitted.

As explained above, the communication system 1 of the embodiment includes the device apparatus 10 and the server apparatus 40 . The device unit 10 has a control chip 20 and a microcomputer chip 30 . The control chip 20 communicates with the server device in a first format. The microcomputer chip 30 communicates with the control chip 20 in the second format. The server device 40 has an instruction generation section 430 , an instruction conversion section 431 and a server communication section 41 . The instruction generator 430 generates a first instruction corresponding to the first format. The instruction conversion unit 431 converts the first instruction generated by the instruction generation unit 430 into the second format. The server communication unit 41 transmits the second command corresponding to the second format converted by the command conversion unit 431 to the device 10 . The control chip 20 of the device unit 10 transmits the second command received from the server unit 40 to the microcomputer chip 30 .

Accordingly, in the communication system 1 of the embodiment, the device apparatus 10 can directly output the command of the second format notified from the server apparatus 40 to the microcomputer chip 30. Therefore, communication between the microcomputer chip 30 and the server apparatus 40 Even if the exchange of information becomes complicated, an increase in the processing load on the device apparatus 10 can be suppressed.

In particular, devices equipped with sensors, such as those exemplified in the present embodiment, are often designed to have lower processing performance than PCs, mobile phones, etc., thereby reducing device costs and power consumption. many. Applying a conventional method to such an inexpensive device to convert the data format would make the device expensive and impractical. In addition, in many cases, it is not assumed that the device device equipped with the sensor will frequently rewrite the program of the device device, and it is not easy to change the program. That is, in the conventional method, it was difficult to add commands to the microcomputer chip 30 from the server device 40 or to change command specifications, and commands could not be changed flexibly.

In contrast, in this embodiment, the device 10 does not convert the data format. Therefore, the processing load of the device unit 10 can be suppressed, the memory size of the program and data of the control chip 20 can be reduced, and the device cost and power consumption can be suppressed. Further, if the programs (applications) of the server device 40 and the microcomputer chip 30 are changed, it is possible to flexibly respond to changes in command specifications without changing the program of the control chip 20 .

Further, in the communication system 1 of the embodiment, the instruction conversion unit 431 uses the instruction conversion information 420 to convert the instruction in the first format into the second format. can be converted with

In addition, in the communication system 1 of the embodiment, when a plurality of devices 10 are provided, the command conversion unit 431 uses the device information 422 to convert the command of the first format to the second command corresponding to the microcomputer chip 30 of the communication destination. Since the format is converted, communication with each microcomputer chip 30 is possible even if the data format and command specifications supported by each microcomputer chip 30 are different.

Moreover, in the communication system 1 of the embodiment, the server device 40 further includes a response conversion section 432 . The response conversion unit 432 converts a response corresponding to the second format into the first format. The control chip 20 of the device unit 10 transmits the response in the second format received from the microcomputer chip 30 to the server device 40, and the response conversion unit 432 converts the response in the second format into the first format. Therefore, in the communication system 1 of the embodiment, the device apparatus 10 does not need to convert the data format when notifying the server apparatus 40 of the response, and the same effects as described above can be obtained.

In addition, in the communication system 1 of the embodiment, the response conversion unit 432 uses the response conversion information 421 to convert the response corresponding to the second format into the first format, so that the same effects as those described above can be obtained.

Further, in the communication system 1 of the embodiment, the control chip 20 includes the determination section 230 . The determination unit 230 determines whether the response received from the microcomputer chip 30 is the response used by the device apparatus 10 or the response used by the server apparatus 40 . Therefore, in the communication system 1 of the embodiment, appropriate processing can be performed according to the device that uses the response.

Further, in the communication system 1 of the embodiment, the second format is a data format conforming to ISO7816, and therefore can be widely applied to data conforming to ISO7816.

Also, the server device 40 of the embodiment is a server device that communicates with the device device 10 . The server device 40 includes an instruction generation unit 430 , an instruction conversion unit 431 and a server communication unit 41 . The instruction generator 430 generates a first instruction corresponding to the first format. The instruction conversion unit 431 converts the first instruction generated by the instruction generation unit 430 into the second format. The server communication unit 41 transmits the second command corresponding to the second format converted by the command conversion unit 431 to the device 10 . Thereby, there exists an effect similar to the effect mentioned above.

A program for realizing all or part of the functions of the communication system 1, the device apparatus 10, and the server apparatus 40 in the present invention is recorded in a computer-readable recording medium, and the program recorded in this recording medium is Processing may be performed by loading and executing a computer system. It should be noted that the "computer system" referred to here includes hardware such as an OS and peripheral devices.
Also, the "computer system" includes a WWW system provided with a home page providing environment (or display environment). The term "computer-readable recording medium" refers to portable media such as flexible discs, magneto-optical discs, ROMs and CD-ROMs, and storage devices such as hard discs incorporated in computer systems. In addition, "computer-readable recording medium" means a volatile memory (RAM) inside a computer system that acts as a server or client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. , includes those that hold the program for a certain period of time.

Further, the above program may be transmitted from a computer system storing this program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in a transmission medium. Here, the "transmission medium" for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. Further, the program may be for realizing part of the functions described above. Further, it may be a so-called difference file (difference program) that can realize the above-described functions in combination with a program already recorded in the computer system.

While several embodiments of the invention have been described, these embodiments have been presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and modifications can be made without departing from the scope of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, as well as the scope of the invention described in the claims and equivalents thereof.

DESCRIPTION OF SYMBOLS 1... Communication system 10... Device apparatus 20... Control chip 23... Control part 230... Judgment part 30... Microcomputer chip 40... Server apparatus 42... Server storage part 420... Instruction conversion information 421... Response conversion information 422 device information 43 server control unit 430 command generation unit 431 command conversion unit 432 response conversion unit

Claims (13)

In a communication system comprising a device apparatus and a server apparatus,
The device apparatus
a first control unit that communicates with the server device in a first format or in a second format different from the first format ;
a second control unit that communicates with the first control unit in the second format;
has
The server device
an instruction generator that generates a first instruction corresponding to the first format;
an instruction conversion unit that converts the first instruction generated by the instruction generation unit into the second format;
If the specification assumes that the device receives the data in the first format, the first command is transmitted to the device, and the device receives the data in the second format. a communication unit configured to transmit a second command corresponding to the second format converted by the command conversion unit to the device;
has
The first control unit of the device converts the first instruction received from the server to the second format if the device is designed to receive data in the first format. is converted into the second command corresponding to the second format and transmitted to the second control unit, and if the specification assumes that the device receives the data in the second format, the data received from the server sending the second command to the second control unit;
A communication system characterized by: The instruction conversion unit converts the first instruction into the second format using instruction conversion information that associates the second instruction with the first instruction.
A communication system according to claim 1. When there are a plurality of said device apparatuses communicating with said server apparatus,
The command conversion unit converts the first command to the second format of the communication destination device using device information that associates each of the devices with the second format corresponding to each of the devices. 2 the control unit converts to the corresponding second format,
The communication system according to claim 1 or 2. The server device
further comprising a response conversion unit that converts a response corresponding to the second format into the first format;
the first control unit of the device device transmits to the server device a second response in the second format in response to the second command received from the second control unit;
The communication unit of the server device receives the second response from the device device,
wherein the response conversion unit of the server device converts the second response into the first format;
A communication system according to any one of claims 1 to 3. The response conversion unit of the server device converts the response in the second format into the first format using response conversion information that associates the response corresponding to the second format with the response corresponding to the first format. Convert,
5. The communication system according to claim 4, characterized by: The first control unit of the device device has a response determination unit that determines whether the response received from the second control unit is a response to be used by the device device or a response to be used by the server device. ,
The communication system according to any one of claims 1 to 5, characterized in that: The second format is a data format conforming to ISO7816,
The communication system according to any one of claims 1 to 6, characterized in that: A first control unit that communicates with the server device in a first format or a second format different from the first format, and a second control that communicates with the first control unit in the second format A server device that communicates with a device device having a unit,
an instruction generator that generates a first instruction corresponding to the first format;
an instruction conversion unit that converts the first instruction generated by the instruction generation unit into the second format;
If the specification assumes that the device receives the data in the first format, the first command is transmitted to the device, and the device receives the data in the second format. a communication unit configured to transmit a second command corresponding to the second format converted by the command conversion unit to the device;
A server device characterized by having: A device that communicates with the server according to claim 8,
a first control unit that communicates with the server device in a first format or in a second format different from the first format ;
a second control unit that communicates with the first control unit in the second format;
has
The first control unit of the device converts the first instruction received from the server to the second format if the device is designed to receive data in the first format. is converted into the second command corresponding to the second format and transmitted to the second control unit, and if the specification assumes that the device receives the data in the second format, the data received from the server sending the second type of instruction to the second controller;
A device apparatus characterized by: A first control unit that communicates with the server device in a first format or a second format different from the first format, and a second control that communicates with the first control unit in the second format A communication method for a server device that communicates with a device device comprising:
The command generation unit of the server device generates a first command corresponding to the first format,
The command conversion unit of the server device converts the first command generated by the command generation unit into the second format,
If the communication unit of the server apparatus has a specification that assumes that the device apparatus receives data in the first format, the first command is transmitted to the device apparatus, and the device apparatus receives the first format data. If the specification assumes reception of data in two formats, a second command corresponding to the second format converted by the command conversion unit is transmitted to the device;
A communication method characterized by: A communication method for a device apparatus having a first control unit and a second control unit that communicate with the server apparatus according to claim 8,
The first control unit communicates with the server device in a first format or a second format different from the first format ,
The second control unit communicates with the first control unit in the second format,
The first control unit of the device converts the first instruction received from the server to the second format if the device is designed to receive data in the first format. is converted into the second command corresponding to the second format and transmitted to the second control unit, and if the specification assumes that the device receives the data in the second format, the data received from the server sending the second type of instruction to the second controller;
A communication method characterized by: A first control unit that communicates with the server device in a first format or a second format different from the first format, and a second control that communicates with the first control unit in the second format on the computer of the server device that communicates with the device device having a unit,
an instruction generating step for generating a first instruction corresponding to the first format;
an instruction conversion step of converting the first instruction generated by the instruction generation step into the second format;
If the specification assumes that the device receives the data in the first format, the device is caused to transmit the first command, and the device receives the data in the second format. a communication step of causing the device apparatus to transmit a second instruction corresponding to the second format converted by the instruction conversion step;
program to run. A device device computer having a first control unit and a second control unit that communicates with the server device according to claim 8,
a first communication step of causing the first control unit to communicate with the server device in a first format or in a second format different from the first format ;
In the second communication step in which the second control unit communicates with the first control unit in the second format, the specifications are based on the assumption that the device receives the data in the first format. In this case, the first command received from the server device is converted into the second command corresponding to the second format and transmitted to the second control unit, and the device device converts the data in the second format to the second command. a transmission step of causing the second control unit to transmit the command in the second format received from the server device if the specifications are designed to be received ;
program to run.

Images