JPH01194093A - Portable electronic device - Google Patents

Abstract

PURPOSE:To optionally set the necessity/unnecessity of personal check in accordance with a using case even in the same application by accessing a 2nd area of a memory part in accordance with an access condition set in an area definition information in a 1st area of the memory part in accordance with an access request from the external. CONSTITUTION:For instance, access condition information added to each area definition information in an area definition information area 25 indicates the existence of collation of a personal identification number and access condition information added to each area definition information in an area definition information area 26 indicates no collation of the identification number. In case of a transaction requiring the shortening of a transaction time, application to be freely accessed is specified, and in case of other shopping transaction or the like, application to be accessed after personal check is specified. Thus, the necessity/unnecessity of personal check can be optionally set in accordance with a using case even in the same application.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention] (Field of Industrial Application) The present invention relates to a portable electronic device called an IC card, which is used, for example, as a credit card or a cash card.

(Prior Art) In recent years, as cards with magnetic stripes such as credit cards and cash cards, so-called magnetic cards, have become popular, erasable non-volatile memories with newly expanded storage capacity and magnetic cards have been developed to replace them. CPU that controls
A so-called IC card, which has a built-in IC chip having a control element such as the following, is attracting attention.

For example, when such an IC card is used as a credit card in a shopping system, the shopping transaction is made based on the transaction account information stored in the memory. In order to prevent this, it is common practice to verify the identity of a person by verifying a personal identification number.

However, if the place where you shop is not a store but a restaurant, for example, and you have to enter your PIN to confirm your identity each time, the transaction time per user increases and transaction efficiency deteriorates. However, since long lines form, it is necessary to shorten the transaction time.

In this case, even for the same application, it is necessary to determine whether or not identity verification is necessary, and to some extent access control is required within the IC card. However, conventional IC cards,
This has been impossible because it is not possible to freely set whether or not identity verification is required depending on the usage situation even in the same application.

(Problems to be Solved by the Invention) The present invention has been made to solve the problem that, as described above, it is not possible to freely set whether or not identity verification is required depending on the usage situation even in the same application. Another object of the present invention is to provide a portable electronic device in which the necessity of identity verification can be freely set depending on the usage situation.

[Structure of the Invention] (Means for Solving the Problems) A portable electronic device of the present invention is divided into at least a first area and a second area, and the first area has a part of the second area in common. a memory unit storing at least two pieces of area definition information each having different access conditions indicating whether or not identity verification is required; and a communication means for communicating with the outside. and a control unit that accesses the second area of the memory unit according to access conditions set in area definition information in the first area of the memory unit in response to an external access request. There is.

(Function) With this configuration, when area definition information to be used from the outside is specified and there is an access request from the outside, the access conditions are checked by checking the access conditions set in the specified area definition information. If it indicates that identity verification is required, access the second area after confirming that identity verification has been completed, and if the access conditions indicate that identity verification is not required, regardless of whether or not identity verification has been completed. First, the second area is accessed.

In other words, the conditions for accessing the second area of the memory section are such that one application cannot access the second area without verifying the user's identity, and the other application can access the second area for free (without verifying the user).

In other words, even if the application is the same, there are two types of applications internally (both types access the same area). Therefore, for example, for transactions that require particularly short transaction times, you can specify applications that can be accessed for free, and for other shopping transactions, you can specify applications that cannot be accessed without verifying your identity. Even within the same application, it is possible to freely set whether or not identity verification is required depending on the usage situation.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 9 shows an example of the configuration of a terminal device that handles an IC card as a portable electronic device according to the present invention. That is, this terminal device allows an IC card 1 (or an IC card for specifying an application) to be connected to a control section 3 consisting of a CPU, etc. via a card reader/writer 2, and also connects the control section 3 with a keyboard 4, a CRT, etc. It is constructed by connecting a display device 5, a printer 6, and a floppy disk device 7.

FIG. 8 shows a configuration example of the IC card 1, which includes a control element (for example, a CPU) 11 as a control section, an erasable nonvolatile memory 12 as a memory section, a program memory 13, and a card reader/writer 2. It is constituted by a contact part 14 for obtaining electrical contact with the
Of these, the portion within the broken line (control element 11, nonvolatile memory 12, program memory 13) is composed of one IC chip (or a plurality of IC chips) and is embedded within the IC card body. The program memory 13 is composed of, for example, a mask ROM, and stores a control program for the control element 11. The non-volatile memory 12 is used to store various data, such as EEPR.
It is composed of OM.

As shown in FIG. 1, the memory 12 includes, for example, a password area 21 in which a password used for identity verification is stored, and a directory area 2 in which a user area is managed.
2, and a user area 23 for storing various data. Furthermore, the directory area 22 is
For example, it is composed of one area definition information management area 24 and two area definition information areas 25 and 26.

The information that defines one area definition information area 25 (26) is the area definition information management information stored in the area definition information management area 24, including the application code given for each application (by application field) and the location of the area. It consists of head address information, which provides information, and size information, which provides the area size. In FIG. 1, for example, the area definition information area 25 is defined by the area definition information management information of the application code rAPLIJ, and the area definition information area 25 is defined by the area definition information management information of the application code rAPLIJ.
The area definition information area 26 is defined by the area definition information management information of L2J.

The user area 23 is divided into a plurality of areas depending on the nature or usage of the stored data, and each of these areas is defined by area definition information stored in area definition information areas 25 and 26. Area definition information that defines one area within the user area 23 includes area number information that defines a unique number for the area, start address information that defines the position of the area within the user area 23, and size that defines the size of the area. information, and access condition information indicating whether or not a password verification is required (whether or not identity verification is required). In the example shown in FIG. 1, for example, the access condition information added to each area definition information in the area definition information area 25 indicates that a PIN must be verified (identity verification required), and the access condition information added to each area definition information in the area definition information area 25
The access condition information added to each area definition information within indicates that there is no need for PIN verification or personal identification.

Then, the area definition information of all the areas used by the application having the application code rAPLIJ is collected and stored in the area definition information area 25, and the area definition information of all the areas used by the application having the application code rAPLIJ is collected. Information is collected and stored in the area definition information area 26. That is, in the example of FIG. 1, for example, the area definition information in the area definition information area 25 is the application code r
Areas (area numbers 10, 20, etc.) used in applications with APLIJ are defined, and area definition information in the area definition information area 26 defines areas (area numbers 10, 20, etc.) used in applications with application code rAPL2J. 10, 30...) are defined.

As is clear from FIG. 1, among the area definition information in the area definition information areas 25 and 26, for example, each piece of area definition information defines the same area number. That is, in the example of FIG. 1, one area definition information in the area definition information area 25 and one area definition information in the area definition information area 26 commonly define one area (area number rlOJ). There is.

Next, the operation of such a configuration will be explained with reference to the flowcharts shown in FIGS. 2 and 3. FIG. 2 is a flowchart illustrating the processing on the terminal device side, and FIG. 3 is a flowchart illustrating the internal processing of the IC-card 1. According to the flowchart in FIG. 2, first, an IC card (terminal card) for specifying an application is inserted into the card league writer 2 of the terminal device. Here, the application specification IC card is one that also serves as a key card used in a terminal device, for example.
The application of this terminal device stores application information for identifying whether or not identity verification is required.

When the IC card for application specification is inserted,
The control unit 3 of the terminal device reads application information from the IC card and recognizes the application. That is, it recognizes whether the application requires identity verification. Based on this recognition result, the control unit 3 determines which application code should be used to specify the application. That is, if it is recognized as an application that requires identity verification, it is determined to be an application with application code rAPLIJ, and if it is recognized as an application that does not require identity verification, it is determined to be an application with application code rA P L 2J.

Next, the user's IC card 1 (customer card) is inserted into the card league writer 2 of the terminal device instead of the 10 card for application designation. Then, if the determination result is the application code rAPLIJ, the control unit 3 prompts the CRT display device 5 to input the personal identification number, since identification is required. Here, by inputting the user's PIN number from the keyboard 4, the control unit 3 issues a PIN verification command (see FIG. 4) to which the input PIN number is added as verification information to control the IC card 1. It is sent to element 11. The control element 11 that received this
compares the password in the password area 21 of the memory 12 with the password added to the verification command, and if the two passwords match, sets a verified flag provided in the control element 11. and sends a response indicating a match to the control unit 3 of the terminal device. As a result of the above verification, if the two passwords do not match, the control element 11 sends a response indicating the verification mismatch to the control unit 3 of the terminal device without setting the verified flag.

When the identity is verified in this way and the passwords match, the control unit 3 of the terminal device controls the control element 1 of the IC card 1.
An area definition information area designation command (see FIG. 5) is sent to 1 to designate the area definition information area. The control element 11 that has received the area definition information area designation command retrieves area definition information management information having an application code that matches the application code in the command message from the area definition information management area 24, and retrieves the area definition information. The area definition information area defined by the management information is opened, and other area definition information areas are closed. That is, the area definition information area is specified. At this time, if there is no matching application code, the control element 11 sends a response indicating input of an unregistered code to the control unit 3 of the terminal device.

On the other hand, if the above judgment result is the application code rAPL
2J, there is no need for identity verification, so the control unit 3 of the terminal device sends an area definition information area designation command to the control element 11 of the IC card 1 to specify the area without performing the identity verification as described above. Specify the definition information area.

Now, with the area definition information area designation command opening the area definition information area 25 or 26, access is made to, for example, the area with area number "10" as shown in FIG. 6 or 7. When an access command (write command or read command) is sent from the control unit 3 of the terminal device to the control element 11 of the IC card 1, the control element 11 first determines whether the area definition information area 25 or 26 is opened. to decide. As a result of this judgment, if the area definition information area has not been specified or the area definition information area specification command has not completed normally and there is no opened area definition information area, then the control? The 8-element 11 sends a response indicating that there is no area definition information area exposed to the control unit 3 of the terminal device.

As a result of the above judgment, area definition information area 25 or 2
6 has been opened, the control element 11 next transfers area definition information having area number information that matches the area number information in the command message to the area definition information area 25.
Or issue a headline on the 26th. If it is not found (when area number information that is not defined in the area definition information area 25 or 26 is added to the command message), the control element 11 sends a response indicating that the area number is undefined to control the terminal device. Send to section 3.

If area definition information having area number information that matches the area number information in the command message is found, the control element 11
Next, refers to the access condition information added to the area definition information and determines whether it indicates that the PIN is verified or not. At this time, if the area definition information area 25 is opened, the access condition information added to the area definition information indicates that the password has been verified, so the control element 11 sets the verified flag to (i.e., whether or not the password has been verified). As a result of this judgment, if the verified flag is set, the control element 11
executes an access process (write or read process) to the target area (area number riot) using the first address information and size information of the area definition information found above, and when the access process is completed, the end of the access process is executed. The corresponding response is sent to the control unit 3 of the terminal device. As a result of the above judgment, if the verified flag is not set, the control element 11 sends a response indicating that access is prohibited to the control unit 3 of the terminal device.

On the other hand, when the area definition information area 26 is opened, the access condition information added to the area definition information indicates that the password is not verified, so the control element 11 determines that the verified flag is set. The access process for the target area (area number rlOJ) is immediately executed without determining whether or not there is a target area.

Note that the above description assumes that the directory area and user area are located on the same memory and are logically divided by values defined in advance by a mask program or the like.

However, while accessing the user area, there is a high possibility that the CPU constituting the control element of the IC card will go out of control due to fluctuations in the power supply, causing erroneous writing even to the logically divided directory area. To prevent this, storage cells for the directory area and user area are physically divided, and write protection is provided for the storage cells for the directory area. In particular, if the nonvolatile memory is EEPROM, there is a risk of accidentally entering chip erase mode, and in that case, if the memory is only logically divided, the data in the user area will be erased. The information in the directory area will also be erased, and the system will no longer function properly. However, if the card is physically divided, even if the data in the user area is erased, the information in the directory area will not be erased, so the card itself will not become defective.

In addition, in areas that require high security, such as in the financial field, the directory area can be made into a memory element that can be written only once, so that once-issued IC cards cannot be rewritten or tampered with. Can be done. On the other hand, in fields where security is not required, the directory area can be made into a rewritable storage element such as an EEPROM to enable reissue, making it possible to create economical IC cards.

In the above embodiment, an IC card is used as an example of a portable electronic device, but the present invention is not limited to a card-shaped device, and may be a block-shaped or pencil-shaped device, for example. Furthermore, the hardware configuration of the portable electronic device can be modified in various ways without departing from the spirit of the invention.

[Effects of the Invention] As described in detail above, according to the present invention, it is possible to provide a portable electronic device in which the necessity of identity verification can be freely set depending on the usage situation even in the same application.

[Brief explanation of the drawing]

The figures are for explaining one embodiment of the present invention, and FIG. 1 is a diagram showing a memory map of a nonvolatile memory, FIG. 2 is a flowchart explaining processing on the terminal device side, and FIG. 3 is an I
A flowchart explaining the internal processing of the C card, FIG. 4 is a diagram showing an example of the format of the PIN verification command,
Fig. 5 shows an example of the format of the area definition information area specification command, Fig. 6 shows an example of the format of the write command, Fig. 7 shows an example of the format of the read command, and Fig. 8 shows an example of the format of the IC card. Block diagram showing an example of the configuration. FIG. 9 is a block diagram showing an example of the configuration of a terminal device. DESCRIPTION OF SYMBOLS 1... IC card (portable electronic device), 2... Card reader/writer, 3... Control unit, 11... Control element (control unit), 12... Non-volatile memory (memory unit) ), 13...Program memory, 21...Password area, 22...Directory area (first area), 23...User area (second area), 24...
...Area definition information management area, 25.26...Area definition information area. Takehiko Suzue, Patent Attorney, Patent Attorney for Applicant, Morning Meeting Person ``Area t and clear report area designation command'' Figure 5 8 First-out command Figure 7 r ■ L J Figure 8 Figure 9

Claims (1)

[Claims] Divided into at least a first and a second area, the first
The area includes a memory section storing at least two pieces of area definition information that commonly define a part of the second area and have different access conditions indicating whether or not identity verification is required; a communication means for communicating between; and controlling these, and in response to an external access request, the first area of the memory section according to the access conditions set in the area definition information in the first area of the memory section; 1. A portable electronic device, comprising: a control section for accessing two areas.