JPH0212581A - Ic card - Google Patents

Abstract

PURPOSE:To ensure the security of an IC card and to improve the degree of freedom for selecting specifications by causing each person who issues the card to additionally provide a file in a tree-shaped segment. CONSTITUTION:A memory having a prescribed logical address space is provided and plural segments which can be additionally provided in the logical address space are constituted in the form of a tree. After constituting the segments, a file is set in a part of the segments and a management section is set in the remaining part of the segments. Then a primary issuing person sets management information regarding secondary segments by using the most significant segment as a management section and a secondary issuing person then further sets a management section in one of the secondary segments and a file in the low- prder segment of the newly set management section. Since each issuing person successively sets the management section and files in such way, the degree of freedom for selecting the specifications of the files and security of information can be improved.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to an IC card, and particularly to a file management system for a memory mounted on an IC card.

[Prior Art] In recent years, consideration has been given to the so-called multipurpose use of IC cards, in which a common IC card is used for multiple services. Multiple service providers (
It is necessary to divide and use the logical address space of an IC card among IC card issuers.

For example, as shown in Figure 2, the conventional method of dividing the logical address space is that the secondary issuer to the nth issuer do not set up a logical address space to use themselves. Specifications required to provide the service, such as subject authentication keys, file layout, etc., are notified to the primary issuer, and the specifications notified when the primary issuer sets the intermediate logical address for the primary issuer. Based on this, logical address spaces for secondary issuer intermediate to nth issuer logical addresses were also set at the same time.

In addition, according to other conventional partitioning methods, as shown in Figure 3, when the primary issuer sets the intermediate logical address for the primary issuer based on its own specifications, the secondary issuer At the same time, the logical address spaces for intermediate to n-th issuers are set based on the provisional specifications. Therefore, before the IC card is handed over to the secondary issuer, the intermediate address space for the secondary issuer to the address space for the nth issuer will have a temporary entity authentication key and the like. These secondary logical address spaces ~
The specifications of the n-th logical address space are changed within the scope of each provisional specification each time the IC card is sequentially passed from the secondary issuer to the n-th issuer, and are changed to the official specifications, such as the official subject authentication key file. The layout etc. will be changed. As a result, all IC card holders who ultimately receive and receive IC cards can use IC cards that have logical address spaces in accordance with official specifications.

[Problems to be solved by the invention] However, in the conventional IC card described at the beginning,
Since the primary issuer sets the logical address space for the 1st to nth issuers at the same time based on the usage notified in advance, even if the 2nd to nth issuers try to change the specifications after the specification is notified, it will not work. However, there was a problem in that the period allowed for determining specifications after the secondary issuer was short. Furthermore, since the primary issuer sets the intermediate logical address for the secondary issuer,
The primary issuer has to know the specifications of the intermediate logical address for the secondary issuer, and there is also the problem that the security of the information cannot be sufficiently ensured.

On the other hand, in the conventional example described later, although the security of information is ensured, the primary issuer sets the intermediate logical address for the secondary issuer according to temporary specifications, so
The problem was that the range of changes that could be made by subsequent publishers was limited, and the degree of freedom in selecting official specifications was low.

SUMMARY OF THE INVENTION In view of the above-mentioned problems, it is an object of the present invention to provide an IC card with excellent information security and a high degree of freedom in selecting specifications of a logical address space.

[Means for Solving the Problems] The present invention was made with the focus on the fact that if each publisher adds files within a tree-shaped segment, security can be ensured and the degree of freedom in selecting specifications can be increased. The gist of this is that, in an IC card equipped with a memory that provides a predetermined logical address space, a plurality of segments that can be expanded within the logical address space are arranged in a tree shape, and a file is stored in some of the plurality of segments. is set, a management section is set in the remainder of the plurality of segments, and the management section is made to hold files set on the lower side and/or management information for managing the management section.

[Operations and Effects of the Invention] To set a file on the IC card according to the above configuration,
First, the primary issuer sets the management information regarding the next segment using the highest segment as the management section. After this, the primary issuer passes the IC card to the secondary issuer, and the secondary issuer further sets the management section in one of the next segments, and the lower segment of the management section set in the line break. Set the file to .

Once the file for the secondary publisher is set in this way,
The secondary issuer hands the IC card to the tertiary issuer. The tertiary issuer similarly sets up a new management department in the next segment,
Set the file in the lower segment of the line disconnection management department,
Hand over the IC cart to the 4th issuer.

The 4th issuer will issue the 2nd to 3rd if there is room in the next segment.
Set up the management section and file in the same way as the next issuer, but if there is no room in the next segment, set up the management section in one of the lower segments of the management section set by the second or third issuer, Set a file under the management section.

In this way, each publisher sets the management unit and files one after another, so they can set the files according to the specifications they have selected without being influenced by the setting actions of previous publishers. Therefore, the effect of increasing the degree of freedom in selecting file specifications can be obtained.

Further, since each setter can set the management section by himself or herself and specify the management information of the file, an effect of increasing the security of the information can also be obtained.

[Example] An embodiment of the present invention will be described below with reference to the drawings.

FIG. 4 is a block diagram showing a schematic configuration of an IC card according to an embodiment, and an IC card 41 includes a human output port 43 for exchanging command information and data information with an information processing device 42, and a human output port 43 for exchanging command information and data information with an information processing device 42, A superheavy processing unit (MPU) that executes the processing indicated by the command information supplied from the watert 43
44, and a memory 45 that holds the processing results of the superheavy type arithmetic unit 44.

Upon receiving command information including a directory creation command from the information processing device 42, the superheavy processing device 44 then receives the subject authentication key information (p) supplied from the information processing device 42.
i n) to determine whether or not you have access rights, that is, whether you are the issuer, and if access rights are confirmed,
In accordance with the file layout supplied via the information processing device 42, a directory and a file as a management unit are set in a segment in the logical address space for the issuer.

As a result, a hierarchical segment structure as shown in FIG. 1 is formed in the memory 45, and each directory 1 to 4 manages lower segments in the directory structure shown in FIG. In other words, lower-level directories and files are managed in a higher-level directory, and for this reason, each directory has subject authentication key information p that is referenced when searching for lower-level segments, which will be described later.
The lower segment indicator information ID (indicated by a''-e in the directory configuration diagram of FIG. 5) which also functions as "in", the lower segment position information consisting of the first address and the last address of the lower segment, and the lower segment Lower segment size information consisting of the current size of the segment and the maximum expandable size, and the current group size and expansion indicating the total size of the lower segment group (hereinafter referred to as lower group) set under the directory. For example, in directory 2, the size of directory 4 and the files a, b, managed by directory 4 are included.

In directory 3, file d
, and manages the total size of e. Among these pieces of information, the lower segment indicator information ID and the maximum size of the lower segment size information are supplied by the issuer as data information from the information processing device 42 to the superheavy processing device via the input/output port 43. The super-heavy-duty arithmetic processing unit 44, which has been supplied with such data information, executes the program instructions in the procedure shown in FIGS. 6A to 6C, and calculates the current size and size of the lower segment position information and lower segment size information. , the current size of the subgroup size information, and set up a directory or file for the publisher. Note that the maximum size of the lower group size information is determined in the upper level directory.

Below, the file setting or expansion procedure is shown in Figures 6A to 6.
This will be explained in detail with reference to Figure C. In the following description, the target segment for setting or expansion belongs to level LS, and the setting or expansion size is assumed to be NS.

Upon receiving command information from the information processing device as described above, the microcomputer arithmetic device starts the file setting main routine shown in FIG. 6A in step 520, and then proceeds to step S21 to perform file setting. A subroutine (hereinafter referred to as file setting/expandability determination subroutine) is executed to determine whether or not the extension is possible.

The procedure of this file setting/expandability determination subroutine is shown in FIG. 6B. In this file setting/expandability determination subroutine, first,
4 scans the lower segment indicator information ID held in the level 1 directory to detect the directory controlling the target segment (step S31);
Next, set the initial value rlJ to the variable LEVEL that represents the scanning level.
(step 532), the scanning target level L attempts to detect a directory that directly controls the level LS of the segment to be set or expanded (step 533).
). Before the level L to be scanned reaches the level of the directory that directly controls the level of the segment to be set or expanded, the judgment result in step S33 is YES, so the superheavy calculation unit 44 scans the level in the upper directory. The expected size (WORK
), step 534), and calculate the expected size WORK
It is determined whether or not the size is less than or equal to the maximum size of the lower group size information (step 535).

If the determination result in step S35 is NO, there is no room for setting or expansion, so the superheavy calculation unit 44 forms information indicating "no memory space" in step S36, and returns to the main routine. On the other hand, if the judgment result in step S35 is YES, there is room for setting or expansion, so the super heavy form arithmetic unit 44 uses L to lower the scanning target level L.
"1" is added to (step 537), and step S3
Return to 3. In this way, the micro-computer unit 44 repeatedly executes steps S33 to S37, determines whether there is room for setting or expansion, and waits for the determination result in step S33 to be negative.

Eventually, when the determination result in step S33 becomes NO, the super heavy form arithmetic unit 44 proceeds to step S38 and calculates the expected size (WORK) by adding the expanded size NS to the current size of the lower segment size information (step 838).
It is determined whether the expected size VORK is less than or equal to the maximum size of the lower segment size information (step 539). If the determination result in step S39 is NO, there is no room for setting or expansion, so the superheavy form arithmetic unit 44 performs step S39.
Step 36 generates information indicating "no memory space" and returns to the main routine. On the other hand, if the determination result in step S39 is YES, there is room for setting or expansion, so the super heavy-duty calculation unit 44 forms information indicating "memory space available" in step S40, and returns to the main routine.

In this way, when the information regarding the presence or absence of memory space is formed and the process returns to the main routine, the superheavy arithmetic unit 44
In step S22, it is determined whether setting or expansion is possible based on the information regarding the presence or absence of the memory space. if,
If the information regarding the presence or absence of memory space indicates that setting or expansion is not possible, the judgment result in step S22 is NO, so the superheavyweight calculation device 44 proceeds to step S23 and displays the information indicating that setting or expansion is not possible. Instruct the processing device 42. On the other hand, if the determination result in step S22 is YES, the superheavy-type arithmetic unit 44 proceeds to step S24 and executes a file setting/extension subroutine.

The procedure of the file setting/extension subroutine is shown in FIG. 6C. In the file setting/extension subroutine, first, the super heavy-duty arithmetic unit 44 scans the lower segment indicator information ID held in the level l directory. The directory controlling the target segment is detected (step 541). Next, the variable LEV representing the scanning level
Assign the initial value "1" to EL (step 542) and scan target! The novel L attempts to detect a directory that directly controls the level LS of the segment to be set or expanded (step 543). Before the level L to be scanned reaches the level of the directory that directly controls the level of the segment to be set or expanded, the judgment result in step 543 is YES, so the superheavy calculation unit 44 scans the level in the upper directory. A new current size is calculated by adding the expanded size NS to the current size of the lower group size information held in (step 544) and is held as updated current size information. Next, the superheavy calculation unit 44 sets "1" to L in order to lower the scanning target level L.
is added (step 545), and the process returns to step S43. In this way, the superheavy calculation device 44 performs steps 343 to 343.
While repeating S45, the current size of the lower group size information of each level is updated one after another.

Eventually, when the determination result in step S43 becomes NO, the super heavy form arithmetic unit 44 proceeds to step 546, adds the extended size NS to the current size of the lower segment size information to update the current size, and further updates the lower segment position in step S47. Configure or extend files by setting or changing information. When the file setting or expansion is completed in this way, the super heavy-duty arithmetic unit 44 returns to the main routine and ends the process.

In the above explanation, setting or expanding a file was explained as an example, but the same process is performed when the publisher newly creates a lower directory.

In this way, in this embodiment, new files can be created or expanded by manipulating the directory, so the primary publisher can create directories and files based on the specifications determined by itself, as shown in FIG. After that, when the IC card is handed over to the secondary issuer, the secondary issuer creates directories and files according to its own specifications, and in the same way, up to the nth issuer, the IC card is created according to the user's specifications. For example, in the example shown in FIG. 1, an IC card manufacturer creates directories and files based on the primary issuer and secondary issuer.
By notifying each segment indicator information ID, the primary issuer can manage Directory 4 under Directory 2,
Files a, b, c under directory 4
The secondary publisher can create a file d under the control of directory 3.

e can be established. Therefore, the segment indicator information ID of a file can be determined by each setter,
Information security can be increased. In addition, each setter can determine the specifications of a file before it is created, which provides sufficient time for determining the specifications, and also increases the degree of freedom in the specifications. .

In order to exchange information between the information processing device t42 and the IC card 41, the terminals of both may be brought into physical contact to propagate signals, or a non-contact terminal using electromagnetic induction may be used.

FIG. 6B is a flowchart showing a file setting permission subroutine; FIG. 6C is a flowchart showing a file setting/expansion subroutine; FIG. 7 is a flowchart showing an IC card issuance procedure according to an embodiment. be.

[Brief explanation of the drawing]

Fig. 1 is a tree diagram showing the segment configuration of an IC card according to an embodiment of the present invention, Fig. 2 is a flow chart showing the issuance process of a conventional IC card, and Fig. 3 is a diagram of another conventional IC card. Flowchart diagram showing the issuing process, Figure 4 is a block diagram showing the configuration of an IC card according to one embodiment of the present invention, Figure 5 is a format diagram showing the directory configuration of one embodiment, and Figure 6A is file setting. Shows the main routine of 41 prayer 43 ・ 45 ・

Claims (3)

[Claims] (1) In an IC card equipped with a memory that provides a predetermined logical address space, a plurality of expandable segments are configured in a tree shape within the logical address space, and a file is set in a part of the plurality of segments. , a management section is provided in the remaining portions of the plurality of segments, and files set in the lower part of the management section, and
Or an IC card characterized by holding management information for managing a management section. (2) The management unit retains maximum segment size information representing the expandable size of each segment under its management, and maximum group size information that is the sum of maximum segment size information of all manageable segments. IC cards listed in Scope 1. (3) The IC card according to claim 2, wherein the management unit further retains segment indicator information that defines access rights to each segment under its management.