JPH03171389A - Portable electronic device - Google Patents

Abstract

PURPOSE:To make a subprogram capable of being registered only once, and to eliminate possibility that the subprogram is rewritten unjustly after it is registered by making it possible to register the subprogram only when the subprogram is decided not yet to be registered at the time of the registration of the subprogram. CONSTITUTION:A portable electronic device is constituted so that a IC card 1 can be connected to a control part 3 consisting of a CPU, etc., through a card reader.writer 2, and the subprogram to be executed by the control part 3 can be registered in a nonvolatile memory in the IC card. Then, a registration information storage means 23 to store registration information to decide whether the subprogram is registered previously or not and a control means 15 to make the subprogram capable of being registered only when the subprogram is decided not yet registered by the registration information in the registration information storage means at the time the registration of the subprogram are provided in the IC card 1. Accordingly, the subprogram becomes capable of being registered only once. Thus, the possibility that the subprogram is rewritten unjustly after the registration is removed.

Description

Detailed Description of the Invention [Object of the Invention] (Industrial Application Field) The present invention relates to erasable non-volatile memory and C
It relates to a portable electronic device called an IC card that has a built-in FC (integrated circuit) chip that has a control element such as a PU, and in particular a band that can register subprograms executed by the control element in nonvolatile memory. related to capable electronic devices.

(Prior Art) In recent years, as a new portable data storage medium, an IC card incorporating an IC chip having an erasable non-volatile memory and a $I II element such as a CPU has been developed. This type of IC card accesses a built-in memory using a built-in control element, and outputs necessary data in response to a request from an external device.

Recently, among such IC cards, an IC card has been developed in which a subprogram (for example, an abbreviated program when writing data) to be executed from a main program in the card can be registered in a nonvolatile memory.

(Problem to be solved by the invention) Conventionally, however, in the IC card in which sub-programs such as those mentioned above can be registered, as many sub-programs as desired can be registered, so that the sub-program cannot be There was a problem that it could be rewritten.

Therefore, the present invention provides that the Zabub1]gram is the first blocking registration i.
It is an object of the present invention to provide an electronic device using iJF, which eliminates the possibility of subprograms being illegally rewritten after registration.

[Configuration 3 of the Invention (Means for Solving the Problems) The present invention includes an erasable non-volatile memory and a control section for reading and writing data into the non-volatile memory. 61, and a portable electronic device capable of selectively outputting data from the outside, and registering a subprogram executable by the control unit in the nonvolatile memory; Registration information storage means for storing registration information for determining whether the Megura person is registered or not, and when registering the Zab program, it is determined that the Zabburo person is unregistered based on the registration information in the registration information storage means. A control means is provided that enables registration of the subprogram only when the subprogram is registered.

(Function) When registering a subprogram, if it is determined that the subprogram is unregistered, the subprogram can be registered.As a result, the subprogram can be registered at the same time. There is no possibility of unauthorized rewriting.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

Figure 7 shows a portable electronic device and 1 IC according to the present invention.
This figure shows an example of the configuration of a terminal device that handles cards. That is, this terminal device allows an IC card 1 to be connected to a control unit 3 consisting of a card league writer 1, a C F'U, etc. via a card league writer 2, and a keyboard 4 to the control unit 3.
, a CRT display device 5, a printer 6, and a floppy disk device 7 are connected l2.

The IC card 1 is used by the user to refer to a personal identification number known only to the user and to store necessary data when making a security transaction, such as when purchasing a product.Figure 786 shows its functional block. As shown in FIG. The read/write unit 11 has a data memory 16 which will be described later.
This is a function to read, write, or erase data during this time. Dark: The i setting/password verification unit 12 automatically verifies the password after setting the password and permits subsequent processing when the password set by the user is stored and read prohibited. This is a function that gives encryption·
The encrypting unit 13 performs encryption to prevent leakage and forgery of communication data, including when transmitting data from the control unit 3 to another terminal device via a communication line, and encrypted data. This is for decoding. The supervisor 14 has the function of decoding the function code input from the card league writer 2 or the function code to which data has been added, and selecting and executing a necessary function among the basic functions.

In order to perform these functions, the IC card 1 includes a control element (for example, a CPU) 15 as a control section, a data memory 16, a program memory 17, and a card, as shown in FIG. It is made up of a t-th contact section 18 that makes electrical contact with the reader/writer 2, and among these, the part within the broken line (control element 5, data memory 16, program memory 17) is one contact part 18. It is composed of an IC chip (or J, tm number of IC chips) and is embedded in the IC card body.

The program program 17 is composed of, for example, a mask ROM, and stores control program programs for the control element 15 equipped with subroutines for realizing the three basic functions.

The data memory 16 is used to store various data, and is made up of an erasable nonvolatile memory such as an EEPROM. The data memory 16 is divided into a subprogram area 21 and a user area 22, as shown in FIG. 2, for example. The subprogram area 21 is an area in which a subprogram is registered using a subprogram registration command, and the subprogram is executed by the main program in the program memory 17. Subprogram area 2
1. Is the subprogram registered? ．． 1
1 Flag area (to store the flag (registered information))
23, a subprogram data area 24 for storing subprogram data, and stores the result of calculating the XOR (exclusive OR) of all data in the flag area 23 and subprogram data area 24. BCC (Block Check ◆Character)
It is composed of area 25. The user area 22 is an area for storing various types of storage data.

Next, the operation in such a configuration will be explained.

First, when registering a subprogram in the data memory 16, subprogram registration command data having a format as shown in FIG. 3 is input. This command data is composed of a subprogram registration function code, subprogram data length, and subprogram data as shown in the figure.

The subprogram registration operation is performed according to the flowchart shown in FIG. That is, when the subprogram registration command data is manually input, the control element 15 refers to the flag in the flag area 23 to determine whether the subprogram has already been registered. At this time, if the flag is roo(II)J, for example, it means that it has already been registered, and in this case, the control element 15 determines that the subprogram has been registered and marks it as registered. Outputs the meaning status and returns to the instruction data waiting state.

On the other hand, if the flag is, for example, rFF(II)J, it means that it is unregistered. In this case, the control element 15 determines that the subprogram is unregistered, and the The program data is written in the subprogram data area 24, and the flag in the flag area 23 is set to the registered state (00 (I1)). Then, the control module 15 writes the result of calculating the XOR of all the data in the flag area 23 and the subprogram data area 24 to the BCC area 25, and when the writing is completed, outputs a status indicating that the writing is completed. Return to instruction data waiting state.

Next, the operation of executing the subprogram will be explained with reference to the flowchart shown in FIG. The subprograms are executed from the main program in the program memory 17 as shown in the figure. First, system 6111 child 15
identifies whether the subprogram has already been registered by referring to the flag in the flag area 23, and if it has not been registered (F F (I+))
returns to the main program. If registered (0
0 (I+)), the control element 15 calculates the XOR of all data in the flag area 23 and subprogram data area 24, compares it with the BCC data already stored in the BCC area 25, and determines whether both are If they match, execute the subprogram and return to the main program.

[Effects of the Invention] As detailed above, according to the portable electronic device of the present invention, when registering a subprogram, the subprogram can be registered only when it is determined that the subprogram is unregistered. The program can only be registered once.
This eliminates the possibility that the subprogram will be illegally rewritten after registration.

[Brief explanation of the drawing]

The figures are for explaining one embodiment of the present invention, and FIG. 1 is a flowchart explaining the subprogram registration operation, FIG. 2 is a diagram showing the configuration of the data memory, and FIG. 3 is a subprogram registration command. Diagram showing an example of data format,
Figure 4 is a flowchart explaining the execution operation of the subprogram;
FIG. 6 is a block diagram showing the structure of the chip, FIG. 6 is a block diagram showing the functional blocks of the IIC7' node, and FIG. 7 is a block diagram showing the structure of the terminal device. 1...l (,: :7', 7-de (portable electronic device), 2... quad reader/writer, 15...
・Control element (control unit), 16...Data memory (non-depressable memory), 17...Busogram memory, 2]・
... Zabu program area r122 ... user area,
23... Flag area (registered information recording means), 24.
・・Zabprog: '3l, data area, 25...B
CC area.

Claims (1)

[Scope of Claims] An erasable nonvolatile memory, a control unit for reading and writing data to the nonvolatile memory, and selectively inputting and outputting data from the outside, A portable electronic device in which a subprogram executed by the control unit can be registered in the nonvolatile memory, and a registration information storage means for storing registration information for determining whether or not the subprogram is registered. , a control means that enables registration of the subprogram only when it is determined that the subprogram is unregistered based on the registration information in the registration information storage means when registering the subprogram. Device.