JPH04180188A - Ic card - Google Patents

Abstract

PURPOSE:To prevent the reading of data concerned with an individual user by operating a test after initializing an entire memory including a specific cipher code or a secret main part, in an IC card which houses both an application program which executes each kind of function, and a program which tests itself. CONSTITUTION:A test program is executed at the time of judging that a specific cipher code 51 is not set, the individual data of the user or the like in an EEPROM 5 are already initialized, so that the content of the data concerned with the individual can not be read out. That is, when the specific cipher code is not written in a memory, the test program is immediately executed, and when it is written, areas except for the areas where the specific cipher code and a set confirmation code of the memory are written is initialized by a memory initializing routine. Then, the areas where the specific cipher code and the set confirmation code are written is initialized by a cipher code initializing routine.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to an IC card that stores both an application program that performs various functions and a test program that tests itself.

[Conventional technology]

The test program is a program for virtually all functional checks (product tests) within the card, and has the ability to access any address in the memory within the card. For this reason, high security is required for the execution of the test program to prevent programs and data in the IC card from being illegally read and copied via the test program, and from being used intentionally.

Therefore, in such an IC card, it is possible to execute a test program during the manufacturing process, but immediately after the manufacturing process is completed, the card's unique PIN code and the unique PIN code are written into the EEFROM of the IC card. The user's personal data, etc. is written in the setting confirmation code indicating whether or not the setting is passed to the user, but the EEF
After the unique password code is written in the ROM or after the user's personal data is taken in, measures are taken to prevent the program and data from being read by executing a test program.

Figure 3 shows a test program for performing various functional tests stored in the system ROM of a conventional IC card, and a test program stored in the application ROM that allows the card user to actually use the IC card.
It is a flowchart showing the procedure until an application program that executes various functions when using the card is executed.

System ROM a contains a test program 3 that is used by manufacturers to perform various functional tests during the IC card manufacturing process.
1. A branching routine 32 that determines whether to execute the test program 31 or the application program 41 stored in the application ROM d, and selects the program to be executed.
, a setting confirmation routine 34 that checks whether a PIN code unique to the IC card (referred to as a unique PIN code) is written in the EEFROM, a PIN code input from outside the IC card via the I10 terminal P5 and stored in the EEFROM. A PIN code confirmation routine 35 for verifying whether the vM matches the unique PIN code stored therein, a memory initialization routine 36 for initializing the EEFROM when the two match, and the like are stored.

On the other hand, the application ROM d stores an application program 41 that executes various functions when the user actually uses the IC card, as described above.

Then, after all the manufacturing processes of the IC card are completed, the EEFROM contains a unique PIN code and a setting confirmation code, which is a writing confirmation code indicating whether or not this code has been written, and is then transferred to the IC card user immediately before it is delivered to the user. personal data etc. are written respectively. Based on this setting confirmation code, it is determined whether the unique password code is written in the EEFROM.

Note that this setting confirmation code is set so as not to overlap with the initial value of the EEFROM as well as with various bit patterns subsequently written into the EEFROM.

Therefore, in the case of conventional IC cards, the IC
If a person who knows the card's unique PIN code or who happens to know this code tries to extract the program or personal information written to the EEFROM by running a test program, the following actions will be taken: will be held.

In FIG. 3, when the reset signal input from the reset signal terminal P3 of the IC card is received by the CPU, the
The PU reads the branch routine 32 stored in advance at a predetermined address in the system ROM a, and executes the branch routine 32.
Start execution. When the execution command for the test program 31 is confirmed in the branch routine 32, a setting confirmation routine 34 is executed. In this setting confirmation routine 34, E
EPl? Based on the setting confirmation code in ON, it is determined whether a unique password code has been written in the EEFROM, and if it has been written, a password code confirmation routine 35 is executed. Note that if it is not written, the test program 31 is directly executed, for example, during the manufacturing process of an IC card.

In the PIN code confirmation routine 35, the unique PIN code written in the EEFROM is compared with the PIN code input from the I10 terminal P5, and if both match, the memory initialization routine 36 is executed to initialize the EEFROM. In other words, personal data etc. will be deleted. After initializing the data in the EEFROM, the test program 31 is executed.

Of course, if the unique password code and the password input from the outside do not match, the operation is stopped.

This allows conventional IC cards to use the EEFR when confirming the unique PIN code and running the test program 31.
The contents of the OM are initialized to prevent the risk of unauthorized reading of the contents of the EEPROM.

[Problem to be solved by the invention]

However, in the conventional IC card mentioned above, the EEFROM
Normally, it takes several hundred milliseconds to several tens of seconds to initialize the EEFROM, so the initialization operation is forcibly stopped midway through, such as by cutting off the power during EEFROM initialization. By initializing the code and repeating the above-described process again in this state, after executing the setting confirmation routine 34, it is possible to immediately execute the test program 31 without passing through the initialization routine 36, and the remaining EEF
There is a possibility that the contents of the ROM may be illegally read and copied, or that the contents may be used intentionally to induce a crime.

The present invention has been made in view of the above circumstances, and a person who knowingly or accidentally knows the unique PIN code can
The operation of the EEFROM is forcibly stopped during initialization, and the test program can be executed through a route that does not go through the initialization routine. The purpose is to obtain an IC card that cannot be read.

[Means to solve the problem]

In the IC card according to the present invention, when it is confirmed that the unique PIN code and the PIN code input from the outside match by means of comparing the two, the unique PIN code and its setting confirmation code are first written in the memory. The area excluding the area where personal data etc. are written is initialized, and when the initialization is confirmed by the initialization confirmation means, the unique PIN code and setting confirmation code are written by the PIN code initialization means. Initialize the contained area and then run the test program.

[Effect]

In the IC card of the present invention, when the unique PIN code and the PIN code input from the outside match, first, the area of the memory excluding the area where the unique PIN code and its setting confirmation code are written is After initializing the personal data, etc., and confirming the initialization, the area where the unique PIN code and setting confirmation code are written will be initialized. Even if the initialization operation is stopped by some means, the unique PIN code has not yet been initialized, so even if the above process is repeated, the test program will not be directly executed, and even if the test program Even if it is executed, the personal data, and even the unique pin code along with the personal data.

This means that the setting confirmation code has already been deleted.

〔Example〕

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be specifically described below based on drawings showing embodiments thereof.

FIG. 1 is a block diagram schematically showing the configuration of an IC card of the present invention, and numeral 10 in the figure indicates the IC card. I
The C card 10 has a C card that executes and controls each program.
PU 1. System RO, which is a memory that stores test programs for performing various functional tests of IC card products during the manufacturing process. +3. Application ROM, which is a memory that stores application programs that execute various functions when used by the user. 4. A unique PIN code to ensure safety when executing the test program, and the unique PIN code. EEFROM is a non-volatile memory in which the setting confirmation code, which is a write confirmation code to check whether the card has been written, and the card user's personal information, etc.
(Electrically Erasable Pr
ogramable ROM) 5. - 124M to store data temporarily 6. Input/output 6 times I! i7, etc., and these are connected to each other via the system bus 2. P
1 to P5 are all terminals, Pl is a power input terminal,
P2 is a ground terminal, P3 is a reset signal terminal to which a reset signal for initializing the CPU 1 is input, P4 is a clock terminal to which a clock signal is input, P5 is an I10 terminal, and the input/output circuit 7 is connected to the I10 terminal P5. combined.

The input/output circuit 7 connects I1 between the IC card 10 and the external device.
It is configured to input and output data via the 0 terminal P5.

The EEFROM 5, which is a non-volatile memory, stores a unique PIN code 51 when the manufacturing process of the IC card is completed, a setting confirmation code 52 which is a writing confirmation code indicating whether or not this unique PIN code has been written, and the user's personal information. Information etc. are written. This setting confirmation code 52 is the same as with conventional IC cards.
Initial value of M5 or after that t! It is selected so as not to overlap with various bint patterns that may be set in the BFROM 5.

'l! Figure J2 is the IC card system RO according to the present invention.
12 is a flowchart showing the procedure for executing the test program of M3 and the application program of application ROM 4.

When the reset signal inputted from the reset signal terminal P3 is received by the CPU 1, the CPU 1 reads the branch routine 32 stored in advance at a predetermined address in the system ROM a, and starts executing the branch routine 32. When it is confirmed in the 0 branch routine 32 that an execution command for the test program 31 is input from an external device through the I10 terminal P5, the CPU 1 causes the setting confirmation routine 34 to be executed.

In this setting confirmation routine 34, the unique password 51 is set to EEF based on the setting confirmation code 52 in the EEPROM 5.
It is determined whether or not the unique PIN code 51 is written in the ROM 5, and if the unique PIN code 51 is written, the PIN code confirmation routine 35 is executed, and if it is not written yet, for example, during the manufacturing process or when the product If the password is deleted due to a problem after shipping, the test program 31 is directly executed to verify the password.

In the PIN code confirmation routine 35, the EEPROM S
The unique PIN code 51 written inside and the I10 from the outside.
Verify with the pin code entered via terminal P5,
If both match, the EEFROM 5 memory initialization routine 36' is executed. That is, first, the area of the EEFROM 5 excluding the area where the unique password code 51 and setting confirmation code 52 are written, for example, the area where the user's personal information is written, is initialized. Next, after confirming that the area has been initialized in the initialization confirmation routine 37, a PIN code initialization routine 38 is executed to initialize the area in which the unique PIN code 51 and setting confirmation code 52 are written. do.

After that, the test program 31 will be executed.

Note that if the unique password code 51 and the password input from the outside do not match, the operation is stopped.

Therefore, at the time the test program 31 is executed, personal information, unique password code, setting confirmation code, etc. are all in an initialized state. On the other hand, as mentioned above, if it is determined that the unique PIN code 51 is not set, the test program is executed, but at this time the EEF
Since the user's personal data and the like in the ROM 5 have been initialized, this prevents the contents of data relating to the card user from being read out.

In addition, in the branch routine 32, the I10 is sent from the external device.
When the command to execute the test program stored in the system ROM 3 is not input to terminal P5, the CPU
Needless to say, 1 executes the application program 41.

〔Effect of the invention〕

In the IC card of the present invention, if the unique PIN code is not written in the memory, the test program can be executed immediately, and if the unique PIN code is written in the memory, the memory initialization routine is first executed. After initializing the memory area except for the area where the unique PIN code and setting confirmation code are written, and then initializing the area where the unique PIN code and setting confirmation code are written using the PIN code initialization routine. Since the test program is executed, after the IC cart is shipped, a person who knows the unique PIN code of the IC card,
Or, even if a person who happens to know this happens to interrupt the initialization by cutting off the power while executing the memory initialization routine for the purpose of reading personal data in the EEFROM, and then runs the test program mentioned above again, the At this point, the unique PIN code and setting confirmation code have not yet been initialized, so the process to run the test program directly from the setting confirmation routine is not selected, and the memory initialization routine is executed after the PIN code confirmation routine. This prevents reading of personal data, etc.

In other words, the test program is executed after the entire memory containing the unique PIN code or the main parts requiring secrecy are initialized, and the data concerning the user stored in the memory is reliably prevented from being read out. Ru. Furthermore, since the unique PIN code has not yet been written during the manufacturing process, it is possible to test various test items before shipping the product, and sufficient product inspection can be carried out without any problems. It has excellent effects.

[Brief explanation of drawings]

FIG. 1 is a block diagram schematically showing the internal structure of an IC card according to the present invention, FIG. 2 is a flowchart showing the procedure for executing the test program and application program according to the present invention, and FIG. 3 is a conventional IC card. 2 is a flowchart showing a procedure for executing a test program and an application program on the RC card. 1...CPU 2...System hash 3...System ROM4...Application ROM 5...EEPR
OM 31... Test program 32... Branch routine 34... Setting confirmation routine 35... Password code confirmation routine 36'... Memory initialization routine 37... Initialization confirmation routine 38... Password Code initialization routine 41...Application program In the drawings, the same reference numerals indicate the same or corresponding parts. Agent Masuo Oiwa+: CPU 2 systems path 3 systems ROM 4: Application ROM 5: EEPROM 6: RAM 7: Input/output circuit 10: Ic card Figure 1 Figure 2

Claims (1)

[Scope of Claims] 1) An IC card incorporating an application program that executes various functions and a test program that tests itself, the IC card having a unique PIN code assigned to the IC card and a unique PIN code written therein. a memory in which a writing confirmation code is written indicating whether or not the writing confirmation code has been written; a means for determining whether or not a unique PIN code has been written based on the writing confirmation code of the memory; If the PIN code is entered externally, the PIN code verification means checks the unique PIN code and the PIN code entered from the outside, and when the PIN code input from the outside matches the unique PIN code, these are written in the memory. A means for initializing areas other than the area that is being used, a means for confirming that the area has been initialized by the means, and an area in which the unique PIN code and writing confirmation code are written when the initialization is confirmed by the means. and means for initializing the IC card and executing the test program.