JPH0460271B2 - - Google Patents

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention provides a computer equipped with a CPU, data memory, etc.
It relates to portable media such as IC cards with built-in IC chips.

[Technical background of the invention and its problems] In recent years, memory cards for recording data have been widely used.
IC cards have been developed and put into practical use. This IC
The card includes a CPU and a mask for program storage.
It has built-in ROM and non-volatile memory for data storage. The device is characterized in that it writes data to a nonvolatile memory for data storage and reads data from the nonvolatile memory by receiving multiple types of commands. However, the types of card commands often vary depending on the customer, and the locations and sizes of the password area, data area, etc. allocated to the nonvolatile memory for data storage often vary depending on the customer. In this way, data that differs depending on the customer is stored in a mask ROM for program storage.
If the information is written in advance, a different card must be manufactured for each customer, which complicates the manufacturing process and is not suitable for mass production.

In order to eliminate these drawbacks, when manufacturing IC cards, the non-volatile memory (or dedicated non-volatile memory) for data storage must be left unwritten.
Various data may be written at the time of initialization, but at the time of initialization, the nonvolatile memory must be directly accessed using the address of this memory. However, if non-volatile memory can be directly accessed after an IC card is issued, there is a risk that the contents of the IC card (PIN number, etc.) may be disclosed to others, and the security of the IC card may be compromised. .

[Object of the Invention] This invention was made in view of the above circumstances, and its purpose is to provide a highly secure portable medium that can be mass-produced.

[Summary of the Invention] In other words, in order to achieve the above object, the present invention includes at least one non-volatile memory and controlling reading or writing of data from the non-volatile memory using a plurality of types of instructions. a first set of instructions for directly accessing the contents of the non-volatile memory using an address of this memory; and a second set of instructions for accessing the contents of the non-volatile memory using an indirect address. The first instruction group is used before initialization, and when initialization is completed, a flag indicating that the initialization has been completed is set in the non-volatile memory, and after this flag is set, the first instruction group is used. I'm trying to stop accepting applications.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In Figure 4, 1 is a portable medium.
This IC card is an IC card, and the surface of this IC card 1 is provided with a connection part 2 for interface with external equipment. The connecting section 2 is composed of a plurality of terminals 2 ₁ to _{2 8} . For example, the terminal 2 ₁ is for the operating power supply voltage (+5V), and the terminal 2 ₂ is for the operating power supply voltage (+5V).
is for grounding, terminal ₂₃ is for the clock signal, terminal ₂₄ is for the reset signal, terminals ₂₅ to ₂₇ are for data input and output, and terminal ₂₈ is the power supply voltage (+) for data writing.
21V).

Inside the IC card 1, as shown in FIG. 1, a control CPU 3 is provided, and this CPU 3 and external equipment are connected via an interface circuit 4. The connecting section 2 is used to connect the interface circuit 4 and external equipment. The above CPU 3 includes a mask ROM 5 for program storage and a ROM 5 for use as a work area.
A RAM 6 and a nonvolatile memory (data memory) 7 for data storage are connected to each. Each of the above parts is composed of an IC chip and is provided on one substrate.

When manufacturing an IC card, the mask ROM 5 stores all manufacturing programs and subsequent transaction programs in advance, and the data memory (PROM) 7 stores all commands as shown in Figure 2a. has been done. Then, by selecting the above command and setting a flag when initializing the IC card, specifications can be set according to the customer. In FIG. 2a, commands 2 and 4 are selected.
The data memory 7, as shown in FIG. 2b,
It has a command area 7a where the commands shown in FIG. 2a are stored, a data area 7b where transaction data is stored, and an initialization flag area 7c. A flag is set in this initialization flag area 7c when initialization is completed, and instructions after initialization are executed based on the state of this flag.

Figure 5 shows the terminal device according to this invention.
The external appearance of the IC card 1 issuing machine (for initialization) 10 is shown, and FIG. 6 shows its circuit configuration. In the figure, 11 controls the entire issuing machine 10.
CPU (Central Processing Unit),
12 is a keyboard for inputting data, 13 is a keyboard for inputting data;
A CRT display device, 14 a ROM in which a control program is stored, 15 a RAM in which data is stored, 16 a dot printer for printing various data, and 17 a floppy disk inserted through a floppy disk insertion slot 18. 19 is a floppy disk device for storing and reproducing data; 20 is an IC for reading data from the data memory 7 of the IC card 1 inserted through the card insertion slot 21 or writing data into the data memory 7; This IC card reading/writing section 20 is connected to the main body of the IC card issuing machine 10 by a cable 22.

FIG. 7 shows a cross-sectional configuration of the IC card reading/writing section 20. As shown in FIG. This IC card reading/writing section 20 has an IC inserted through the card insertion slot 21.
A conveyance path 31 for conveying the card 1 is provided, and this conveyance path 31 is equipped with a plurality of rotatable conveyance rollers 32 positioned to sandwich the IC card 1 from above and below when conveying it. . Each of the conveyance rollers 32 provided in pairs
are provided at regular intervals along the conveyance path 31. The distance from the center of each of these transport rollers 32 to the center of an adjacent transport roller 32 has a width in the card transport direction. Therefore, the transport path 31 of the IC card 1 is defined by the transport guide 33. Further, on the conveyance guide 33, a reader/writer 34 is arranged which exchanges data with the CPU 3 in the IC card 1. This reader/writer 34 is electrically connected to the connection section 2 of the IC card 1.

Next, in the above configuration, IC card 1
We will explain the initialization of . The operator sets the IC card initialization mode using the keyboard 12 of the IC card issuing machine 10 and inserts the IC card 1 into the card insertion slot 21. By this,
The connection section 2 of the IC card 1 and the reader/writer 34 are electrically connected. In this state, CPU11
When an IC card initialization mode signal and a signal indicating the issuing machine are supplied to the CPU 3 of the IC card 1 via the reader/writer 34, the connector 2, and the interface circuit 4, the CPU 3
A connection signal is supplied to 11. This will cause the CPU
Reference numeral 11 provides guidance such as "Please select initialization data" on the CRT display device 13. In response to this guidance, the operator uses the keyboard 12 to select a command stored in advance in the data memory 7 of the IC card 1. With this selection
A signal is supplied from the CPU 11 to the CPU 3, and a flag is set in the data memory 7 at the address corresponding to the selected command. With this, IC card 1
is set according to the customer's specifications. At this time, a flag is set in the initialization flag area 7c of the data memory 7 under the control of the CPU 3, and the initialization is completed.

During the above initialization or after initialization is completed.
When using the IC card 1, the transaction is performed after checking the state of the flag in the flag area 7c, as described above. That is, as shown in the flowchart of FIG. 3, when a command is accepted, it is determined whether it is an initialization command or not, and if it is an initialization command, the initialization is completed based on the state of the flag in the initialization flag area 7c. It is determined whether or not. If the initialization has been completed, the command will not be accepted as a command error. Further, if the initialization is not completed, an initialization instruction is executed. On the other hand, if the received command is not an initialization command, it is determined in the next step whether initialization has been completed. Here, if it is determined that the initialization has been completed, it is assumed that a correct instruction has been received and the instruction is executed, and if the initialization is not completed, the received instruction is not executed as an instruction error.

In this way, in the present invention, the instructions for initializing the IC card and the instructions after initializing the IC card are divided into two groups of instructions, and the initialization completion flag indicating the completion of initialization of the IC card is stored in the data memory 7. When initializing, use the initialization command to initialize the IC card for each customer, set the initialization completion flag after the initialization is completed, and only accept commands after initialization. There is. Therefore, IC cards can be manufactured without considering the customer's specifications, writing can be performed according to each customer during initialization, and there is no risk that the contents of the data memory will be read after the IC card is issued. do not have.

[Effects of the Invention] As explained above, according to the present invention, a portable medium that can be mass-produced and is highly safe can be obtained.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention; FIG. 1 is a block diagram schematically showing the configuration of an electric circuit of an IC card, and FIG. 2 is a diagram for explaining the data memory in FIG. 1 above. Figure 3 is a flowchart to explain the operation when using an IC card, Figure 4 is a perspective view of the IC card, Figure 5 is a perspective view of the card issuing machine, and Figure 6 is the same as above. FIG. 5 is a block diagram showing a schematic configuration of an electric circuit in the card issuing machine, and FIG. 7 is a sectional view showing the configuration of the IC card reading/writing section in FIG. 5. 1...IC card (portable medium), 2...Connection section, 3...CPU (control element), 4...Interface circuit, 5...Mask ROM, 6...
RAM, 7...Data memory (non-volatile memory),
7a...Command area, 7b...Data area, 7c...Initialization flag area.

Claims (1)

[Scope of Claims] 1 A portable medium comprising at least one non-volatile memory and a control element that controls reading of data or writing of data from the non-volatile memory according to a plurality of types of instructions; is divided into a first group of instructions that directly accesses the contents of the non-volatile memory using an address in this memory, and a second group of instructions that accesses the contents of the non-volatile memory using an indirect address. setting a flag indicating that initialization has been completed in the non-volatile memory when initialization is completed using a group of instructions 1;
The portable medium is characterized in that the first command group is no longer accepted after the flag is set. 2. The portable medium according to claim 1, wherein the control element is a CPU.