JPH08171517A - Information storage medium - Google Patents

Abstract

PURPOSE: To prevent stored data from being altered and an information storage medium from being forged by reading the stored data out by changing write instructions and rewrite instruction as read instructions by divided areas of a memory. CONSTITUTION: The memory 2 as an information storage means that the information storage medium is equipped is divided into an area A21 as a manufacturer area, an area B22 as a publisher area, and an area C23 as a user area. Write instructions are changed as rewrite instructions by the areas and one write instruction is made to correspond to each area. Namely, only a write instruction 1 is effective to the area A21, only a write instruction 2 is effective to the area B22, and only a write instruction 3 is effective to the area C23. Even if a rewrite instruction of a certain area is stolen, the forging of the information storage medium requiring the rewriting of the storage data of the whole medium is impossible.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information storage medium whose internal data can be rewritten by an external command such as an IC card, and more particularly, information storage effective for security measures such as falsification and forgery prevention. Regarding the medium.

[0002]

2. Description of the Related Art In recent years, in addition to magnetic cards and the like, information storage means capable of storing a large amount of information, such as IC memory and optical memory, has been provided, and processing of rewriting of stored data etc. by external commands is performed. IC cards and the like are becoming popular. Then, in an information storage medium such as an IC card, usually, the memory is used as a "card manufacturer area" handled by a card manufacturer, a "card issuer area" handled by a card issuer,
It is used by dividing it into multiple areas such as the "user area" handled by the service provider. Then, in the card issuing process, after writing predetermined initial data in these areas, it is handed over to the card holder for use.

The card issuer is, for example, a company that sells cards of a certain technical format. Then, for example, a service provider such as a department store gives a customer card in which predetermined initial data is written to the customer as a customer card for its own use, and the customer becomes a card owner. When the card owner uses the card by using the card using terminal of the user application system provided by the thirds provider, the stored information in the user area is rewritten or new information is added. By the way, if a service provider is different for a card of a certain card issuer's technology type, the memory contents of a portion related to the service provider are naturally different. Write the data. Also, if a card of a certain card issuer has a different technical format, the corresponding portion is different, so the card issuer writes initial data.
However, with regard to the card given to the service provider by the card issuer, all the initial data to be written by the card issuer may be written, but the original data of the primitive level may be requested to be written by the card manufacturer. Therefore, the card manufacturer will write in the requested content,
Predetermined information such as a production lot number is written in a format unique to the card manufacturer for various reasons such as production management. As described above, the card issuing process may be performed in the order of card manufacturer → card issuer → service provider.

For security measures, the card issuer must be the correct issuer and the service provider must be the correct issuer in each process of passing the card from the card manufacturer to the card issuer and from the card issuer to the service provider. May be performed by storing the encrypted collation key and collating the collation key.

[0005]

However, in the unlikely event that the instruction code relating to the key information or the rewriting instruction is stolen, there is a possibility that the data is rewritten illegally and the data is tampered with. Further, if the data written when the card is issued can be read, there is a problem that another card may be forged using the data. Therefore, an object of the present invention is to solve the above problems, to falsify stored data,
An object of the present invention is to provide an information storage medium with high security, in which stored data cannot be read to forge the information storage medium.

[0006]

Therefore, in order to solve the above-mentioned problems, the information storage medium of the present invention is configured such that a rewrite command which is a write command or a read command is changed for each divided memory area. is there.

That is, the information storage medium of claim 1 is an information storage medium in which a rewritable information storage memory is divided into a plurality of areas for use, and a rewrite command is different for each divided area. .

An information storage medium according to a second aspect of the present invention is the information storage medium according to the first aspect, wherein there are a plurality of rewrite commands that can be used for each divided area in one or more divided areas. is there.

[0009]

In the information storage medium of claim 1, since the rewrite command is different for each area, even if the rewrite command for a certain area is stolen, the rewrite command for the other area is unknown, so the entire information storage medium. Forgery that requires rewriting of the stored data is impossible.

The information storage medium according to the second aspect can deal with the case where the collation key is used for rewriting.
That is, since a plurality of rewriting commands can be used in a certain area, if viewed in reverse order, for example,
The same rewrite instruction can be used partially overlapping over a plurality of areas (however, there is no rewrite instruction common to all the divided memory areas). Therefore,
It is also possible to set the collation key across the memory areas and check the validity of the person who handles each memory area, which further enhances security.

[0011]

Embodiments of the information storage medium of the present invention will be described in more detail below with reference to FIGS. 1 and 2.

The hardware configuration of the information storage medium of the present invention may be the same as that of an information storage medium, such as a conventionally known IC card, which can rewrite the internal storage information by an external command. That is, FIG. 3 is a block diagram of the information storage medium of the present invention. The information storage medium 1 includes at least the information storage means 2 such as an IC memory, the information storage means 2, and a reader / writer built in a user terminal or the like. An information control unit 3 such as a CPU which is interposed between the apparatus A and rewrites stored data according to a command given from the reader / writer apparatus.

The "rewrite command" in this specification means at least a data write command.
This is because rewriting is impossible if abuse of the write command is prevented. However, in order to deal with the meticulous method by referring to the existing stored data or searching for the location of the stored data, the read command of the data is changed in the memory area similarly to the write command. Better. Therefore, the data read command may be common in all areas, but it is better that it is different in each area. However, the read command may be appropriately determined in relation to the required security level and the function of the system side that uses the target information storage medium.

First, an embodiment of the invention of claim 1 in which the rewriting instruction is different for each memory area in the information storage medium of the present invention will be described.

FIG. 1 shows an example of a correspondence relationship between a data rewriting instruction and a divided memory, which is a characteristic part of the information storage medium of the present invention. In the figure, the memory 2 as an information storage unit included in the information storage medium includes an area A which is a manufacturer area 21 and an area B which is an issuer area 22 and an area which is a user area 23. It is divided into three parts. The present embodiment is an example in which the write command is changed as a rewrite command in each area and one write command is associated with each area. That is, as the write command for each area, only the write command 1 is valid for the area A and the write command 2 is valid for the area B.
The figure shows that only the write command 3 is valid for the area C and only the write command 3 is valid.

In the first step of the card issuing process, the card manufacturer issues a write command in the area A, for example, desired data necessary for the card issuing process such as the card issuing date and the card manufacturing lot number. Write by 1. Next, the card for which the issuing process to the area A has been completed is passed from the card manufacturer to the card issuer.

Then, the card issuer writes in the area B, for example, the information that is basically necessary for using the area C such as the directory information of the file to be used by the write command 2. Next, the card for which the issuing process to the areas A and B has been completed is passed from the card issuer to the service provider.

Then, the service provider writes different data or common data in the area C, for example, the cardholder's name, ID number, etc., for each card by the write command 3.

Through the above series of issuing processing operations, the card becomes ready for use by the card holder.

In the above-mentioned issuing processing operation, security is ensured as follows. That is, the card manufacturer writes the initial data in the area A (manufacturer area) using the write command 1. However, since the write command 1 is valid only in the area A, writing cannot be performed in other areas, that is, the areas B and C. Therefore, even if the card manufacturer mistakenly steals the write command 1 in the area A to the outside, the write command in the area B is different from the write command in the area C. Instruction 1 cannot be used and it is difficult to forge another card with the stolen instruction. Even if the card manufacturer also stole the card that is being issued in addition to the write command 1, since the write commands for the areas B and C are different, Even if the contents of the area A are conveniently rewritten, the write command 1 cannot be used for the areas B and C, and it is difficult to falsify the card.

The above describes the security of the issuing process to the area A carried by the card manufacturer, but the same applies to the card issuer and the service provider who carry out the issuing process to other areas. I can say.

As described above, in the information storage medium of the present invention,
It is necessary to properly use a plurality of instructions in order to write to the entire memory area. Moreover, in the above-described issuing process, the person in charge of each step of the issuing process need only hold and use the write command relating to his own process.
Instructions in other areas may not be held. As a result, multiple instructions for the entire memory area of the card can be stored and used spatially and temporally separately, so even if an instruction is stolen from one person who is responsible for one step of the issuing process, the entire card can be stolen. It is difficult to write to, and it is difficult to forge or falsify the entire card.

If the rewrite command is changed for each memory area as described above, when issuing processing is performed, for example, in the case of issuing processing to the memory area A, the memory area B and the memory area C are It is also possible to prevent the trouble of writing data in unnecessary areas.

Next, regarding the information storage medium of the present invention, a plurality of divided memory areas (two types here) are used.
An embodiment of the present invention will be described below.

FIG. 2 shows the correspondence relationship between the divided memory areas and the data rewriting command of the information storage medium according to this embodiment. Also in this figure, as in the case illustrated in FIG. 1, the memory 2 as the information storage means included in the information storage medium is
The area is divided into three areas, that is, an area A that is a manufacturer area indicated by 1, an area B that is an issuer area indicated by 22 and an area C that is a user area indicated by 23. In this embodiment, the write command is changed as a rewrite command in each area, and a plurality of write commands are effective for a part of the memory area, and one rewrite command is applied to all the divided memory areas. This is an example in which one rewriting instruction is valid for a plurality of areas while not supporting them. That is, in FIG. 2, the write command for each area is the area A
Only one kind of write command 1 is effective for the area B, and the write command 1 and the write command 2 for the area B.
2 is valid, and only two types of write command 2 and write command 3 are valid for the region C. Further, in the information storage medium of the present embodiment, the collation key cannot be rewritten unless the collation key is referred to. The collation key B used in the area B is the area B and the collation key C used in the area C is the area. Written to C.

As in the previous embodiment, the card issuance processing, which is the first step of card production, is performed by the card manufacturer in the area A, for example, card issuance processing such as card issuance date and card production lot number. The desired data and the like required for writing are written by the write command 1. The write command 1 is also valid for the memory area B, and the collation key B is written in the memory area B by this. Then
The card in which the issuing process of the area A including the collation key in the area B is completed is passed from the card manufacturer to the card issuer.

Then, in the card issuer, a write command 2 is written in the area B, for example, information that is basically necessary when using the area C, such as directory information of a file to be used. In the writing process at this time, prior to that, the collation key B stored in the area B is read out, the result is compared and verified with the expected value held by the issuer, and if the key is collated and coincides, the write command 2 Can be executed. In this way, the card side checks whether or not the person has a valid card processing qualification. The write command 2 is also valid for the memory area C, so that the card issuer writes the second verification key C in the memory area C. Further, the previously collated key B is rewritten to the collated key B ′ so that the collated key B cannot be reused. (Since the card issuing process only needs to be performed once, it is possible to use the collated key multiple times leading to forgery and falsification. It has a meaning to prevent). The collation key may not be encrypted, but it is preferable to encrypt it. Next, the card in which the issuing processing of the areas A and B including the matching keys in the areas B and C is completed is passed from the card issuer to the service provider.

Then, the service provider writes different data or common data in the area C, for example, the cardholder's name, ID number, etc., by the write command 3. At this time, as in the case of the card issuer, the writing process is executed after the person who performs the rewriting process by checking the matching key C is checked.

By the above series of issuing processing operations, the card becomes ready for use by the card holder.

In the above-mentioned issuing processing operation, security is ensured as follows. That is, since the write command 1 used by the card manufacturer is valid only in the areas A and B, writing cannot be performed in the area C. Therefore, even if the card manufacturer accidentally steals the write command 1 in the area A to the outside, the write command 1 is not valid for the area C, and the verification key is used for the area C. If you don't know, you can't write, and it's difficult to forge other cards using stolen instructions.
Further, even if the card manufacturer stole the card that is being issued in addition to the write command 1, the card cannot be written into the area C, and forgery cannot tamper with the card. .

Similarly, the write command 2 used by the card issuer is valid in the area B and the area C, and cannot write in the area A. In addition, in the area B as well, if the verification of the verification key B is not successful, the write command 2 itself is invalid, and if the verification of the changed verification key B ′ is not successful in the written card, the command is issued. Cannot be executed. Therefore, even if the write command 2 or the collation key B is accidentally stolen to the outside, the write command in the area A is different from the write command in the area A with respect to the card which has been already used in the market and whose initialization has been completed. It is safe if it cannot be used and the verification key B ′ does not leak in the areas B and C.

The same applies to the write command 3 and the collation key C used by the service provider.

In the above embodiment, a plurality of rewrite commands correspond to one divided memory area. Therefore, even if the collation key is used as a security measure, it is possible to cope with it, and in addition to the security that the embodiment of the one-division memory-one rewrite command format has, the higher security can be secured. .

When performing the issuing process, for example, if the issuing process is to the memory region A, writing unnecessary data to the memory region C is performed. If the issuing process is to the memory region B, to the memory region A, for example. It is also possible to prevent the trouble of writing unnecessary data from and writing data to an unnecessary area.

[0035]

According to the information storage medium of the first aspect of the present invention, a plurality of write commands are required to write to the entire memory area. Therefore, even if one command is stolen from a person who takes one step in the issuing process, the entire card cannot be written and forgery or tampering can be prevented. In addition, even if the card is distributed to the cardholder and used in the market, even if the rewrite command is stolen from the card user terminal used by the cardholder, the rewrite command can only support a part of the memory area. As such, it is possible to prevent counterfeiting or falsification of the card.

Further, according to the information storage medium of the present invention of claim 2, a plurality of rewriting commands can be used for the divided memory areas, so that the card manufacturer, the card issuer, and the service provision are provided. In the security method that changes the rewrite command to be used according to the person and the handling step and level of the card, and uses the matching key between them to check the validity of the person handling the card more safely. And tampering can be prevented.

[Brief description of drawings]

FIG. 1 is an explanatory diagram of a correspondence relationship between a memory division and a rewrite command according to an embodiment of an information storage medium of the present invention.

FIG. 2 is an explanatory diagram of a correspondence relationship between memory division and a rewrite command according to another embodiment of the information storage medium of the present invention.

FIG. 3 is a block diagram showing the configuration of an embodiment of the information storage medium of the present invention.

[Explanation of symbols]

 1 Information Storage Medium 2 Information Storage Means, Memory 21 Area A: Manufacturer Area 22 Area B: Issuer Area 23 Area C: User Area 3 Information Control Means A Reader / Writer Device

Claims (2)

[Claims] 1. An information storage medium in which a rewritable information storage memory is divided into a plurality of areas for use, wherein a rewrite command is different for each divided area. 2. The information storage medium according to claim 1, wherein there are a plurality of rewriting instructions usable for each divided area in one or more divided areas.