JPH08305810A - Hybrid card processor - Google Patents

Abstract

PURPOSE: To provide a hybrid card processor which can greatly shorten the processing time for the recording and reproduction of data. CONSTITUTION: The data of a hybrid card 1 which are written in an optical memory 1b or data read out of the optical memory 1b are temporarily stored in a buffer memory 22, and a ciphering and deciphering part 23 performs ciphering based upon a key for ciphering which is read out of an IC chip 1 or deciphering based upon a key for deciphering, so that the ciphering and deciphering part 23 ciphers or deciphers the data directly not through the IC chip 1.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a hybrid card processing device for a composite type card (hereinafter referred to as a hybrid card) having an IC chip and an optical memory on the card.

[0002]

2. Description of the Related Art Conventionally, as a card-shaped recording medium, an optical card for optically recording / reproducing information using a laser beam or an IC card having an IC chip embedded in the card is known.

By the way, these cards are excellent in portability, but each has the following advantages and disadvantages. For example, for optical cards,
It has a storage capacity of several megabytes and can store a large amount of information, but since information cannot be rewritten, its use is limited. In addition, IC cards can be accessed at high speed and information Although confidentiality is easy to maintain, it is advantageous in terms of security, but it is considered that the unit price per unit storage capacity is high.

Therefore, conventionally, a hybrid card having an optical memory including an optical recording area together with an IC chip has been considered in order to make full use of the characteristics of each of these cards and to make up for their respective drawbacks.

In such a hybrid card, the optical memory can be accessed by the optical head, and the IC chip can be accessed mainly by the mechanical connector.

[0006] Conventionally, as a recording / reproducing apparatus for this kind of hybrid card, Japanese Patent Laid-Open No. 5-282506 discloses a key for recording a ciphertext in an optical memory and decrypting (decoding) the ciphertext in an IC chip. Alternatively, there is disclosed an IC card with an optical memory and a processing apparatus for the same, which stores a key for encrypting plaintext.

In this case, in the decryption operation of the ciphertext, the ciphertext recorded in the optical memory is temporarily transferred from the card processing device to the IC chip, the ciphertext is decrypted in the IC chip, and then again. The data is returned to the card processing device, and in the data encryption process, the data is temporarily transferred to the IC chip, the data is encrypted in the IC chip, and then returned to the card processing device. In this way, by utilizing the encryption function and the decryption function in the IC chip, it is possible to eliminate the need for a dedicated circuit and firmware.

[0008]

Thus, in the conventional device, the IC chip on the hybrid card is used to perform the information encrypting operation and the information decrypting operation. In the above, it is necessary to transfer the encrypted information (ciphertext) and the information to be encrypted (plaintext) to the IC chip during the encryption operation.

However, the IC chip transmits / receives data to / from the outside by serial transfer, and the maximum transfer rate at this time is 9600 bps or 19200 bps. When the data is transferred to an IC chip for encryption / decoding and the result is received.), It takes a lot of time to transfer the data, and when processing a large amount of data such as an optical memory, Since it takes a lot of time, there is a problem that the processing time for recording and reproducing data becomes long.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a hybrid card processing device capable of significantly shortening the processing time for recording and reproducing data.

[0011]

According to the first aspect of the present invention,
An I storing at least one of an encryption key and a decryption key
In a hybrid card processing device capable of recording and / or reproducing for a hybrid card having a C chip and an optical memory for recording encrypted data, data written to the optical memory of the hybrid card or data read from the optical memory Storing means for storing, encryption based on an encryption key stored in the IC chip and decryption based on a decryption key stored in the IC chip with respect to data stored in the storage means. And a data processing unit that executes at least one of

According to a second aspect of the present invention, in the first aspect, the storage means is composed of two pieces, and the data processing is performed on the storage data of the other storage means at a timing when data is written in one storage means. The processing by means is executed.

[0013]

As a result, according to the invention described in claim 1, the data written to the optical memory of the hybrid card or the data read from the optical memory is temporarily stored in the storage means, and the data stored in the storage means is stored. , IC
The encryption key or the decryption key stored in the chip is taken into the data processing means, and the encryption or decryption operation based on these keys is executed. Since it can be performed directly in the device without using an IC chip, I
The time for data transfer with the C chip can be omitted, and the processing speed of large-capacity data such as an optical memory can be increased.

According to the second aspect of the present invention, two storage means are used, and at the timing when the data is written in one storage means, the data processing means processes the storage data in the other storage means. Is executed, so for continuous data writing and reading,
Further, the processing speed can be increased.

[0015]

Embodiments of the present invention will be described below with reference to the drawings. (First Embodiment) FIG. 1 shows a schematic structure of a hybrid card recording / reproducing apparatus to which the present invention is applied.

In the figure, 1 is a hybrid card,
This hybrid card 1 has an IC chip 1a in which at least one key for encryption and decryption is stored on one surface.
And an optical memory 1b including an optical recording area for recording encrypted data. In this case, the IC chip 1a is embedded in the vicinity of the central portion in the width direction of the card 1 and at a position close to one end side (one of the end portions in the longitudinal direction), and the optical memory 1b has its optical recording area IC Chip 1a
It is provided along the longitudinal direction of the card 1 so as to avoid.

And such a hybrid card 1
Are set in the hybrid card recording / reproducing apparatus main body 2. The apparatus main body 2 includes an optical memory processing unit 21, a buffer memory 22, an encryption / decryption unit 2
3, IC processing unit 24, controller 25, I / F unit 26
The optical memory processing unit 2 for the controller 25.
1, buffer memory 22, encryption / decryption unit 23, IC
The memory unit 24 and the I / F unit 26 are connected to each other.

In this case, the optical memory processing unit 21 is for accessing data on the optical memory 1b of the hybrid card 1, and also includes an optical head. That is,
The optical memory processing section 21 here reads out the data recorded on the optical memory 1b to the buffer memory 22, and
The operation of writing the data in the buffer memory 22 to the optical memory 1b is performed.

The encryption / decryption unit 23 is for encrypting the data to be written in the optical memory 1b and for decrypting the data read from the optical memory 1b. That is, the encryption / decryption unit 23 here is a DSP (Di
buffer memory 2 under the control of the controller 25.
The data in 2 is encrypted / decrypted.

The IC processing section 24 is for accessing the IC chip 1a, and also includes a connector to the IC chip 1a. The IC processing unit 24 also enables direct communication with the controller 25 by serial I / F to the CPU included in the IC chip 1a connected by the connector.

The controller 25 controls the operation of the entire hybrid card recording / reproducing apparatus main body 2. In order to enable direct communication with the CPU included in the above-mentioned IC chip 1a, the controller 25:
It may be configured by a one-chip processor having a serial channel. It is also possible to perform the encryption / decryption processing by the firmware in the controller 25. In this case, the processing can be realized without increasing the hardware at all.

The I / F unit 26 is an interface unit for connecting an external computer.
A PC (personal computer) 3 is connected to the. The PC 3 externally gives a predetermined command to the apparatus main body 1.

Next, the operation of the embodiment configured as described above will be described. First, the optical memory 1 of the hybrid card 1
The case of reading the data recorded in b will be described with reference to the flowchart shown in FIG.

First, in step 201, the hybrid card 1 is inserted into the apparatus main body 1. And step 20
In step 2, to confirm that the owner of the card is the
If you enter the password to prove yourself from PC3,
The password recorded in the IC chip 1a of the hybrid card 1 is read out on the PC 3 and step 20
At 3, the two passwords are matched and collated. in this case,
The password recorded in the IC chip 1a is the PC
At the time of transfer to 3, the encryption processing is performed, so high security is maintained.

If it is determined in step 203 that the two passwords do not match, it means that the cardholder is not a valid cardholder, and the subsequent processing is rejected and the processing ends. On the other hand, if it is determined that both passwords match, it is determined that the cardholder is a valid cardholder, and in step 204, a key (decryption key) necessary to decrypt the data recorded in the optical memory 1a from the IC chip 1a. Is read out and temporarily stored in the internal memory (register) of the controller 25. This decryption key is also required to have the same security as the above-mentioned password, and is therefore encrypted and stored in advance.

Next, in step 205, the optical memory processing unit 21 reads out the desired data from the optical memory 1b of the hybrid card 1 and temporarily stores it in the buffer memory 22. At this time, the data read from the optical memory 1b is encrypted.

Next, in step 206, the encrypted data read by the encryption / decryption unit 23 into the buffer memory 22 is decrypted with the decryption key read in step 204 (encryption). The decoded data is stored again in the buffer memory 22. Through such a series of operations, all the desired data read from the optical memory 1b stored in the buffer memory 22 is decoded and stored in the buffer memory 22 again.

Then, in step 207, the decoded data stored in the buffer memory 22 is transferred to the I / F 26.
The process is completed by transferring to PC3 via.
Next, the case of writing data in the optical memory 1b of the hybrid card 1 will be described with reference to the flowchart shown in FIG.

First, in step 301, data to be written in the optical memory 1b of the hybrid card 1 from the PC 3 is created, transferred to the buffer memory 22 via the I / F 26, and temporarily stored.

Next, in step 302, the hybrid card 1 is inserted into the apparatus main body 1. And step 30
In step 3, to confirm whether the owner of the card is the
A password for certifying the user is input from the PC 3, and the password is read out from the IC chip 1a of the hybrid card 1 to be matched.

Here again, if it is determined in step 304 that the two passwords do not match, it is determined that the cardholder is not a valid cardholder, and the subsequent processing is rejected and the processing ends. On the other hand, if it is determined that the two passwords match, It is determined that the card holder is valid, and in step 305, the IC chip 1
The key (encryption key) necessary for encrypting the data recorded in the optical memory 1a is read from a and stored in the controller 25. Since this encryption key is required to have the same security as the above-mentioned password, it is encrypted and stored in advance.

Next, at step 306, the data read to the buffer memory 22 by the encryption / decryption unit 23 is encrypted with the encryption key read at step 305, and this encrypted data is again reproduced. It is stored in the buffer memory 22. Through such a series of operations, all data to be written in the optical memory 1b stored in the buffer memory 22 is encrypted and stored in the buffer memory 22 again.

Then, in step 307, the encrypted data stored in the buffer memory 22 is written in a predetermined area of the optical memory 1a of the hybrid card 1 by the optical memory processing section 21, thereby ending the processing.

However, according to the reading and writing of data from and to the optical memory 1, the processing time required for them is as follows. Now, in the case of reading 1 kbyte (1024 bytes) data from the optical memory 1b,
Data transfer rate with IC chip 1a is 9600bp
s (1 byte = 10 bits), the read time from the optical memory 1b is 200 ms, DES is used for encryption, and the decryption time is 200 ms (using DSP).
(Here, if a DSP is used to decrypt the DES encryption,
A throughput of about 400 kbps is obtained. ) First,
Conventionally, transfer time = 1024 ^* 10/9600 = 1.
Since it is 07 seconds, the total read time of 1024 bytes = 1.07 ^* 2 + 0.2 + 0.2 = 2.54 seconds, and the transfer rate = 403 bytes / sec, whereas in the embodiment, the transfer time is the buffer memory 22. Since the access time is almost zero, the total read time of 1024 bytes = 0.2 + 0.2 = 0.4 seconds Transfer rate = 2560 bytes / sec, which is 6 times faster than the conventional transfer rate. become.

In the above calculation example, the decryption time of the DES encryption is 200 ms / by using the DSP.
Although it is set to 1024 bytes, since the decoding time in the actual IC chip is about 2 seconds, the transfer rate further drops to about 236 bytes / sec.

Therefore, according to such a first embodiment,
The data written in the optical memory 1b of the hybrid card 1 or the data read from the optical memory 1b is temporarily stored in the buffer memory 22.
The encryption / decryption unit 23 performs encryption based on the encryption key read from the IC chip 1 or decryption based on the decryption key for the data stored in IC for data encryption and decryption operations
The encryption / decryption unit 23 in the device can directly perform the processing without passing through the chip 1.

As a result, the time for data transfer with the IC chip can be omitted, so that the processing speed at the time of recording / reproducing of a large amount of data such as an optical memory is increased, and the processing time is greatly shortened. Therefore, the throughput of the entire system can be improved. (Second Embodiment) In the first embodiment, one buffer memory 22 is used to store the encryption process or the decryption process, but in this case, for example, it is continuously recorded on the optical memory 1b. When the encrypted data is decrypted, the readout from the optical memory 1b and the decryption processing by the encryption / decryption unit 23 can be performed only serially, and thus the readout speed cannot be further increased.

Therefore, in the second embodiment, the decryption process of the continuously recorded encrypted data can be executed without decreasing the reading speed. FIG. 4 shows a schematic configuration of the second embodiment, and the same parts as those in FIG. 1 are designated by the same reference numerals.

In this case, in addition to the buffer memory 22, another buffer memory 27 is provided, and these buffer memories 22 and 27 are respectively provided in the optical memory processing section 2.
1 and the encryption / decryption unit 23 can be occupied.

With such a configuration, basically, the operation is the same as that described with reference to FIGS. 2 and 3, but the encrypted data is continuously read from the optical memory 1b of the hybrid card 1 and decrypted. When performing processing, the optical memory processing unit 21 and the encryption / decryption unit 23 process data continuously while alternately switching between these two buffer memories 22 and 27.

That is, these buffer memories 22 and 27
5, the buffer memory 22 writes the data from the optical memory processing unit 21, and then the buffer memory 27 writes the data from the optical memory processing unit 21 at the decoding timing as shown in FIG. Of the optical memory processing unit 21 at the timing of decoding the data in the buffer memory 27.
The data from will be written.

Incidentally, also in the case of the data writing operation to the optical memory 1b, the buffer memory 2 is operated in the same manner as described above.
Data can be continuously written by alternately switching between 2 and the buffer memory 27.

Therefore, according to the second embodiment as described above,
Using the buffer memory 22 and the buffer memory 27,
When data is written to one buffer memory, the data in the other buffer memory is encrypted and
Since the encryption or decryption is performed in the decryption unit 23, the processing speed can be further increased and the processing time can be shortened for continuous writing and reading of data.

Although the description has been given based on the embodiments, the present invention includes the following inventions. (1) In a hybrid card processing device capable of recording and / or reproducing for a hybrid card having an IC chip storing at least one of encryption and decryption keys and an optical memory for recording encrypted data, Storage means for storing data to be written in or read from the optical memory of the hybrid card, and encryption based on the encryption key stored in the IC chip for the data stored in the storage means And a data processing unit that executes at least one of decryption based on a decryption key stored in the IC chip.

By doing so, since the data encryption operation and the data decryption operation can be directly performed in the apparatus without passing through the IC chip, the time for data transfer with the IC chip can be reduced. It can be omitted, the processing speed of a large amount of data such as an optical memory can be increased, the processing time can be greatly shortened, and the throughput of the entire system can be improved.

(2) In the hybrid card processing device according to (1), the storage means is composed of two pieces, and at the timing when data is written in one storage means, the data processing is performed on the storage data in the other storage means. The processing by the means is executed. By doing so, it is possible to further increase the processing speed for continuous writing and reading of data.

[0047]

As described above, according to the present invention, the data encryption operation and the data decryption operation can be directly performed in the apparatus without passing through the IC chip, so that the data transfer with the IC chip can be performed. Time can be omitted, the processing speed at the time of recording and reproducing large-capacity data such as optical memory can be increased, and the processing time can be greatly shortened, thereby improving the throughput of the entire system. You can

[Brief description of drawings]

FIG. 1 is a diagram showing a schematic configuration of a first embodiment of the present invention.

FIG. 2 is a flowchart for explaining the operation of the first embodiment.

FIG. 3 is a flowchart for explaining the operation of the first embodiment.

FIG. 4 is a diagram showing a schematic configuration of a second embodiment of the present invention.

FIG. 5 is a diagram for explaining the second embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Hybrid card, 1a ... IC chip, 1b ... Optical memory, 2 ... Hybrid card recording / reproducing apparatus main body, 21 ... Optical memory processing part, 22 ... Buffer memory, 23 ... Encryption / decryption part, 24 ... IC processing part, 25 ... controller, 26 ... I / F section, 27 ... buffer memory, 3 ... PC (personal computer).

Claims (2)

[Claims] 1. A hybrid card processing device capable of recording and / or reproducing for a hybrid card having an IC chip storing at least one of an encryption key and a decryption key and an optical memory for recording the encrypted data. In accordance with a storage means for storing data to be written in the optical memory of the hybrid card or data to be read from the optical memory, based on an encryption key stored in the IC chip for the data stored in the storage means. A hybrid card processing device comprising: a data processing unit that performs at least one of encryption and decryption based on a decryption key stored in the IC chip. 2. The storage means is composed of two pieces, and the processing by the data processing means is executed on the storage data of the other storage means at the timing when the data is written in one storage means. The hybrid card processing device according to claim 1.