JPH08335254A - Issuing device for information recording medium - Google Patents

Abstract

PURPOSE: To make common use possible with different internal specifications by composing the device of a dependence module which performs conversion to issue pattern data that do not depend upon internal specifications and outputs the data and a nondependence module which receive the issue pattern data as input data and records information necessary for issue on the information recording medium. CONSTITUTION: Information depending upon the internal specifications of the information recording and display medium is received by the dependence module 1 and converted into the issue pattern data D as information that do not depend upon the internal specifications, and the issue pattern data D are outputted. The nondependence module 2, on the other hand, receives the issue pattern data D as its input data and writes the information necessary for issue on the information recording medium according to the data to issue the information recording medium. Further, the dependence module 1 receives an input instruction of specific information and file generation information is generated by a file information setting means 31 and stored in a storage means 32. Data write information is generated for the generated file and its contents are held.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information recording medium issuing device, and more particularly, it can be used for IC cards having different internal specifications and can consistently carry out from designing file information to issuing an information recording medium. Regarding issuing device.

[0002]

2. Description of the Related Art In recent years, IC cards have attracted attention for various purposes as information recording media capable of storing a large amount of information as compared with magnetic cards and the like. Since the IC card has a built-in CPU, it is possible to perform arithmetic processing such as encryption keys.
It has excellent security and is suitable for various applications such as cash cards that require confidentiality. Then, in an information recording medium that performs operations such as recording and reading of data according to an external command, the command given to the information recording medium must be given in a format understandable by the receiving side. An IC card is a typical example of such an information recording medium. In the IC card, it is necessary to give a command in a format required by an OS (operating system) which is an operating environment of the built-in CPU. However, the file structure and common commands in the IC card are defined in the IC card according to the ISO standard. However, this relates to the commands used when the IC card is used in the market, and there is no standard definition for the commands used in a special process such as the issuing process. Therefore, the issuing process command is issued to each company's own OS.
That is, it depends on the internal specifications.

Therefore, in the conventional IC card issuing device, the issuing device is properly used for each IC card having a different internal specification so as to be able to cope with IC cards having different internal specifications which require a unique command format. Alternatively, it has been dealt with by creating corresponding issuing software for each IC card.

[Problems to be Solved by the Invention]

By the way, the IC card issuing process requires a fairly complicated process. Since it can record a large amount of data, in order to record it in an orderly and highly secure manner, it records data by using several types of files that have a hierarchical structure, and records it in a file. For file access such as reading, the access right is unlocked with a secret key so that it can be performed only after the password is unlocked. For example, in the conventional IC card issuing process, first, design of memory format information (specifically, file information if a file is used) that determines the format of allocating and recording data in the memory of the information recording medium, Create a test IC card that was actually written, check correctness with the created test IC card, create write information that specifies writing of data to a specific memory area, and use the memory format information and write information The process of writing data to a predetermined memory area of the IC card is performed. Therefore, according to the above conventional method, I of various different internal specifications is used.
For a C card, if it becomes a device that can consistently perform from the file design to the card issuance that writes information, the software that creates the command group necessary for card issuance must be changed each time, which is very troublesome. It was something.

Therefore, an object of the present invention is to be commonly used for information recording media which operate with different internal specifications in response to an external command, and can be issued consistently from file design to card issuance. An object of the present invention is to provide a device that enables a smooth issuing process.

[0006]

In order to solve the above problems and achieve the object, an issuing device for an information recording medium according to the present invention comprises:
An issuing device for issuing an information recording medium that executes operations such as recording and reading of data according to a predetermined internal specification in response to a command from the outside receives input of information depending on the internal specification required for issuing, and the internal specification It is composed of a dependent module which converts the issue pattern data into independent issue pattern data and outputs the issue pattern data, and an independent module which receives the issue pattern data as input data and records information necessary for issue to the information recording medium.

Further, in the above-mentioned issuing device, the dependent module of the issuing device creates a plurality of files in which a hierarchical structure is defined for an information recording medium that uses a plurality of files in which a hierarchical structure is defined for recording data. File information setting means for creating information to be created on an information recording medium, file information storage means for storing created file information, file information verification means for verifying correctness of created file information, and information recording Data write information setting means for creating data write information for writing specified data to an empty file created on a medium, and issue pattern data that does not depend on internal specifications based on the file information and the data write information Issuing pattern data creating means for creating
And a writing unit for writing information necessary for issuance to the information recording medium using the issuance pattern data as input data, and a plurality of information recording media sequentially conveyed to the writing unit. And a medium transporting means for discharging the information recording medium after writing.

In each of the above-mentioned issuing devices, the dependent module produces a test medium creating means for creating a test information recording medium based on the created file information, and a result of the test information recording medium creation. It is also an apparatus configured to further include a test medium verification unit for verifying correctness.

[0009]

In the information recording medium issuing device according to the present invention, the dependent module accepts information necessary for issuing processing and which depends on the internal specifications of the information recording and displaying medium, and uses the information which does not depend on the internal specifications. Convert it to a certain issue pattern data and output it. On the other hand, the independent module receives this issuance pattern data as input data, writes the information necessary for issuance to the information recording medium based on this data, and issues the information recording medium.

Further, in the apparatus of the second invention, the dependent module receives the input instruction of the predetermined information, and the file information setting means creates the file creation information necessary for creating the file and stores it in the file storage means. To be done. Whether the stored file information was created correctly,
The correctness is checked by the file verification means. on the other hand,
The data write information, which is information for writing the designated data to the file after being created on the information recording medium, is created by the data write information setting means, and the setting means holds the content. There is. It should be noted that the file creation information and data writing information obtained as described above are information that the dependent module still holds in a format that depends on the internal specifications of the information recording medium. Then, the issue pattern data creation means converts these two pieces of information into issue pattern data as information in the independent format and outputs the issue pattern data. Next, the writing means of the dependent module receives the issue pattern data of the non-dependent format and writes the information necessary for issuance on the actual information recording medium. In the media transport means of the dependent module,
The information recording medium is conveyed to the writing means at an appropriate timing, ejected after writing, and the issuing process of a large number of information recording media is performed.

Further, the apparatus of the third invention is different from the apparatus of the second invention in that it is provided with a test medium creating means and a test medium verifying means. Then, a small number (one sheet) of test information recording medium is actually created, and the test medium verification unit checks whether the created test information recording medium is correctly created as desired.

[0012]

Embodiments of an information recording medium issuing device according to the present invention will be described below in detail with an IC card issuing device as a specific example.

First, FIG. 1 is a conceptual diagram of an information recording medium issuing device according to the present invention. The issuing device is composed of two modules, a dependent module and an independent module. Although these modules are at least logically separated and have different functions, they may be physically integrated devices, and as shown in the figure, devices A and B
, And may be physically separated and configured as separate devices.
If the issue target is an IC card, the OS is a specific internal specification that distinguishes dependency / independence. In the dependent module, basically, until the information to be converted by the issue pattern conversion unit is created, the processing operation such as input, processing, storage, or display is basically performed depending on the information depending on the internal specifications of the information recording medium. Treated Therefore, the input information targeted by the issuing pattern conversion unit is the information in the dependent format. Then, the issue pattern conversion unit converts the information in the dependent format into the independent format, and creates and outputs the information called the issue pattern data. However, as a matter of course, this issuance pattern data satisfies the format required by the independent module which can be understood by the independent module. As for the output destination, if the dependent module and the independent module are physically separated, the output destination is once externally output to a portable information recording medium such as a magnetic disk or magnetic tape, or the dependent module and the independent module are independent. The module is electrically connected and is output as an electric signal by being transmitted to the independent module. The latter case is a natural output form when the dependent module and the independent module are physically integrated.

The issuance pattern data is data in which issuance commands and response values (responses) form a pair and are arranged in the order in which they are transmitted to the information recording medium, that is, in the order in which the issuance procedure is executed. The issue instruction is a generic term for a series of instructions used for issue processing. The response value is a code string returned from the information recording medium when a certain command is transmitted to the information recording medium. In the case of an IC card, a response value is returned, but depending on the type of information recording medium, the issue pattern data may not have a response value. However, as a matter of course, this issuance pattern data satisfies the issuance instruction consisting of the code string of the format required by the independent module which can be understood by the independent module and the code string of the corresponding response value.

Next, the independent module uses the issue pattern data as input data, specifically on the information recording medium,
Required for creating files, storing data in files, etc.
This module writes the information required for issuing. The independent module basically comprises a writing means for physically writing on the information recording medium and a medium carrying means for carrying the medium. The writing means is, for example, a mechanism centered on, for example, a reader / writer, and also has a connection terminal connected to an external connection terminal of the information recording medium, a signal control means for controlling the operation of the independent module as a whole, and the like. . The issue pattern data is recorded on the information recording medium as it is or after being converted into another format as needed (for example, matching with a different format required by a reader / writer of a different manufacturer). The medium conveying means successively conveys the information recording medium to the writing means, and ejects the information recording medium on which the writing of the desired information is completed by the writing means.

The information recording medium targeted by the non-dependent module is a medium in which the information required for its issuance depends on its internal specifications, and the information may be different if the internal specifications are different. However, the information that the independent module transmits to such an information recording medium, that is, the command statement including the data to be recorded, the response value, and the like are information that does not depend on the internal specifications. This is because the information that becomes the signal that is finally transmitted from the independent module to the information recording medium is the information that has been lowered to the signal level based on the individual internal specifications (the internal specifications may not be reflected at all. It can be said that the information depends on the internal format (since it cannot be obtained), but if the information is reviewed at the signal level, the signal can be described in a certain common format. Therefore, the information described in the common format can be used as the information recording medium. This is because it is possible to make it an independent module that does not depend on the internal specifications. That is, the independent module receives from the dependent module information (issue pattern data) described in a common format that does not depend on the internal format, converts this to a specific write signal, and transmits it to the information recording medium. The conventional issuing device needs to recreate the information such as the file design each time it creates the information such that the command level assumed by the software does not go through the information described in the common format. This is because it was created as the final output of the information dropped to the signal level based on the individual internal specifications.

In this way, the information required for issuance that depends on the internal specifications of the information recording medium is converted into issue pattern data, which is information that does not depend on the internal specifications by the dependent module, and this issue pattern data is used. Information is recorded on the information recording medium intended by the independent module.

Next, FIG. 2 is a block diagram showing an embodiment of an information recording medium issuing apparatus according to the present invention. This figure shows
This is an example of the issuing device of the present invention when the information recording medium is an IC card. However, the content of the information required for issuing may differ depending on the information recording medium or the IC card. With the function other than the main part of converting dependent information into independent information and outputting it)
The issuing device of the present invention may differ in terms of how much more practically usable functions are added.

FIG. 2 shows an OS-dependent module 1 having a file information creation function, a verification function of the information, a data write information creation function, and an issue pattern data creation function for converting these into independent information. It is composed of an OS dependent module 2 having an embedded function and a medium carrying function. The configuration of the dependency module 1 includes a file information setting unit 31 that creates file information, a file information storage unit 32 that stores the created file information, and a file information verification unit 3 that verifies the correctness of the stored file information.
3, data writing information designating means 4 for creating data writing information for designating writing of designated data, and conversion output from file information and data writing information to issue pattern data D which is information in an independent format. The issuing pattern data creating means is provided. The dependent module 1 also includes a test medium creating unit 61 for creating a test information recording medium and a test medium creating unit 61 for creating a test information recording medium to confirm whether the created file information is correct or incorrect. The recording medium is provided with a test medium verification means 62 for verifying whether the file creation information is correct or incorrect with the file actually created.
Also provided is a communication means setting means 7 which is used for transmitting / receiving a signal directly between the writing means of an independent module and an information recording medium described later and which sets a communication procedure. Each of these means is composed of a computer main body including a CPU, a video output device, an input instruction device, an information output device, and the like, and software for executing each function. On the other hand, the independent module 2 writes the desired information necessary for issuing to the information recording medium C, and the information recording medium to the writing unit.
The medium transporting means 22 for discharging is provided. In addition,
Each of these means includes a reader / writer, a mechanical transport device, and an information processing device that integrates these operations and converts the issuing pattern data into a format required by the reader / writer as necessary.

In the issuing device having the above structure, the IC
In order to understand what information is actually converted from dependent to independent when the card is issued, the file hierarchy is used in the memory of the IC card to record the data, and this file is created. An example of the case will be mainly described below.

First, FIG. 3 is a flowchart showing the flow of processing when the issuing device of the present invention is used as an example. Then, it is assumed that file information is created in order to create a file having a file hierarchical structure as shown in FIG. Then, all the data are stored in the information recording medium as a plurality of files.

Referring to FIG. 4, the hierarchical structure of the files to be set in the IC card is as follows. First, in the uppermost hierarchy, the master file MF and the data file 1 contained therein are stored.
To 3 and key files 1 and 2 belong. The mechanical file names such as the master file MF, the data file 1, and the data file 2 are used for convenience to indicate the file name that identifies the file itself, and actually have a meaning suitable for each application. May be. Also, the folder file 1 is included in the master file MF.
Is also included, and the concatenation of folder files creates a hierarchical structure of files. The master file is also a kind of folder file, and it can be said that only one master file can be defined in the top hierarchy. The data file contains the actual data to be used, and the key file contains the secret code required to access the file. The folder file does not contain the actual data or PIN, but the data file, key file,
And a subordinate folder file, which is a file having a different meaning from other files, for example, stores the name of the file to be stored. A folder file 1 and a key file 3 and a data file 4 contained in the folder file 1 belong to the first hierarchy, which is one level below the top hierarchy. The folder file 1 also contains the folder files 2 and 3, and the latter folder file belongs to the lower second hierarchy.
Then, the folder file 2 contains the data files 5 and 6, and the folder file 3 contains the data file 7 and the key files 4 and 5, all of which are stored in the second file.
Belong to a hierarchy.

File information relating to file creation includes:
In the above example, in addition to the file name that identifies the file itself, the file type, and the file hierarchy structure, access control information (security information) that specifies the key file required to access the particular file, file size, etc. is there. As described above, the file information is information on how to allocate and record data in the IC memory, and can be called memory format information.

Then, in the file information setting in the first step S1 in the flowchart of FIG. 3, the file information setting means creates file information which is information for creating various files having the above-mentioned hierarchical structure on the information recording medium. The device operator may input and instruct the information necessary for file creation by inputting means such as a keyboard and mouse while looking at the image display means such as CRT. This file setting information is stored in the file setting information storage means such as a magnetic disk or a memory. 5 is an explanatory diagram conceptually showing the issue pattern data output by the dependent module according to the created file setting information. Figure 5
Shows only the command part for the reader / writer (the reply returned from the IC card is omitted). If the figure is outlined, the first command is a selection command for selecting the master file MF as the top layer, the second command is a command for creating the key file 1 in the top layer, and so on. Commands for creating files, folder files, etc., file selection commands, etc. are arranged in the order of execution by the reader / writer. In addition, each command is assumed to be a command sentence in which a first command main sentence, a target file designation parameter, and then a file hierarchy designation parameter follow.

The file setting information includes file capacity (record length, number of records, etc.), access control information, etc. in addition to the above file name, type, and layer. Figure 6
Is a list of these file information. In the example shown in the figure, the access control information is not particularly limited in reading the data file 1, but when writing the file, the key cannot be unlocked by referring to the contents of the key file 1 and the key file 2. Means that the write processing cannot be performed.

Once the creation of the file information is completed, the file information verifying means verifies whether the information is created as intended (step S).
2). The verification work here does not need to actually create an IC card (since a test card will be created later), and is performed by software simulation in the dependent module of the issuing device. Specifically, for example, whether or not file information such as a file name, file type, hierarchical structure, capacity, security information, etc. is definitely input is determined by, for example, a list display of file names, file types, etc., a hierarchical structure. Of the security information and the graphical display of the correspondence between the target file and the key file in the security information, etc., and the video displayed for easy visual confirmation. Further, whether or not the security by the access control information in the file information is sufficient is determined whether the secret code is already stored in the key file, and one or more keys of the keys are checked by collating with the secret code. By simulating the unlocked / locked state, the status can be simulated with software. Then, it is also simulated whether or not a specific access mode of a specific file is possible in any unlocked / locked state that the status means. Therefore, if the operator of the issuing device arbitrarily inputs and sets the status information including the unlocked state of the key necessary for the certain access mode of the file created by the certain file information to be verified by the keyboard or the mouse, It is possible to know the determination result of whether or not the specific access of the specific file designated by the status is possible. In this way,
It is possible to confirm whether or not it is possible to unlock the expected key for all access modes of all files. Also, it is possible to feel whether the required key has sufficient security.

If the verification result of the file information is not satisfactory (step S2), the process returns to step 1 to set the file information again.

Next, if the file information seems to be correct as desired, a test card for a small number of tests, such as one, is actually created by the test medium creating means (step S3), and the created test is made. The card can be checked for its correctness by the test medium verification means (step S4).
The test medium creating means actually creates the sufficient issue pattern data from the file information to create an information recording medium for testing, and the writing means such as a reader / writer (provided in the test medium creating means) actually File is created in the IC card. The difference from the independent module is that it is not possible to issue a large amount, and the test medium creating means converts the information to be used into issuance pattern data in an independent format and then writes it to the test information recording medium.

Then, the correctness of the created test card is verified by the test medium verification means (step S
4) The test medium verification means determines whether or not the file operation can be performed as expected for the file actually created in the information recording medium by using the file information stored in the file information storage means. Based on software check. If it is not satisfactory, the file information setting (step S1) is performed again. In the above description of the present embodiment, it is assumed that only the (empty) file is created in the test card, and the correctness of only the file information is verified without writing the data of the content of the file. Data that can be used for verification) may be written in the test card using the data writing information created by the data writing information setting means described later, and the correctness of these information may be verified together with the data writing information. In this case, as a matter of course, the test card verification step is performed after the data write information (for the test card) is set in the next step S5. Alternatively, first verify the test card only with the file setting information, and then verify the test card by including the data writing information, so that both pieces of information can be set step by step at every creation. I can go.

If the verification result of the test card is satisfactory, next, in step S5, the data write information is created by the data write information setting means (note that the data write information is created by this setting means). The write information is stored in the storage means included in this means). The data write information is information for designating which data is written in which place of which file as shown in FIG. In the figure, the record number 1 of the data file 1 has a data length of 2
This is information for instructing to write the name in 0 bytes and the address in record number 2 with a data length of 32 bytes. Note that these names and addresses do not include specific details here. It refers to the data in the fields such as name and address in another place.

FIG. 8 shows an example of the issue pattern data obtained by the data write information of FIG. The first statement executed is that the command is a file selection command,
Select the data file 1 as the target. This statement is just a file selection, with no data parameters.
The second command executed next (the check regarding the response value returned from the information recording medium is omitted here as well) is a key collation command, and the key file 1 is stored in a predetermined key. It is to check the data. Similarly, the setting related to the access control shown in FIG. 6 is unlocked, the data file 1 can be accessed, and the issued pattern data for writing the name and address is obtained.

Then, in step S6, the communication procedure is set by the communication means setting means. The communication procedure is to set a communication protocol for data communication required when information (transmission of a command sentence and a response value returned in response to it) is directly exchanged with the information recording medium. The need for the communication protocol depends on the target information recording medium. The communication procedure is added to the information exchanged.

Then, the file information set as above,
Issue pattern data is created by the issue pattern data creating means using the data write information and the communication procedure (step S
7). The information that becomes the issue pattern data is in a dependent format up to this point. Then, with the issuing pattern data creating means,
Converted from dependent form to independent form. The issuing pattern data creating means is also a central part for the issuing device to achieve the object of the present invention. The issuing pattern data creating means responds to information necessary for issuing file information or the like having different internal specifications by switching the conversion software.

Then, the independent module actually uses the issued pattern data to create files on many information recording media, writes the data, and executes the procedure for issuing the information recording media (step S8). The order of execution of the issue pattern data in the independent module is to execute the file information, create the file on the information recording medium, and then write the data to the file whose content is actually empty. Run on information and write data. Usually these are done sequentially.

As described above, from the setting of the information necessary for issuing the file design to the actual writing, one device can consistently execute. Note that, in addition to this, in the issuing process, for example, there are processes such as issuing pattern data related to the encryption process of the secret code or the like, which is considerably complicated and the disclosure of the processing method itself relates to security. However, even in the information used for these processes, as long as it does not deviate from the basic concept of the present invention of converting the information that depends on the internal specifications into the information that does not depend on the internal specifications and issuing the converted information. The present invention is not limited to the above embodiment.

[0036]

According to the information recording medium issuing device of the present invention, the information recording medium issuing device can be commonly used for issuing processes of information recording media having different internal specifications which are specifications for operating in response to an external command. In addition, a series of issuing processes from setting of information necessary for issuing a file design and the like to actual writing process of the information recording medium can be consistently performed by one device. It can be issued more smoothly in terms of common use and integrated processing.

[Brief description of drawings]

FIG. 1 is a conceptual diagram of an information recording medium issuing device of the present invention.

FIG. 2 is a block diagram of an embodiment of the issuing device.

FIG. 3 is a flowchart showing an example of issuing processing by the issuing device.

FIG. 4 is a diagram showing an example of a file hierarchical structure.

FIG. 5 is an explanatory diagram showing an example of issuing pattern data (file hierarchical structure).

FIG. 6 is an explanatory diagram showing an example of file information (including access control information).

FIG. 7 is an explanatory diagram showing an example of data write information.

8 is an explanatory diagram showing an example of issuance pattern data (FIG. 7).
Data writing corresponding to).

[Explanation of symbols]

 1 Dependent Module 2 Independent Module 21 Writing Means 22 Medium Conveying Means 31 File Information Setting Means 32 File Information Storage Means 33 File Information Verification Means 4 Data Writing Information Setting Means 5 Issue Pattern Data Creating Means 61 Test Medium Creating Means 62 Tests Medium verification means 7 Communication procedure setting means C Information recording medium, IC card D Issuing pattern data TC Information recording medium for test, test card

Claims (3)

[Claims] 1. An issuing device for issuing an information recording medium that executes operations such as recording and reading of data according to a predetermined internal specification in response to an instruction from the outside, and inputs information that depends on the internal specification required for issuing. A dependent module that receives and converts the issue pattern data that does not depend on the internal specifications and outputs the issue pattern data; and a non-dependent module that receives the issue pattern data as input data and records information necessary for issue on an information recording medium, An information recording medium issuing device, comprising: 2. For an information recording medium that uses a plurality of files with a hierarchical structure defined for recording data, the dependent module of the issuing device creates a plurality of files with a hierarchical structure defined on the information recording medium. File information setting means for creating information for creating, file information storage means for storing created file information, file information verification means for verifying correctness of created file information, and created on the information recording medium. Data write information setting means for creating data write information for writing specified data in an empty file, and an issue pattern for creating issue pattern data independent of internal specifications based on the file information and the data write information And a data creating unit, and the independent module of the issuing device uses the issuing pattern data as input data to the information recording medium. And writing means for writing information necessary for issuance, and medium carrying means for successively carrying a large number of information recording media to the writing means and ejecting the written information recording media. The information recording medium issuing device according to claim 1. 3. A test medium creating means for a dependent module to create a test information recording medium on the basis of the created file information, and a test medium for verifying the correctness of the created result of the test information recording medium. 3. The information recording medium issuing device according to claim 1, further comprising a verification unit.