JPH0850644A - Ic card, device for ic card and data transferring method in ic card - Google Patents

Abstract

PURPOSE:To improve the security of an IC card with CPU by imparting a limitation to the time when a command reception is permitted. CONSTITUTION:The inputs of command data from a terminal are performed at a CPU 101, an I/O line 105 and a RAM 103 as command input means, and the unique data for every card is stored in an EEPROM 104 as a storage means. A ROW 102 and a CPU 101 as command data input timing control means control command data input timing in accordance with the unique data of the storage means. The command processings corresponding to each inputted command data are performed in the ROM 102 and the CPU 101 as command processing means. Further, the results processed by the command processing means are transmitted to the terminal by the CPU 101, the I/O line 105 and the RAM 103 as processing result transmission means. Therefore, the command data input timing is controlled in accordance with the unique data of the storage means.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card with a CPU and an apparatus using the IC card, and more particularly, to an IC card which eliminates the risk of unauthorized access and has improved security, and an IC card therefor. Regarding the equipment used.

[0002]

2. Description of the Related Art IC cards have been attracting attention as new information recording media, especially as information recording media to replace magnetic cards, and are becoming increasingly popular. In particular, since an IC card having a built-in CPU has a high degree of security, it is expected to be used in various fields. IC in general
The card contains three types of memories such as RAM, ROM, and EEPROM, all of which are accessed by the built-in CPU. A program to be executed by the CPU is stored in the ROM, and personal data for the user is stored in the EEPROM. RAM
Is used as a work area when the CPU executes instructions. Data transfer to and from the IC card is performed by a dedicated reader / writer device. When a given command is given from the reader / writer device to the IC card, this command is executed by the CPU in the IC card. The same I / O line is used for both the data transfer from the reader / writer device to the IC card and the data transfer from the IC card to the reader / writer device. In order to avoid batterying, when data is transferred from the IC card to the reader / writer device, the I / O line has a predetermined time CWT (Character Waiting Time-normally several msec).
However, the data was transferred only after confirming that the data transfer from the reader / writer device was completed. When the data is transferred from the reader / writer device to the IC card, the data transfer to the IC card is OK and Res. After sending a signal such as a (Response) signal from the IC card to the reader / writer device,
The IC card is designed to receive a command (data block) from the reader / writer device. This IC card is Res. The timing to start receiving a command (data block) from the read / writer device after transmitting a signal such as (Response) is fixed regardless of the type of command. As described above, the conventional card has a constant start timing for receiving all commands (data blocks) and, in the once receiving state, waits forever for a command from the terminal.

Therefore, in the case of an IC card that simply invalidates an invalid command input, the command from the terminal is waited forever until a regular command is input. In this case, the command is illegal. There is a risk that a person can continuously access a combination of command data and analyze the internal program operation. As a means for dealing with this, there is also known an IC card in which the card cannot be used when a PIN collation command is executed and the mistake is made a prescribed number of times. Also in this case, in practice, at present, it is inevitable that the card that cannot be used by mistake for the specified number of times is limited to the card for which the specified number of times is incorrect. Therefore,
It is only for that card that you can not use it by mistake for the specified number of times, you can re-access another IC card with the same program, and if you have multiple IC cards with the same program Had a risk of illegally accessing these cards in combination and decrypting the internal key.

[0004]

As described above, in the case of the conventional IC card with CPU, the internal keys and programs may be decrypted by unauthorized access from the terminal, and it is necessary to deal with them. . Under such circumstances, the present invention limits the time for which command reception is permitted when various data blocks (commands) are received from the IC card terminal, so that an IC with a CPU is provided.
It aims to improve the security of the card.

[0005]

The IC card of the present invention comprises:
Command input means for inputting command data from a terminal, storage means for storing unique data for each card, and command data input timing control means for controlling command data input timing according to the unique data of the storage means A command processing means for performing command processing corresponding to each input command data, and a processing result sending means for sending the result processed by the command processing means to a terminal. is there. The IC card in the above is at least three types of memories of RAM, ROM, and EEPROM, and a CPU having a function of accessing these memories.
An IC card having a built-in card and a CP as command input means for inputting command data from a terminal.
U, I / O line, RAM, EEPROM as storage means for storing unique data for each card, ROM, and CPU as command data input timing control means for controlling command data input timing according to the unique data of the storage means ROM and CPU as command processing means for performing command processing corresponding to each command data input, CPU, I / O as processing result sending means for sending the result processed by the command processing means to the terminal. It is characterized by using a line and a RAM. Further, the IC card device of the present invention is a card receiving means for receiving an IC card, an IC card operation starting means for starting the operation of the IC card, and a response from the card to the execution of the IC card operation starting means. A command data transmission timing control means for controlling the transmission timing of each command data to be transmitted to the IC card according to the data, and a command processing result receiving means for receiving the command processing result from the IC card. Is. Further, the data transfer method in the IC card of the present invention is
A method for transferring data between an IC card and an IC card terminal device (reader / writer device) through an I / O line, using at least unique data information stored in the IC card. When a command is input from the device, the response from the IC card (Resp
command) from the IC card terminal device (reader / writer device) by setting an interval, which is the interval from the start of the command input from the next reader / writer device, to the start of command input from the next reader / writer device, and setting the input permission time range. It is characterized by controlling the input timing.

The unique information mentioned above is information unique to the card, and is stored in the EEPROM in the case of a telephone prepaid IC card, for example, year, month,
The date, hour, minute, second, and frequency information are rewritten each time they are used. From the unique data information, the command (data block) input permission time range from the IC card terminal device (reader / writer device) to the IC card is
Obtain the interval value, for example, interval value x 10
The input permission start time is set to 0 μsec, and further, a predetermined time range from the input permission start time (for example, 1
msec) is set. In the above,
Controlling the timing is to determine a time range for permitting command (data block) input from the IC card terminal device (reader / writer device) to the IC card.

[0007]

With the IC card of the present invention having the above-mentioned configuration, it is possible to control the command data input timing according to the unique data of the storage means and prevent unauthorized access from a terminal by an unauthorized person. There is. The IC card of the present invention is at least R
An IC card having three types of memories, AM, ROM, and EEPROM, and a CPU having a function of accessing these memories, the timing of which is determined according to the unique data of each card, and is conventional. The structure makes it easy to prevent unauthorized access.
Further, the IC card device of the present invention is a card receiving means for receiving an IC card, an IC card operation starting means for starting the operation of the IC card, and a response from the card to the execution of the IC card operation starting means. The IC card includes command data transmission timing control means for controlling the transmission timing of each command data to be transmitted to the IC card according to the data, and command processing result receiving means for receiving the command processing result from the IC card. When using, it is possible to control the command data input timing to the IC card,
This makes it possible to prevent fraud of the IC card. The data transfer method for an IC card according to the present invention uses at least the unique data information stored in the IC card when a command is input from the reader / writer device (Responses from IC card).
e) The interval from the signal to the start of command input from the next reader / writer device is set each time,
Moreover, by setting the input permission time range, it is extremely difficult for the key and program of the IC card to be decrypted by the unauthorized access from the terminal, and the security of the IC card is improved.

[0008]

Embodiments of the IC card of the present invention will be described with reference to the drawings. First, the IC card of Example 1 is
Description will be given with reference to FIG. FIG. 1A shows a first embodiment of the present invention.
1B is a diagram showing an example of address allocation to three types of memories in the IC card, and FIG. 4 is a memory in which unique data is arranged at addresses in the EEPROM. Figure 2 is an example of a map
FIG. 7 is an operation flow chart of the IC card. In FIG. 1, 100 is an IC card, 101 is a CPU, 102 is a ROM, 103
Is RAM, 104 is EEPROM, 105 is I / O (input / output line), 106 is V _CC (power supply line), 107 is RST (reset line), 108 is CLK (clock line), 109 is GND (ground line) Is.
As shown in FIG. 1A, the IC card of this embodiment has a command (data block) input means, a CPU 101 which also functions as a command data input timing control means, a command processing means, and a processing result sending means, and is unique. EEPROM 104 as data storage means, ROM 102 for performing command data input timing control and command processing together with CPU 101, command (data block)
It has at least a RAM 103 for performing input processing and processing result transmission processing together with the CPU 101, and has an input / output I / O line 105, V _CC 106, RST 107, C
At least the LK 108 and the GND 109 are connected, and various commands (data blocks) are transferred from the terminal from the I / O.

ROM 102, RAM 013, EEPRO
The address allocation of each memory of the M104 is, for example, 0000 to 0FFF, R for the ROM as shown in FIG.
AM is 1000 ~ 10FF, EEPROM is 2000 ~
The address is determined like 201F (all addresses are displayed in hexadecimal). A program to be executed by the CPU is stored in the ROM 102, and a CP is stored in the RAM 103.
The work area of U101 is secured. And E
In the EPROM 104, as shown in FIG.
The unique data (ATR
Information) is written. In the case of FIG. 4, address 2
001 is the year, address 2001 is the month, address 2002
Is day, address 2003 is hour, address 2004 is minute,
The address 2005 is written with the second, and the address 2006 is written with the frequency. Year, month, day, hour, minute, second, and frequency are numbers (decimal numbers) 1 to 99, 1 to 1, respectively.
12, 1-31, 0-23, 0-59, 0-100 is 1
Displayed in bytes. Addresses 2007-201F are
It is an unused area. In this way, when the EEPROM has unique data, the format of the response signal or the like can be set as follows, for example. FIG. 5 (a)
Is an ATR (Answer to Responses) when sending to the terminal when the IC card is connected to the terminal.
e) Format, which indicates the format for sending the information (unique data) in the EEPROM 104 from the IC card to the terminal, including the start code, year, month, day,
The hour, minute, second, and frequency are represented as 1-byte data. FIG. 5B is a Command (Write Data) for writing information in the EEPROM 104.
Command) Format, Write
COD (code) representing Command and year, month, day,
It has hour, minute, second, and frequency as data of one pit.
FIG. 5C shows a response format (Write) when writing to the EEPROM 104 is completed.
DataResponse). Response code ST
S also consists of 1-byte data. The (1) below indicates that it is 1-byte data.

The operation of the IC card of this embodiment will be described below with reference to FIG. First, the terminal is connected to the IC card of the present embodiment (S201), the interval value of the first command reception is specified (S202), and then E is set as ATR information.
After the unique information stored in the EPROM is sent to the terminal side (not shown) (S203), the interval process for the interval value is performed. (S20
4) The method of specifying the interval value is, for example, EE shown in FIG.
The "year" information of the PROM 104 is used as a start, and the frequency information (1 byte) -th information is used as an interval value. When the frequency information (1 byte) is 7, the frequency information 7 becomes the interval value. The information is year, month, day, hour, minute, second, and frequency, and the count information is repeatedly counted next to the count information. When the frequency information is 8, the year information (for example, 94) becomes the interval value. The starting point of the interval processing is immediately after sending the information from the IC card to the terminal,
The interval value × 100 μsec is set as an interval at which reception of the next command is started, and then a predetermined time range is set as a reception time range. Next, a command input waiting process process is performed. (S205) The command is input when the command input permission signal level reaches a predetermined level. The command waiting process is to confirm the level of this signal at a predetermined time interval. The processing is performed at time intervals of. Before the time to check the level reaches the interval, the input permission signal level is not at the predetermined level, so it is not received by the IC card side (No received) and iterbal + predetermined time (for example, 1 msec) is exceeded. It is confirmed whether or not there is any (S205A). If it is not over, the level is checked again, and if it is over, the command input waiting processing of the IC card is not performed at this point (No Answer), and the waiting state is entered for the subsequent command input. Not. If the input permission signal level does not exceed the predetermined level (permission level)
If, that is, if a command is input within a predetermined time range from a predetermined interval, command input processing is performed, and it is judged as received Yes, and the correctness of the next definition command is confirmed. Go to. In the case of "Yes" received, it is then determined whether the definition command is a valid one. (S206) Closed loop for non-regular command (S206A)
The re-input process is not processed. For a regular command, command processing is performed by the CPU 101 and the ROM 102. (S207) The processing result is written in the RAM 103, and the next interval value is specified. (S208) Next, the command processing result is transmitted. (S209) Similarly, interval processing is performed on the interval value, and S204 to S209 are repeated as follows.

Further, an example of data input / output of the IC card is shown in FIG. 6, and the data input / output of the IC card of this embodiment will be briefly described. First, when the IC card is connected to the terminal device, it stores the year, month,
At the same time as transmitting unique data (ATR information) such as day, hour, minute, second, and frequency to the terminal device, the interval 1 is set based on the interval value specified in advance from the unique data (ATR information). Interval 1 from sending of unique data (ATR information) is set as an interval at which the IC card starts receiving the next command (data block) from the terminal device, and then a predetermined time range, for example, 1 msec is set as the command reception time range. In FIG. 6, in the case of command 1 (Com1),
When the IC card receives the command within the command reception time range, the command can be received. Next, the processing of the command 1 (Com1) ends, and the IC card transmits a response signal (Res), which is a state in which the next command can be input, to the terminal device, and the unique data (AT
Interval 2 is set based on the interval value specified from (R information). Interval 2 after sending this response signal is set as an interval at which the IC card starts accepting the next command (data block) from the terminal device, and then a predetermined time range of 1 msec.
Is the command reception time range. In FIG. 6, in the case of command 2 (Com2), the command cannot be accepted when it is received by the IC card outside the command reception time range, and the standby state is not set for the subsequent command reception ( No Answer).

Next, the operation of the terminal device for coping with the above-mentioned processing using the IC card of this embodiment will be described with reference to FIG. First, when the terminal is connected to the IC card of this embodiment (S301), the IC card activation processing is performed (S302), and the AT from the IC card is connected.
The unique data as R (Answer to Response) is received. (S303) Next, the interval value of the first command transmission is specified according to the received unique data (ATR information).
(S304) Interval processing is performed on the interval value (S3
05), the next interval value was specified (S30
6) After that, the command is transmitted to the IC card side. (S3
07) After the command processing is performed on the IC card side, the command processing result is received from the IC card. (S308) Next, similarly, the interval process is performed on the interval value, and the processes of S305 to S308 are repeated.

[0013]

As described above, the IC card of the present invention has the following features.
Based on the information from the unique information stored in the IC card, an interval is provided for the command input from the terminal, and it is determined whether or not the command is input within a predetermined time from the interval. The card and the device of the terminal are used in a matched state, and by doing so, it is possible to prevent an unauthorized person from deciphering the key or deciphering the program by accessing the IC card from the terminal.

[Brief description of drawings]

FIG. 1 is a block diagram of an embodiment of an IC card of the present invention.

FIG. 2 is an operation flow chart of the embodiment of the IC card of the present invention.

FIG. 3 is an operation flow chart of an embodiment of the IC card device of the present invention.

FIG. 4 is an EEPROM memory map diagram of an embodiment of an IC card of the present invention.

FIG. 5 is a diagram for explaining a unique data (ATR information) format, etc.

FIG. 6 is a diagram for explaining data input / output of the IC card of the present invention.

[Explanation of symbols]

100 IC card 101 CPU 102 ROM 103 RAM 104 EEPROM 105 I / O (input / output line) 106 V _CC (power supply line) 107 RST (reset line) 108 CLK (clock line) 109 GND (ground line)

Claims (4)

[Claims] 1. A command input means for inputting command data from a terminal, a storage means for storing unique data for each card, and command data for controlling command data input timing according to the unique data of the storage means. The terminal has an input timing control means, a command processing means for performing command processing corresponding to each input command data, and a processing result sending means for sending the result processed by the command processing means to the terminal. An IC card characterized by limiting the timing of accepting commands from. 2. The IC card according to claim 1, wherein at least three types of memories of RAM, ROM, and EEPROM, and a CPU having a function of accessing these memories are provided.
An IC card having a built-in card and a CP as command input means for inputting command data from a terminal.
U, I / 0 line, EEPROM as a storage means for storing unique data for each card, ROM and CPU as a command data input timing control means for controlling command data input timing according to the unique data of the storage means ROM and CPU as command processing means for performing command processing corresponding to each of the command data thus processed, CPU, I / O line as processing result sending means for sending the result processed by the command processing means to the terminal, An IC card characterized by using a RAM. 3. A card receiving means for receiving an IC card, and an IC for starting the operation of the IC card.
Card operation start means, command data transmission timing control means for controlling the transmission timing of each command data to be transmitted to the IC card according to the response data from the card in response to the execution of the IC card operation start means, and the command processing result from the IC card And a command processing result receiving means for receiving. 4. A method of transferring data between an IC card and an IC card terminal device (reader / writer device) through an I / O line, wherein at least unique data information stored in the IC card is transferred. When a command is input from the reader / writer device, an interval from the response (Response) signal from the IC card to the start of command input from the next reader / writer device is set each time, and the input permitted time range is used. Is set to control the timing of command input from an IC card terminal device (reader / writer device).