JPH0855200A - Ic card - Google Patents

Abstract

PURPOSE:To provide an IC card to which high security performance and a large capacity are available. CONSTITUTION:An IC part 11 arranged at a specific position of one card substrate 10 is constituted including plural electrically separated IC chips A to C and an IC chip management part 12. The IC chip management part 12 has a selective switching mechanism 121 which selects and electrically connects one of the IC chips A to C to an interface part 13, a switching control part 122 which controls the operation of the selective switching mechanism 121, and an activation part 123 which activates the respective IC chips A to C for a specific period to make them active, thereby preventing the individual IC chips A to C from affecting one another. After authentification of one IC chip and when the IC chip is normal a chip control part 124 may be provided with a function to allow a card reader writer 2 to access other IC chips.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card having a plurality of IC card functions mounted on one card substrate, and more particularly to a technique for minimizing mutual influence of individual functions.

[0002]

2. Description of the Related Art An IC card has an LSI (la
rge scale integration: An IC unit including a large-scale integrated circuit) and a memory is provided, and various processing functions such as data reading / writing, erasing, rewriting, etc. are realized in this IC unit. Cards and wired logic cards. The CPU-incorporated card is a CPU (central processing) for performing arithmetic operations and memory management in the IC section, such as an S-type IC card.
unit) that includes an active chip to secure a certain amount of data storage capacity while having a security function that prevents forgery and unauthorized reading. On the other hand,
The wired logic card has a RAM (rand
om access memory), ROM (read only memory), and other memory devices (passive chips) are arranged only to function mainly as a large-capacity card-shaped storage medium, and is usually called a memory card. The conventional IC card is I
It is general that the C portion is configured by one chip, or a plurality of chips are connected by a conductor or the like to form one unit.

[0003]

By the way, there is a demand for an IC card to have a large capacity of a data storage area and to have a thorough security function. Cards with a built-in CPU, such as the S-type IC card described above, are quite popular because they can satisfy both the data capacity and the high security to some extent, and their improvements are well made. However, in such an IC card, CP
When U malfunctions, there is a serious problem that an abnormal state is cascadingly propagated to the memory or the like and most of the data to be read / written or processed is destroyed. On the other hand, a wired logic type card such as a memory card has a structure in which it is unlikely that the written data is destroyed at once, so that the safety of the data can be achieved, but there is a concern in terms of security.

In view of the above problems, the object of the present invention is C
An advantage of both the PU built-in type card and the wired logic type card is to provide an IC card with a structure that is easier to use.

[0005]

Means for Solving the Problems A first method for solving the above problems is described below.
The IC card of the invention comprises an IC unit including an interface with a card reader / writer at a predetermined position of a card substrate, and the IC unit is composed of a plurality of electrically isolated I
It is characterized by comprising a C chip and an IC chip management means for selecting one of these IC chips and for establishing electrical continuity between the selected IC chip and the interface. The plurality of IC chips may be active chips, passive chips, or a combination thereof.

The IC card of the second invention is an IC having the above-mentioned configuration.
In the card, the IC chip management means has an activation means for activating the IC chip for a predetermined time before data access from the card reader / writer to each IC chip.

In the IC card of the third invention, a plurality of IC chips are an active type chip and a passive type chip, and the IC chip management means is passive when the authentication result of the active type chip, that is, the security check result is normal. It has a chip control means for permitting data access of the card reader / writer to the die chip.

An IC card according to a fourth aspect of the present invention is the plurality of ICs.
A chip includes a plurality of active chips, and the chip control means is configured to allow data access of the card reader / writer to the passive chip when a combination of authentications by the active chips is normal. Characterize.

[0009]

In the IC card of the first aspect of the present invention, the IC chip management means selects any one of the plurality of IC chips and brings the IC chip into conduction with the interface with the card reader / writer. This makes it possible to access the IC chip from the card reader / writer, but at this time, since the other IC chips are electrically separated from each other, even if the IC chip malfunctions due to some reason, the other IC chip will not operate. Is not affected, and the chained spread of abnormal conditions is suppressed.

In the IC card of the second aspect of the present invention, the activation means provided in the IC chip management means activates the IC chip for a predetermined time before data access from the card reader / writer to each IC chip, and activates the IC chip. To do. In other words, the function of each IC chip is limited except during the above time, so that the safety of the written data is enhanced.

In the IC card of the third invention, for example, the chip control means provided in the IC chip management means allows the card reader / writer to access the passive chip data when the authentication result by the active chip is normal. This prevents the passive chip from being affected by the malfunction of the CPU in the active chip. In addition,
The authentication result determination process may be performed by a higher-level device such as a terminal device, or the IC card may be configured to have this function. In the former case, IC card (IC chip management means)
Performs an operation of bridging the authentication result of each IC chip, various control signals, and data.

In the IC card of the fourth aspect of the present invention, data access of the card reader / writer to the passive chip is permitted only when the combination of authentication by the active chips is normal. As a result, compared to the case where one active chip is used, security is further enhanced, and moreover,
Since the authentication item can be arbitrarily changed or added, it is possible to ensure the long-term security of the system using this IC card.

[0013]

Next, an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 is a configuration diagram of an embodiment of the present invention, showing an example of an IC card 1 in which one IC section 11 is arranged at a predetermined position of a card substrate 10. In the figure, reference numeral 2 is I
A card reader / writer 3 for reading / writing control signals and data from / to the C card 1 is a terminal device that executes a predetermined processing program, and each is an existing one.

The IC unit 11 includes an IC chip management unit 12,
An interface section 13 and three electrically separated IC chips A to C are provided. These IC
The chips A to C may be only those with a built-in CPU or only those with a wired logic type, or may be a mixture of both. Interface unit 13
Is an interface for connecting control signals and data to be read / written with the card reader / writer 2 (and the terminal 3). This interface unit 13
It is an existing one that complies with the ISO standard.

The IC chip management section 12 controls each IC chip A.
Selection switching mechanism 121 for selecting one of C to C to establish electrical connection with the interface section 13, and this selection switching mechanism 1
21. After the switching control unit 122 for controlling the operation of 21, the activation unit 123 for activating each of the IC chips A to C for a predetermined time to make them active, and the authentication of the card with one IC chip. A chip control unit 12 that determines whether the authentication result is correct or not and permits the card reader / writer 2 to access another IC chip (transmission / reception of control signals and data, read / write, the same applies hereinafter) when the determination result is normal.
Four. The function of the chip control unit 124 is
It can also be realized on the terminal 3 side based on an ATR signal described later. In this case, the chip control unit 124 may be provided with a bypass function for the function, or the chip control unit 124 itself may be deleted. Illustration of other known configurations of the IC card 1 is omitted.

Next, a specific processing procedure of the system including the IC card 1 having the above-mentioned configuration will be described with reference to FIGS. The left side of each figure is the process on the side of the terminal device 3, the right side is the process on the side of the IC card 1 connected through the card reader / writer 2, and S represents each process step. The example in Figure 2
Each of the IC chips A to C is an active chip having a built-in CPU, and shows a processing procedure for writing data in the memory of the IC chip C after performing complex authentication by the chips A to C.

Referring to FIG. 2, the terminal 3 is in a state of waiting for the IC card 1 to be set at the initial stage (S10).
1) When it is confirmed that the IC card 1 is actually set in the card reader / writer 2 (S102), a control signal for performing the card activation process (S103) is transmitted. At this time, assuming that the IC chip A is selected by the IC card 1 (the switching control unit 122 and the selection switching mechanism 121), the IC card 1 (activating unit 123) determines that the IC chip A is based on this control signal. After the activation, the ATR (answer to re
set) signal is returned (S201). The terminal device 3 starts the first-stage authentication upon receiving the ATR signal. That is, a signal for authentication is transmitted to the IC card 1 side (S104).

The IC card 1 (chip control section 124) authenticates the IC chip A based on the above-mentioned authentication signal and sends back the result to the terminal 3 side (S20).
Along with 2), the chip A is deactivated after a predetermined time, for example, the time required for authentication. When the function of the chip controller 124 is provided on the terminal 3 side, the authentication result from the IC chip A is directly returned to the terminal 3 side. The terminal device 3 determines whether or not the authentication is successful based on the authentication result from the IC card 1 (S105), and if successful, reactivates the authentication (S106), and controls the IC card 1 side for that purpose. Send a signal.

In the IC card 1, the next IC chip B is selected and activated based on this control signal, and the ATR signal is returned to the terminal 3 side (S203). After performing the card classification by the ATR signal, the terminal 3 transmits a signal for the second stage authentication to the IC card 1 side (S10).
7). Based on this signal, the IC card 1 returns the authentication result of the IC chip B to the terminal 3 side (S204) and deactivates the chip B after a lapse of a predetermined time.
The terminal device 3 determines whether or not the authentication is successful (whether or not the authentication result is normal, the same applies hereinafter) based on the authentication result from the IC card 1 (S108), and if successful (when normal, then The same applies to reactivate IC card 1 (S1
09), and sends a control signal therefor to the IC card 1 side.

In the IC card 1, the next IC chip C is selected and activated based on this control signal, and the ATR signal is returned to the terminal 3 side (S205). After performing the card classification by the ATR signal, the terminal 3 transmits a signal for the third stage authentication to the IC card 1 side (S11).
0). The IC card 1 returns the authentication result of the IC chip C to the terminal 3 side based on this signal (S206). The terminal device 3 determines whether or not the authentication is successful based on the authentication result from the IC card 1 (S111). If the authentication is successful, the IC card 1 is prompted to prepare for reading and writing data, and the IC
When the card 1 (chip control unit 124) permits it (S207), actual data reading / writing is performed (S11).
2). As described above, when the data access control is performed on the terminal 3 side, the data is directly read from or written to the IC chip C. When the reading and writing of data is completed and when the authentication fails in the previous step, that is, when the authentication result is abnormal (S
In 105, S108, and S111), the IC card 1 is deactivated (S113). At this time, the IC card 1 (the switching control unit 122 and the selection switching mechanism 121) shifts the selected IC chip to the initial state, that is, the IC chip A. After the series of processing is completed, the terminal device 3 ejects the card (S114) and returns to the initial state.

As described above, the card authentication is performed by the plurality of IC chips A to C, and the data can be read from and written to the memory of the IC chip C only when the authentication is successful. It is possible to minimize the influence of malfunction in C.

FIG. 3 is an example of a case where the data read / write process is performed in a short time by omitting the authentication process of the IC chips A and B in the example of FIG. 2, and the terminal 3 performs the card activation process. Processing up to (S301 to S303),
Also, the process until the IC card 1 activates the IC chip A and returns an ATR signal to the terminal 3 side (S401).
Is similar to the case of FIG. In this example, when the terminal 3 receives the ATR signal, the card reactivation process is immediately performed without authentication (S304), and the IC card 1 activates the IC chip B to receive the ATR signal. Is returned (S402). The IC chip C is also subjected to the same procedure until activation (S305, S403), and card activation processing is performed after activation (S307, S404). Subsequent processing is the same as in the case of FIG. 2 (S308 to S31).
0, S405 to S406). As described above, when the authentication process is unnecessary, the data can be read from and written to the memory immediately, so that the processing time can be shortened.

The present invention is not limited to the above-mentioned embodiment, and the constitution can be changed without departing from the scope of the invention. For example, the IC unit 11 includes a first active chip, a second active chip, a first passive chip, and
The four types of IC chips of the second passive type chip and means for switching between them are provided, and each IC on the terminal 3 side is provided.
It is also possible to combine the authentication by the chip and make a new security check item.

In addition, an active chip for realizing a new function is added to the IC unit 11 every few years, and the I terminal is connected to the terminal 3 side.
According to the present invention, it is possible to increase the number of check items according to the C card. For example, the authentication of the first active chip and the newly added third active chip is performed, and then the authentication of the existing second active chip is performed. You can increase the types. This makes it possible to maintain the overall security of the system including the IC card of the present invention for a long period of time.

[0025]

As is apparent from the above description, according to the IC card of the first invention, a plurality of ICs can be mounted on one card substrate.
There is an effect that a card function is installed and can be switched and used. Moreover, even if one of the IC chips malfunctions for some reason, another IC that is electrically isolated
Since the chip is not affected, the abnormal state is minimized, and there is an effect that the safety of data to be read / written or processed is enhanced.

Further, according to the IC card of the second aspect of the invention, before the data access to each IC chip, the I
The C chip is activated, and the function of each IC chip is limited except for this time, which has the effect of increasing the safety of the written data.

Further, according to the IC card of the third invention, after the card is authenticated by the active chip, that is, the security check is performed, data access to the passive chip is permitted when the result is normal. Even if a CPU malfunctions in the active chip, the influence of the malfunction of the CPU does not reach the passive chip, high security and large capacity of data can be achieved, and further, the safety of written data is secured. is there.

Further, according to the IC card of the fourth aspect of the present invention, since the correctness of the card authentication is judged by the combination of a plurality of active chips, the authentication effect is further enhanced as compared with the case where one active chip is used. Since the authentication item can be arbitrarily changed or added, there is an effect that long-term security of the system using this IC card is ensured.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of an IC card according to an embodiment of the present invention and a connection relationship with peripheral devices.

FIG. 2 is a specific processing procedure diagram of a system including the IC card of the present embodiment.

FIG. 3 is another processing procedure diagram of the system including the IC card of the present embodiment.

[Explanation of symbols]

 1 IC Card 10 Card Board 11 IC Section 12 IC Chip Management Section 121 Selection Switching Mechanism 122 Switching Control Section 123 Activation Section 124 Chip Control Section 13 Interface Section

Claims (4)

[Claims] 1. An IC comprising an IC section including an interface with a card reader / writer at a predetermined position of a card substrate.
In the card, the IC unit includes a plurality of IC chips that are electrically isolated from each other, and an IC chip management unit that selects any one of these IC chips and connects the selected IC chip and the interface. An IC card characterized by 2. The IC card according to claim 1, wherein the IC chip management means is the IC chip for a predetermined time before accessing the IC chips from the card reader / writer.
An IC card having an activating means for activating a chip. 3. The IC card according to claim 1, wherein the plurality of IC chips are passive chips that include only an active chip including a CPU and a memory element, and the IC chip management unit includes the An IC card comprising a chip control unit that permits data access of the card reader / writer to the passive chip when the authentication result of the active chip is normal. 4. The IC card according to claim 3, wherein the plurality of IC chips includes a plurality of active chips.
The IC card is characterized in that the chip control means is configured to permit data access of the card reader / writer to the passive chip when the combination of authentication by each active chip is normal.