JPH09106376A - Portable information recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To freely set various access conditions corresponding to respective files and respective access forms. SOLUTION: Condition setting areas K1 and K2 composed of bits (1: necessary/0: unnecessary) showing the necessity of collation concerning keys K11-K28 are provided for setting the access conditions of files recorded in an IC card for each command group, and a logic setting area J is provided for setting respective logic conditions. Bits J1 and J2 in the area J show the in-area logic conditions of the areas K1 and K2, and a bit J3 shows inter-area logic conditions between the areas K1 and K2. In the area K1 to which OR conditions '0' are set, the conditions are satisfied when any one of keys K11, K12 and K13 is collated and in the area K2 to which AND conditions '1' are set, the conditions are satisfied when all the keys K23 and K25 are collated. Since the inter-area logic conditions are AND conditions '1', access is permitted when both the conditions of the areas K1 and K2 are satisfied.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable information recording medium, and more particularly to a recording medium having a CPU and a memory accessed by the CPU.

[0002]

2. Description of the Related Art A portable information recording medium represented by an IC card has attracted attention as a next-generation medium replacing a magnetic card, and recently, a technique for reducing the size and cost of a semiconductor integrated circuit. Due to innovation, IC cards have come into practical use in various systems in the real world.

In particular, since an IC card having a built-in CPU has not only a function as an information recording medium but also an information processing function, it is expected to be used in an information processing system requiring a high degree of security. In general, I
A non-volatile memory such as an EEPROM is built in the C card, and information is recorded as a file in this EEPROM. Moreover, since the access to the EEPROM is performed by the built-in CPU, if a predetermined access condition is set in advance, the access to the file is permitted only when the built-in CPU determines that the access condition is satisfied. Can be Usually, collation for some keys is set as an access condition. That is, the key is written in the EEPROM in advance, and the internal key and the key given from the outside are compared and collated by the built-in CPU, and when the both match, it is determined that the key is unlocked. Of.

As a key, a specific target person (for example,
A key for authenticating an IC card owner, an issuer, etc., a key for authenticating specific hardware (for example, a terminal device), etc. are used. Usually, a plurality of these keys are used, and the access condition to the file is often set as a condition of collating the plurality of keys. That is, a specific key combination is required as an access condition for a specific file. In order to set different access conditions for each file, it is common to provide a directory area for each file and write the information specifying the key that needs to be collated in this directory area. is there. In this case, when an access command for each file is given from the outside, the built-in CPU first refers to the directory area for the file to be accessed, and when the collation work for the key requiring collation has been completed. Only the access command will be executed.

[0005]

An IC card has a larger data storage capacity than a magnetic card, and a large number of files can be recorded in a built-in nonvolatile memory. Moreover, it is expected that the capacity of the built-in non-volatile memory such as the EEPROM will increase more and more due to the progress of the manufacturing technology of the semiconductor integrated circuit. Therefore, it is expected that the usage pattern in which one IC card is used for a plurality of purposes will be generalized. For example, one IC card can be used for a plurality of uses such as a bank cash card, a credit card, a transportation prepaid card, and a hospital examination card.

In such an IC card corresponding to a plurality of uses, it is necessary to prepare one or a plurality of files for each use, and it is necessary to set access conditions for each file separately and independently. . As the usages are diversified, the degree of security for each file also differs, so that it is necessary to set an access condition suitable for each usage mode. Moreover, even when accessing the same file, it is necessary to set different access conditions depending on the mode of access. For example, even if the same file is read, the required security level differs depending on whether the information is read out or the information is rewritten. Usually, the latter requires higher security settings.

[0007] Therefore, an object of the present invention is to provide a portable information recording medium on which different access conditions can be freely set for each file and according to each access mode. .

[0008]

[Means for Solving the Problems]

(1) A first aspect of the present invention includes a CPU and a memory accessed by the CPU, and a plurality of files and access conditions for accessing individual files are written in the memory. , In a portable information recording medium which is required to satisfy an access condition for a specific file in order to access the specific file, the necessity of collation is set for each of a plurality of keys in a memory. A plurality of sets of condition setting areas are provided, and for each condition setting area, a logical product condition that requires matching for all the keys that are set to require matching, or one of the keys that is set to require matching The logical sum condition with matching as the condition or the logical condition within the area is defined, and all the logical conditions within each area are satisfied. Is set as a condition for access, or a logical sum condition is set as a condition for access when any one of the logical conditions in each area is satisfied is defined as a logical condition between areas, and a plurality of condition settings are made. A portable information recording medium, characterized in that, for at least one condition setting area of the areas, which of the logical product condition and the logical sum condition is determined as the in-area logical condition can be set in the memory. .

(2) The second aspect of the present invention is the above-mentioned first aspect.
In the portable information recording medium according to this aspect, it is possible to set in the memory which of the logical product condition and the logical sum condition is determined as the inter-region logical condition.

(3) A third aspect of the present invention is the above-mentioned first aspect.
Alternatively, in the portable information recording medium according to the second aspect, the command executed by the CPU for accessing the memory is divided into a plurality of command groups, and different conditions are set for each file and for each command group. A setting area is provided.

[0011]

BEST MODE FOR CARRYING OUT THE INVENTION In a portable information recording medium according to the present invention, a plurality of files and access conditions for these files are written in a built-in memory.
Moreover, this access condition is indicated by a plurality of condition setting areas. Each condition setting area is composed of a bit group that sets the necessity of collation for each of the plurality of keys. For example, if the first condition setting area of 8 bits and the second condition setting area of 8 bits are used, it is possible to set the necessity of collation for each of 16 keys in total. For example, if each key is associated with each bit position and bit 1 is defined as "collation required" and bit 0 as "collation unnecessary", a bit group consisting of a sequence of 0s and 1s is collated for each key. Will indicate the necessity of.

Here, in-condition logical conditions are set in each condition setting area. The logical condition in the area is
Either the logical product condition or the logical sum condition will be set. If the logical product condition is set, matching is required for all the keys that are set to require matching (bit 1), and if the logical sum condition is set, matching is required (bit 1). The condition is to collate any one of the keys set as follows. If the bit 1 is defined as a “logical product condition” and the bit 0 is defined as a “logical sum condition”, the in-region logical condition can be set to write 1-bit information in the memory.

Whether or not the final access is possible is determined based on the inter-region logical condition. As the inter-region logical condition, either the logical product condition or the logical sum condition is set. When the logical product condition is set as the inter-region logical condition, the access condition is that all the logical conditions in each region are satisfied, and when the logical sum condition is set, each region is The access condition is that any one of the internal logic conditions is satisfied.

In this way, if the logical conditions within each area and the logical conditions between areas can be set appropriately, different access conditions can be freely set for each file and according to each access mode. You will be able to set it.

[0015]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the illustrated embodiments. FIG. 1 is a block diagram showing a state in which a reader / writer device 20 as an external device is connected to a general IC card 10 to perform access. IC card 10
The reader / writer device 20 and the reader / writer device 20 are connected to each other by an I / O line 30. Here, in the IC card 10,
I / O interface 11, CPU 12, ROM 13,
The RAM 14 and the EEPROM 15 are built in. I /
The O interface 11 is an input / output circuit for transmitting / receiving data via the I / O line 30, and the CPU 12 communicates with the reader / writer device 20 via the I / O interface 11. In ROM13, C
A program to be executed by the PU 12 is stored, and the CPU 12 has a function of centrally controlling the IC card 10 based on this program. RAM 14
The CPU 12 is a memory used as a work area for performing such integrated control. On the other hand, EEPROM1
Reference numeral 5 is a memory for storing original data to be recorded in the IC card 10.

Power and clock are supplied to the IC card 10 from an external reader / writer device 20.
Therefore, when the IC card 10 is separated from the reader / writer device 20, the supply of power and clock to the IC card 10 is stopped. However, the EEPROM 15
Since it is a non-volatile memory, its recorded content is retained as it is even after the power supply is stopped. Just RAM14
All the data inside will be lost when the power supply is stopped.

Each memory 13, 14 in the IC card 10
All access to 15 is performed via the CPU 12, and these memories cannot be directly accessed from the outside. That is, from the reader / writer device 20 to the CPU 1
When a predetermined “command” is given to 2, the CPU 12
Interprets and executes this "command" and returns the result to the reader / writer device 20 as a "response". For example, when writing to a predetermined file in the EEPROM 15, the data to be written is given to the CPU 12 along with the “write command”, and the CP
The writing process is performed in the format of executing the "write command" by U12. On the contrary, when reading data from a predetermined file in the EEPROM 15, a predetermined “read command” is given to the CPU 12, and the CPU 12
The read process is performed in the form of executing the "read command" by. In this way, when the execution of the “command” is completed in the IC card 10, the “response” to the executed “command” is returned to the outside. For example, when a "write command" is given,
If a "response" indicating whether or not the writing process was executed without any problems was returned and a "read command" was given,
The data to be read will be returned in the form of a response.

However, the above-described access to the EEPROM 15 is not performed unconditionally, and it is premised that a predetermined access condition is satisfied. This access condition is set for each file and for each command group. A specific example of the method of setting such access conditions will be described in detail below.

FIG. 2 shows the E in the IC card 10 shown in FIG.
3 is a block diagram showing a file structure in EPROM 15. FIG. In this example, two application-specific areas A1 and A2 are defined in the EEPROM 15, and each application-specific area stores data used for different applications. Here, it is assumed that the area A1 is used for storing data used as a bank cash card, and the area A2 is used for storing data used as a hospital medical examination card. Independent data files DF1 and DF2 are stored in the areas A1 and A2, respectively. Bank data is recorded in the data file DF1, and hospital data is recorded in the data file DF2.
On the other hand, key files KF1 and KF2 that are independent of each other are also stored in the areas A1 and A2. In the data file, the original data to be recorded in the IC card 10 is recorded, whereas in the key file, the key required to access each area is stored. That is, the key file KF1 stores the key that is collated when the area A1 is accessed, and the key file KF2 stores the key that is collated when the area A2 is accessed. The master file MF is a file for storing data common to each application, and for example, the IC card 10
Information such as the owner's name, address, and telephone number is recorded.

As shown in FIG. 2, a directory is created for each file. That is, the master file MF includes the master file directory MF.
D is provided, data files DF1 and DF2 are provided with data file directories DF1D and DF2D, and key files KF1 and KF2 are provided with key file directories KF1D and KF2D. In each of these directories, information such as the address position, capacity, and record length of the corresponding file is recorded, and access conditions are set. For example, when accessing the data file DF1, it is determined whether or not the access condition set therein is satisfied by referring to the corresponding directory DF1D. In the example shown in FIG. 2, a total of five files are defined, and a directory is provided for each of these files. Therefore, this 5
Separate access conditions can be set for each file.

Moreover, in this embodiment, even when the same file is accessed, different access conditions can be set depending on the mode of access. As described above, the access to the EEPROM 15 is performed by giving the "command" from the reader / writer device 20, but in this embodiment, the "command" is divided into four groups as shown in the table of FIG. ing. The command belonging to group 0 is the command with the lowest security, the degree of security is high with groups 1 and 2, and the command belonging to group 3 is the command with the highest security. The processing contents of each command will be briefly described below.

[SELECT F belonging to group 0]
"ILE" is a command for selecting a file in the EEPROM 15, "VERIFY" is a command for collating a specific key, and "AUTHENTI".
“CATE” is a command for performing an authentication process for the reader / writer device 20. When executing the command belonging to this group 0, normally, no access condition is set and the command can be freely executed. In addition, “READ BINARY” belonging to group 1 is an EEPROM
This is a command to read data in binary format from the file in 15, and "READ RECORD" is EE.
This is a command for reading data from the file in the PROM 15 in record units. On the other hand, the “APPEND RECORD” belonging to the group 2 is the EEPROM 15
Command to add records to the file in
“WRITE BINARY” is a command for additionally writing data in a binary format to a file in the EEPROM 15, and “WRITE RECORD” is EEP.
This is a command for additionally writing data in a file in the ROM 15 in record units. Furthermore, the “UPDATE BINARY” belonging to the group 3 is the EEPROM 15
Is a command to rewrite the data of the file in the binary format. "UPDATE RECORD" is EE
This is a command to rewrite the data of the file in the PROM 15 in record units.
"Y" is a command for erasing the file data in the EEPROM 15 in binary format.

In this embodiment, for each file, and
Independent access conditions are set for each command group. As a specific access condition, a key combination indicating which key needs to be unlocked is set in the directory. That is, as shown in FIG. 4, as the access condition for one file, a key combination condition “which key needs to be unlocked” is set for each of the command groups 0 to 3. Will be. The feature of the present invention resides in how to set this key combination. Let me explain this with a concrete example.

For example, in FIG. 5, the directory DF1
The access conditions in D are shown as an example. This access condition is a condition for accessing the data file DF1, and similar access conditions are set for the other files DF2, KF1, KF2, and MF.
Moreover, the access condition for one file shown in FIG. 5 is set independently for each of the command groups 0 to 3. In the figure, for the sake of convenience, only the access condition for the command group 3 is shown, but the access condition is set for each of the other command groups 0 to 2 in exactly the same manner.

The access conditions for the command group 3 shown in FIG. 5 are set by two condition setting areas K1 and K2 and a logic setting area J. Here, the condition setting areas K1 and K2 are both bit areas indicating the necessity of collation for each key, but the logical setting area J is a bit area for setting a logical condition, as will be described later. Both have different properties. Condition setting area K1
Is an area consisting of 8 bits, and specific keys K11 to K18 are assigned to the respective bits.
Similarly, the condition setting area K2 is also an area consisting of 8 bits, and each bit has a specific key K21 to K2.
8 are assigned. After all, in this embodiment, a total of 16 types of keys can be used to set the access conditions. The key codes themselves of these 16 types of keys are written in the key files KF1 and KF2, and the key code given from the outside and the key file K
The key codes written in F1 and KF2 are collated, and if they match, the collation is completed (unlocked) for the key.

In this embodiment, the condition setting areas K1, K2
If a bit "1" is recorded in the field, it indicates that the corresponding key is "match required". If "0" is recorded, the corresponding key is "match not required". Indicates that there is. For example, according to the setting of the condition setting area K1 shown in FIG. 5, it is shown that the keys K11, K12, and K13 require "verification", and the keys K14 to
It is shown that “K18 is not required” for K18. According to the setting of the condition setting area K2, the key K2
It has been shown that “verification is required” for keys 3 and K25, and keys K21, K22, K24, and K26 to K28.
Indicates that “no matching is required”.

On the other hand, the 3 bits forming the logical setting area J indicate the setting of the logical condition. That is, the bit J1 indicates the setting of the in-area logical condition of the condition setting area K1, the bit J2 indicates the setting of the in-area logical condition of the condition setting area K2, and the bit J3 indicates the inter-area logic between the condition setting areas K1 and K2. Indicates the setting of conditions. More specifically, when “1” is recorded in these bits, it indicates that a logical product condition (AND condition) is set, and “0” is set.
Is recorded, it means that the logical sum condition (OR condition) is set. When the logical product condition is set as the in-area logical condition, it is judged that the condition of this condition setting area is satisfied only when all the keys that are set to be verified are verified. . on the other hand,
If the logical sum condition is set as the in-area logical condition, and if any one of the keys set to require verification is verified, the condition of this condition setting area is satisfied. It is determined that

For example, in the example shown in FIG. 5, bit J1
Is "0", the logical sum condition (OR condition) is set as the in-region logical condition of the condition setting region K1. Therefore, if any one of the three required keys K11, K12, K13 is verified, it is determined that the condition of the area K1 is satisfied. On the other hand, since the bit J2 is "1", the logical product condition (AND condition) is set as the in-region logical condition of the condition setting region K2. Therefore, when the two keys K23 and K25 required to be collated are both collated, it is determined that the condition of the region K2 is satisfied. After determining whether or not the inner logical condition is satisfied, finally, the availability of access is determined based on the inter-region logical condition. That is, when the logical product condition is set as the inter-region logical condition, access is determined only when all the intra-region logical conditions are satisfied. When the sum condition is set, it is judged that access is possible if any one of the logical conditions in each area is satisfied.

For example, in the example shown in FIG. 5, bit J3
Is "1", the logical product condition (AND condition) is set as the inter-region logical condition. Therefore, the access is determined only when both the in-area logical condition for the condition setting area K1 and the in-area logical condition for the condition setting area K2 are satisfied. After all, in the case of this example, three keys K1
If at least one of the keys K1, K12, and K13 has been checked, and if the two keys K23 and K25 have been checked, it is determined that the access is permitted. Access to the data file DF1 by commands belonging to the command group 3 is permitted.

In this embodiment, information as to whether the collation for each key has been completed, that is, whether each key has been unlocked is recorded in the unlock flag in the RAM 14.
That is, as shown in FIG. 6, an unlock flag group F1 of 8 bits and an unlock flag group F2 of 8 bits are provided in the RAM 14. Keys K11 to K11 are respectively provided in the 8 bits forming the unlock flag group F1.
K18 is assigned, and keys K21 to K28 are assigned to the 8 bits forming the unlock flag group F2, respectively. In both cases, the bit "0" indicates the state of unverified (unlocked), and the bit "1" completes the collation (unlocked)
Indicates the state of. For example, from the reader / writer device 20,
When the key code itself of the key K11 is given together with the "VERIFY" command specifying the key K11, the CP
The U12 uses the key code given from the outside to store the key K stored in the key file KF1 or KF2.
The key code of 11 is compared, and if they match, a process of setting a flag "1" in the MSB of the unlock flag group F1 is performed. In this way, the flag "1" is set at the corresponding bit position of the unlock flag groups F1 and F2 for the key whose matching has been completed.

From the reader / writer device 20 to the EEPROM
When a command that requires access to 15 is given, the CPU 12 refers to the states of the unlock flag groups F1 and F2 in the RAM 14 and determines whether or not this command can be executed. For example, a command "UPDAT" for rewriting a record in the data file DF1
It is assumed that “E RECORD” (belonging to command group 3) is given. In this case, the CPU 12 refers to the directory DF1D and determines whether or not the access condition set for the command group 3 in FIG. 5 is satisfied. That is, in FIG. 6, the unlock flag group F
For 1, first, the three keys K11, K12, K1
Whether the in-region logical condition that any one of 3 is unlocked (in other words, flag "1" is set in at least one of bits K11, K12, K13) is satisfied. Is determined, and similarly, the unlock flag group F2
With respect to the above, the in-region logical condition that both the two keys K23 and K25 are unlocked (in other words, both of the bits K23 and K25 have the flag “1”) is satisfied. Is determined. Then, finally, the inter-region logical condition that both of these in-region logical conditions are satisfied is determined, and whether or not the command can be executed is determined.

The specific access conditions for the command group 3 in FIG. 5 have been described above. By changing the bit values of the logical setting area J, it becomes possible to set a wide variety of access conditions. The degree of freedom will be very high. For example, in the example shown in FIG. 5, if bit J1 is changed to "1", five keys K1
The access condition is satisfied only when all of 1, K12, K13, K23, and K25 are collated, and if bits J1 to J3 are all changed to "0", then 5 is obtained.
If any one of the keys K11, K12, K13, K23 and K25 is collated, the access condition is satisfied. As described above, by changing the bit setting in the logic setting area J, it is possible to set the access condition with a high degree of freedom, which is a feature of this embodiment. As described above, it is expected that one IC card will be used for various purposes in the future, and it is necessary to set various access conditions for each file used for each purpose. By using the present invention, it becomes possible to flexibly deal with such a variety of access condition settings.

In the usage mode in which the logical condition in the area is set to the logical sum condition, the subject is divided into several groups,
It is convenient to use when one of the conditions is that the key matching for one person in the group is completed. For example, as shown in FIG. 7, there are eight target persons A to H, and keys K11 to K are provided for each target person.
Consider the case where 18 is given. At this time, the subjects A, B, and C are made to belong to the subject group 1, and the subjects D,
To make E and F belong to the target group 2 and target groups G and H to the target group 3, for example, in order to execute the command belonging to the command group 3 to the data file DF1, If an access condition is set such that key verification is required for any one of the target persons belonging to the target group 1, the bit J1 is set to "0" as shown in FIG. Then
The condition setting area K1 may have the bit setting as shown in the figure.

Although the present invention has been described above based on the illustrated embodiment, the present invention is not limited to this embodiment, and can be implemented in various modes other than this. For example, in the embodiment shown in FIG. 5, only two areas K1 and K2 are provided as the condition setting areas indicating the necessity of matching for each key, but a large number of areas K3, K4 ,. May be provided.

In the embodiment of FIG. 5, the area K1,
Although the in-region logical conditions can be freely set for both K2, it is not always necessary to set the in-region logical conditions freely for all condition setting regions. For example, in the embodiment of FIG. 5, the condition setting area K2 is always set to use the logical product condition as the in-area logical condition, and only the condition setting area K1 is determined to be the logical product condition or the logical sum condition. It may be set freely. In this case, the information "using a logical product condition for the condition setting area K2" may be given as fixed information in the ROM 13, and the bit J2 in the EEPROM 15 becomes unnecessary. Similarly, in the embodiment of FIG. 5, the inter-region logical condition can be freely set, but the inter-region logical condition may also be set as fixed information in the ROM 13. In this case, the bit in the EEPROM 15 is set. J3 becomes unnecessary. In short, according to the present invention, it is possible to set in the non-volatile memory which of the logical product condition and the logical sum condition is determined as the in-region logical condition for at least one condition setting region among the plurality of condition setting regions. You can do it like this.

Although the present invention is applied to the IC card in the above-described embodiments, the present invention is not limited to the IC card and can be widely applied to a portable information recording medium having a CPU and a memory built therein. Is.

[0037]

As described above, according to the present invention, it is possible to freely set the logical product condition or the logical sum condition with respect to the setting of the access condition of the portable information recording medium.
It becomes possible to freely set different access conditions for each file and according to each access mode.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a state in which a reader / writer device 20 as an external device is connected to a general IC card 10 to perform access.

2 is an EEPROM 1 in the IC card 10 shown in FIG.
5 is a block diagram showing a file structure in FIG.

FIG. 3 is a table showing commands used in the IC card 10 shown in FIG. 1 for each group.

FIG. 4 is a diagram showing access conditions for each command group set for one file in the present invention.

FIG. 5 is a diagram showing an example of access conditions set for a data file DF1.

FIG. 6 shows a RAM1 in relation to the access conditions shown in FIG.
4 is a diagram showing an unlock flag set in FIG.

FIG. 7 is a diagram showing an example in which a plurality of target persons are divided into groups and access conditions are set for each target person.

[Explanation of symbols]

 10 ... IC card 11 ... I / O interface 12 ... CPU 13 ... ROM 14 ... RAM 15 ... EEPROM 20 ... Reader / writer device 30 ... I / O line A1, A2 ... Area in EEPROM DF1, DF2 ... Data files DF1D, DF2D ... data file directory F1, F2 ... unlock flag group J ... logical setting area J1, J2, J3 ... logical setting bit K1, K2 ... condition setting area K11-K18, K21-K28 ... key KF1, KF2 ... key file KF1D , KF2D ... key file directory MF ... master file MFD ... master file directory

Claims (3)

[Claims] 1. A CPU and a memory accessed by the CPU, wherein a plurality of files and access conditions for accessing individual files are written in the memory, and access to a specific file is performed. In order to do so, in the portable information recording medium that is required to satisfy the access condition for the file, in the memory, a plurality of condition setting areas for setting the necessity of collation for each of the plurality of keys are set. For each condition setting area, a logical product condition that requires the matching of all the keys that are set to require matching, or a logical condition that requires the matching of any one of the keys that are set to require the matching The sum condition or the logical condition in the area is defined, and it is determined that all the logical conditions in each area are satisfied. And a logical sum condition in which one of the logical conditions in each area is satisfied is defined as an inter-area logical condition, and the plurality of condition settings are set. Portable information recording, characterized in that, for at least one condition setting area of the areas, which of the logical product condition and the logical sum condition is determined as the in-area logical condition can be set in the memory. Medium. 2. The portable recording medium according to claim 1, wherein which of the logical product condition and the logical sum condition is determined as the inter-region logical condition can be set in the memory. Possible information recording medium. 3. The recording medium according to claim 1, wherein the command executed by the CPU to access the memory is divided into a plurality of command groups, and each file and each command group are A portable information recording medium having different condition setting areas.