JPH09114741A - Portable information recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make possible an access with excellent operability, securing sufficient security, for the file having the hierarchical structure for which the separate security setting for every purpose is performed, by performing a specified processing by providing a CPU executing the command imparted from the outside and the first and second memories accessed by this CPU. SOLUTION: When a command 'SELECT #3 DF 1-2' designating a specified channel and selecting a specified file control area is imparted, unlocking information is maintained as it is for recording parts (1, 3) for which discrimination information is not updated. When other recording parts (2, 2) in which the same discrimination information DF 1 as this updated discrimination is recorded exist for the recording part for which discrimination information is not updated, the unlocking information recorded in these other recording parts is copied as it is. When these other recording parts do not exist, a processing writing the unlocking information showning locking is performed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable information recording medium, and more particularly to a recording medium having a CPU and a memory accessed by the CPU.

[0002]

2. Description of the Related Art A portable information recording medium represented by an IC card has attracted attention as a next-generation medium replacing a magnetic card, and recently, a technique for reducing the size and cost of a semiconductor integrated circuit. Due to innovation, IC cards have come into practical use in various systems in the real world.

In particular, since an IC card having a built-in CPU has not only a function as an information recording medium but also an information processing function, it is expected to be used in an information processing system requiring a high degree of security. In general, I
A non-volatile memory such as an EEPROM is built in the C card, and information is recorded as a file in this EEPROM. Moreover, since the access to the EEPROM is performed by the built-in CPU, if a predetermined access condition is set in advance, the access to the file is permitted only when the built-in CPU determines that the access condition is satisfied. Can be Usually, collation for some keys is set as an access condition. That is, the key is written in the EEPROM in advance, and the internal key and the key given from the outside are compared and collated by the built-in CPU, and when the both match, it is determined that the key is unlocked. Of.

As a key, a specific target person (for example,
A key for authenticating an IC card owner, an issuer, etc., a key for authenticating specific hardware (for example, a terminal device), etc. are used. Usually, a plurality of these keys are used, and the unlocking of a plurality of keys is often set as a condition for accessing a file. That is, a specific key combination is required as an access condition for a specific file. In order to set different access conditions for each file, it is common to provide a directory area for each file and write information specifying the key that requires unlocking in this directory area. Is. In this case, when an access command is given to each file from the outside, the built-in CPU first refers to the directory area for the file to be accessed, and when the unlocking operation for the key that needs to be verified is completed. Only the access command will be executed.

[0005]

An IC card has a larger data storage capacity than a magnetic card, and a large number of files can be recorded in a built-in nonvolatile memory. Moreover, it is expected that the capacity of the built-in non-volatile memory such as the EEPROM will increase more and more due to the progress of the manufacturing technology of the semiconductor integrated circuit. Therefore, it is expected that the usage pattern in which one IC card is used for a plurality of purposes will be generalized. For example, bank cards, credit cards, transportation prepaid cards,
One I for multiple uses such as hospital cards
It becomes possible to deal with it with a C card.

In such an IC card corresponding to a plurality of uses, it is necessary to prepare a separate file for each use, and it is also necessary to set the access conditions for each file independently. Moreover, it is expected that the number of usage modes in which a plurality of files having different purposes are alternately accessed will increase in the future.
For example, when paying medical expenses by transferring the medical expenses written in the portion used as a hospital card from the deposit balance written in the portion used as a bank card, the hospital file and the bank file It becomes necessary to access and alternately. In this case, since the security for the hospital file and the security for the bank card are set separately, an unlocking operation is required each time each file is accessed, which causes a problem of usability.

As a method of improving the usability of such a versatile IC card, a method of introducing an access channel concept and performing an unlocking operation for each access channel has been proposed. For example,
Japanese Patent Laid-Open No. 7-160547 discloses a method in which a different identification number is defined for each channel and the unlocked state is recorded for each channel.
However, if different security is set for each usage for files with a hierarchical structure,
The current situation is that it has not been sufficiently convenient to access various files in a crossed manner.

Therefore, the present invention provides a portable information recording medium in which a security setting is made differently for each application and a file having a hierarchical structure can be easily accessed while ensuring sufficient security. The purpose is to do.

[0009]

[Means for Solving the Problems]

(1) A first aspect of the present invention includes a CPU that executes a command given from the outside, a first memory and a second memory accessed by the CPU, and the first memory includes: A file management area having a hierarchical structure is defined, and a predetermined file is recorded in each file management area together with a predetermined access condition, and unlocking information related to the access condition is recorded in the second memory, In the portable information recording medium, which determines whether or not each file in the first memory can be accessed by comparing the unlocking information with the access condition for each file, in the second memory, A plurality of channel setting areas are provided, each channel setting area is divided into a plurality of recording sections having a hierarchical relationship with each other, and each recording section has a specific file management area. When the command for selecting the specific file management area by specifying the specific channel is recorded, the selected file can be recorded, and the identification information indicating the unlocking information for this specific file management area can be recorded. The identification information of the management area and the file management area of the upper hierarchy is written in the recording section corresponding to each hierarchy in the specified channel setting area to be in the recorded state, and the lower hierarchy is selected from the selected file management area. The corresponding recording unit performs the writing process to leave it in the unrecorded state,
By this writing process, the unlocking information is maintained as it is for the recording portion whose identification information has not been updated, and the same identification information as the updated identification information is recorded for the recording portion whose identification information has been updated. If there is another recording unit that is present, the unlock information recorded in the other recording unit is copied as it is, and if there is no such other recording unit, the unlocking indicating the unlocked state is given. When a command for writing information and designating a specific channel and performing a predetermined key comparison is given, it is recorded in the lowest recording layer in the recorded state in the designated channel setting area. If the unlocking information is updated based on the result of the key collation, and there is another recording part that has the same identification information as the identification information recorded in this lowest recording part, Update process Therefore, the updated unlock information is copied to this separate recording section as it is, and when a command to specify a specific channel and access the specified target file is given, The target file belongs to the file management area specified by the identification information recorded in the recording section of the lowest layer in the recorded state, and the unlock information recorded in the recording section of the lowest layer is The target file can be accessed when the access condition of the target file is satisfied.

(2) The second aspect of the present invention is the above-mentioned first aspect.
In the portable information recording medium according to the above aspect, it is possible to set whether or not to refer to the unlock information of the file management area in the upper hierarchy for each file management area, and when the setting to refer is made. Enabled to access the target file when the fused unlock information that fuses the unlock information of the file management area in the upper hierarchy and the unlock information of the self satisfies the access condition of the target file. It is a thing.

(3) The third aspect of the present invention is the above-mentioned second aspect.
In the portable information recording medium according to this aspect, for each file management area in the second and lower layers, the unlocking information of the file management area in the highest layer is always referred to.

(4) The fourth aspect of the present invention is the above-mentioned first aspect.
-In the portable information recording medium according to the third aspect, the access command for the file is divided into a plurality of groups according to the mode of access, and the access condition for each file is set for each group, and the access is performed. When a command is given, the access condition set for the group to which this access command belongs is compared with the unlock information.

(5) The fifth aspect of the present invention is the above-mentioned first aspect.
In the portable information recording medium according to the fourth aspect, only a single recording section representing a plurality of channels is provided in the highest layer.

[0014]

BEST MODE FOR CARRYING OUT THE INVENTION A portable information recording medium according to the present invention is a CPU that executes a command given from the outside.
And two types of memory accessed by this CPU. However, these two types of memories are conceptually distinguished only by the recorded contents, and physically a single memory element may be divided into areas and used. Of the two types of memories, the first memory records the files that should be originally recorded on this medium together with the predetermined access conditions. This access condition is to access the file,
It is a condition that indicates which key needs to be matched. On the other hand, unlocking information related to this access condition is recorded in the second memory. Specifically, information indicating which key has already been collated and is in the unlocked state is recorded. Therefore, when an access command such as a read command or a write command for a specific file is given, by comparing the access condition for the file to be accessed with the unlock information at that time, Whether or not access is possible is determined.

According to the present invention, a file management area having a hierarchical structure is defined in the first memory. This file management area is conceptually equivalent to a box for storing a specific file, and a hierarchical structure can be adopted by nesting the boxes. The specific files will be placed in either box. Security can be set individually for each individual box. Therefore, if a separate box is prepared for each use, different security settings can be made for each use.

The unlocking information recorded in the second memory also includes
It is recorded separately for each box, that is, for each file management area. Moreover, the actual access is performed using the concept of "channel". That is, first, a specific channel is designated and a specific file management area (box) is selected. A plurality of channel setting areas are provided in the second memory to indicate which box has been selected for a particular channel. Each channel setting area is divided into a plurality of recording units that have a hierarchical relationship with each other,
Identification information indicating a specific file management area and unlocking information about the specific file management area are recorded in each recording unit. When you specify a specific channel and select a specific file management area (box), identification information that indicates the selected file management area (selected box) and the file management area (outer box) at a higher level than this. Are written in the recording section corresponding to each layer in the designated channel setting area. The recording unit in which such writing has been performed is in the recorded state. At this time, the recording unit corresponding to the file management area (inner box) in the lower hierarchy than the selected file management area (selected box) is in an unrecorded state. Therefore, the recorded lowermost recording portion in the channel setting area always corresponds to the file management area (selected box) selected for the channel.

In this way, in the channel setting area, the path in the hierarchical structure up to the selected file management area (box) is recorded. Since an arbitrary file management area can be selected for each channel, if a file management area with a partially shared path is selected for different channels, the same file management area is shown in different recording sections. The identification information will be recorded.

In each recording section, unlocking information for the file management area (box) is recorded together with identification information for specifying the file management area (box). That is,
By referring to one recording unit, it is possible to recognize the unlocked state of a certain box at the present time. An important feature of the present invention is the method of updating this unlocking information. The unlocking information of each recording unit is updated in the following two cases.
The first case is when a command for designating a specific channel and selecting a specific file management area (box) is given. In this case, the unlocking information is not updated and is maintained as it is with respect to the recording unit whose identification information has not been updated. In other words, for a box that has already been unlocked somehow, the unlocking information is maintained as it is, and there is no need to perform the unlocking operation again. On the other hand, with respect to the recording section in which the identification information is updated, if another recording section in which the same identification information as the updated identification information is recorded exists, the recording section recorded in the other recording section is opened. Copy the lock information as it is. That is, if some unlock operation has already been performed on the same file management area (box) in another channel, the unlock information is copied as it is, so that the same file management is performed in another channel. Even when accessing the area (box), it is not necessary to perform the unlocking operation again. Then, when such another recording unit does not exist, unlocking information indicating unlocking is written. That is, if there is no record that the unlocking operation was performed in any channel in the past for the selected file management area (box),
The unlocking information indicating unlocking is written, and a predetermined unlocking operation is required for access.

The second case where the unlocking information of each recording section is updated is when a command for designating a specific channel and performing a predetermined key comparison is given. As described above, the recording unit of the lowest layer in the recorded state in each channel setting area always indicates the file management area (selected box) selected for that channel. In other words, the designation of the channel has the same meaning as the designation of the file management area (box) recorded in the recording unit in the lowermost layer. Therefore, when such a key collation command is given, the collation processing is executed for the file management area (box) recorded in the recording unit of the lowest layer of the channel, and if the key collation is matched, the key is The unlocking information indicating that the unlocked state has been entered is written in this recording unit. As described above, by executing the key matching command, the unlocking information in this recording unit is updated. However, in the present invention, the same identification information as the identification information recorded in this recording unit is recorded. If there is another recording unit, the unlocking information updated by the updating process is copied to this another recording unit as it is. That is, when the unlocked state of one file management area (box) for one channel is changed, the unlocked state of the same file management area (box) recorded in another channel is changed. Will have the same changes. In other words, 1
The unlocking operation in one channel is reflected in another channel, and it is not necessary to repeat the unlocking operation for the same file management area (box) every time the access channel changes.

According to the present invention, each file is also accessed by specifying a channel. When such an access command is given, first, the file management area (box) specified by the identification information recorded in the recording section of the lowest layer in the recorded state in the specified channel setting area is accessed. It is checked whether the target file belongs. If the file to be accessed does not belong to the file management area (box) selected by the designated channel, it means that a file access outside the jurisdiction of the channel has been made, so the access is not permitted. If the file to be accessed belongs to the file management area (box) selected in the channel, whether the unlock information for this file management area (box) satisfies the access conditions for the target file Whether or not it is checked, and if it is satisfied, the target file is accessed.

[0021]

[Example] §1. Basic Structure of IC Card Hereinafter, the present invention will be described based on illustrated embodiments. FIG. 1 is a block diagram showing a state in which a reader / writer device 20 as an external device is connected to a general IC card 10 to perform access. The IC card 10 and the reader / writer device 20 are connected to each other by an I / O line 30. Here, the IC card 10 includes an I / O interface 11, a CPU 12, a ROM 13, and a RAM 1.
4, EEPROM15 is built in. The I / O interface 11 is an input / output circuit for transmitting / receiving data via the I / O line 30, and the CPU 12 uses this I / O line.
Through the O interface 11, the reader / writer device 20
Will be contacted. In the ROM 13, the CPU 12
Stores programs to be executed by
The CPU 12 is based on this program, and the IC card 10
Has the function of controlling RAM14 is CPU1
Reference numeral 2 is a memory used as a work area for performing such overall control. On the other hand, the EEPROM 15 is a memory for storing original data to be recorded in the IC card 10.

Power and clock are supplied to the IC card 10 from an external reader / writer device 20.
Therefore, when the IC card 10 is separated from the reader / writer device 20, the supply of power and clock to the IC card 10 is stopped. However, the EEPROM 15
Since it is a non-volatile memory, its recorded content is retained as it is even after the power supply is stopped. Just RAM14
All the data inside will be lost when the power supply is stopped.

The memories 13, 14 in the IC card 10
All access to 15 is performed via the CPU 12, and these memories cannot be directly accessed from the outside. That is, from the reader / writer device 20 to the CPU 1
When a predetermined “command” is given to 2, the CPU 12
Interprets and executes this "command" and returns the result to the reader / writer device 20 as a "response". For example, when writing to a predetermined file in the EEPROM 15, the data to be written is given to the CPU 12 along with the “write command”, and the CP
The writing process is performed in the format of executing the "write command" by U12. On the contrary, when reading data from a predetermined file in the EEPROM 15, a predetermined “read command” is given to the CPU 12, and the CPU 12
The read process is performed in the form of executing the "read command" by. In this way, when the execution of the “command” is completed in the IC card 10, the “response” to the executed “command” is returned to the outside. For example, when a "write command" is given,
If a "response" indicating whether or not the writing process was executed without any problems was returned and a "read command" was given,
The data to be read will be returned in the form of a response.

However, the above-described access to the EEPROM 15 is not performed unconditionally, and it is premised that a predetermined access condition is satisfied. This access condition is set for each file and for each command group. This will be described later.

A file management area having a hierarchical structure is defined in the EEPROM 15. As already mentioned,
This file management area is conceptually equivalent to a box for storing a specific file, and this file management area is generally called “Dedicated File”. Therefore, in the present embodiment, this file management area is indicated by the symbol "DF", and in particular, the uppermost file management area is indicated by the symbol "MF" indicating the meaning of "Master File". FIG. 2 is a conceptual diagram showing a state in which a specific file management area having a hierarchical structure is defined in the EEPROM 15. The file management area MF is defined in the layer 1 corresponding to the top layer, and the file management areas DF1 and DF2 corresponding to the layer 2 are defined therein.
Are defined, and in each of them, file management areas DF1-1, DF1-2, DF2-1, DF corresponding to the layer 3 are defined.
2-2 is defined. Circled D and K shown in each file management area indicate a specific data file and key file, respectively. While each file management area is a “box”, the data file D and the key file K are files having specific information. The data file D is a file containing data to be originally recorded, and the key file K is a file containing a key security code used for security management.

FIG. 3 is a tree diagram showing the file management area shown in FIG. 2 and the hierarchical structure of each file. The blocks enclosed in squares all indicate the file management area (box), and the blocks enclosed in ellipses are individual data files (files prefixed with D) and key files (files prefixed with K). Indicates. For convenience of description, in FIG. 3, numbers such as K11 and D112 are attached to identify individual data files and key files. For example, files K00, K01, D0
0 and D01 are files under the management of the file management area MF of the layer 1, and are files K11, K12, and D1.
Reference numerals 1 and D12 are files under the control of the file management area DF1 of hierarchy 2 and are files K111 and K11.
2, D111 and D112 are files under the control of the file management area DF1-1 of the layer 3.

By thus defining the file management area having a hierarchy, each file can be managed separately for each purpose. In this embodiment, this IC card 10
The case of using as a bank card and hospital card will be described. FIG. 4 is a block diagram showing an example in which a rough use is defined in each file management area. The file management area MF of the layer 1 is an area for centrally managing the entire IC card 10, and the data files D00 and D01 under its management include, for example, the name, address, and telephone of the owner of this IC card 10. Information such as numbers is recorded. On the other hand, the file management area DF1 of the layer 2
Is an area for centrally managing the banking business, and the data files D11, D12 under the management are, for example, customer numbers given to the owner of this IC card 10 by the bank,
Collateral details, credit information, etc. are recorded. The file management area DF2 of the same layer 2 is an area for centrally managing hospital operations, and the data file D2 under the management thereof.
1, D22, for example, the hospital is the IC card 10
The information such as the patient number, blood type, height, weight, and emergency contact information given to the owner is recorded.

File management areas DF1-1 and DF of layer 3
F1-2, DF2-1, and DF2-2 are areas for managing individual jobs by further subdividing the jobs of the hierarchy 2. For example, the file management area DF1-1 is an area for managing domestic deposits in the banking business, and, for example, the account transaction information of ordinary deposits or fixed deposits is recorded in the data files D111 and D112 under its control. To be done. The file management area DF1-2 is an area for managing foreign exchange in the banking business, and the data files D121 and D122 under its management include, for example, transaction information of dollar deposits and foreign remittance information. Is recorded. On the other hand, the file management area DF2-1 is an area for managing medical care data in hospital operations, and the data files D211 and D212 under its management include, for example, test information such as a blood test and an X-ray test, Medication information and the like are recorded. Further, the file management area DF2-2 is
It is an area that manages medical expense data in hospital operations,
In the data files D221 and D222 under the control, for example, information such as the initial examination fee, the examination fee, and the health insurance score are recorded.

§2. Security Setting Method In the hierarchical structure shown in FIG. 3, four files are defined in layer 1, eight files in layer 2, and 16 files in layer 3, respectively. Have independent access conditions.
FIG. 5 is an access condition table showing an example of setting access conditions for one file. In this embodiment, the access condition is set for each command group. That is, the access command for each file is divided into a plurality of groups according to the mode of access. In this embodiment, a command group 0 which is a set of commands for key matching, a command group 1 which is a set of commands for reading information, a command group 2 which is a set of commands for additionally writing information,
Four groups, that is, a command group 3 which is a set of commands for rewriting / erasing information, are defined.
However, since the command group 0 is set to be accessible unconditionally, the access condition is set only for the three command groups 1 to 3.

The access condition shown in FIG. 5 is composed of a table that identifies the key that needs to be unlocked to execute the command of each command group. That is, this access condition table consists of 8-bit information for each command group, and each bit is the key K1.
Each of the eight types of keys up to K8 indicates whether or not unlocking is required. Specifically, the bit "1" indicates that unlocking is necessary, and the bit "0" indicates that unlocking is unnecessary. For example, in the case of executing a command for reading information with respect to a file for which access conditions as shown in FIG. 5 are set, two keys K3 in which bit "1" is set in command group 1 K5 must be unlocked.

The access condition table shown in FIG. 5 is further provided with a ninth bit labeled R.
The ninth bit is a reference bit indicating whether or not there is a reference to unlocking information in the upper layer. That is, when the reference bit R is set to "1", it means that the unlocking information of the upper layer is referred to, and when "0" is set, the unlocking information of the upper layer is not referred to. Means that. The handling of the reference bit R will be described later in detail.

As described above, the access condition table as shown in FIG. 5 is used for all files (data files and key files) indicated by ellipses in FIG.
Each of these files is set, and each of these files is written in the EEPROM 15 together with the access condition table. More specifically, each file is provided with a corresponding directory area, and in this directory area, the start address and file length of each file are recorded and the access condition table is also recorded. .

On the other hand, unlocking information is recorded in the RAM 14. This unlocking information indicates whether or not each key in the access condition table shown in FIG. 5 has been unlocked. For example, an 8-bit area as shown in FIG. 6 (a) is secured in the RAM 14. To be done. This 8-bit area is
Each of the keys K1 to K8 shows the unlocked state, where the bit "1" indicates unlocked and the bit "0" indicates unlocked. As described above, when the IC card 10 is connected to the reader / writer device 20, power and clock are supplied and the RAM 1
The recorded contents of 4 are reset. 8 shown in FIG. 6 (a)
The bit unlock information is "000" at this reset.
00000 ”, that is, all of the keys K1 to K8 are unlocked. For example, when the key verification command “VERIFY K3 ??????” is given from the reader / writer device 20 to the IC card 10 (a concrete key code is provided in the portion of ??????), the CPU 12
Reads out the key PIN code corresponding to the key K3 from a predetermined key file, compares it with the key PIN code "??????" given from the outside, and if both match, the result shown in FIG. As shown in b), the bit "1" is written in the third bit K3 of the unlocking information in the RAM 14 to indicate that the key K3 is unlocked. Then, if a key collation command “VERIFY K5 ???????” is given to perform collation, as shown in FIG. 6C, the fifth bit K5 of the unlock information in the RAM 14 also has the bit “1”. Written. In this way, when the two keys K3 and K5 are unlocked, the command belonging to the command group 1 can be executed with respect to the file for which the access condition as shown in FIG. 5 is set.

The basic principle of the accessibility determination based on the unlocking information in the RAM 14 has been described above. One of the features of the present invention is to record the unlocking information in the RAM 14 for each channel and for each layer. In point. That is, according to the present invention, the unlocking information in the RAM 14 is not recorded in the simple structure as shown in FIG. 6, but the channel setting area having the structure as shown in FIG. 7 is set in the RAM 14. , Will be recorded in this channel setting area. In the example shown in FIG. 7, three channel setting areas (channel #
1, # 2, # 3) are defined, and each channel setting area is divided into three recording sections having a hierarchical relationship with each other. That is, each of the three channel setting areas is divided into three recording sections of layers 1 to 3, and a total of 9 recording sections are formed. Here, in each recording unit,
An area for recording identification information indicating a specific file management area (upper row), an area for recording unlocking information for this specific file management area (lower row divided into 8 sections),
Is provided. In the lower recording area, unlock information consisting of 8 bits as shown in FIG. 6 is recorded, and the unlock information is compared with the access condition table shown in FIG. Will be done.

§3. Example showing specific usage mode Next , a specific usage mode of the above-mentioned IC card will be described while following the transition of the recorded contents of the channel setting area shown in FIG. In this embodiment, at the time of reset immediately after connecting the IC card 10 to the reader / writer device 20, RA
The recorded contents of the channel setting area in M14 are in the initial state as shown in FIG. That is, in the upper part of each recording unit,
"FFFF" indicating that the identification information is not recorded 2
Byte data is written, and in the lower part of each recording section, "000000" indicating that all 8 keys are unlocked
1-bit data "00" is written. In the following description, for convenience, the nine recording units will be referred to as a recording unit (1,1), a recording unit (1,2), ..., A recording unit (3,3) as shown in FIG. I will decide.

<3-1: Selection of file management area 1
In the present invention, as a preparatory step for accessing each file, it is necessary to specify a specific channel and select a specific file management area. In order to perform this operation, the reader / writer device 20 may give a selection command having a predetermined format to the IC card 10. Here, for example, as shown in FIG.
In the format "SELECT # 1 DF1",
Consider the case where a select command is given. This selection command is a command for specifying a specific channel # 1 and selecting a specific file management area DF1. When such a command is given, the CPU 12 sends the identification information of the selected file management area DF1 and the file management area MF of the upper hierarchy to the respective layers in the designated channel setting area (channel # 1). A process of writing unlocked information indicating that all the keys are unlocked in the lower stage of each recording unit is performed by writing in the upper stage of the recording unit corresponding to. FIG. 9 shows the state of the channel setting area immediately after such processing is performed. Actually, the 2-byte identification information indicating the specific file management area is written in the upper part of each recording unit, but in the figure, for convenience of description, each file management area name (MF, DF1) is directly written. The state is shown. Further, in order to avoid complication of the drawing, the unrecorded recording portion which is not directly related to the description is shown as a blank column. However, in reality, these blank columns are shown as shown in FIG. "FFFF (upper)"
Alternatively, data “00000000 (lower row)” is written.

After all, among the recording units constituting each channel setting area, the recording unit whose upper part is “FFFF” shows an unrecorded recording part, and the recording parts whose upper part is other than “FFFF” are in the recorded state. The recording part of is shown. Then, in each channel setting area, the file management area in which the identification information is recorded in the recording section of the lowest layer in the recorded state becomes the file management area currently selected for the channel. In the case of the example shown in FIG. 9, in the recording area (2, 1) of the lowest layer in the recorded state in the area of channel # 1,
Since the identification information indicating the file management area DF1 is written, the file management area currently selected for channel # 1 is DF1. At this time, in the recording unit (1, 1) in the upper layer of channel # 1,
The identification information of the file management area MF is written, but this is the currently selected file management area DF.
This serves to indicate that the parent of the first hierarchical structure is the MF, and enables setting to refer to the unlocked information of the upper layer, as will be described later.

According to the present invention, when a command for designating a specific channel and selecting a specific file management area is given in this manner, identification information of the selected file management area and the file management areas of higher layers than the selected file management area. But,
The recording section is written in the recording section corresponding to each layer in the designated channel setting area, and the recording section corresponding to the lower layer of the selected file management area is set to the unrecorded state.
Therefore, for example, "SELECT" shown in FIG.
# 1 DF1 "instead of the selection command shown in FIG.
The selection command “SELECT # 1 DF1-2” shown in FIG.
When is selected, the recorded contents of channel # 1 are as shown in FIG.
It will be something like shown below. In FIG. 10, since the identification information indicating the file management area DF1-2 is written in the recording unit (3, 1) in the lowest layer in the recorded state,
The file management area currently selected for channel # 1 is DF1-2.

<3-2: Key Collation No. 1> Subsequently, the update processing of the channel setting area when the key collation is performed will be described. In the present invention, the key matching is performed by designating a specific channel and giving a command for performing a predetermined key matching. For example, as shown in FIG. 9, let us consider a case where the file management area DF1 is selected as the channel # 1 and the key collation is performed on the selected file management area DF1. Here, it is assumed that the keys K3 and K5 are collated. In this case, first, as shown in FIG.
RIFY # 1 K3? ? ? ? The verification command "" is given. Here, “??????” is a specific key personal identification code, and the CPU 12 reads the personal identification code of the key K3 from a predetermined key file in the file management area DF1 selected as the channel # 1, This is compared and collated with the key secret code "??????" given from the outside. If they match, a process of writing the bit "1" indicating the unlocked state to the third bit of the lower stage of the recording unit (2, 1) in FIG. 11 is performed. Subsequently, when a verification command "VERIFY # 1K5 ???????" as shown in FIG. 11 is given, the key K5 is verified, and if they match, a process of writing the bit "1" in the fifth bit is executed. To do. The bit state of the recording unit (2,1) shown in FIG.
The state immediately after such processing is performed is shown.

After all, in the present invention, when a command for designating a specific channel and performing a predetermined key collation is given, the recording unit (the lowest recording layer in the recorded state in the designated channel setting area ( In the case of the above example, the recording unit (2
The unlocking information recorded in 1)) is updated based on the result of the key collation.

<3-3: File Access> The file access in the present invention is performed by designating a specific channel and giving a command to access a predetermined target file. For example, in the case where the usage as shown in FIG. 4 is defined, a process of reading the data (for example, customer number) used for all banking operations from the data file D11 under the control of the file management area DF1 is performed. let's think. Here, more specifically, the eighth record in the data file D11 will be read. In the present invention, even when accessing a specific file in this manner, it is necessary to specify a specific channel without fail. Moreover, the specified channel must be the channel that is currently selecting the file management area for managing the file to be accessed. In other words, before giving a command to access a specific file, it is necessary to select a file management area for managing the file to be accessed using a specific channel.

In the case of the above embodiment, "SE" shown in FIG.
The file management area DF1 is selected using the channel # 1 by the selection command "LECT # 1 DF1".
Further, by the verification command shown in FIG. 11, the key K
Data file D1
The eighth record in 1 can be read. Specifically, “READ # 1 D11 R shown in FIG.
The access command "EC8" may be given. CPU
Upon receiving such a file access command, the 12 first records in the recording section (recording section (2, 1) in this case) in the lowest recorded state in the designated channel setting area. The file management area specified by the identification information (in this example, the file management area DF
It is determined whether or not the access target file (in this example, the data file D11) belongs to 1). If it does not belong, an error response indicating that the access target file cannot be found is transmitted to the reader / writer device 20. In the case of the above example, the access target file D11 is found as a file belonging to the file management area DF1, so no error occurs.

When the file to be accessed is found,
Then, it is determined whether or not the access condition is satisfied. That is, the CPU 12 causes the unlocking information (in this example, the unlocking information) recorded in the recording section (recording section (2,1) in this example) in the lowest layer in the recorded state in the designated channel setting area. , "00101000") and access conditions set for the file to be accessed (for example, an access condition table as shown in FIG. 5).
And are compared to determine whether or not the access condition is satisfied. In the case of this example, since the command “READ” is a read command belonging to the command group 1, according to the access condition table of FIG.
If the keys K3 and K5 are unlocked, they can be accessed. The unlocking information of the recording unit (2, 1) shown in FIG. 11 satisfies this condition. Therefore, access to the data file D11 is permitted, and the contents of the eighth record are read out to the reader / writer device 20 side.

<3-4: Selection of file management area 2
In the state shown in FIG. 11, since the file management area DF1 is selected using the channel # 1, the access command specifying the channel # 1 accesses only the files under the management of the file management area DF1. It is not possible. For example, suppose here that it is necessary to access the data file D121 under the control of the file management area DF1-2 in order to perform the processing relating to foreign exchange. In this case, it is necessary to newly select the file management areas DF1-2. Therefore, in FIG.
Select command "SELECT # 1"
DF1-2 "is given. Then, the state of the channel setting area becomes as shown in FIG. 12 and 11
12 is that the recording unit (3, 1) is newly in the recorded state in FIG. The point to be noted here is that the unlocked state of the recording unit (2, 1) in FIG. 11 is maintained as it is in FIG. 12.

This point becomes clearer by comparing FIG. 12 and FIG. FIG. 10 shows a state in which a selection command “SELECT # 1 DF1-2” is given in the initial state shown in FIG. 8, whereas FIG.
"SELECT # 1 DF1
The same selection command "-2" is given. In other words, the state shown in FIG. 10 is a state obtained when a path on the hierarchy from the initial state where nothing exists to the file management area DF1-2 is defined, whereas the state shown in FIG. The status is, as shown in FIG. 11, a file management area D
It can be said that this is the state obtained when the path on the hierarchy up to F1 is further extended to the file management area DF1-2 of hierarchy 3. When the path is extended in this way, the unlocked state of the extended portion indicates "00"
Although "000000" is set, the unlocked state of the original portion is maintained as it is.

In short, when a selection command for selecting a file management area using a predetermined channel is executed,
For the recording unit (in the example of FIG. 12, the recording unit (1,1) and the recording unit (2,1)) in which the identification information is not updated, the unlock information is maintained as it is, and the identification information is updated. For the copy (in the case of the example in FIG. 12, the recording unit (3, 1)), the process of writing the unlocked information “00000000” indicating the unlocked state is executed.

<3-5: Reference to unlocking information of upper layer> In the state shown in FIG. 12, since the file management area DF1-2 is selected using the channel # 1, this file management area DF1 is selected. -2, the key collation process is performed, and if the necessary unlocking operation is performed, file management area DF1
-2, the access to the data file D121 under the control is permitted. For example, assume that unlocking of the three keys K3, K5, K6 is requested as an access condition for reading data from the data file D121. In this case, "VERIFY" in FIG.
# 1 K3? ? ? ? , "VERIFY in FIG.
# 1 K5? ? ? ? , "VERIFY in FIG.
# 1 K6? ? ? ? When the unlocking operation is performed by giving a key collating command such as "", the channel setting area becomes as shown in FIG. 13, and three keys K are displayed in the recording section (3, 1).
It is recorded that 3, K5 and K6 are unlocked.
Therefore, in addition, in FIG. 13, “READ # 1D121
If the access command "REC5" is given, the access condition is satisfied, so the fifth record of the data file D121 is read to the reader / writer device 20 side.

However, in FIG. 11, since the verification of the keys K3 and K5 has already been completed, FIG.
The collation processing of the keys K3 and K5 in, is a redundant processing operation. In practice, it is not uncommon for the same key collation to be set as an access condition between layers. For example, as shown in FIG. 4, in the file management area DF1 that manages all banking operations, the collation between the bank customer authentication key K3 and the bank branch authentication key K5 is set as an access condition, and the file management area in the lower hierarchy thereof. DF
In 1-2, in addition to these key collation, the collation of the foreign exchange handling authority key K6 is set as an additional access condition, which is a frequently used practical form. In such a case, if the collation of the keys K3 and K5 has already been completed at the time of accessing the file management area DF1, then the file management area DF is followed.
When accessing 1-2, it is sufficient to verify the key K6. The reference bit R shown in the access condition table of FIG. 5 is provided in consideration of such convenience.

For example, when the reference bit R of the access condition table for executing the read command for the data file D121 is set to the bit "1" (reference), instead of FIG. , FIG. 14
, The fifth record of the data file D121 is read to the reader / writer device 20 side. In this case, the key collation in the state where the file management area DF1-2 is selected is performed only for the key K6, and the unlock information of the recording unit (3, 1) is the bit of the key K6 as shown in FIG. Only becomes "1" (unlocked state). However, since the unlock information of the upper layer (in this example, the unlock information of the recording unit (2, 1)) is referred to, the unlock information of the file management area DF1-2 is the file management of the upper layer. Unlock information “00101000” of area DF1 and own unlock information “000001”
Fusion unlocking information "0010110"
0 "(in the case of this embodiment, the fusion unlocking information is obtained by taking the logical sum of each bit of the individual unlocking information)
Therefore, it is judged that the access condition is satisfied.

As described above, if the setting is made so that the unlocking information of the upper hierarchy can be referred to, redundant collation processing can be omitted, and sufficient security can be ensured and convenient access is possible. Become. Of course, for files that require a high level of security, the reference bit R may be set to "0" so that reference is not made.

<3-6: Selection of file management area 3
> Now, let us consider a case where it is necessary to re-access the general banking data file D11 after the access to the foreign exchange data file D121 is completed. In this case, the file management area DF1 that manages the data file D11 must be selected again. To do so, as shown in FIG. 15, "SELECT # 1
The selection command "DF1" may be executed. As a result, the channel setting area is updated to the state shown in FIG. As can be seen by comparing FIG. 14 and FIG.
In 5, the recording unit (3, 1) is returned to the initial state (unrecorded state). If the layer 3 is unrecorded in this way, the recording unit (2, 1) of the lowest layer in the recorded state is
Since the identification information of the file management area DF1 has been written, the channel # 1 is currently in the file management area DF.
It returns to the state where 1 is selected.

In this way, when a specific file management area is selected, the recording section corresponding to the lower hierarchy of the selected file management area is in an unrecorded state, and the unlocking information is "00000000" indicating unlocking. It should be noted that In this way, when the file management area in the lower layer is selected and the file management area in the upper layer is selected, the unlock information of the lower layer is set to the initial state (unlocked state). Returning is important for ensuring security. In general, when a file management area having a hierarchical structure is constructed, higher security is required as it goes down. Therefore, when returning to the upper layer, the unlocking information for the lower layer is returned to the initial state, and when the lower layer is accessed again, the unlocking operation is required again. However, it is preferable from the viewpoint of ensuring security.

<3-7: Selection of file management area 4
> As described above, when the selected file management area is returned to the upper layer, the unlocked information of the lower layer is returned to the unlocked state. That is, due to the transition from FIG. 14 to FIG. 15, the information in the recording section (3, 1) is lost. Although such processing is preferable for ensuring security, it is an obstacle to performing convenient access. For example, when it becomes necessary to alternately access the data files D11 and D121, the file management areas DF1 and D
It is necessary to alternately select F2-1 and F2-1. However, when the file management area DF1 in the upper hierarchy is selected, FIG.
As shown in, the lower layer file management area DF1-2
Since the unlocking information of is lost, the same matching operation must be repeated many times. In order to avoid such an adverse effect, selection using another channel may be performed.

For example, in the state shown in FIG. 14, instead of giving the selection command "SELECT # 1 DF1" in FIG. 15, "SELECT # in FIG.
The selection command "2DF1" is given. Then, as shown in FIG. 16, it becomes possible to select the file management area DF1 using the channel # 2 while the file management area DF1-2 is selected using the channel # 1. The identification information of the selected file management area DF1 and the upper layer file management area MF is written in each recording unit of the channel # 2.

The point to be noted here is that in FIG.
The unlocking information in the recording unit (1,1) is copied to the recording unit (1,2), and the unlocking information in the recording unit (2,1) is recorded in the recording unit (2,1).
This is the point copied to 2). The intent of this copying process is that the collation process already completed in one channel does not require the collation process in another channel. In the example shown in FIG. 16, channel #
1, the collation processing of the keys K3 and K5 of the file management area DF1 has already been completed, but since the unlocking information in the recording unit (2,1) is copied to the recording unit (2,2), channel # 1, the key K3 of the file management area DF1
The collation process of K5 is already completed. Therefore, when the file D11 under the control of the file management area DF1 is accessed using the channel # 2, the key K3,
It is not necessary to perform the K5 collation process again, and FIG.
By giving an access command such as “READ # 2 D11 REC25” shown in FIG.
The 25th record in 1 can be read.

As described above, when a command for selecting a specific file management area is executed, each recording section (in this example, recording section (1, 2) which constitutes the channel setting area is executed.
And the identification information of the recording unit (2, 2) is updated, and the updated identification information (in this example, M
F and DF1), if other recording units (in this example, recording unit (1,1) and recording unit (2,1)) in which the same identification information is recorded are present, One of the features of the present invention is that the unlocking information recorded in the recording unit is directly copied.

<3-8: Selection of file management area 5
> Subsequently, in the state shown in FIG. 16, since it becomes necessary to access the data file D222 relating to the medical expense data this time, “SELECT #” shown in FIG.
Consider the case where a selection command "1 DF2-2" is given. In this case, channel # 1 will be updated as shown in FIG. Since the MF of the uppermost layer remains unchanged, the recorded contents of the recording unit (1,1) are maintained as they are, including the unlocking information, but the identification information of the layers 2 and 3 is DF2, D.
It is updated to F2-2, and the respective unlocked information is in a state indicating unlocked. Thus, for channel # 1, the contents of the recording unit (2,1) are updated from DF1 to DF2, but since the information of DF1 is copied to the recording unit (2,2), Even if channel # 1 is updated,
The unlocking information of DF1 remains as it is for channel # 2. However, the unlocking information of DF1-2 recorded in the recording unit (3, 1) in FIG. 16 is lost.

When it is desired to keep the unlock information of DF1-2 as it is, "SELECT # 1 D" shown in FIG.
Instead of the selection command "F2-2", the selection command "SELECT # 3 DF2-2" shown in FIG. 18 may be given. Then, as shown in FIG. 18, the channel # 1 is used to select the file management area DF1-2, the channel # 2 is used to select the file management area DF1, and the channel # 3 is newly used. It becomes possible to select the file management area DF2-2.
The identification information of the selected file management area DF2-2 and the upper layer file management areas MF and DF2 is written in each recording unit of the channel # 3. In this case as well, the unlocking information in the recording unit (1, 2) is still recorded in the recording unit (1,
3) is copied. In short, this copying process can be said to be a process for making the unlocking information of the recording units having the same identification information always the same. In the example of FIG. 18, since the recording units (1,1), (1,2), (1,3) are recording units having the same identification information “MF”, the unlocking information is “ Since the recording units (2,1) and (2,2) have the same identification information "DF1", the unlocking information is the same as "00101000". ing. The copy process is a process for maintaining such identity.

Next, in order to access the data file D222 relating to the medical expense data, the collation command "VERIFY # 3 K7 ??????" shown in FIG. 19 and the "VERIFY # 3 shown in FIG.
K8? ? ? ? Consider a case where the keys K7 and K8 of the file management area DF2-2 are unlocked by giving a collation command ". In this case, as shown in FIG.
It is written in the recording section (3, 3) that the keys K7, K8 are in the unlocked state. Therefore, "R
If a read command "EAD # 3 D222 REC4" is given, the fourth record (for example, unpaid medical expenses) of the data file D222 is read by the reader / writer device 20.
Will be read to the side.

Now, let's perform the process of rewriting the file D111 showing the domestic deposit data for the unpaid medical expenses. In this case, for example, in FIG.
The channel # 1 may be updated by giving a selection command "SELECT # 1 DF1-1" shown in 0. As shown in FIG. 20, the identification information of the recording unit (3, 1) is D
It is updated from F1-2 to DF1-1, and the unlocked information is in the unlocked state. Therefore, "VERIF" shown in FIG.
Y # 1 K6? ? ? ? 21 and the “VERIFY # 1 K7 ?????” shown in FIG.
21 by unlocking the keys K6 and K7 in the file management area DF1-1, and the command "WRITE # 1 D111 REC8 (DAT)" shown in FIG.
A) ”write command, data file D
The 8th record of 111 indicates the unpaid medical expenses (DA
TA) will be written.

Next, since it is necessary to select the file management area DF1-2 in order to perform the foreign exchange processing,
It is assumed that the channel # 3 is updated by giving a selection command "SELECT # 3 DF1-2" shown in FIG. Then, as shown in FIG. 22, the identification information of the recording unit (1, 3) remains MF, but the identification information of the recording unit (2, 3) is updated to DF1, and the recording unit (3, 3). The identification information of is updated to DF1-2. The unlocked information of the recording unit updated in this way is in an unlocked state in principle, but in order to maintain the same identity as described above, if the recording unit with the same identification information is in another channel, it will be unlocked. Copy the lock information. In the example of FIG. 22, unlocking information of the recording unit (2, 2) or (2, 1) having the same identification information of DF1 is copied to the recording unit (2, 3).

<3-9: Key collation No. 2> Next, as shown in FIG. 23, "VERIFY # 2 K8 ??
? ? The file management area DF
It is assumed that the process of collating the key K8 for 1 is performed.
If the key K8 is collated and matched, the unlocking information of the recording unit (2, 2) is changed from "00101000" to "00101".
The status is updated to "001" and "WRITE # 2 D11 REC7 (DAT
By giving the write command "A)", (DATA) is written in the seventh record of the data file D11. By the way, in order to maintain the above-mentioned identity, it is necessary to perform the copying process even when such unlocking information is updated. That is, as shown in FIG. 23, when the unlocking information of the recording unit (2, 2) is updated, the recording unit (2, 1) having the same identification information as DF1.
Then, the updated unlocking information of the recording unit (2, 2) is copied to (2, 3).

As described above, the copying process needs to be performed not only when the channel is updated by the selection command but also when the unlocking information is updated by the collation command. In short, when the unlocking information of a specific recording unit is updated, the copying process may be executed so that the recording unit having the same identification information is also updated.

§4. Processing Performed by CPU 12 In §3 described above, the usage pattern of the IC card according to the present invention is described while following the transition of the recorded contents of the channel setting area.
The description has been made in accordance with a specific example. In order to realize such a usage pattern, it is eventually understood that the CPU 12 should perform the following processing for each command.

<4-1: Selection Command> A command for designating a specific channel and selecting a specific file management area (for example, FIG. 22 "SELECT # 3 DF1-"
2 ") is given, the identification information of the selected file management area and the file management area in the upper hierarchy is written and recorded in the recording section corresponding to each hierarchy in the designated channel setting area. In this state, the writing process is performed such that the recording unit corresponding to the lower layer of the selected file management area is set to the unrecorded state (for example, FIG.
reference). Then, by this writing process, the unlocking information is maintained as it is for the recording unit (the recording unit (1, 3) in FIG. 22) whose identification information has not been updated, and for the recording unit whose identification information has been updated, If there is another recording section (recording section (2, 2) in FIG. 22) in which the same identification information (DF1 in FIG. 22) as this updated identification information is recorded, this other recording section The unlocking information recorded in the table is copied as it is, and when there is no such other recording unit, the unlocking information indicating the unlocking is written (FIG. 2).
2 recording units (3, 3)).

<4-2: Collation command> A command for performing a predetermined key collation by designating a specific channel (for example,
23, "VERIFY # 2 K8 ?????") is given, the recording unit of the lowest layer in the recorded state in the designated channel setting area (for example, recording unit (2, 2) in FIG. 23). The unlocking information recorded in) is updated based on the result of the key collation, and the same identification information (DF1) as the identification information recorded in the recording unit in the lowest layer is recorded. If another recording unit (for example, recording units (2, 1) and (2, 3) in FIG. 23) exists, the unlocking information updated by the updating process is copied to the other recording unit as it is. Perform processing to

<4-3: Access command> A command for designating a specific channel and accessing a predetermined target file (for example, "READ # 1 D11" in FIG. 11).
REC8 ") is given, it is specified by the identification information recorded in the recording section of the lowest layer in the recorded state (for example, recording section (2,1) in FIG. 11) in the designated channel setting area. The file to be accessed (D11) belongs to the file management area (DF1) to be stored, and the unlock information (“00101
000 ”) satisfies the access condition of the access target file (for example, the condition of the command group 1 in FIG. 5), the access target file is accessible.

§5. Other Examples Although the present invention has been described based on the illustrated examples, the present invention is not limited to these examples and can be implemented in various modes other than this. For example, in the above-described embodiment, it has been described that the unlocking information of the upper hierarchy can be referred to by setting the reference bit R of the access condition table shown in FIG. 5 to “1”. This reference bit R
In the above embodiment, each file is set individually, but one reference bit R may be set for each file management area. In this case, reference may be made over multiple layers. For example, in FIG. 3, “reference” is set for the file management area DF1-1, and further, the file management area DF1 is set.
As for “reference”, the file management areas DF1-1 and DF can be used to access the data file D111 of the layer 3, for example.
The access condition is determined based on the fusion unlock information obtained by ORing each bit of the three unlock information of 1 and MF.

In the above-described embodiment, the unlocking information of the upper layer is set to "reference" or "not reference" according to the bit state of the reference bit R. Can always be set to “reference”. For example, the file management area MF of the highest hierarchy is an area for centrally managing the entire recording area of this IC card, and the IC card 10 is connected to the reader / writer device 20.
After connecting to, a basic key matching operation such as a cardholder key is generally performed on the file management area MF as the first matching operation. Therefore,
Practically, it is convenient to make a setting that the unlock information of the file management area MF of the highest hierarchy is always referred to for each file management area of the second hierarchy and below. Such setting does not need to be performed by using the reference bit R, and the program in the ROM 13 may include a routine that always refers to the unlock information of the file management area MF.

In the above embodiment, for convenience of explanation,
A recording unit having a 3 × 3 array as shown in FIG.
Although the example defined in 14 has been described, in reality, since the file management area MF always occupies the highest hierarchy,
For the highest layer, it is sufficient to prepare only a single recording unit representing a plurality of channels. That is, FIG.
As shown in FIG. 4, as the layer 1, the file management area M
It suffices to provide only one recording section dedicated to F, and it is sufficient to provide only the area for recording the unlocking information in this recording section. With such a configuration, the file management area MF
With regard to the unlocked information in the inside, copying processing between channels is also unnecessary.

[0071]

As described above, according to the present invention, a portable information recording medium is easy to use while ensuring sufficient security for a file having a hierarchical structure in which different security settings are made for different purposes. It becomes accessible.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a state in which a reader / writer device 20 as an external device is connected to a general IC card 10 to perform access.

FIG. 2 is a conceptual diagram showing a state in which a specific file management area having a hierarchical structure is defined in the EEPROM 15.

FIG. 3 is a tree diagram showing the file management area shown in FIG. 2 and a hierarchical structure of each file. Blocks surrounded by squares indicate the file management area, and blocks surrounded by ellipses indicate individual data files (files prefixed with D) and key files (files prefixed with K).

FIG. 4 is a block diagram showing an example in which a rough use is defined in each file management area.

5 is an access condition table showing an example of setting access conditions for each file in the EEPROM 15. FIG.

FIG. 6 is a diagram showing an 8-bit area indicating an unlocked state of keys K1 to K8 secured in RAM.

FIG. 7 is a diagram showing an example of a channel setting area used in the present invention.

8 is a diagram showing recorded contents in an initial state of the channel setting area shown in FIG.

9 is a diagram showing a state in which a command for selecting a file management area DF1 is executed using channel # 1 in the initial state shown in FIG.

FIG. 10 is a diagram showing the channel # 1 in the initial state shown in FIG.
It is a figure which shows the state which performed the command which selects the file management area DF1-2 using.

11 is a diagram showing a state in which a key collation command for the file management area DF1 is executed in the state shown in FIG.

12 is a diagram showing a state in which a command for selecting a file management area DF1-2 is executed using channel # 1 in the state shown in FIG.

13 is a diagram showing a state in which a key collation command for the file management area DF1-2 is executed in the state shown in FIG.

FIG. 14 is a diagram illustrating a process of referring to an unlocked state of an upper layer.

FIG. 15 is a diagram showing a state in which a command for reselecting the file management area DF1 is executed using channel # 1 in the state shown in FIG.

16 is a diagram showing a state in which a command for reselecting the file management area DF1 has been executed using channel # 2 in the state shown in FIG. 14;

FIG. 17 is a diagram showing a state in which a command for selecting the file management area DF2-2 is executed using channel # 1 in the state shown in FIG. 16;

18 is a diagram showing a state in which a command for selecting the file management area DF2-2 is executed using channel # 3 in the state shown in FIG. 16;

19 is a diagram showing a state in which a key collation command for the file management area DF2-2 is executed in the state shown in FIG.

20 is a diagram showing a state in which a command for selecting the file management area DF1-1 is executed using channel # 1 in the state shown in FIG.

FIG. 21 is a diagram showing a state in which a key collation command for the file management area DF1-1 is executed in the state shown in FIG. 20.

22 is a diagram showing a state in which a command for selecting the file management area DF1-2 is executed using channel # 3 in the state shown in FIG. 21.

23 is a diagram showing a state in which a key collation command for the file management area DF1 is executed in the state shown in FIG.

FIG. 24 is a diagram showing an example of a channel setting area in which only a single recording unit representing a plurality of channels is prepared for the highest layer.

[Explanation of symbols]

 10 ... IC card 11 ... I / O interface 12 ... CPU 13 ... ROM 14 ... RAM 15 ... EEPROM D ... Data file DF ... File management area K ... Key files K1 to K8 ... Key MF ... Top level file management area R … Reference bits

Claims (5)

[Claims] 1. A file for executing a command given from the outside, a first memory and a second memory accessed by the CPU, wherein the first memory has a file having a hierarchical structure. A management area is defined and a predetermined file is recorded in each file management area together with a predetermined access condition, and unlocking information related to the access condition is recorded in the second memory. In the portable information recording medium, it is determined whether or not each file in the first memory can be accessed by comparing the access condition for each file with that in the second memory. A channel setting area is provided, and each channel setting area is divided into a plurality of recording sections that have a hierarchical relationship with each other, and each recording section has a specific file. It is possible to record the identification information indicating the management area and the unlocking information for this specific file management area. When a command to specify a specific channel and select a specific file management area is given, select The identification information of the specified file management area and the file management area in the upper hierarchy is written in the recording section corresponding to each hierarchy in the specified channel setting area to be recorded, and the selected file management area The recording unit corresponding to the lower layer performs a writing process to make it unrecorded state, and by this writing process, the unlocking information is maintained as it is for the recording unit whose identification information is not updated, and the identification information is updated. Regarding the recording section, if another recording section in which the same identification information as the updated identification information is recorded exists, the other recording section is recorded. The recorded unlocked information is copied as it is, and if there is no such other recording part, the unlocked information indicating the unlocked is written, and a specific channel is designated to perform a predetermined key matching. When the command to perform is given, the update processing for updating the unlocking information recorded in the recording section of the lowest layer in the recorded state in the designated channel setting area based on the result of the key collation, When there is another recording unit in which the same identification information as the identification information recorded in the recording unit of the lowermost layer is recorded, the unlocking information updated by the updating process is recorded in the other recording unit. When the command to access the specified target file by designating a specific channel is given, the lowest layer recording section in the recorded state in the designated channel setting area is executed. When the target file belongs to the file management area specified by the recorded identification information, and the unlocking information recorded in the recording unit in the lowest layer satisfies the access condition of the target file. In addition, a portable information recording medium, which enables access to the target file. 2. The portable information recording medium according to claim 1, wherein for each file management area, it is possible to set whether or not to refer to the unlock information of the file management area in the upper layer, and to make the reference. If the combination unlocking information obtained by fusing the unlocking information of the upper-layer file management area and the unlocking information of its own satisfies the access condition of the target file, A portable information recording medium characterized by being accessible. 3. The portable information recording medium according to claim 2, wherein for each file management area in the second hierarchy and below, a setting is made so that the unlock information of the file management area in the highest hierarchy is always referred to. A portable information recording medium characterized in that. 4. The portable information recording medium according to claim 1, wherein an access command for a file is divided into a plurality of groups according to an access mode, and an access condition for each file is set. The portable information record is characterized in that it is set for each group, and when an access command is given, the access condition set for the group to which this access command belongs is compared with the unlock information. Medium. 5. The portable information recording medium according to any one of claims 1 to 4, wherein only a single recording section representing a plurality of channels is provided for the uppermost layer. Portable information recording medium.