JPH09147067A - Information recording and reproducing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure high security by recording real information on one of both recording media and deciding the recording and reproducing of the real information on the recording medium based on the recording information on another recording medium. SOLUTION: A 1st card 17 serves as a user card owned by a user and has an optical data recording part divided by plural partitions to record the different types of data. A 2nd card 18 serves as an application card which specifies an application and records an application name, a partition name and a data format. When both cards 17 and 18 are set at the R/W parts 15 and 16 of an R/W device 12 respectively, a host computer 11 fetches the application name and the partition name of the card 18 and then retrieves plural partitions of the card 17. Then, the corresponding partition, if present, is selected, and the data included in the selected partition are read and written.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for recording / reproducing information on / from an information recording medium such as an optical card.

[0002]

2. Description of the Related Art Optical discs and optical cards for optically recording and reproducing information have been widely known as information recording media. Among them, the optical card is made to have the same size as a plastic card such as a credit card that has already been widely used, and has a recording capacity of 3 megabytes or more per card, and is therefore regarded as a portable information recording medium. Has been done.

In such an optical card, information is optically recorded as a pit train on tracks parallel to the longitudinal direction of the card in the recording area, and these tracks are further divided into sectors and recorded in track or sector units. , Playback is performed. Further, on the medium, the data recording position is obtained from the name and recording position of the data body recorded in the directory portion, and the data body is read out.

By the way, the optical card is capable of recording a large amount of data and is convenient to carry. Therefore, the optical card is used for recording personal information such as medical information. In such an optical card, when a plurality of types of data are stored, the recording area of the card is divided into a plurality of areas, and different types of data are stored in the respective areas. In this case, the data in these different areas are managed by different applications, and these applications refer to the management information to select the area to be used on the card and record / reproduce the data in that area. . In the case of medical information, data with different access levels may be mixed, such as data that can be accessed only by the person himself, data that can be accessed only by a doctor, and data that can be accessed by anyone for emergencies. The application side manages each access level, selects the access level on the card, and records and reproduces the data of the corresponding level.

[0005]

However, if access control of all the information recorded on the optical card is performed at the application level, once the application program is decrypted, the confidentiality of the card is completely protected. Therefore, there is a possibility that data that should be known only to the doctor, especially in medical information, may be inadvertently leaked to others.

By the way, recently, a so-called I, in which an IC chip including an integrated circuit including a CPU, a memory, etc., having an encryption function and a file management function is added to an optical card,
The C optical card is drawing attention.

With such an IC optical card, it is possible to record and reproduce by combining the large-capacity optical recording of the optical card with the high confidentiality of the IC chip.
As disclosed in Japanese Patent Publication No. 49098-, the data encrypted by the IC chip is recorded in the optical recording unit, and the password is recorded in the IC chip unit.
The CPU inside the chip manages the file with high confidentiality so that the password once recorded cannot be read out again, so that it is meaningful to read the data recorded in the optical recording unit as it is without the password. By keeping it as data, it enables highly confidential recording. The present invention has been made in view of the above circumstances, and an object thereof is to provide an information recording / reproducing method capable of ensuring a high security function.

[0008]

The invention according to claim 1 is
At least two information recording media are used, one information recording medium records actual information, and the other information recording medium records information for permitting recording and reproduction of the actual information of the one information recording medium. The recording / reproducing of the actual information on the one information recording medium is determined based on the recording information on the other information recording medium.

According to a second aspect of the present invention, at least two information recording media are used, one information recording medium is divided into a plurality of areas for recording actual information, and the other information recording medium is the one information recording medium. Information for permitting recording / reproduction of actual information in each area unit of the medium is recorded, and recording / reproduction of actual information in the one information recording medium is determined in each area unit based on the recording information of the other information recording medium. I am trying to do it.

According to a third aspect of the present invention, at least two information recording media are used, one information recording medium records actual information having a plurality of access levels, and the other information recording medium records the one information recording medium. Record information that gives permission to record and reproduce actual information at each access level of the medium,
The recording / reproducing of the actual information on the one information recording medium is determined at each access level based on the recording information on the other information recording medium.

As a result, according to the invention of claim 1,
By using at least two information recording media, one of the information recording media can record and reproduce the actual information based on the information that permits the recording and reproduction of the actual information recorded on the other information recording medium. Therefore, it is possible to prevent inadvertent leakage of actual information due to decryption of application programs, etc. Moreover, by recording the information that gives permission to record and reproduce the actual information on the other information recording medium, such information is forgotten or stolen. It is easy to handle information and the usability of the entire system is improved.

According to the second aspect of the present invention, one information recording medium gives information for permitting recording / reproduction of actual information and recording / reproduction of actual information for each area recorded in the other information recording medium. Since it is performed based on the above, it becomes possible to perform only the recording / reproducing of the real information of the area given permission of one information recording medium, and the real information of the other area can be recorded even in the same information recording medium. It can prevent things that are seen unnecessarily.

According to the third aspect of the present invention, one information recording medium gives information for permitting recording / reproduction of actual information and permission for recording / reproduction of actual information at the access level recorded on the other information recording medium. Since it is performed based on the above, it becomes possible to record and reproduce only the actual information of the access level given the permission of one of the information recording media, and the actual information can be inadvertently seen by an unauthorized one. This can be prevented.

[0014]

BEST MODE FOR CARRYING OUT THE INVENTION

(First Embodiment) FIG. 1 shows an IC applied to the present invention.
The schematic structure of an optical card is shown. In the figure, reference numeral 1 denotes a card body, and an optical data recording section 2 is formed in a lower portion of the surface of the card body 1, and the optical data recording section 2 is also provided.
The IC chip 3 is embedded in the upper part of the.

The optical data recording section 2 forms a plurality of tracks 201 along the longitudinal direction of the card body 1.
These tracks 201 are sandwiched between guide tracks 202 as shown in FIG.
By making a hole for the data pit 203 on 01,
The data is read out by recording the data and detecting the data pit 203. At both ends of the track 201, the ID section 204,
205, and track numbers and the like are recorded in advance in these ID sections 204 and 205.

On the other hand, the IC chip 3 is a CPU (not shown).
And a memory, etc., and an IC chip contact (not shown) is provided.
Data is exchanged with the R / W device and the host computer shown in FIG.

FIG. 3 shows a schematic structure of an information recording / reproducing apparatus to which the present invention is applied. In the figure, 11 is a host computer, and this host computer 11 includes
An R / W (read / write) device 12 is connected.

The R / W device 12 has two R / W units 15 and 16 in addition to the control unit 13 and the memory 14, and these R / W units 15 and 16 are provided with a first card 17 and The second card 18 is set separately. in this case,
As the first and second cards 17 and 18, the IC optical card described in FIG. 1 is used.

In the R / W device 12 thus configured, when the application program 111 on the host computer 11 instructs the file read / write on the first card 17, the control program 112 is executed.
Command is sent to the R / W device 12, and the control of the R / W unit 15 is executed according to an instruction from the control unit 13.
The data is read / written to the optical data recording unit on the card 17, and the IC chip on the first card 17 is also read / written via the contact. Also for the second card 18, the first card 1
Data read / write is executed in the same manner as in 7.
In this case, each data read / written to / from the first and second cards 17 and 18 is temporarily stored in the memory 14.

In the above description, one R / W device 12 handles two cards 17 and 18, but two R / W devices 12 are connected to the host computer 11,
These two R / W devices 12 may handle the cards 17 and 18 one by one. Further, only one R / W unit may be connected to the control unit 13, and two IC optical cards 17 and 18 may be replaced and connected to this R / W unit.

FIG. 4 shows a schematic structure of the R / W unit 15 (16). In this case, the light from the light emitting element 21 is passed through the collimating lens 22 and the objective lens 23 to the card 17
(18) The data is recorded by converging the light on top and leaving a data pit. In addition, the light emitting element 21
The light from the is weakened, and the collimation lens 2
2. Focus the light on the optical card 17 (18) through the objective lens 23 and reflect the light reflected on the optical card 17 (18) to the detector 27 through the objective lens 23, the mirror 24, the imaging lens 25, and the beam splitter 26. Here, the data pit is detected as the strength of the electric signal, and the focus detector 28 detects the focus shift to adjust the focus by the objective lens drive unit 29.
Further, the optical card driving unit 30 causes the optical card 17 (1
8) is reciprocally moved in the longitudinal direction thereof so that the data pits on the track are sequentially projected on the detector 27, and these are sent as reproduction data to the host computer.

Next, the operation of the first embodiment under such a configuration will be described. In this case, the first card 17
Is a user card stored by the user. This first card 17 has an optical data recording section divided into a plurality of partitions 171, 172 and 173 as shown in FIG. Different data is recorded. Also, the second card 18
Is an application card that is prepared for each application and identifies the application. As shown in FIG. 6, an application name 181, a partition name 182, and a data format 183 are recorded as application information. This application information may be recorded in either the optical data recording section of the second card 18 or the IC chip.

Then, these first and second cards 1
When 7 and 18 are set in the R / W units 15 and 16 of the R / W device 12, the flowchart shown in FIG. 7 is executed.
In this case, the control program 112 of the host computer 11 shown in FIG.
In step 701, the second card 18
The application information is read and the application name 181 and the partition name 182 are fetched.

Next, in step 702, a partition corresponding to the partition name 182 is searched from the plurality of partitions 171, 172, 173 of the first card 17.

Then, in step 703, it is determined whether or not there is a corresponding partition. If there is no corresponding partition, the process proceeds to step 704 to display an error,
The process ends.

On the other hand, if there is a corresponding partition,
In step 705, the partition to be accessed is selected from the plurality of partitions 171, 172, 173 of the first card 17. Then, step 706.
Then, the application program 111 of the host computer 11 shown in FIG. 3 reads / writes the data in the selected partition of the first card 17.
The light comes to be executed.

In this case, the application program 1
The read / write of the data in the partition by 11 is only for the data in the selected partition and does not know the data in the other partition.

Therefore, in this way, access to the plurality of partitions 171, 172, 173 of the first card 17 is permitted based on the partition name 182 recorded as the application information of the second card 18. Since it becomes possible to read / write the data in the partition given the permission of the first card 17, it is possible to erroneously access the data in the other partition in the same first card 17. And prevent unnecessary viewing of the data.

The application program 111 can also access data (user data) on the first card 17 without knowing where the partition to be accessed is on the first card 17. Also,
This is especially effective when one card is used in multiple applications and the configurations of all cards are not the same.

In the first embodiment, an example in which an IC optical card is used as the second card 18 has been described.
It may be an optical card or an IC card. Further, in the above description, one application information is recorded on the second card 18, but a plurality of application information is recorded, and first, a desired one of the plurality of application information is recorded. You may make it execute the flowchart shown in FIG. 7 after selecting one. (Second Embodiment) The configuration of the second embodiment is the same as that described in the first embodiment, and the above-mentioned FIGS. 1 to 4 are incorporated.

In this case, the first card 17 is, for example, a patient card stored by a patient in a medical system, and various data concerning the patient is recorded in the first card 17. The second card 18 is an access right card managed by a doctor.
As shown in FIG. 8, application information 184, access right information 185, and password 186 are recorded. These pieces of information may be recorded in either the optical data recording section of the second card 18 or the IC chip.

Then, these first and second cards 1
When 7 and 18 are set in the R / W units 15 and 16 of the R / W device 12, the flowchart shown in FIG. 9 is executed.
In this case, the control program 112 of the host computer 11 shown in FIG.
In step 901, the second card 18
The access right information 185 and the password 186 are fetched together with the application information 184.

Next, in step 902, password 1
It is checked whether 86 matches the entered password. Then, in step 903, it is determined whether or not the passwords match, and if they do not match, it is determined that the access right is insufficient, the process proceeds to step 904, an error is displayed, and the process ends.

On the other hand, if the passwords match, the process proceeds to step 905, and the access level of the access right information 185 designated in the second card 18 is permitted. In this case, the second card 18 is an access right card managed by the doctor, and the read and write access to the relevant partition of the patient card, which is the first card 17, is permitted.

Then, in step 906, the application program 1 of the host computer 11 shown in FIG.
11, the read / write is executed with respect to the data of the authorized partition of the first card 17.

Therefore, in this way, the access of the data of the first card 17 is permitted based on the access right information 185 recorded in the second card 18, so that the first card 17 is permitted. It becomes possible to read / write only the data of the access level to which the permission is given, and it is possible to prevent the patient data from being inadvertently seen by an unauthorized person other than the doctor.

Further, the application program 111
Then, the access right information 1 recorded on the second card 18
Since it is possible to know the dependency relationship of the access right with respect to the first card 17 from 85, the access right and the password management table can be eliminated, and the configuration of the application can be simplified. (Third Embodiment) The configuration of the third embodiment is also the same as that described in the first embodiment, and the above-mentioned FIGS. 1 to 4 are incorporated.

In this case, the second card 18
After the access right to the card 17 is determined and granted, the access right to the second card 18 is checked by the first card 17 in reverse. That is, here, I of the first and second cards 17 and 18
By using the mutual authentication function of the C chip, it is inversely checked whether the owner of the second card 18 has the access right to the optical data recording section of the first card 17.

For the mutual authentication function in this case, the flowchart shown in FIG. 10 is executed. First, step 100
At 1, the random number generated by the first card 17 is read. Then, in step 1002, the random number from the first card 17 is encrypted by the second card 18 using the first key.

Next, in step 1003, when the data encrypted by the second card 18 is sent to the first card 17, the second random number generated by the first card 17 itself is Compare with the result encrypted using the key.

Then, in step 1004, it is determined whether or not the encrypted results match. If they do not match, the process proceeds to step 1005 to display an error, and the process ends. Further, as a result of this comparison, if the encrypted data match, the authentication is successful, and the second card 18 is authorized to access the first card 17.

In this way, even if the second card 18 is a counterfeit card, or even if the second card 18 is a card managed by a doctor, the owner of the first card 17 will If so, access to the first card 17 is not permitted. That is, in this case, the access right check and mutual authentication of the second card 18 fail, and access to the first card 17 is denied regardless of the IC chip or the optical data recording unit.

Therefore, in this way, the first card 1 can be used without special management by the application.
Since it becomes possible to check whether or not the data can be read and written by itself, it is possible to prevent tampering of the data of the first card 17 and ensure that the owner's privacy is protected. (Fourth Embodiment) The configuration of the fourth embodiment is also the same as that described in the first embodiment, and the above-described FIGS. 1 to 4 are incorporated.

In this case, taking a medical system as an example, the first card 17 is a patient card for storing patient data,
The second card 18 is an access right card managed by a doctor.

Then, these first and second cards 1
When 7 and 18 are set in the R / W units 15 and 16 of the R / W device 12, the flowchart shown in FIG. 11 is executed. In this case, in order to record data in the optical data recording section of the first card 17, as shown in FIG. 11A, first, in step 1101, the first key in the first card 17 is used for encryption. Then, in step 1102, it is further encrypted by the second key in the second card 18, and in step 1103, data is recorded in the optical data recording section of the first card 17.

In order to reproduce data from the optical data recording section of the first card 17, as shown in FIG. 11B, first, in step 1104, the optical data recording section of the first card 17 is used. Play the data, step 1105
Then, the decryption is performed by the second key in the second card 18, and further decryption is performed by the first key in the first card 17 in step 1106.

That is, each encryption key is assigned to the first and second encryption keys.
If the card is held in the IC chip of the card 17 or 18, and is locked by another password, key, or the like, it is almost impossible to read the key itself and the confidentiality is high. Then, the data is sent to these IC chips, each is encrypted, and the encrypted data is received and recorded as double-encrypted data in the optical data recording unit. At the time of reproduction, in reverse, the data read from the optical data recording section is decrypted by the key of the second card 18, and then decrypted again by the key of the first card 17.

The data encrypted in this way is decrypted into meaningful data only with the patient card of the first card 17, even if the data can be read, but without the second card 18. This means that the data cannot be read without the presence of a doctor.

Therefore, in this way, the application program does not need to hold the information regarding the access right, and the user prepares the second card 18 necessary for decrypting the encrypted data. The access right can be indirectly controlled only by performing the above. (Fifth Embodiment) The configuration of the fifth embodiment is also the same as that described in the first embodiment, and the above-mentioned FIGS. 1 to 4 are incorporated.

Also in this case, the first and second cards 1
When 7 and 18 are set in the R / W units 15 and 16 of the R / W device 12, the flowchart shown in FIG. 12 is executed. In this case, in step 1201, the access permission by the second card 18 is issued in the same manner as in the above-described third embodiment, and in step 1202, the first card 17 is accessed.
When an access such as read / write is performed to the optical data recording unit of the above, in step 1203, the history of the user name used in the access and the processing performed is recorded in the optical data recording unit of the second card 18. It comes to record. In this case, even when an unexpected error occurs, the error code and the usage status at that time are recorded in the second card 18.

In this way, by recording what data has been written and read under the control of the second card 18, this recorded content can be used for traffic management and error analysis. Also, since the history is recorded for each card, the history management by the application is not necessary. Furthermore, when a history check is necessary due to an error, only the history of the card to which access is permitted is saved. You can deal with it by investigating.

Therefore, in this way, it is possible to write in the second card 18 itself what kind of access was made under the access right management of the second card 18, so that the application side Without recording the permission status of the access rights of the two cards one by one,
The history can be managed by simply recording only the situation on the card 18.

Although the above description is based on the embodiment,
The present invention includes the following inventions. (1) At least two information recording media are used, one information recording medium records actual information, and the other information recording medium records information for permitting recording and reproduction of the actual information of the one information recording medium. Then, the information recording / reproducing method is characterized in that the recording / reproducing of the actual information of the one information recording medium is determined based on the recording information of the other information recording medium.

In this way, by using two information recording media, one information recording medium gives the recording / reproducing of the actual information and the recording / reproducing of the actual information recorded on the other information recording medium. Since it can be performed based on the information, it is possible to prevent the inadvertent leakage of the actual information due to the decoding of the application program, and moreover, by recording the information for permitting the recording and reproduction of the actual information on the other information recording medium. The information will not be forgotten or stolen, the information will be easy to handle, and it will be improved even if the entire system is easy to use.

(2) At least two information recording media are used, one information recording medium is divided into a plurality of areas for recording actual information, and the other information recording medium is a unit of each area of the one information recording medium. Of the actual information is recorded, and the recording / reproduction of the actual information of the one information recording medium is determined for each area based on the recording information of the other information recording medium. Information recording / playback method.

In this way, one information recording medium performs the recording / reproducing of the actual information based on the information which gives the recording / reproducing permission of the actual information in the area unit recorded in the other information recording medium. Therefore, it becomes possible to record and reproduce only the real information in the area given permission of one of the information recording media, so that the real information in the other area can be unnecessarily seen even in the same information recording medium. You can prevent this.

(3) At least two information recording media are used, one information recording medium records actual information having a plurality of access levels, and the other information recording medium has each access level of the one information recording medium. Of the actual information is recorded, and the recording / reproduction of the actual information of the one information recording medium is determined at each access level based on the recorded information of the other information recording medium. Information recording / playback method.

By doing so, one of the information recording media performs the recording / reproducing of the actual information based on the information which gives the recording / reproducing permission of the actual information at the access level recorded in the other information recording medium. Therefore, it becomes possible to record / reproduce only the actual information of the access level to which the permission of one of the information recording media is given, and it is possible to prevent the actual information from being inadvertently viewed by an unauthorized one. .

(4) In the information recording / reproducing method described in (3), the access level is determined by authenticating one information recording medium to the other information recording medium.

By doing so, it becomes possible to check whether or not one of the information recording media itself is allowed to read and write data, so that the data on one of the information recording media is prevented from being tampered with and the owner's privacy is protected. You can be sure to protect.

(5) When at least two information recording media are used and actual information is recorded on one of the information recording media, information is recorded by the keys recorded on the one information recording medium and the other information recording medium. It is characterized in that encryption is performed, and at the time of reproduction, decryption is performed by the keys recorded in one information recording medium and the other information recording medium.

In this way, the application program does not need to hold the information about the access right, and the user only needs to prepare the other information recording medium necessary for decrypting the encrypted information. Thus, the access right can be indirectly controlled.

(6) At least two information recording media are used, and the recording / reproducing history of one information recording medium is recorded in the other information recording medium. By doing so, the history of the application can be managed only by recording on the other information recording medium without recording the permission status of the access right of the two information recording media on the application side.

(7) In the information recording / reproducing method described in (1) to (5), the information recording medium for recording the actual information and the information recording medium for recording the information for permitting the recording / reproducing are the IC recording section. And a card-shaped medium including at least one of an optical recording unit.

(8) In the information recording / reproducing method described in (1) to (5), the information recording medium for recording the actual information is
An information recording medium which is a card-shaped medium including at least one of an IC recording unit and an optical recording unit and which records the information for giving permission for recording and reproduction is a card-shaped medium including at least an IC recording unit.

By doing so, the high security I
By recording the information for permitting the recording / reproduction in the C recording unit and using the information for accessing the other card, the security of the other card can be enhanced.

[0067]

As described above, according to the present invention, it is possible to prevent the inadvertent leakage of actual information due to the decoding of the application program, to ensure a high security function, and to permit the recording and reproduction of the actual information. The information given to users will not be forgotten or stolen, the information will be easy to handle and the system will be easy to use.

Further, since it is possible to record / reproduce only the actual information in the area given permission of one information recording medium, it is possible to see the actual information in the other area unnecessarily even in the same information recording medium. You can prevent this.

Further, since it is possible to record and reproduce only the real information of the access level given the permission of one of the information recording media, it is possible to prevent the real information from being inadvertently viewed by an unauthorized one. .

[Brief description of the drawings]

FIG. 1 is a diagram showing a schematic configuration of an IC optical card applied to a first embodiment of the present invention.

FIG. 2 is a diagram showing a track configuration of an IC optical card applied to the first embodiment.

FIG. 3 is a diagram showing a schematic configuration of an information recording / reproducing apparatus applied to the first embodiment.

FIG. 4 is a diagram showing a schematic configuration of an R / W unit applied to the first embodiment.

FIG. 5 is a diagram showing an optical data recording unit of a first card applied to the first embodiment.

FIG. 6 is a diagram showing application information of a second card applied to the first embodiment.

FIG. 7 is a flowchart for explaining the operation of the first embodiment.

FIG. 8 is a diagram showing recorded information on a second card applied to the second embodiment of the present invention.

FIG. 9 is a flowchart for explaining the operation of the second embodiment.

FIG. 10 is a flowchart for explaining the operation of the third embodiment of the present invention.

FIG. 11 is a flowchart for explaining the operation of the fourth embodiment of the present invention.

FIG. 12 is a flowchart for explaining the operation of the fifth embodiment of the present invention.

[Explanation of symbols]

1 ... Card body, 2 ... Optical data recording section, 201 ... Track, 202 ... Guide track, 203 ... Data pit,
204, 205 ... ID section, 11 ... Host computer,
111 ... Application program, 112 ... Control program, 12 ... R / W device, 13 ... Control unit, 14 ... Memory, 15, 16 ... R / W unit, 17 ... First card, 1
71, 172, 173 ... Partition, 18 ... Second card, 181 ... Application name, 182 ... Partition name, 183 ... Data format, 184 ... Application information, 185 ... Access right information, 186
... password, 21 ... light emitting element, 22 ... collimation lens, 23 ... objective lens, 24 ... mirror, 25 ... imaging lens, 26 ... beam splitter, 27 ... detector, 28
... Focus detector, 29 ... Objective lens drive unit, 30 ...
Optical card drive.

Claims (3)

[Claims] 1. Information using at least two information recording media, one information recording medium recording actual information, and the other information recording medium giving permission to record and reproduce the actual information of said one information recording medium. Is recorded, and the recording / reproducing of the actual information of the one information recording medium is determined based on the recording information of the other information recording medium. 2. At least two information recording media are used, one information recording medium is divided into a plurality of areas for recording actual information, and the other information recording medium is a unit of each area of the one information recording medium. It is characterized in that information for permitting recording / reproduction of actual information is recorded, and recording / reproduction of actual information of the one information recording medium is determined for each area based on the recorded information of the other information recording medium. Information recording / playback method. 3. At least two information recording media are used, one information recording medium records actual information having a plurality of access levels, and the other information recording medium has each access level of the one information recording medium. It is characterized in that information for permitting recording / reproduction of actual information is recorded, and recording / reproduction of actual information of the one information recording medium is determined at each access level based on the recorded information of the other information recording medium. Information recording / playback method.