JPH09319848A - Portable data carrier - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable data carrier whose issuance processing is simplified, without increasing the program capacity. SOLUTION: When a signal RST is supplied from the outside to initialize an IC card before a series of operations, a CPU 1 which executes a program stored in a ROM 2 sets all flags on a RAM 3 to 'collated state' and retrieves each reference key from an EEPROM 4. At the time of this retrieval, the flag corresponding to a found reference key is changed to 'uncollated state'. In issuance processing which follows, a route directory is generated in the final access condition, and an MF(master file) is generated, and plural reference key files, including individual reference key data, are successively generated. Since the final access condition is set to the MF, it is unnecessary to rewrite the pertinent access condition.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable data carrier represented by an IC card, a smart card, or a data tag, a sign, or the like, in which an IC chip with a built-in CPU is embedded in a credit card-sized plastic card.

[0002]

2. Description of the Related Art Generally, in IC cards, a concept called a file and a directory is introduced to manage internal data. Files and directories will be described below with reference to FIGS. 5 and 6.

A file is a concept composed of actual data stored in a certain area on the memory and management data for specifying the range of the area. Usually, before actual operation of the IC card, the internal file One master file (hereinafter referred to as MF) and its subordinate elementary file (hereinafter referred to as EF) on the non-volatile memory
Is generated.

These files are managed by directories. The directory is Japanese Patent Application No. Sho 61-153.
As described in the specification and drawings attached to the application for No. 560, it is a fixed-length data group consisting of management data of each file, and in particular, the MF itself and the E in the MF.
The one including the management data of F is called a root directory.

The directory allows a hierarchical structure, and it is possible to construct a subdirectory under the root directory. In this case, the sub-directory is managed by the parent directory as a Dedicated File (hereinafter referred to as DF).
Of course, it is also possible to generate the EF in this subdirectory.

FIG. 6 is a diagram showing an example of the structure of EF management data. The EF management data shown in this figure includes EF numbers, file types related to this EF, W key numbers, R key numbers, and UL key numbers. , The actual data start address, the same end address, and the same size. The file type is information for identifying whether the EF is a DF, a reference key file storing reference key data, or other. When the file type represents DF, a W key number, R
The key number, UL key number, end address, and size are omitted, and the start address of the subdirectory corresponding to the DF is added. This subdirectory has the same configuration as the root directory except that it has information about the parent directory, and thus detailed description thereof will be omitted.

As is apparent from the above-described configuration, in order to send a command to the IC card and access a desired file, the sender of the command uses the reference key associated with the process performed by the command. Need to know That is, the IC card is configured to prevent unauthorized use by a user who does not have a valid access right.

Next, a conventional IC card issuing process will be described with reference to FIG. The issuing process here is
This is a process of creating an MF and generating various files under the MF to enable actual operation. As shown in FIG. 7, in the issuing process, first, the root directory is created and the MF is generated (step SA1). At this time, nothing is set in the FC key 1 number and the FC key 2 number in the created management data of the MF, and the access condition for the file generation command (hereinafter referred to as FC command) is set to free.
As a result, a desired file can be created under the MF.

In parallel with the generation of the desired file, the reference key data 1 required for access management is sent by the FC command.
To n (not shown) are sequentially stored (steps SA2 to SAn + 1, where n is 1).
Above integer). As a result, the reference key data 1 to n are stored in the non-volatile memory. Next, the access condition (FC key 1 number and FC key 2 number) for the FC command in the management data of the MF is rewritten by a predetermined command, and thereafter, when the FC command is issued, it is input before the processing. Key data (eg password) and F
Unless the comparison result with the reference key data in the reference key file indicated by the C key 1 number and the FC key 2 number is “match” (unless the “matching” of these reference keys is completed).
Access by the FC command is denied (step SAn + 2).

As described above, in the conventional issuing process of the IC card, the access condition for the MF FC command is rewritten. This is because the final access condition for the FC command is created when the root directory is created (MF is created). This is because if you do so, you will not be able to create any files after that.

If the root directory is created, "F
It is assumed that an access condition "a file cannot be generated under the reference key unless the reference keys in the two reference key files indicated by the C key 1 number and the FC key 2 number are completed" is set. Here, when the FC command for generating the EF is received, the IC card tries to confirm the collation state of each of the reference keys, but since the reference key file is not generated under the MF, the reference key data is not generated. It does not exist on non-volatile memory and therefore cannot process FC commands. In this way, the EF cannot be generated in the lower layer of the MF.

Next, after the completion of the above-mentioned issuing process, at the start of a desired series of operations, the pre-process shown in FIG. 8 is performed.
That is, when the IC card is initialized (step SB
1) The state of all the flags set in the volatile memory in correspondence with the reference key is set to indicate the "unverified state" (step SB2). In addition, the collation state of the reference key has "unverified state" and "verified state", and the fact that a certain reference key is in the collated state means that the processing in which the access condition is set by the reference key can be executed. It means that.

FIG. 9 shows a processing flow of the collation command in the above series of operations. As shown in this figure, the reference key is authenticated by the verification command (step S
C1), if the authentication is successful, the state of the corresponding flag on the volatile memory becomes the "verified state" (steps SC2 and SC3), and if it fails, the state of the flag is "unverified state". (Steps SC2 and SC4).

[0014]

As described above, in the conventional IC card issuing process, after the reference key is generated (after the reference key file is stored in the non-volatile memory).
In addition, it is necessary to reset the access conditions for the MF, which makes the processing complicated and redundant. Of course, DF
When EF is generated in the lower layer, the same processing as above is required. Further, since the IC card has a strict limitation on the program capacity, it has been a considerable burden to provide the function that enables the above resetting.

A method of managing the reference key with a concept different from the file concept is also conceivable, but ISO / IE
In the C7816 series (IC card standard with terminals),
Since there is a command that handles the reference key data with the file concept like general data, in order to utilize the characteristic of the IC card that is excellent in compatibility, a function similar to this is provided in parallel with the prescribed command. You need to provide your own command. This imposes an extremely heavy burden on an IC card having a limited program capacity. The present invention has been made in view of such circumstances, and an object thereof is to provide a portable data carrier capable of reducing the program capacity and simplifying the issuing process.

[0016]

In order to solve the above-mentioned problems, the invention according to claim 1 refers to a communication means for transmitting / receiving data to / from an external device and a reference to be collated before execution of an instruction. Non-volatile data storage means for storing the key, volatile memory, and executes the command received via the communication means, collates the reference key with the data input via the communication means, both Is a portable data carrier in the form of a card, which comprises a processing means for storing the verification result of whether or not they match in the volatile memory for each of the reference keys, the processing means before the execution of the command. When the comparison result for the reference key to be verified indicates disagreement, execution of this command is prohibited, and at the time of carrier initialization, all reference keys stored in the nonvolatile data storage means are prohibited. The engagement results shall represent the mismatch, it is characterized in that is stored in the volatile memory matching results for all the reference key that is not stored in the non-volatile data storage means as representing the coincidence.

The invention according to claim 2 is a communication means for transmitting and receiving data to and from an external device, a non-volatile data storage means for storing a reference key to be collated before execution of an instruction, and the communication. The instruction received via the means is executed, the reference key and the data input via the communication means are collated, and the collation result of whether or not they match is stored in the nonvolatile data storage means. A portable data carrier in the form of a card, comprising a processing means for storing each reference key, wherein the processing means represents a mismatch in the matching result with respect to the reference key to be matched before the execution of the instruction. In this case, the execution of this command is prohibited, and at the time of carrier initialization, the verification results for all the reference keys stored in the nonvolatile data storage means are represented as non-coincidence, and the nonvolatile data is stored. It is characterized in that is stored in the non-volatile data storage means as representing the coincidence matching results for all the reference key that is not stored in the data storage means.

That is, according to the present invention, the state information of the reference key which is not stored in the non-volatile data storage means is set to the collated state, and when the reference key is registered, the state information of the reference key is set to the unverified state, The feature is that execution of an instruction that requires verification by the reference key is prohibited unless the status information of the reference key indicates the verified status.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing a configuration of a portable data carrier according to an embodiment of the present invention, in which the portable data carrier is realized as an IC card. In FIG. 1, reference numeral 1 denotes a CPU (central processing unit), and an RO storing a program executed by the CPU 1.
M (Read Only Memory) 2, RAM used as a temporary storage area for command data, a work area for the CPU 1, and the like
(Random Access Memory, Volatile Memory) 3, and E
EPROM (Electrically Erasable Programmable RO
M, non-volatile data storage means) 4 via a bus of a predetermined width.

The CPU 1 has Vcc (power supply voltage) and R supplied from an IC card terminal (not shown) (communication means).
A program stored in the ROM 2 is read out and executed based on the ST signal (reset signal) and the CLK signal (clock signal) to write and read data to and from the RAM 3 and the EEPROM 4, and at the same time I / O.
Data (represented by I / O in the figure) is transmitted / received to / from an external device via the interface. The CPU 1 and the ROM 2 constitute a processing means.

The ROM 2 is a PROM (Programmable
ROM) is used to store a desired program in advance. In addition, as a non-volatile data storage means, an EEPROM
However, the configuration is not limited to this, and for example, S
A nonvolatile memory may be configured by combining a battery with a RAM (Static RAM), and this may be used as the nonvolatile data storage means. Further, although the configuration using the CPU 1 and the ROM 2 as the processing means is shown, the invention is not limited to this, and hard wired logic or the like may be used.

Next, a pre-process for authenticating the reference key in the IC card having the above configuration will be described. FIG. 2 is a flowchart showing an example of the pre-processing of the IC card authentication according to the present embodiment, and the processing shown in this figure is performed by the CPU 1 which executes the program stored in the ROM 2. However, all the reference key numbers to be used shall be described in advance in this program. In addition, this program stores the area on the RAM 3 corresponding to each reference key,
It is described to be used as a flag indicating the matching state (matching result) of each corresponding reference key.

As shown in this figure, when an RST signal is externally supplied and the IC card is initialized prior to a series of operations (step SD1), the CPU 1 sets all the flags on the RAM 3 to the "verified state". Is set (step SD2). Next, the CPU 1 is the EEPROM 4
In step S3, the first reference key (hereinafter referred to as reference key 1) is searched. When the reference key 1 is found in this search, the CPU 1 changes the flag corresponding to the found reference key 1 to the "unverified state" (steps SD4 and SD5).

Whether or not the reference key 1 is found, the process proceeds to step SD6, and thereafter,
The same processing as described above is performed for the reference keys 2, 3, ..., N (where n is an integer of 1 or more). And the reference key n
When the processing for (1) is completed, the IC card enters a command waiting state (step SD3n + 3). As a result of the above-described pre-processing, each flag on the RAM 3 is set to the "unverified state" when the corresponding reference key exists on the EEPROM 4, and to the "verified state" when it does not exist.

Next, the IC card issuing process performed on the premise of the above-mentioned preprocessing will be described. FIG. 3 is a flowchart showing an example of the IC card issuance processing according to the present embodiment, and this issuance processing is performed subsequent to the above-described preprocessing. Since none of the reference keys 1 to n are stored in the EEPROM 4 at the start of the issuing process, all the flags on the RAM 3 are set to the “verified state” after the above-mentioned preprocessing.

In such a state, the CPU 1 which executes the program stored in the ROM 2 creates a root directory under the final access condition and creates an MF (master file) (step SE1). here,
What is different from the conventional one is that the access condition for the FC (file create) command is not temporarily set free, but the MF is generated under the access condition finally adopted.

Next, a plurality of reference key files 1-n including the reference key data 1-n are sequentially generated (step SE2-
SEn + 1). As described above, the access condition for generating the EF under the MF is not free. Therefore, the processing of the FC command has a flow as shown in FIG.

In FIG. 4, when the CPU 1 receives the FC command for the MF (step SF1), it reads out the reference key number to be verified from the management data of the MF, and checks the verification state of the flag corresponding to the number. (Step SF2). As a result, if all the corresponding flags are in the “verified state”, the FC command is processed and EF is generated (steps SF3 and SF4). On the contrary, at least one of the corresponding flags is “unverified”
If so, execution of the FC command is prohibited.

As described above, since all the flags on the RAM 3 are set to the "verified state" at the start of the issuing process, execution of the FC command for generating the reference key file is prohibited in the issuing process. It will not be done. The process shown in FIG. 4 is repeated for each reference key file to generate EF, here, reference key files 1 to n. Then, when the generation of the required EF is completed, the issuing process is completed.

Since the reference key authentication process after the issuing process is completed is the same as the conventional process shown in FIG. 9, its description is omitted. As described above, the EEPROM
Since the flag of the reference key that does not exist in No. 4 is set to indicate the “verified state”, the final access condition can be set in the MF before the reference key file is created in the issuing process. Moreover, it is not necessary to provide a function for changing the access condition of the MF in preparation for actual operation, and the program capacity can be reduced.

In this embodiment, the flag is set to R.
Although it is stored in the AM 3, it goes without saying that it may be stored in the EEPROM 4. The number of reference keys is not described in the program stored in the ROM 2 and
You may make it memorize | store in the specific area | region of EEPROM4. In this case, there is an effect that the number of reference keys can be changed arbitrarily.

[0032]

As described above, according to the present invention,
Reference in which the matching result of the reference key not stored in the non-volatile data storage means is “match”, the matching result of the reference key stored in the nonvolatile data storage means is “mismatch”, and the matching result is “mismatch” By prohibiting the execution of the command requiring the key, the command requiring the reference key can be executed even when the reference key does not exist in the nonvolatile data storage means. Therefore, it is not necessary to rewrite the access condition after the file is generated, and the issuing process can be simplified. Further, since it is not necessary to provide a rewriting function of the access condition, the program capacity of the processing means can be reduced.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a portable data carrier (IC card) according to an embodiment of the present invention.

FIG. 2 is a flowchart showing an example of pre-authentication processing in the IC card.

FIG. 3 is a flowchart showing an example of an issuing process of the IC card.

FIG. 4 is a flowchart showing an example of FC command processing in the IC card.

FIG. 5 is a block diagram for explaining files and directories in the IC card.

FIG. 6 is a diagram for explaining a directory in an IC card.

FIG. 7 is a flowchart showing an example of a conventional IC card issuing process.

FIG. 8 is a flowchart showing an example of pre-processing performed at the start of a series of operations after completion of the issuing processing in the IC card.

FIG. 9 is a flowchart showing processing of a collation command in the same series of operations.

[Explanation of symbols]

1 ... CPU, 2 ... ROM, 3 ... RAM, 4 ... EEPRO
M.

Claims (2)

[Claims] 1. A communication means for transmitting and receiving data to and from an external device, a non-volatile data storage means for storing a reference key to be collated before execution of an instruction, a volatile memory, and the communication means. The reference key and the data input via the communication unit are collated, and the collation result of whether or not they match each other is stored in the volatile memory for each of the reference keys. A portable data carrier in the form of a card including a processing means for causing the processing means to execute a command if the verification result for the reference key to be verified before execution of the command indicates a mismatch. Is prohibited, and at the time of carrier initialization, the verification results for all the reference keys stored in the non-volatile data storage means are represented as non-coincidence and stored in the non-volatile data storage means. Portable data carrier, characterized in that to be stored in the volatile memory to represent the matching matching results for all the reference key that is not. 2. Communication means for transmitting and receiving data to and from an external device, non-volatile data storage means for storing a reference key to be collated before execution of an instruction, and an instruction received through the communication means. Processing means for executing and collating the reference key with data input via the communication means, and storing a collation result of whether or not they match each other in the nonvolatile data storage means for each reference key A portable data carrier in the form of a card, including: and the processing means executes the instruction if the comparison result with respect to the reference key to be verified before the execution of the instruction indicates a mismatch. In addition to prohibiting, when the carrier is initialized, the comparison result with respect to all the reference keys stored in the non-volatile data storage means is represented as non-coincidence and stored in the non-volatile data storage means. A portable data carrier, characterized in that the non-volatile data storage means stores the verification results for all non-reference keys as a match.