JPH10275207A - Portable electronic device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card which can be safely used for various purpose. SOLUTION: This card has a data memory 12 which includes plural area parts, the area definition parts 24 and 25 which store the area definition information including the area identification codes and the area position information as the area definition information groups, and a management information storage part 23 which stores the correspondence defined between the application codes decided according to the application fields and the memory areas corresponding to the application codes. Then the definition information group of the memory area corresponding to an application code is opened after confirming whether the application code received from an outside device is stored in the part 23. Then it's confirmed whether the area identification code received from the external device is stored in the opened memory area definition information group, and the write or read operations are carried out to the memory areas only when the application code and area identification code are confirmed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an IC having a control element such as a non-volatile data memory and a CPU.
The present invention relates to a portable electronic device having a built-in (integrated circuit) chip, so-called an IC card, and more particularly to a data memory management system.

[0002]

2. Description of the Related Art Recently, as a new portable data storage medium, an IC card having a built-in IC chip having a nonvolatile data memory and a control element such as a CPU has been developed. This type of IC card accesses a built-in data memory by a built-in control element, and inputs and outputs necessary data in response to a request from a terminal device.

[0003] The data memory of such an IC card is divided into a plurality of areas according to the characteristics of the stored data or the intended use, and each area is assigned a unique number called an area number. At the time of access, a logical access method in which the area number is designated and accessed is used.

[0004] In order to realize this method, the data memory is largely divided into a definition information area (directory area) and a user area (user area).

[0005] The user area is finely divided into a plurality of areas according to the characteristics of the stored data or the intended use, and each of these areas is defined by area definition information in the definition information area.

Area definition information defining one area in a user area includes area number information defining an area-specific number, head address information defining an area position in the user area, and area size. It consists of size information to be defined and attribute information for defining area use authority. Then, the area definition information of all the areas in the user area is collected to form one area definition group.

Conventionally, only one area definition group can be provided in a card, but it is sufficient for a single application field. However, recently, for example, the same IC
There is a strong tendency for multipurpose application fields, such as inserting a card into a bank's CD terminal and using it as a CD card, and inserting it into a hospital terminal and using it as an insurance card. In that case,
In an IC card having only one area definition group, (1) an area number to be used is allocated for each application field. (2) The validity of the area number to be accessed on the terminal device side in the application field (whether or not it can be used in the application field) is checked. It becomes necessary. However, in this case, (1) it is difficult to enter operating systems that have not considered mutual entry in advance (it is highly likely that the same area number is used). (2) The security of the area used by the system A and the system B that have entered each other cannot be protected in the card, and is left to the conscience of the system.

[0008] That is, system A is deliberately system B
The card itself cannot prevent the data from being stolen or tampered with. There is a problem.

[0009]

SUMMARY OF THE INVENTION The present invention has been made to solve various problems associated with realizing multipurpose use as described above. The present invention has been made to reduce the burden on a terminal device, and to provide a safe and simple method. Another object of the present invention is to provide a portable electronic device capable of realizing versatile use.

[0010]

According to the present invention, there is provided a portable electronic device comprising: an IC card operating by receiving a command from an external device;
An area definition section that stores a plurality of area definition information including an area identification code for defining a plurality of areas and area position information as an area definition information group for each field of use, and is defined according to the field of use. A data memory having a management information storage unit for storing the applied code and a definition information group of a memory area corresponding to the applied code, and selectively transmitting and receiving data to and from an external device. An input / output unit, first confirmation means for confirming whether or not an application code in a designation command of the area definition information group received via the input / output unit is stored in the management information storage unit; First output means for outputting first response data indicating that there is no matching application code when the application code in the designated command is not confirmed by the confirmation means; When the application code is confirmed by the identification means, an opening means for opening the definition information group of the memory area corresponding to the confirmed application code, and an area identification in the write command received via the input / output unit. Second checking means for checking whether the code is stored in the definition information group of the memory area opened by the opening means, and the area identification code received by the second checking means is not checked. In the case where the application code is confirmed by the second output means for outputting the second response data indicating that there is no matching area identification code, and the first confirmation means, and the second confirmation means Only when the area identification code is confirmed, write to the area of the memory corresponding to the area identification code,
When the definition information group of the memory area is not set to the open state by the opening means and when the area identification code is not confirmed by the second confirmation means, writing to the memory area is not performed. Things.

[0011]

According to the present invention, a plurality of area definition information including a plurality of area portions in which data is stored, an area identification code for defining the plurality of areas, and area position information are provided for each application field. A data having an area definition unit that stores a plurality of groups, and a management information storage unit that stores an application code defined according to a use field and a definition information group of a memory area corresponding to the application code in association with each other. It comprises a memory and an input / output unit for selectively transmitting and receiving data to and from an external device, and confirms whether an application code from the external device is stored in the management information storage unit. If the application code is not confirmed, first response data indicating that there is no matching application code is output, and if the application code is confirmed by the confirmation, the first response data is output. The corresponding memory area definition information group is set to the open state, and it is confirmed whether the area identification code from the external device is stored in the definition information group of the open memory area. If the area identification code is not confirmed, second response data indicating that there is no matching area identification code is output, and the area identification code is confirmed only when the application code is confirmed and the area identification code is confirmed. Writes or reads to or from the memory area corresponding to the code, and writes or reads to or from the memory area when the definition information group of the memory area is not open or the area identification code is not confirmed. Is not performed.

[0012]

An embodiment of the present invention will be described below with reference to the drawings.

Reference numeral 11 denotes a configuration example of a terminal device that handles an IC card as a portable electronic device according to the present invention. That is, this terminal device allows the IC card 1 to be connected to a control unit 3 including a CPU or the like via a card reader / writer 2, and the control unit 3 includes a keyboard 4, a CRT display device 5, a printer 6, and a floppy disk. The device 7 is connected.

FIG. 10 shows an example of the configuration of the IC card 1. A control element (eg, CPU) 11 as a control unit, a non-volatile data memory 12 capable of erasing stored contents as a data memory unit, and a program memory unit And a contact section 14 for obtaining electrical contact with the card reader / writer 2, of which a portion within a broken line (control element 11, data memory 12, program memory 13) Is composed of one IC chip and is embedded in the IC card body.

The program memory 13 is composed of, for example, a mask ROM and stores a control program for the control element 11. The data memory 12 is used for storing various data, and is composed of, for example, an EEPROM.

The data memory 12 is roughly divided into a definition information area 21 and a user area 22 as shown in FIG.

Further, the definition information area 21 includes one area definition group management group 23 and a plurality of area definition groups 24 and 25.

The information defining one area definition group 24 (25) is area definition group management information in the area definition group management group 23,
It consists of application code given for each application field, head address information giving position information of the area definition group, and size information giving size.

In FIG. 1, the application code "CDCARD"
The area definition group defined by the area definition group management information is the first area definition group 24, and the area definition group defined by the area definition group management information of the application code “HOKENSHO” is the second area definition group 25.
It is.

The user area 22 is finely divided into a plurality of areas in accordance with the characteristics of the stored data or the purpose of use, and these areas are divided into first and second area definition groups 24 and 25.
Is defined by the area definition information in

Area definition information defining one area in the user area 22 includes area number information defining an area-specific number, head address information defining an area position in the user area, and area size. And attribute information for defining area use authority.

Then, the area definition information of all the areas used in the application field having the application code "CDCARD" is collected to form a first area definition group 24, which is used in the application field having the application code "HOKENSHO". The second area definition group 25 is formed by collecting the area definition information of all the areas.

That is, the first area definition group 24 defines an area (area numbers 10 and 12) used in the field of application having the application code “CDCARD”, and the second area definition group 25 defines the application code “HOKENSHOD”. The area (area number 10, 20) used in the application field having "" is defined.

Although the same area number "10" is defined in each of the first and second area definition groups 24 and 25, they are defined at completely different positions on the memory map.

Next, the control method will be described while describing a specific use procedure. FIG. 2 is a flowchart illustrating processing on the terminal device side when the IC card 1 is used for multiple purposes, and FIG. 3 is a flowchart illustrating internal processing of the IC card 1.

According to the flowchart of FIG. 2, first, the IC card 1 is inserted into the card reader / writer 2 of the terminal device.

Thereafter, the control unit 3 of the terminal device sends an area definition group designation command for designating an area definition group to the control element 11 of the IC card 1.

The specific format of the area definition group designation command is as shown in FIG. 4, for example.

The control element 11 which has received the area definition group designation command stores the area definition group management information having the application code corresponding to the application code in the command message in the area definition group management group.
23, the area definition group defined by the information is opened, and other area definition groups are closed.

Only one area definition group can be opened at a time, and when the area definition group designation command is subsequently executed, only the area definition group specified last becomes effective.
Other area definition groups become invalid.

If there is no matching application code, the control element 11 sends a response indicating input of an unregistered code to the control unit 3 of the terminal device. The application code "CDCA" for the IC card 1 having the memory map shown in FIG.
FIG. 5 shows areas that can be accessed when the area definition group designation command is executed by designating "RD".

The area definition group to be opened is the first area definition group.
At 24, the area with the area number "10,12" defined therein becomes accessible. The area definition group to be closed is the second area definition group 25, and the area with the area number "10, 20" defined therein becomes inaccessible.

On the other hand, FIG. 6 shows areas which can be accessed when the application code "HOKENSHO" is designated and the area definition group designation command is executed.

The area definition group to be opened is the second area definition group.
At 25, the area with the area number "10,20" defined therein becomes accessible. The area definition group to be closed is the first area definition group 24, and the area with the area number "10, 20" defined therein becomes inaccessible.

The first and second area definition groups 24 and 25 define an area having an area number "10". When the first area definition group 24 is opened, the start address "aaa" is set.
, And the area with the area number “10” of the start address “bbb” can be accessed when the second area definition group 25 is opened.

That is, an area number can be independently assigned to each area definition group. Now, in the state where the first area definition group 24 is opened by the area definition group designation command, for example, a write command as shown in FIG. When transmitted, the control element 11 finds, from the first area definition group 24, area definition information having area number information matching the area number information in the command message, and uses the head address information and size information of the area definition information to find the target. Is accessed, and the write data in the command message is written to the area.

If area number information not defined in the first area definition group 24 is added to the command message, the control element 11 sends a response indicating that the area number is undefined to the control unit 3 of the terminal device. Send to Also,
If the area definition group is not specified, or the area definition group specification command does not end normally and there is no open area definition group, the control element 11 returns a response indicating that there is no open area definition group. To the control unit 3 of the terminal device.

The write operation is performed as described above, and the read operation is the same as the write operation. FIG. 7 is an explanatory diagram of the internal operation of the card when a write command is input, and FIG. 8 is an explanatory diagram of the internal operation of the card when a read command is input.

Further, the IC card of the present invention, which was initially operated in a single application field, can smoothly transfer to another multipurpose IC card, and a specific example is shown in FIG. . Reference numeral 31 denotes a data memory map of an IC card used in a use field having an application code “CDCARD”, and reference numeral 32 denotes a data memory map of an IC card used in a use field having an application code “HOKENSHO”. 33
Can be used in both applications.
It is an example of a data memory map of a C card.

To create the data memory maps 31, 32 to 33, only the first address information in the definition information area is changed so that the areas to be accessed do not overlap, and the other information is stored in the data memory maps 31, 32. What is necessary is just to write in the definition information area of the data memory map 33 using the information as it is.

The IC card having the data memory map 33 created in this way has the application code "HOKENSHO" like the IC card having the data memory map 31 in the terminal device having the application code "CDCARD". The terminal device operates as an IC card having the data memory map 32, and in the case of mutual entry, if only the definition information area in the IC card is changed, entry and transfer can be easily performed without changing other items.

In the above description, it is assumed that the definition information area and the user area are on the same data memory and are logically divided by a value defined in advance by a mask program or the like. However, during access to the user area, there is a high possibility that the CPU constituting the control element of the IC card will run away due to fluctuations in the power supply and cause erroneous writing to the logically divided definition information area.

To prevent this, storage cells in the definition information area and the user area are physically divided, and write protection is provided for the storage cells in the definition information area. In particular, if the data memory is an EEPROM, there is a risk that the chip erase mode will be erroneously entered. In such a case, if the data is only logically divided, the data in the user area will be erased. The information in the definition information area is also erased, and cannot operate normally thereafter.

However, if the data is physically divided, even if the data in the user area is erased, the information in the definition information area is not erased, so that the card itself does not become defective.

Where high security is required, such as in the financial field, the definition information area is made a storage element that can be written only once, so that an IC card issued once cannot be rewritten or falsified. be able to.

On the other hand, in a field where security is not required, the definition information area can be rewritten by using a rewritable storage element such as an EEPROM so that an economical IC card can be produced.

In the above-described embodiment, an IC card is exemplified as a portable electronic device. However, the present invention is not limited to a card-like one, and may be a block-like one or a pencil-like one. Also, the hardware configuration of the portable electronic device can be variously modified without departing from the gist thereof.

[0048]

As described above in detail, according to the present invention, it is possible to provide a portable electronic device capable of reducing the load on the terminal device and realizing the multipurpose use safely and easily.

[Brief description of the drawings]

FIG. 1 is a diagram showing a memory map of a data memory.

FIG. 2 is a flowchart illustrating processing on the terminal device side when the IC card is used for multiple purposes.

FIG. 3 is a flowchart illustrating internal processing of the IC card.

FIG. 4 is an explanatory diagram of an area definition group designation command and an internal operation of the card when the command is input.

FIG. 5 is a diagram illustrating an accessible area when an area definition group designation command is executed by application code “CDCARD”.

FIG. 6 is a diagram illustrating an accessible area when an area definition group designation command is executed with application code “HOKENSHO”.

FIG. 7 is an explanatory diagram of a write command and an internal operation of the card when the command is input.

FIG. 8 is an explanatory diagram of a read command and an internal operation of the card when the command is input.

FIG. 9 is a diagram illustrating an example in which a single-use card is transferred to a multi-purpose IC card in combination.

FIG. 10 is a block diagram showing a configuration of an IC card.

FIG. 11 is a block diagram showing a configuration of a terminal device.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... IC card (portable electronic device) 2 ... Card reader / writer 3 ... Control part 11 ... Control element (control part) 12 ... Data memory (data memory part) 13 ... Program memory (program memory) 14) Definition information area 22 User area 23 Area definition group management group 24, 25 Area definition group

Claims (2)

[Claims] 1. A portable electronic device that operates by receiving a command from an external device, comprising: a plurality of area portions in which data is stored; an area identification code for defining the plurality of areas; and area position information. An area definition unit storing a plurality of area definition information as an area definition information group for each application field, an application code defined according to the application field, and a memory area definition information group corresponding to the application code. , A data memory having a management information storage unit for storing data in association with each other, an input / output unit for selectively transmitting / receiving data to / from an external device, and an area definition information group received via the input / output unit First confirmation means for confirming whether or not the application code in the designated command is stored in the management information storage unit; and A first output means if De is not confirmed that outputs a first response data to the effect that application code matching is not present, if the application code in the first confirmation means is confirmed,
An open means for opening the definition information group of the memory area corresponding to the confirmed application code, and an area identification code in a write command received via the input / output unit is opened by the open means Second confirmation means for confirming whether or not the area identification code is stored in the definition information group of the memory area; and if the area identification code received by the second confirmation means is not confirmed, there is no matching area identification code. And second output means for outputting the second response data of the above. When the application code is confirmed by the first confirmation means and the area identification code is confirmed by the second confirmation means, Only the writing to the area of the memory corresponding to the area identification code is performed, and the definition information group of the memory area is set to the open state by the opening means. If area identification code has not been confirmed in the case and the second check means no portable electronic device being characterized in that so as not to write to the area of the memory. 2. A portable electronic device that operates by receiving a command from an external device, comprising: a plurality of area portions in which data is stored; an area identification code for defining the plurality of areas; and area position information. An area definition unit storing a plurality of area definition information as an area definition information group for each application field, an application code defined according to the application field, and a memory area definition information group corresponding to the application code. , A data memory having a management information storage unit for storing data in association with each other, an input / output unit for selectively transmitting / receiving data to / from an external device, and an area definition information group received via the input / output unit First confirmation means for confirming whether or not the application code in the designated command is stored in the management information storage unit; and A first output means if De is not confirmed that outputs a first response data to the effect that application code matching is not present, if the application code in the first confirmation means is confirmed,
Open means for opening the definition information group of the memory area corresponding to the confirmed application code, and the area identification code in the read command received via the input / output unit is opened by the open means. Second confirmation means for confirming whether the area identification code is stored in the defined information group of the memory area, and if the area identification code received by the second confirmation means is not confirmed, there is no matching area identification code. Second output means for outputting second response data to the effect that the application code is confirmed by the first confirmation means and the area identification code is confirmed by the second confirmation means Only when reading from the area of the memory corresponding to the area identification code is performed, the definition information group of the memory area is set to the open state by the opening means. If if not and the area identification code in said second confirmation means is not confirmed portable electronic device being characterized in that so as not read from the area of the memory.