JPH1031626A - Ic card system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily change the key data when the communication is carried out between an IC card and a read/write device by adding plural key data areas to the nonvolatile memory of the read/write device together with a correspondence table having the same structure as that of the IC card. SOLUTION: The nonvolatile memory of an IC card 200 includes plural key data areas 202, plural application data areas 201 and a correspondence table 203 which shows the correspondence between the key and application data. On the other hand, the nonvolatile memory of a read/write device 100 includes plural key data areas 101 and a correspondence table 102 which has the same structure as the table 203 of the card 200. Under such conditions, the number of key data is set different from the number of application data. As a result, the length of the key data can be easily changed and therefore the key data can be easily changed when the communication is carried out between the card 200 and the device 100.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card system including an IC card and a read / write device. This is characterized by the configuration of the IC card and the read / write device when the data is commonly held by the read / write device facing the device.

[0002]

2. Description of the Related Art Conventionally, key data used for granting access right to data stored in an IC card or encrypting data in the IC card has a pair of data paired with an application data area when the IC card is issued. 1, the key data is stored in the management area of the application data area. As a method of associating the key data area with the application data area on a one-to-one basis, at the time of issuance, a table in which the key data area and the start address of the application area are associated in a nonvolatile memory in the IC card is fixed. After the issue, it could not be changed.

FIG. 6 shows a procedure for canceling an access right to an IC card and a correspondence relationship between a key data area and an application area between a conventional IC card and a read / write device. Also, the key change procedure according to the conventional method is shown in FIG.
Shown in In FIG. 6, 100A is a conventional read / write device, which has the following parts. That is, 101 is a key data area in which key data KD1, KD2, ..., KDn are stored. 103A is a key data reading means for the address to be read / written, 105A
Is a key data index KIDi (i = 1, 2,...,
n) and the verification key data KDi-T, 106 are error processing means, and 107 is application execution means.

Reference numeral 200A is a conventional IC card, which comprises the following parts. That is, 201 is an application data area protected by a key, 202 is a key data area, 204 is means for receiving information from the read / write device 100A, 205 is means for reading key data from a key data index, and 206 is key data. Comparison means,
208 is a read right or write right grant unit for the application data AD corresponding to the key data KD, 209 is an NG response sending unit, and 210 is an OK response sending unit. The read / write device 100A and the IC card 200A constitute an IC card system.

Next, the operation of the conventional IC card system of FIG. 6 will be described with reference to the flowchart of FIG. In addition,
(S41) to (S52) in FIG. 7 indicate each step.

The read / write device 100A prepares for changing the key of the IC card (S41), and the IC card 200A
The new key data KDi-T corresponding to the application data ADi in the application data area 201 protected by the key is set in the key change command (S42).

The key data index KIDi to be changed and the new key data KDi-T are transmitted by a key change command (S
43).

Next, the IC card 200A receives the key data index KIDi and the new key data KDi-T (S44), and then the new key data KDi-T is placed in the key data area corresponding to the key data index KIDi. Write by overwriting (S45). It is checked whether or not the writing was successful (S46). If the writing was successful, an OK response is transmitted (S47). When the read / write device 100A receives this OK response, the read preparation is completed (S48), and the process proceeds to the next key rewriting (S49). In step (S46), if NG, the NG response is transmitted (S50), and the NG response is received (S5).
1), the read / write device 100A proceeds to error processing (S52). In the above-mentioned conventional method, when changing the key data, it is necessary to send a key change command in which new key data is set by the number of pieces of key data to be changed.

[0009]

Therefore, if it is necessary to change the key data KD in the IC card 200A for some reason, the key data storage pointers stored in the respective application data areas 201 and the changed key data storage pointers Key data needs to be changed using the key change command. The key data area 202 needs to correspond to the application data area 201 in advance in one-to-one correspondence when the IC card 200A is issued, and the memory capacity occupied by the key data KD depends on the length of the key data determined at the time of issuance.
For this reason, if the length of the key data is to be changed after the issuance, the correspondence between the key data area 202 and the application data area 201 must be reviewed and reissued.

SUMMARY OF THE INVENTION The present invention has been made to solve these problems. It is an object of the present invention to easily change the key data before and after the change when changing the key data by communication between the IC card and the read / write device. The purpose is to change the length of the data or to change the key data easily without having to change the key data one by one with the key change command.

[0011]

According to the first aspect of the present invention, there is provided an IC card having a nonvolatile memory,
The read / write device reads data stored in the IC card and executes an application using the data, and stores a plurality of key data common to both in the nonvolatile memory of the IC card and the read / write device. Performs access right control of data in the IC card,
Alternatively, this common key data is used for communication data encryption / decryption between the IC card and the read / write device.
In the C card system, the nonvolatile memory of the IC card is provided with a plurality of key data areas, a plurality of application data areas, and a correspondence table showing the correspondence between these key data and application data. In addition, a plurality of key data areas and the same correspondence table as the correspondence table provided in the IC card are provided.

Further, the invention according to claim 2 is such that the number of key data does not match the number of application data.

According to a third aspect of the present invention, there is provided an IC card having a non-volatile memory and a read / write device for reading data stored in the IC card and executing an application using the data. Also, a plurality of common key data common to both are stored in the non-volatile memory of the read / write device to control the access right of the data in the IC card, or this common key data is transferred between the IC card and the read / write device. In an IC card system used for encryption / decryption of communication data, a key data area and a plurality of pointers to the key data area are stored in a nonvolatile memory of the IC card in correspondence with application data. , A key data area in the nonvolatile memory of the read / write device and an IC card The is provided with a same correspondence table as the corresponding table.

According to the invention described in claim 4, the number of pointers to the key data area does not match the number of application data.

[0015]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The invention according to claim 1 in the IC card system according to the present invention is such that when a key for each application data area is changed between an IC card and a read / write device, the changed key data itself is used. Since it is not necessary to communicate and only the number after the change of the correspondence table is communicated, the key data can be easily changed.

According to the second aspect of the present invention, since the number of key data and the number of application data are not one-to-one, it is difficult to infer the key data and the memory of the key data area can be easily saved. Things.

According to the third aspect of the invention, when the key for each application data area is changed between the IC card and the read / write device, it is not necessary to communicate the changed key data itself, and only the changed pointer of the correspondence table is used. Is transmitted, the key data can be easily changed.

According to a fourth aspect of the present invention, since the number of pointers to the key data area and the number of application data are not one-to-one, it is difficult to analogize the key data and to easily save memory in the key data area. Can be done.

[0019]

FIG. 1 is a block diagram showing the structure of an embodiment of the present invention. In FIG. 1, the same parts as those in FIG. 6 are denoted by the same reference numerals. In FIG. 1, reference numeral 100 denotes a read / write device, which has the following units. That is, reference numeral 101 denotes a key data area in which key data KD1, KD2,..., KDn are stored. Reference numeral 102 denotes a correspondence table between key data and an address, which will be described in detail later. Reference numeral 103 denotes a correspondence table reference means for address data AD to be read / written; Reference numeral 106 is an error processing means, and 107 is an application execution means. An IC card 200 has the following parts.
That is, 201 is an application data area protected by a key, 202 is a key data area, 203
Is a correspondence table, 204 is means for receiving information from the read / write device 100, 205 is means for reading key data KD from the key data index, 206 is key data comparison means, 207 is correspondence table reference means, and 208 is key data ( KD) means for granting a read or write right for the address corresponding to KD), 209 an NG response sending means, 21
0 is an OK response sending means.

FIG. 2 shows the correspondence table 203 of the IC card 200 (the correspondence table 10 of the read / write device 100).
FIG. 4 is a diagram for explaining the configuration of 2), and includes a key data index KI;
Di (i = 1, 2,..., N) and application data index AIDi (i = 1, 2,..., N)
Is a correspondence table.

FIG. 3 shows an embodiment of the correspondence table 203 (102) using pointers. K in this figure
DP1, KDP2,..., KDPn are pointers to the key data area and indicate the addresses of the key data area. The addresses pointed to by each are different. If the key data length from the address indicated by the pointer exceeds the highest address of the key data area, it is assumed that the key data area is connected to the lowest address.

Next, the operation of the embodiment of FIG. 1 will be described with reference to FIGS. 4 and 5 by dividing it into (1) normal operation and (2) key change operation. Note that (S1) to (S15) in FIG. 4 and (S21) to (S32) in FIG. 5 indicate respective steps.

(1) Normal Operation (See FIG. 4) In this operation flow, only the access right release operation for enabling the read (read) operation and the write (write) operation to the IC card 200 is described.

First, the read / write device 100 prepares to read the application data area (ADi) of the IC card 200 (S1), and the correspondence table 1
02 to application data A of IC card 200
The key data index KIDi corresponding to Di is extracted (S2). Access right verification key data KD corresponding to key data index KIDi from key data area 101
i-T is taken out (S3). Key data index KI
Di and the verification key data KDi-T are transmitted to the IC card 200, and the verification is performed by the verification function of the IC card 200 (S
4).

The IC card 200 receives the key data index KIDi and the verification key data KDi-T (S5), and performs a parity check and an error correction code check.

Next, key data KDi-C corresponding to the key data index KIDi is extracted from the key data area 202 in the IC card 200 (S6).

The received key data KDi-T is compared with the key data KDi-C extracted from its own key data area (S7), and if they match, the process proceeds to the next step (S8), and if they do not match, the process proceeds to step (S13). Move to

Correspondence table 203 in IC card 200
From the application data area 201 corresponding to the key data index KIDi (S8). Step (S
Application data area 201 corresponding to application data index AIDi extracted in 8)
Is unlocked (S9). An OK response is transmitted to the read / write device 100 to indicate that the process has been normally completed (S10).

When an OK response is received from the IC card 200 (S11), the application data area 2
01, the access right to the application data ADi has been unlocked. Next, a read / write command is transmitted to the IC card 200 to read data stored in the application data ADi and to read data to the application data area 201. Is written (S12).

On the other hand, in step (S7), an NG response is transmitted to the read / write device to indicate the abnormal termination (S13).

When an NG response is received from the IC card 200 (S14), either an error has occurred in the IC card 200 or an incorrect instruction has been given to the IC card 200. Transition. The error recovery method is out of the scope of the present invention and will not be described (S15).

In FIG. 4, the key data index KIDi and the verification key data KDi-T are transmitted from the read / write device 100 to the IC card 200. However, instead of the key data index KIDi, the IC card is used as the application data index AIDi. The key data index KIDi may be obtained by referring to the correspondence table 203 with the application data index AIDi in 200.

(2) Key change operation (see FIG. 5) Before the rewrite operation, it is checked whether the correspondence table 203 on the IC card 200 side is the old table or has already been changed to the new table, and then the following rewrite operation is performed. Perform (S21).

In the read / write device 100, a new correspondence table is created by rearranging the correspondence table 102. For example, in the old correspondence table, the correspondence between the application data index and the key data index is AID1.
And KID1, AID2 and KID2, ..., if there is a one-to-one correspondence, this combination is AID1
, KID3, AID2 and KID1,... Are created (S22). The new correspondence table is transmitted to the IC card 200 as a correspondence table change command (S23). The new correspondence table is received as a correspondence table change command (S24). It is checked whether there is a transmission error such as a parity error or an error correction code in the new correspondence table reception (S25).
If there is no error, the process proceeds to the next step (S26), and if a reception error occurs, the process proceeds to step (S31). If there is no reception error in the new correspondence table, the new correspondence table is overwritten and stored in the old correspondence table (S26).

It is checked whether or not the overwrite storage is completed normally (S27). If the writing is completed normally, go to the next step (S28). If the writing is not completed normally, go to step (S31). Transition. Note that, when the process ends normally, flag data indicating that the state of the correspondence table is a new table is written to the nonvolatile memory.

An OK response is transmitted to notify the read / write device 100 that the new correspondence table has been successfully changed (S28).

When the OK response is received from the IC card 200, the read / write device 100 receives the IC card 200.
It can be understood that the correspondence table on the side has been changed normally (S
29), (S30). In addition, an NG response is transmitted to indicate that an abnormality has occurred (S31). When the NG response is received from the IC card 200 (S32),
Error processing is performed (S33).

[0038]

The effects of the present invention are as follows.

According to the present invention, a plurality of key data areas, a plurality of application data areas, and a correspondence table indicating correspondence between these key data and application data are stored in the nonvolatile memory of the IC card. A correspondence table in which one key data area and a plurality of pointers to the key data area are stored in correspondence with the application data is provided, and a plurality of key data areas or pointers to the key data areas are stored in the nonvolatile memory of the IC card read / write device. Since the correspondence table that is the same as the correspondence table in the IC card is provided, it is not necessary to send the key data itself from the IC card read / write device to the IC card when it is necessary to change the key data. The key can be changed just by coming, so changing the key data on the IC card is It can be in.

According to the second and fourth aspects of the present invention, the number of key data or the number of pointers to the key data area does not match the number of application data. If the number is smaller, you can select unused key data when changing the key data, and vice versa, you can change the key data by reusing the keys of different application data, and in multiple application data areas If you want to use the IC card's memory efficiently by sharing the key data area, or if the IC card's memory has enough space, create a key data area more than the number of application data areas and store the key in case. Can be prepared.

In the normal operation example of the embodiment, the case where the access right is unlocked by the plaintext key is shown, but the correspondence table can be used for changing any combination of keys used in the IC card. it can. For example, it can be used for changing a key used for encryption of communication data. In this case, in the conventional method, the key data cannot be changed unless the key data itself is sent to the IC card by the key change command. However, in the present invention, the key can be changed by sending the correspondence table. The key can be changed without sending it out on the communication path between the smart card and the IC card, thereby improving security.

[Brief description of the drawings]

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention.

FIG. 2 is a diagram illustrating a configuration example of a correspondence table.

FIG. 3 is a diagram showing another configuration of the correspondence table.

FIG. 4 is a diagram showing an operation flow during a normal operation of the present invention.

FIG. 5 is a diagram showing an operation flow during a key change operation of the present invention.

FIG. 6 is a diagram showing a conventional example.

FIG. 7 is a diagram showing a flow of a conventional key changing operation.

[Explanation of symbols]

REFERENCE SIGNS LIST 100 read / write device 101 key data area 102 correspondence table 103 correspondence table reference means for AD to be read / written 104 key data read means 105 key data index and verification key data 106 error processing means 107 application execution means 200 IC card 201 application data area 202 key data area 203 correspondence table 204 receiving means 205 key data reading means 206 key data comparing means 207 correspondence table referring means 208 address read right or write right granting means 209 NG response sending means 210 OK response sending means

Claims (4)

[Claims] 1. An IC card having a non-volatile memory,
The read / write device reads data stored in the IC card and executes an application using the data, and stores a plurality of key data common to both in the nonvolatile memory of the IC card and the read / write device. Performs access right control of data in the IC card,
Alternatively, the common key data is used for encrypting / decrypting communication data between the IC card and the read / write device.
In the C card system, a plurality of key data areas, a plurality of application data areas, and a correspondence table indicating correspondence between the key data and the application data are provided in a nonvolatile memory of the IC card. An IC card system, wherein a plurality of key data areas and the same correspondence table as the correspondence table provided in the IC card are provided in the extensible memory. 2. The IC card system according to claim 1, wherein the number of key data does not match the number of application data. 3. An IC card having a nonvolatile memory;
A read / write device that reads data stored in the IC card and executes an application using the data is stored in the nonvolatile memory of the IC card and the read / write device. In the IC card system, the access right of the data in the IC card is controlled or the common key data is used for encryption / decryption of communication data between the IC card and the read / write device. In the non-volatile memory, there is provided a correspondence table in which one key data area and a plurality of pointers to the key data area are stored in correspondence with application data, and one key data area and the The same correspondence table as the correspondence table provided on the IC card is provided. IC card system. 4. The IC card system according to claim 3, wherein the number of pointers to the key data area does not match the number of application data.