JPH1063793A - Ic card, and command establishing method for ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To accurately establish a command even in the case of receiving the command to be processed by the program of a nonvolatile memory, by executing the program with the primary information of the command, specifying the kind of the command, and deciding whether or not secondary information is required. SOLUTION: At the time of receiving the primary information (5-byte header) of the command to be processed by an application program (S606), this IC card executes the pertinent application program and delivers the received primary information (S608). The application program specifies the kind of the command by the primary information and returns command kind data as a return value (S614). Then, by the returned command kind data, whether or not the command is provided with the secondary information further and then whether to establish the command only by the received primary information or to establish it by further receiving the secondary information are decided (S616).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention enables a program executable by a CPU to be stored in a non-volatile memory as required, and a command consisting of only primary information, or a primary information and The present invention relates to an IC card that receives a command composed of subsequent secondary information from the outside.

[0002]

2. Description of the Related Art In recent years, an IC card has attracted attention as a new information storage medium replacing a magnetic card. Especially,
Since an IC card with a built-in CPU can realize high security, it is expected to be used in various fields of the advanced information society. Generally, an IC card includes three types of memories, a ROM, a RAM, and an EEPROM, and a CPU that accesses the memories. The EEPROM is a rewritable non-volatile memory, and stores data such as personal information on IC card users. The RAM is a volatile memory used as a work area when the CPU executes a program.
The ROM is a read-only memory, and stores a program indicating a process to be executed by the CPU.

In general, an IC card sends and receives commands and responses by communication with an external device such as a reader / writer, and thereby performs operations such as writing and rewriting data to an EEPROM. The communication procedure between the IC card and the external device is defined in the ISO standard, and one of them is T = 0 of ISO7816 part3.
There is a protocol.

[0004] FIG. 10 is a diagram showing an ISO7816 part3.
FIG. 4 is a diagram showing a format of a command used in the T = 0 protocol defined in FIG. In the T = 0 protocol, commands can be roughly classified into two types. One is a command composed of only a 5-byte header (see case 1 and case 2). The 5-byte header is composed of 5 bytes and is primary information of a command transmitted first to the IC card. The 5-byte header includes CLA indicating the class of the command and IN indicating the type.
S, parameters P1, P2, and five 1-byte data L indicating the length of data following the 5-byte header. The other type of command is a command composed of a 5-byte header and command data (see case 3 and case 4). The command data is secondary information of a command transmitted and received following the 5-byte header. As command data,
For example, when the command is a process for writing data to an IC card, the data to be written corresponds to the command.

In the T = 0 protocol, there are four cases in the communication procedure between the IC card and the external device. FIG. 11 is a diagram showing communication procedures in the four cases.
The first case defines a communication procedure when neither a command nor a response accompanies data.
In the first case, first, a 5-byte header of the command is transmitted from the external device to the IC card. In this case, since the command is composed of only the 5-byte header, the IC card immediately establishes and executes the command upon receiving the 5-byte header. Also,
After executing the command, the IC card informs the status word (SW) of whether or not the command has been normally processed.
1, SW2), and the communication ends.

The second case defines a communication procedure when data is included in the response. In the second case, "L" at the fifth byte of the 5-byte header
Indicates the length of data to be read. When receiving the 5-byte header, the IC card transmits "INS" therein, and then transmits data having a length corresponding to "L". Finally, a status word is returned and the communication ends. In this case, as in the first case, I
The C card establishes the command immediately upon receiving the 5-byte header.

The third case is when the command is accompanied by data after the 5-byte header, while the response is accompanied by no data. In the third case, when the IC card receives the 5-byte header and returns the INS therein to the external device, the external device subsequently transmits data to the IC card. The IC card establishes a command only after receiving all the data. After the data reception ends, a status word is returned from the IC card to the external device, and the communication ends.

[0008] The fourth case is a case where a command accompanies data after a 5-byte header, and a response accompanies data. The fourth case is the same as the third case until data is transmitted from the external device and the command is established in the IC card. Next, the IC card returns a status word including the length information of the data to be returned as a response. The external device prepares a 5-byte header again using the received length information, and then receives data from the IC card according to the same communication procedure as in the second case.

As described above, in the communication using the T = 0 protocol, first, a 5-byte header as primary information is stored in the IC.
Sent to the card. For IC cards, the contents of the 5-byte header (CLA, INS) are checked, and the command
To the fourth case, that is, whether the command involves data as secondary information in addition to the 5-byte header. This is because the content of the subsequent communication procedure and the timing of establishing the command are determined by this determination. Which of the four cases of the T = 0 protocol each command corresponds to is determined in advance in the card design stage. A program for determining the correspondence between the command and each case of the communication procedure according to the agreement is usually stored in a dedicated memory in advance.

[0010] On the other hand, the use of IC cards is expected to be further diversified in the future.
A card is disclosed by the present applicant in Japanese Patent Application Laid-Open No. Hei 7-210642. The application program is E
C stored in a rewritable memory such as an EPROM
The PU is an executable program. The application program is introduced into the IC card as needed after the IC card is manufactured. By introducing an application program, the IC card obtains the advantage that any application (command processing) can be executed according to the usage mode.

[0011]

However, in the IC card in which the above-mentioned application program can be introduced, it is difficult to determine whether a new command executable by the application program follows the communication procedure shown in FIG. However, the ROM of the IC card cannot be known at the design stage. For this purpose, when the IC card receives a 5-byte header of a command to be processed by the application program, the command should be established immediately at that stage, or the command data should be received after receiving the command data transmitted later. There was a problem that it could not be decided whether to establish.

It is an object of the present invention to provide one of the commands to be processed by a program stored in a nonvolatile memory.
It is an object of the present invention to provide an IC card which, when receiving the next information, accurately determines whether to receive the secondary information and establishes the command.

[0013]

According to one aspect of the present invention, there is provided a CPU, a read-only memory for storing a program executable by the CPU,
A rewritable nonvolatile memory for storing a program that can be executed by the CPU as necessary, and a command comprising only primary information including command type information;
Or, when receiving the primary information of the command to be processed by a program stored in the non-volatile memory in an IC card that receives a command composed of the primary information and subsequent secondary information from the outside Executing the program to specify the type of the command, and determining whether the secondary information is required to establish the command based on the specified type. And

According to a second aspect of the present invention, the CPU,
A read-only memory storing a program executable by the PU, and a rewritable nonvolatile memory storing a program executable by the CPU as necessary;
In an IC card command establishment method for receiving a command composed of only primary information including command type information or a command composed of the primary information and the secondary information from outside, the primary information of the command from outside is provided. And determines whether or not the command can be processed by a program stored in the non-volatile memory based on the primary information. If it is determined that the command can be processed, the program is executed. By specifying the type of the command by this, it is determined whether or not the command accompanies the secondary information based on the specified type, if it is determined that the command does not accompany the secondary information, The command is established only with the primary information, and when it is determined that the command accompanies the secondary information, the secondary information is received and the command is received. And establishes the command.

[0015]

Hereinafter, an embodiment of the present invention will be described in more detail with reference to the drawings. FIG.
FIG. 1 is a diagram showing a configuration of an IC card according to the present invention. As shown in FIG. 1, an IC card 10 includes a ROM 12 that is a read-only memory and a RAM 1 that is a volatile memory.
4. EEPR, a non-volatile memory that can be rewritten at any time
OM16 and CPU 1 accessing these memories
8 is provided.

The IC card 10 has a plurality of contacts (Vcc to GND) for exchanging electric signals with a reader / writer (not shown). When the IC card is inserted into the reader / writer, the contacts of the reader / writer
It is connected to the contacts of the C card, and exchanges electrical signals. Different electrical signals are assigned to the respective contacts. For example, Vcc is a contact for receiving supply of a power supply voltage necessary for operating the IC,
O is a contact (serial port) for the CPU to communicate with the reader / writer. Note that the IC of the present embodiment
The card 10 communicates with an external device such as a reader / writer according to the T = 0 protocol.

The CPU 18 is given a command via the above-mentioned contact. When given a command, the CPU 18 executes the program stored in the ROM 12 or the EEPROM 16 to process the command. In the present embodiment, programs to be executed by the CPU 18 are stored in the ROM 12 and the EEPROM 16. The program stored in the ROM 12 is
It is mainly a program related to general-purpose operation that does not depend on the use mode of the IC card (hereinafter, referred to as “general-purpose program”). On the other hand, the program stored in the EEPROM 16 is the above-described application program.

FIG. 2 is a diagram showing an example of addresses allocated to the respective memories according to the present embodiment. In the present embodiment, for example, H'0000 to H'27F
F, H'4000-H'40FF in RAM 14, EEP
Addresses from H'6000 to H'7FFF are assigned to the ROM 16. In the present specification, when “H ′” is added before a numerical value, it means that the numerical value is indicated based on a hexadecimal number.

FIG. 3 is a diagram showing a memory map of the EEPROM 16. In the present embodiment, the EEPROM 16
, Ie, H'6000 to H'600F
Is secured as a system area. A variable NOA is stored at the head address H'6000 of the system area. NOA is stored (registered) in EEPROM 16
This is a variable indicating the number of application programs being executed. NOA is initialized to 0, and one application program is stored in the EEPROM as described later.
The value is incremented by one each time the value is stored in 16. Area from address H'6001 to H'600F (RF
U) is a preliminary blank area for storing various parameters and the like required in the specifications when the use of the IC card is changed in the future.

The area after address H'6010 is an area in which an application program can be stored. FIG. 3 shows two applications as an example.
The state where the program is stored is shown. First
Application programs are H'6010-H '
The second application program is stored in the area of H'6080 to H'60DB in the area of 607F. The application program stored in the EEPROM 16 is converted from an_l to an application
on program (hereinafter abbreviated as “ap.pro.”). an_l and application_name (hereinafter “ap.n
a. ") Is information for identifying the application program. That is, ap. na. Is
The name of the application program, an
_L is ap. na. Is 1-byte data indicating the length (number of bytes).

NA_ADD is the application
2 indicating the start address of the application program stored or to be stored next to the program
It is byte data. In the example of FIG. 3, NA_ADD of the first application program is the start address H ′ of the second application program.
6080 is shown. NA_ADD of the second application program indicates the start address H'60DC of the area where the third application program is to be stored in the future. In the present embodiment, NA_ADD is always ap. na. Is stored in the next area. apl_l is 2-byte data stored next to NA_ADD, and is stored immediately after ap. pro. Indicates the length (number of bytes). ap. pro. Is a set of a program indicating the processing content of the application program and data referred to when the program is executed.

FIG. 4 shows the configuration of Appl used in this embodiment.
It is a figure which shows the format of the Choice Load command (hereinafter abbreviated as "AL command") and the Select command. A. L. The command is a command for storing the application program in the EEPROM 16. The Select command is E
This is a command for selecting a specific application program stored in the EPROM 16. A.
L. The command includes a 5-byte header and four pieces of information following the 5-byte header: an_l, ap.
na. , Apl_l and ap. pro. It is composed of On the other hand, the Select command has a 5-byte header followed by two pieces of information, namely, an_l and ap. na. It is composed of In the present embodiment, as an example, A.I. L. The command INS displays "H'A
4 ”as“ H'F0 ”in the INS of the Select command.
Are assigned respectively.

FIG. 5 is a flowchart of a general-purpose program stored in the ROM 12. Hereinafter, based on FIG.
An outline of the operation of the card 10 will be described. When the IC card 10 and the reader / writer are connected and the IC card is reset (activated) by the reader / writer, the CPU
18 first outputs the initial response information (ATR) as a response (S502). Next, the CPU 18 waits for a command from the reader / writer (S504).
When receiving a command from the reader / writer, the CPU 1
8 judges whether the command is defined in the general-purpose program in the ROM 12 or the application program in the EEPROM (S506). As a result, when it is determined that the received command is an undefined command (S506: Yes), the CPU 18 edits the command error status in a predetermined area of the RAM 14 as response data (S508).

If it is determined in S506 that the received command is not an undefined command (S506: N
o) Next, the type of the command is confirmed (S51).
0). Specifically, the value of the INS of the command is confirmed. Here, when INS is “H′A4”, S5
Then, the process proceeds to step S12, and the process of the Select command is performed. If INS is "H'F0", the process goes to S51.
6, and L. Command processing is performed. On the other hand, when INS is other than the above two values, it is determined that the command is a command to be executed by the application program. As a result, CPU1
In step S514, the process transfers the received command to the selected application program, and executes the application program to perform a process corresponding to the command. S510, S512, S51
4 or S516, the CPU
18 returns the response information edited in the predetermined area of the RAM 14 to the reader / writer (S518). When the processing in S518 ends, the CPU 18 again executes S
Returning to 504, the processing up to S518 is repeated.

FIG. 6 is a flowchart showing the processing performed in step S504 of FIG. 5 in more detail. First, CP
U18 waits until receiving the 5-byte header of the command (S602, S604). When the 5-byte header is received, the value of INS therein is confirmed (S606). If the value of INS is "H'A4" or "H'F
If it is not any of "0", it is determined that the received command is not defined in the general-purpose program, and the process proceeds to S608 (S606: Ye).
s).

In S608, it is confirmed whether any of the application programs stored in the EEPROM 16 has been selected. application·
If it is determined that a program has not been selected, there is no suitable program for processing the received command, so that the CPU 18 edits the undefined command error status in a predetermined area of the RAM 14 as a response. . On the other hand, if it is determined in S608 that the application program has been selected, the received 5-byte header is delivered to the selected application program (S512). Specifically, Select_address stored by Select command processing to be described later is called as a subroutine, whereby the application program is executed. The executed application program refers to the contents of one or both of the CLA and INS of the 5-byte header, and specifies the type of the command based on these contents. More specifically, the command is IS
It is specified which of the four communication procedures of the T = 0 protocol defined in O7816 is to be handled in which case. The specified type is returned from the application program as command type data (S614).

Next, based on the obtained command type data, it is determined which case of the four communication means shown in FIG. 11 the command is transmitted / received.
When following the first or second case, that is, when the command is not accompanied by command data after the 5-byte header (S616: Yes), the received 5
A byte header is established as a command (S61
8). In cases other than the above, that is, when commands are transmitted and received according to the third or fourth case (S616: No)
The command will have command data after the 5-byte header. Then, the CPU 18 transmits the INS of the 5-byte header to the terminal device (S620),
It waits for command data to be transmitted following the 5-byte header (S622, S624). When the data is received (S624: Yes), the 5-byte header and the received command data are established as a command together (S626).

On the other hand, if the value of INS is either "H'A4" or "H'F0" in S606 (S606: Yes), the CPU 18 proceeds directly to S6.
20 to S626. L. Command or Select command is established.

FIG. 7 shows the processing contents of S516 of FIG. L. 9 is a flowchart showing the contents of processing executed by a CPU 18 when a command is received. The CPU 18
A. L. When the command is received, first, the data of the NOA is read by referring to the address H'6000 in the system area (S702). Next, the CPU 18 initializes two variables search_address (hereinafter abbreviated as “sa”) and counter. s. a. Is
The initial address is set to the start address H'6010 of the area for storing the application program (S704). The counter is the N acquired in S702.
Initially, the value of OA is set (S706).

Next, the start address of an area on the EEPROM 16 in which an application program can be newly stored is specified (S708 to S712). Specifically, s. a. Substitute the contents of NA_ADD for c
A series of processing for decrementing the value of counter by 1 (S710, S712) is repeated until the value of counter becomes 0 (S708: Yes). Note that S
NA_ADD at 710 is equal to s.
a. The first NA_ADD appearing after the address indicated by
That is, s. a. Is NA_ADD of the application program specified by. S708
The process from to S712 is performed twice, for example, in the example shown in FIG. That is, s. a. Is updated to H'6080 which is the start address of the second application program by the first processing. In the second processing, the start address of the area in which the third application program can be stored is updated to H'60DC.

Next, a process of writing an application program is executed after the address specified by the above process (S714 to S736). First, the variable wr
item_address (hereinafter abbreviated as “wa.”) to s. a. Is substituted (S714), and w. a. The address indicated by A. L. The command an_l is written (S716). When writing is completed, w.
a. Is updated by adding the length (the number of bytes) of an_l (S718).

Next, the updated w. a. From the address indicated by A. L. Command ap. na. Is written (S720). When writing is completed, w. a.
Is only the value indicated by an_l, that is, the written a
p. na. Is updated again by adding the length (the number of bytes) (S724). Next, later, NA_ADD is stored in the above ap. na. The processing for writing is performed immediately after. That is, the updated w. a. Is the value of the variable NA_
ADD_address (S724), and then the length (2 bytes) of NA_ADD is set to w. a. (S726).

Next, w. a. The address indicated by A.
L. The contents of the command apl_l are written (S72).
8), followed by w. a. Is added to the length of apl_l (S730). Further, w. a. At the address indicated by
ap. pro. Is written (S732), and w. a. Is added to the value indicated by apl_l (S734). next,
w. a. Is written to the address indicated by NA_ADD_address (S736). Also, the NOA of the system area is incremented by 1, and the EEPROM 16
Is recorded that the number of application programs stored in is increased by one (S738). Finally, a status indicating that the application program has been normally completed is edited as response information in a predetermined area of the RAM 14 (S740). L. The command processing ends.

FIG. 8 shows the contents of the processing in S512 of FIG. 5, that is, the CPU 1 when the Select command is received.
8 is a flowchart showing the contents of the processing executed by the control unit 8; In S512, the CPU 18 first sets s. a. Is initially set to the start address of the area where the application program is stored (S802). In the case of this embodiment, s. a. Is set to H′6010. Next, C
PU 18 is N more than the system area of EEPROM 16.
The value of OA is read (S804), and a variable counter is set with the value. For example, as shown in FIG.
If EPROM 16 stores two application programs, counter is initialized to two.

Next, the CPU 18 sequentially searches the application programs stored in the EEPROM 16 as to whether or not there is an application program specified in the Select command (S808 to S816). Specifically, s. a. An_l of the address indicated by ap. n
a. And the Select command an_l and ap. n
a. Are compared (S810). As a result of the comparison, if they do not match, the value of counter is decremented by 1 and s. a. Is substituted for the content of NA_ADD (S814, S816). Here, NA_ADD in S816 is equal to s. a. Is the first NA_ADD appearing after the address shown. S8
16 at s. a. By updating the content of
s. a. Indicates the start address of the application program stored next.

The processing from S810 to S816 is performed in S8
Until the data compared in 12 match, or
The processing is continued until the value of the counter becomes 0 in S808. If the compared data match in S812 (S812: Yes), the application program specified by the Select command is found, and s. a. Means the start address. Therefore, the CPU 18 sets s. a. The length (number of bytes) of an_l and the value indicated by an_l, that is, ap. na. Length (number of bytes), NA_ADD
, And the length of apl_l are sequentially added, and this is added to the variable s. a. (S818). As a result,
s. a. Is ap. In the application program. pro. Indicates the start address of C
PU18 has this s. a. Is stored in a predetermined area on the RAM 14 (S820). Then, the status indicating that the processing of the Select command has been completed normally is stored in the RAM.
14 as response information (S82).
2), end the process.

On the other hand, in S808, the counter
Is 0 (S808: Yes), the EE
This means that none of the application programs stored in the PROM 16 corresponded to those specified by the Select command. In this case, C
The PU 18 stores an error status indicating that there is no corresponding application program in a predetermined area of the RAM 14 as response information (S824), and ends the processing.

FIG. 9 is a flow chart showing processing in S514 in FIG.
3 is a flowchart showing the processing executed by a CPU 18;
If it is determined in S512 of FIG. 5 that the application has been selected, the CPU 18 proceeds to S822 of FIG.
At s. a. Is obtained, and the address indicated by the content is called as a subroutine (S902). Thereby, the application program is executed.

As described above, the IC card 10 of the present embodiment is an IC card capable of introducing an application program into the EEPROM 16 and executing the program. Further, the IC card 10 communicates with an external device such as a reader / writer according to the T = 0 protocol. In the T = 0 protocol, a command is composed of a 5-byte header transmitted to the IC card as primary information first, and command data transmitted as secondary information after the 5-byte header. However, the command data is not provided for all commands, and some commands include only a 5-byte header depending on the type.

When receiving the primary information (5 byte header) of the command to be processed by the application program, the IC card 10 executes the corresponding application program and delivers the received primary information. The application program specifies the command type from the primary information and returns the command type data as a return value. Then, based on the returned command type data, whether the command further has secondary information, and whether the command should be established only with the primary information that has received the command,
Alternatively, it is determined whether the secondary information should be further received and established. That is, in the present embodiment, even when a command defined and executed only in the application program and transmitted according to the T = 0 protocol is transmitted, the command is composed of only the primary information or has the secondary information. It is possible to determine whether or not, and to establish a command accurately.

[0041]

As described above in detail, according to the present invention, even when a command to be processed by a program stored in a nonvolatile memory is received, the command can be accurately established. is there.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an IC card according to the present invention.

FIG. 2 is a diagram showing an example of an address assigned to each memory of the IC card 10;

FIG. 3 is a diagram showing a memory map of the EEPROM 16;

FIG. 4 is a diagram illustrating a format of an Application Load command and a Select command.

FIG. 5 is a flowchart of a general-purpose program stored in a ROM 12;

FIG. 6 is a flowchart showing a process performed in S504 of FIG. 5;

FIG. 7 is a flowchart showing processing contents in S516 of FIG. 5;

FIG. 8 is a flowchart showing processing contents in S512 of FIG. 5;

FIG. 9 is a flowchart showing processing contents in S514 in FIG. 5;

FIG. 10 is a diagram showing a format of a command used in a T = 0 protocol.

FIG. 11 is a diagram showing four cases of a communication procedure in the T = 0 protocol.

[Explanation of symbols]

 10 IC card 12 ROM 14 RAM 16 EEPROM 18 CPU

Claims (2)

[Claims] 1. A CPU comprising: a CPU; a read-only memory for storing a program executable by the CPU; and a rewritable nonvolatile memory for storing a program executable by the CPU as necessary. In an IC card that receives a command composed of only primary information including the following or a command composed of the primary information and the subsequent secondary information from the outside, the command is processed by a program stored in the nonvolatile memory. When the primary information of the command to be received is received, the type of the command is identified by executing the program, and the secondary information is required to establish the command from the identified type. Determining whether or not to do so. 2. A command type information, comprising: a CPU; a read-only memory for storing a program executable by the CPU; and a rewritable nonvolatile memory for storing a program executable by the CPU as necessary. A method for establishing a command of an IC card for receiving a command consisting of only primary information including a primary information or a command consisting of the primary information and secondary information from outside, comprising: receiving primary information of the command from outside; Determining whether or not the command can be processed by a program stored in the non-volatile memory based on the primary information, and executing the program if determined that the command can be processed; Identifying the type of command, determining whether the command accompanies the secondary information based on the identified type, If it is determined that the command does not involve the secondary information, the command is established using only the primary information. If the command is determined to involve the secondary information, the command is A command establishment method for an IC card, comprising receiving and establishing the command.