JPH1074243A - Ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card capable of efficiently utilizing a memory resource and quickly presenting service. SOLUTION: This IC card is provided with information acquiring means S408 to S444 for acquiring reference information to be referred to at the time of executing a command to an exclusive file selected by a file selecting means S406 from the selected exclusive file or a reference file related to the exclusive file or from both the files and generating response information based on the reference information. A transmitting means S428 transmits the response information generated by the means S408 to S444 to the external as a response to the file selecting command.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card capable of selecting one dedicated file from one or more dedicated files in a memory in response to an external command.

[0002]

2. Description of the Related Art An IC card has an integrated circuit (IC) inside the card, exchanges information with an external device, and sends out a calculation result and stored information to the outside, or stores the information. The card performs other operations to change the information being played. IC card is CPU, ROM and EEP
It is composed of a ROM and the like. The ROM is a memory in which a program to be executed by the CPU is stored. When the IC card receives a command from an external device, the CPU
By executing a program stored in the ROM, a process corresponding to the command is executed.

[0003] The EEPROM is a memory for storing various data obtained by the IC card by exchanging information with external devices. A plurality of files are provided in the EEPROM, and data is stored in each file. Access to each file is performed via the CPU, and by setting an appropriate access condition in advance, the file can be accessed only when the CPU determines that the access condition is satisfied. .

[0004] There are three types of files stored in the EEPROM: MF (Master File), DF (Dedicated File) and EF (Elementary File), and these files constitute a hierarchical structure. The MF is a dedicated file that is the basis of the hierarchical structure, that is, a file of the entire data memory. The MF is a file for storing data common to each service. For example, information such as the name, address, and telephone number of the IC card owner is recorded. The DF is a dedicated file located under the MF or another DF, and one DF is set for each service. EF is a basic file located under MF or DF. The EF includes an IEF for storing data to be interpreted and executed when the CPU manages and controls the IC card, and a WEF for storing data used in the application.
There are types. The dedicated file and basic file are
A dedicated file and a basic file defined in ISO / IEC 7816-4, or a file having the same function and function. That is, the file that manages the maximum capacity of the data storage unit for each purpose of use corresponds to the dedicated file according to the present invention, and the file in which the data actually used under the management of the dedicated file is stored in the file. This corresponds to the basic file according to the invention.

[0005] Each of the above-mentioned files is managed by a directory file. The directory file records the file name of the file to be managed, the start address of the memory area occupied by the file, the length from the start area, information on file blocking, a data error detection code, and the like.

When the IC card is used for any service, one DF corresponding to the service is designated from a plurality of files, and a SELECT command instructing selection of the DF is transmitted to the IC card. Must. The SELECT command is an essential command for an IC card whose function is defined in ISO.

FIG. 6 shows an IC card used when an IC card is used.
FIG. 4 is a diagram illustrating a state of information exchange performed between a terminal to which a card is connected and an IC card. When the IC card is connected to the terminal, a reset signal for activating the IC card is transmitted from the terminal to the IC card (S60).
2). After activating the IC card that has received the reset signal, the IC card transmits an ATR to notify the terminal of its type, communication conditions, and the like (S604, S606). A
The terminal receiving the TR sets communication parameters to be used thereafter based on the contents of the ATR (S608). Next, the terminal specifies the directory of the file to be used and transmits the above-mentioned SELECT command to the IC card (S
610). Upon receiving the command, the IC card interprets the content of the command and performs the processing (S612, S61).
4).

FIG. 7 is a flowchart showing the contents of S614, that is, the operation performed when the conventional IC card receives the SELECT command. IC that received the command
The card first interprets the command by referring to the type code or the like of the command (S702). Next, the IC card performs an error check before executing the command (S704). The error check before executing the command refers to a check for a specification other than the format shown in FIG. If an error is found as a result of the error check, a response code indicating that the command could not be executed at a predetermined address in the memory (SW = 6A8)
2′h) is set (S712).

On the other hand, if no error is found, the IC card searches the directory designated by the command (S706). If the directory is not found as a result of the search, a response code indicating that the command could not be executed is set to a predetermined address in the memory, as in S712 (S714).
If the directory is found as a result of the search, a response code (SW = 9000′h) indicating that the command has been executed normally is set (S70).
8). When any of S710, S712, and S714 is completed, the IC card transmits a response code set in a predetermined area of the memory as a response to the SELECT command (S710).

The terminal that has received the response interprets the response as shown in FIG. 6 and confirms that the content of the response is SW = 9000'h, and then issues a command necessary for continuing the service. Send to IC card. As described above, in the conventional IC card, by first selecting a file in the IC card using the SELECT command, it is possible to use the service related to the selected file.

[0011]

With the rapid expansion of the use of IC cards in recent years, a plurality of service organizations can mutually use IC cards issued by each other, For example, in terminals installed in stores and the like, it has been requested that cards distributed by a plurality of issuers can be used alternately. In order to fulfill such a request, each terminal checks whether or not the service can be used for the various connected IC cards, and checks the information necessary for using the service. Acquisition must be done.

[0012] However, a conventional IC card can execute I
The SELECT command of SO performs only a search for a specified directory, and the response includes only information on whether or not the corresponding directory is found as a result of the search. For this reason, in the conventional IC card, when the SELECT command is executed, even if the selected directory is destroyed due to an unexpected situation, until the terminal reads the contents and performs the parity check, I could not know that fact. Further, even if the selected directory is in a closed state, the fact cannot be known until execution of a subsequent command for the directory is rejected. Furthermore, the control information on the number of bytes, the type, the structure, and the like of the file, which is required when using the data of the file, cannot be known.

For this reason, in the conventional IC card, after selecting a file and before starting a service,
In order to check whether a command for performing a service can be used for the file or to obtain control information of a file required for executing the command, one or more commands are further added to an IC card. Had to be sent and executed. As a result, in the conventional IC card, there is a problem that redundant program codes including the processing contents of a plurality of commands exist in the memory, and a limited memory resource is greatly consumed. Also,
Until the service starts, there is a problem that a redundant processing time occurs and the service cannot be provided quickly.

It is therefore an object of the present invention to provide an IC card that efficiently utilizes memory resources and provides services quickly.

[0015]

According to a first aspect of the present invention, there is provided an image processing apparatus comprising: a CPU; a memory having one or more dedicated files accessible to the CPU; When a file selection command to select a dedicated file is received from outside,
In the IC card having the file selecting means for selecting the one dedicated file from the above dedicated files and generating response information, and the transmitting means for transmitting the response information to the outside, the IC card is selected by the file selecting means. Information for obtaining reference information to be referred to when executing a command for the dedicated file, from the selected dedicated file or a base file related to the dedicated file, or both, and generating response information based on the reference information An acquisition unit is provided, and the transmission unit transmits the response information generated by the information acquisition unit to the outside as a response to the file selection command.

According to a second aspect of the present invention, in the IC card according to the first aspect, data of the reference information is normally stored in the selected dedicated file, a basic file related to the dedicated file, or both. Characterized in that it is information on whether or not it has been performed. Claim 3
The invention according to claim 1, wherein in the IC card according to claim 1 or 2, the reference information is information on whether or not execution of a command for the selected dedicated file is restricted. I do. According to a fourth aspect of the present invention, in the IC card according to any one of the first to third aspects, the reference information relates to the dedicated file selected by the file selecting means or the dedicated file. It is characterized by being control information on the basic file or both.

According to a fifth aspect of the present invention, in the IC card according to the fourth aspect, the basic file has a control information storage section for storing the control information, and a status regarding whether the control file has the control information. A status information storage unit for storing information, wherein the information obtaining unit searches the basic file from which the control information is to be obtained based on the information stored in the status information storage unit. . According to a sixth aspect of the present invention, in the IC card according to the fourth or fifth aspect, the file selection command has an argument indicating whether the control information is required, and Is characterized by determining whether to acquire the control information by referring to the argument.

[0018]

Hereinafter, an embodiment of the present invention will be described in more detail with reference to the drawings. FIG. 1 is a diagram showing a configuration of an IC card 10 according to the present invention. ROM 12, RAM 14, E
EPROM 16, CPU 18, I / O interface 1
9 is built-in. The I / O interface 19 is an input / output circuit for transmitting and receiving data.
Communicates with an external device such as a reader / writer via the I / O interface 19. In the ROM 12, the CP
A program to be executed by the U18 is stored, and the CPU 18 controls the IC card 10 based on the program. The RAM 14 is a memory used as a work area when the CPU 18 performs such general control. On the other hand, the EEPROM 16 is a memory for storing original data to be recorded on the IC card 10.

The EEPROM 16 has a plurality of files forming a hierarchical structure, as described in the prior art. FIG. 2 is a diagram showing a file storage image of the EEPROM 16 (FIG. 2D) and a diagram showing the configuration of directory files of MF, DF, and WEF (FIGS. 2A to 2C).
(C)). In each directory file, 2 bits indicated by reference numeral 28 indicate the type of the directory. In the present embodiment, for example, the two bits are set to MF
"00" in the directory, "0" in the DF directory
1 "and" 10 "in the WEF directory.

A page storing the directory of the parent DF (or MF) of the directory is recorded in one byte denoted by reference numeral 30. In the case of the MF directory, since no parent DF exists, no information is stored in this area. Furthermore, MF
The directory and the DF directory use one bit denoted by reference numeral 32 as a flag (hereinafter, referred to as a “blocking flag”) indicating blocking / non-blocking of the file. Here, blocking refers to forcibly restricting access to EFs under the DF (MF). The closure flag is
“0” indicates non-blocking, and “1” indicates blocking.

In the WEF directory, 1 bit denoted by reference numeral 34 is used as a flag (hereinafter, referred to as "FCI flag") indicating whether file control information (hereinafter, referred to as "FCI") is stored in the WEF. I'm using FCI is DF name, location of data to be used, data on how to use the card,
It is information on the number of bytes, type, structure, name, security attribute and other information of the WEF, and corresponds to control information of the present invention. The FCI is information that the command transmitting side needs to know in advance for command parameter setting and the like when executing a command to access the WEF. When the FCI flag is “0”, it means that FCI is not stored in the WEF. When the FCI flag is “1”, it means that the FCI is stored in the first record (36) of the WEF. The FCI flag corresponds to a status information storage unit according to the present invention.

The DF directory uses a 16-byte area indicated by reference numeral 40 as an area for storing the name of the DF. Further, a check code (CRC) for detecting an error in data stored in the directory is stored in an area 38 of the least significant 2 bytes of each directory file.

FIG. 3 shows SELE defined by ISO.
As an alternative to the CT command, S
It is a figure showing the format of an ELECT_N command. CLA in the first byte of SELECT_N command
Is the class of the command, and INS in the second byte is the identification code of the command. P1 and P2 in the third and fourth bytes are command parameters. DATA following the sixth byte is a DF name or the like to be selected, and LC in the fifth byte indicates the length (number of bytes) of the DATA.

In this embodiment, the third bit (b3) and the fourth bit (b4) of the parameter P2 are used as parameters for setting whether or not to request the contents of the FCI in the response. . That is, b3, b4
Is set to “00”, it means that FCI is requested, and when it is set to “11”,
This means that FCI is not required. Further, the DF name may be all or a part of the DF name.
For example, if the DF name consists of 10 alphanumeric characters, only the first 5 digits may be used as DATA.

FIG. 4 is a flowchart showing the operation of the IC card 10 when receiving and processing the SELECT_N command. Hereinafter, the processing content of the SELECT_N command will be described with reference to FIG. The IC card that has received the SELECT_N command first interprets the command by referring to the type code or the like of the command (S402). Next, the IC card performs an error check before executing the command (S404). If an error is found as a result of the error check, the RAM 14
A response code (SW = 6A82'h) indicating that the command could not be executed is set at the predetermined address (S = S).
430).

On the other hand, if no error is found, the IC card searches the directory specified by the command (S406). Search is EEPROM
16 by sequentially referring to the DF names of the directories stored in the directory 16. As mentioned above, SELECT
When only a part of the DF name is used as DATA of the T_N command, the search is performed as a prefix match search of the DF name. If the directory name is not found as a result of the search, a response code indicating that the command could not be executed is set to a predetermined address in the RAM 14 (S432). If the directory name is found as a result of the search, the start address of the area storing the directory name is stored at a predetermined address in the RAM 14 (S408).

Next, using the CRC of the found directory, a CRC bit check on the directory is performed (S410). As a result, if it is determined that there is an error in the directory information, a response code (SW = 6400'h) indicating the error is set to a predetermined address of the RAM 14 (S434). On the other hand, S41
If it is determined that there is no error at 0, then
The closing flag of the directory is checked (S4
12). As a result, when the closing flag is set to “1”, the response code (SW6283′h) indicating that the selected directory is closed is stored in the RAM1.
4 is set to the predetermined address (S436).

On the other hand, if the close flag is set to "0" in S412, then the SELECT
The values of b3 and b4 of the parameter P2 of the _N command are determined (S414). When b3 and b4 are set to “11”, it means that the output of the FCI is not requested. Therefore, the IC card 10 determines that the specified file is found at a predetermined address of the RAM 14. Only the response code SW = 9000'h is set (S43
8). On the other hand, if b3 and b4 are set to “00”, it means that FCI is requested,
Next, the WEF including the FCI under the selected directory
Is searched (S416). Specifically, a WEF directory whose parent directory is the selected DF and whose FCI flag is “1” is searched. As a result, if the corresponding WEF directory is not found, the designated DF is selected but the FCI cannot be obtained. Only the meaningful response code SW = 9000'h is set (S44).
0).

On the other hand, if the corresponding WEF directory is found, the CRC bit of the directory is checked (S418). As a result, when an error is detected, a response code (SW = 6400'h) indicating that the WEF having the FCI exists but the FCI data cannot be acquired is set to a predetermined address of the RAM 14 (S442). . If no error is detected in S418, the corresponding WE
The FCI in the first record of F is read, and a CRC bit check is performed on the FCI (S4).
20). As a result, when an error is detected, S4
42, there was a WEF with FCI,
Response code (S
(W = 6400′h) is set to a predetermined address in the RAM 14 (S444).

On the other hand, if no error is detected in S420, the obtained FCI is stored in RAM
The address is set to 14 predetermined addresses (S422). Also,
Based on the address stored in S408, the entire DF name of the selected DF is stored in RAM 14 following the FCI.
Is set to (S424). Further, the response code SW = 9000'h is also set in the RAM 14 following the DF name (S426). Finally, S426 or S43
After any of the processes from 0 to S444 is performed,
The IC card 10 transmits a response code or the like set in a predetermined area of the RAM 14 to the terminal as a response to the SELECT_N command (S428).

FIG. 5 is a diagram showing the structure of the response transmitted to the terminal in S428 of FIG. The response basically includes a data field and a subsequent part (FIG. 5A). The data field includes data to be transmitted (DATA) and le indicating the length of the data.
n, and Tag indicating that the information to be transmitted is a response. The succeeding part is a response code.

FIG. 5B shows steps S422 to S42 in FIG.
When transmitting information set up to 6 as a response, the configuration of the response is shown. In this case, in the DATA of the data field, the FCI acquired in S418 and the DF name acquired in S406 include a tag for identifying each of them and l representing the length of the data.
It is arranged with en. A response code 9000'h is set in the subsequent part. On the other hand, SEL
When the processing of the ECT_N command is completed through any of the processing from S430 to S444, the configuration of the response has the format shown in FIG. In this case, there is no DATA in the data field, and the response code is 6A82'h, 6400'h, 62
It is set to either 83'h or 9000'h.

As described above, when the IC card 10 of the present embodiment transmits the SELECT_N command,
Select the specified file, check the CRC bit of the selected file, check the blocking flag,
The FCI is acquired, and a response including such information is transmitted. Here, the CRC bit check is a process for acquiring information to be referred before starting the service from the viewpoint of maintaining the reliability of the IC card. For example, if the service is continued on the basis of the erroneous information after the partial information of the selected file is deleted, the security of the transaction in the service is impaired. .

The check of the blocking flag is a process for acquiring information that must be referred to before starting the service from the viewpoint of maintaining the security of the IC card.
File blocking is a function provided to enable the IC card issuer to stop providing services when there is a suspicion that a card has been illegally used. Therefore, if the information on whether or not a file is in a blocked state is not referred to before the service is started, the function of the file is not required.
The significance of the C card is lost. Further, a process of directly accessing data of a file, such as writing data to or reading data from a file, cannot be performed without knowing the format of data in the file. Therefore, obtaining the FCI from the file in advance is also an essential item for executing the service.

That is, in the present embodiment, a series of processes conventionally performed using a plurality of commands before starting a service, that is, a process of selecting a file, and
Executing, with a single command, the process of acquiring information that should be referred to before providing a service, from the viewpoint of maintaining the security and reliability of service provision, or from the viewpoint of actually handling file data And As a result, in the IC card according to the present embodiment, the program existing in the memory does not become redundant because it includes a plurality of commands used for the above-described series of processing, and the finite memory resources are efficiently used. It has become possible. In addition, by repeatedly executing a series of processing such as command reception, processing, and response for each of a plurality of commands, it is possible to avoid a situation in which processing time until service start is increased and to provide a service promptly. It has become.

On the other hand, in the present embodiment, an FCI flag is provided in the directory of the WEF so that it can be determined whether or not the FCI stores the FCI. Therefore, it is possible to quickly search for a file having FCI from a plurality of existing WEFs. In the present embodiment, some of the parameters of the SELECT_N command are used as parameters for specifying whether to include FCI in the response. This allows
FCI only when necessary according to the information possessed by the terminal
Can be requested.

[0037]

As described in detail above, according to the present invention, it is possible to provide an IC card that efficiently utilizes memory resources and provides services quickly. In particular, according to the invention according to claim 5, it is possible to quickly search for a basic file having control information. Furthermore, according to the invention described in claim 6, it is possible to arbitrarily select whether or not to include the control information in the response to the file selection command.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an IC card according to an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a file storage image and a directory file in an EEPROM 16;

FIG. 3 is a diagram showing a format of a SELECT_N command.

FIG. 4 is a flowchart showing the operation of the IC card 10 when receiving and processing a SELECT_N command.

FIG. 5 is a diagram showing a configuration of a response to a SELECT_N command.

FIG. 6 is a diagram showing how information is exchanged between a conventional IC card and a terminal.

FIG. 7 is a flowchart showing an operation performed when a conventional IC card receives a SELECT command.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 IC card 12 ROM 14 RAM 16 EEPROM 18 CPU 19 I / O interface

Claims (6)

[Claims] 1. A system comprising: a CPU; and a memory having one or more dedicated files accessible by the CPU;
File selection means for selecting the one dedicated file from the one or more dedicated files and generating response information when a file selection command indicating that the one dedicated file should be selected is received from outside; An IC card having transmission means for transmitting the response information to the outside, wherein the reference information to be referred to when executing a command for the dedicated file selected by the file selection means is selected from the selected dedicated file or An information acquisition unit for acquiring response information based on the reference information, the information being acquired from a basic file or both of the dedicated file, and the transmission unit is configured to transmit the response information generated by the information acquisition unit to the file selection command. An IC card, which is transmitted to the outside as a response to the IC card. 2. The IC card according to claim 1, wherein the reference information relates to whether or not data is normally stored in the selected dedicated file or a basic file related to the dedicated file or both. An IC card characterized by being information. 3. The IC card according to claim 1, wherein the reference information is information on whether or not execution of a command is restricted for the selected dedicated file. IC card to do. 4. One of claims 1 to 3
3. The IC card according to claim 1, wherein the reference information is control information on the dedicated file selected by the file selection unit, a basic file related to the dedicated file, or both. 5. The IC card according to claim 4, wherein the basic file stores a control information storage section for storing the control information, and status information for storing status information on whether or not the control information has the control information. An IC card, comprising: a storage unit, wherein the information obtaining unit searches for the basic file from which the control information is to be obtained based on information stored in the status information storage unit. 6. The IC according to claim 4 or claim 5.
In the card, the file selection command has an argument indicating whether or not the control information is required, and the information acquisition unit determines whether to acquire the control information by referring to the argument. An IC card, comprising: