JPH11110459A - Ic card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To shorten the processing time concerning various kinds of transaction data and to provide high security by executing control and operation related to the move of data and the move of history information of a history information generation and storage means inside all the IC card. SOLUTION: At the time of an electronic transaction, the money amount stored in a RAM 14 or the like inside the IC card 10 is subtracted from the money amount previously stored in an EEPROM 13 inside that IC card 10, and the signature data of data such as the resulting money amount and the date and time of that transaction are generated inside the IC card 10. Afterwards, these signature data are moved inside the IC card 10 and stored at the prescribed address of the EPROM 13 or the like. Thus, since a LOG file is generated and read while using the RAM 14 or the like for a CPU 11 built in the IC card 10, all the moving of data is performed inside the IC card 10. Therefore, the move contents of data can not be recognized from the outside of the IC card 10.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card suitable for a system handling electronic cash, and more particularly to an IC card suitable for processing LOG data including data indicating a transaction history.

[0002]

2. Description of the Related Art As a conventional IC card, there is an IC card having a function as coins or bills, that is, a function as electronic cash. In such an electronic cash system,
High security is required. Therefore, when an IC card is used in an electronic cash system, the transaction history data is stored in an IC to confirm the validity of the transaction.
Store in card and authenticate. Here, the history data of the transaction is called LOG data.

When LOG data is stored in an IC card, the data to be stored is transmitted to the IC card for each record by the main body of the IC card system (upper application). In a conventional IC card, the LOG data is stored in a memory for each record. Note that authentication data may be added to each record to be stored. In this case, TAC (Transaction Aurhentcation Code) as authentication data is generated for each record, the TAC is added to each record, and then stored in the memory.

[0004]

However, the conventional I
For C card, the amount and coin ID for each transaction
Since transaction data including (coin identification number), transaction time, transaction location, and the like is transmitted from the higher-level application to the IC card and stored in the storage means in the IC card, there are also restrictions on communication speed and the like. There has been a problem that a great deal of processing time is required for each transaction. Here, the limitation of the communication speed means that the communication speed between the host application and the IC card is generally reduced to serial communication or the like, so that the communication speed is reduced.

Further, in the conventional IC card, since transaction data is transmitted from an upper application to the IC card, the transaction data may be forged or falsified, and there is a problem in security.

The present invention has been made under such a background, and an object of the present invention is to provide an IC card having a short processing time for various kinds of transaction data and high security.

[0007]

In order to solve the above-mentioned problems, the invention according to claim 1 is connected to an external device,
It has rewritable memory means comprising a plurality of memory areas, and arithmetic means for performing data processing based on an external command, and stores data generated by electronic transaction transmitted from the external device in the memory means. In the IC card, the arithmetic unit fetches one or a plurality of data related to the electronic transaction from one memory area of the memory unit, generates the data as history information, and moves the history information to another memory area. History information generating and storing means for storing and storing the history information, and history information reading means for reading out the stored history information to the outside of the memory means. The control and the operation related to the movement of the history information are all executed inside the IC card.

According to a second aspect of the present invention, in the IC card according to the first aspect, the other memory area is set in advance as one of the areas of the memory means.

According to a third aspect of the present invention, in the IC card according to the first aspect, the history information generation / storage means stores the data to be moved when the other memory area is filled with the data to be moved. Are sequentially overwritten and stored from the head position in the other area.

According to a fourth aspect of the present invention, in the IC card according to the first aspect, the history information is one or more of one of a subtraction unit, an addition unit, a compression unit, and an encryption unit for data relating to a transaction. It is characterized by being generated by means of (1).

According to a fifth aspect of the present invention, in the IC card according to the first aspect, the history information reading means sequentially reads the history information, and reads the last information of the history information. And transmitting a predetermined signal to the external device connected to the IC card, and shifting a read position to a predetermined position in the other memory area.

According to a sixth aspect of the present invention, in the IC card according to the first aspect, the history information reading means sequentially reads the history information stored most recently.

According to a seventh aspect of the present invention, in the IC card according to the first aspect, the history information reading means sequentially reads the history information stored from the oldest.

[0014]

Embodiments of the present invention will be described below with reference to the drawings. A: Configuration of Embodiment FIG. 1 is a block diagram showing an outline of an IC card system using an IC card according to an embodiment of the present invention. The external device 1 is a so-called host computer of the present IC card system. And the external device 1 is an IC
Data can be exchanged with the card 10. Further, the external device 1 stores transaction data 2 including a product name, a product price, a store name, a transaction date and time, a transaction amount, and the like. These transaction data 2 are data generated by an electronic transaction.

On the other hand, the IC card 10 generates the designated file 3 by fetching transaction data 2 from the external device 1 at the time of electronic transaction and storing the data in a predetermined memory area. After that, the IC card stores the specified file 3
The LOG file 4 is generated by moving a part of the data in the above to another memory area. This LOG file 4 is information indicating the history of electronic transactions. Further, the IC card 10 sends a part of the LOG file 4 to the external device 1 in response to a LOG file read command from the external device 1. Here, the movement of the designated file 3 and the LOG file 4 are all executed inside the IC card 10.

For example, a predetermined amount is included in the designation file 3. Then, when conducting an electronic transaction, new transaction data from the external device 1 is taken in, and the transaction data is converted into a new designated file 3 and a LOG file 4, thereby subtracting the electronic transaction amount from the predetermined amount. I do.

FIG. 2 is a block diagram showing the structure of an IC card according to one embodiment of the present invention. In FIG.
The C card 10 is a card having a built-in integrated circuit. C
The PU 11 is an integrated circuit that controls the operation of the IC card 10. The ROM 12 is a non-volatile memory that stores a program that defines the operation of the IC card 10 and the like. The program that defines the operation of the IC card 10 may be stored in the EEPROM 13. EEPROM
Reference numeral 13 denotes a nonvolatile memory that stores data in a rewritable manner. The RAM 14 is a volatile memory that temporarily stores data.

B: Operation of Embodiment Next, the operation of the IC card having the above configuration will be described.
FIG. 3 is a flowchart showing the command processing of the present IC card. First, the initial state will be described. EEPROM1
3, a current LOG address is stored in a top directory in the EEPROM 13 in advance. Here, the current LOG address refers to the address of the LOG data that the CPU 11 is currently paying attention to. Also, L
The OG data is, for example, data including a plurality of amounts in electronic transactions, transaction times, transaction locations, or signature data of a trader. That is, the LOG data is data indicating the history of the transaction.

Then, first, a reset process is performed.
Immediately after the reset, the CPU 11
3 to the LOG in RAM 14
It is set to the C address (S1). As a result, the current LOG address is saved to the LOGC address in the RAM 14. Here, when the files in the EEPROM 13 have a hierarchical structure, each DF is selected to access the LOG file.

Thereafter, the IC card 10 receives a command from a host application in the IC card system, and the CPU 11 determines whether the command is a LOG generation command (S2). If the command is a LOG generation command, the CPU 11 executes the LOG generation command shown in FIG.
A generation process is performed (S3).

On the other hand, if it is not a LOG generation command in step 2, the CPU 11 determines whether it is a LOG read command (S4). Where LOG
If it is a read command, the CPU 11 performs a LOG read process shown in FIG. 4 (S5). If the command is neither a LOG generation command nor a LOG read command, the command is invalid, and the CPU 11 returns an error status to the upper application (S
6).

FIG. 4 is a flowchart showing generation of a LOG file in the IC card 10. First, CP
U11 determines whether the current LOG address in the directory is the last address (last address) in the LOG address (S21). This processing checks whether or not LOG data has already been written to all LOG addresses. Note that the last address is set in advance in the address space of the EEPROM 13.

If the current LOG address is not the last address, the CPU 11 checks the entire record size of the LOG data. Then, it is determined whether or not there is a record whose total record size is larger than the size of the buffer in the IC card 10 (S22). This is because the size of each record is non-uniform, but the size of the buffer is predetermined, so that a LOG file cannot be generated for a record that does not fit in the buffer. If the total record size is smaller than the buffer size, the CPU 11 updates the current LOG address (S23). That is, the next LOG to the current current LOG address
Let the address be the new current LOG address. Then, LOG data, which is a record specified by the host device, is written to the LOG file of the new current LOG address (S25).

On the other hand, in step 21, the current L
If the OG address is the last address in the LOG address, the LOG start address is set to L in the RAM 14.
It is set to the OGC address (S26). And LO
Set the G start address to the current LOG address. (S27). Further, an overwrite flag is set (S28). This overwrite flag is a flag indicating that LOG data has already been set to all LOG addresses. Thereafter, all of the designated LOG records are written to the LOG file (S25). Thus, L
An OG file is generated. Then, 9000h is set as the status indicating "normal", and the status is sent to the upper application.

In step 22, if the total record size of the LOG data is larger than the size of the buffer in the IC card 10, the CPU 11 returns an error status to the host device. This processing is performed when a LOG file cannot be generated.

FIG. 5 is a flowchart showing a process of reading a LOG file in the IC card 10. First, the CPU 11 reads a record of a file of the LOGC address in the RAM 14 into a buffer (for example, the RAM 14) of the IC card 10 (S31). Then, the CPU 11 determines whether or not the content of the LOGC address is the head address in the LOG file.
Here, if the address is not the head address, the next LOG address is set to the contents of the LOGC address (S3).
3).

Thereafter, the CPU 11 determines whether or not the content of the LOGC address is the current LOG address in the directory (S34). Here, if the content of the LOGC address is not the current LOG address,
Since the content of the LOGC address has not reached the final LOG, the status indicating "normal" is 900.
0h is set, and the status is sent to the host application (S35). This completes the reading process of the LOG file.

On the other hand, if the content of the LOGC address is the current LOG address in step 34, an end of file (EOF) indicating the end of the file is set as a status (S38).

On the other hand, if LOGC is the head address in step 32, the CPU 11 determines whether the overwrite flag is "1" (S36). here,
If the overwrite flag is not "1", the current LOG address in the directory is set to the LOGC address (S37). Then, the end of file (EOF) is set as the status (S38). This is LO
The reading process of the G file is completed.

On the other hand, if the overwrite flag is "1" at step 36, the last address file is
It is set to the OGC address (S39). After that, 9000h, which is a status indicating "normal", is set, and the status is sent to the upper application (S3).
5). This completes the reading process of the LOG file.

FIG. 6 is an explanatory diagram showing a file structure in the IC card 10. The top address of the LOG file and the last address are stored in the directory of the upper file. In addition, the top directories include:
The current LOG address and the overwrite flag are stored. In the directory of the LOG file, an area start address and an area last address are stored.
Further, the current record address and the number of records are stored in the directory of the LOG file.

The LOG file stores data indicating the history of each transaction. For example, the first record stores the cash, the second record stores the transaction place and time, and the third record stores the signature of the user. Here, in the present embodiment, each record is connected in a ring shape. That is, after the LOG data is written from the first record to the third record, the next LOG data is overwritten on the first record.

The designated file stores transaction data sent from the host application to the IC card 10. In the present embodiment, as shown in FIG. 3 and the like, the LOG file is generated by moving a part of the data in the specified file to the LOG file.

FIG. 7 is an explanatory diagram showing a command format for the IC card 10. Here, the LOG generation command and the LOG read command are commands issued to the IC card 10 by the host application. On the other hand, each response is a response from the IC card 10 to the upper application.

C: Application Example Next, a specific application example of the above-described IC card 10 will be described. For example, the present IC card 10 can be used when LOG data indicating the history of electronic transactions is used for transaction authentication. First, at the time of electronic trading, I
The amount stored in the RAM 14 or the like in the C card 10 is
Subtraction is performed from the amount stored in advance in the EEPROM 13 or the like in the IC card 10, and the resulting amount and the data such as the date of the transaction are converted into the signature data.
Generated in the card 10. After that, the signature data is
It is moved in the C card 10 and stored at a predetermined address in the EEPROM 13 or the like.

Next, a more specific operation at the time of electronic transaction will be described. First, the RAM 14 in the IC card 10
The amount (1000 yen) stored in the EEPROM
13 or the like (10000 yen) stored in advance. Further, the date and store name at the time of the electronic transaction are stored in the RAM 14 or the like. Next, IC card 1
Data about the electronic transaction held in 0 is compressed by a hash function (for example, SHA-1). Here, as the data on the electronic transaction, the amount 9
000 yen, date 96.01.13, store Grocery store. Thereafter, the compressed data is encrypted with an RSA key to generate RSA signature data, and
It is stored in the OM13 or the like. Finally, the data relating to the electronic transaction is stored as LOG data in the EEPROM 13 or the like, thereby forming a LOG file. All of these data processes are performed in the IC card 10.

As a result, the present IC card is
Since the CPU incorporated in the card generates and reads a LOG file using an EEPROM and a RAM, all data movement for generating and reading the LOG file is performed by the I / O.
This is performed inside the C card. Therefore, in the present IC card, the contents of the LOG file and the contents of the data transfer for generating the LOG file cannot be recognized from the outside of the IC card. Can be prevented.

Further, according to the present IC card, since the LOG file is generated inside the IC card, the host application generates the LOG file and stores it in the IC card.
Compared with the method of transmitting data to the card, the amount of communication between the host application and the IC card is reduced, and the communication time can be significantly reduced. Therefore, even when the present IC card is used in an electronic cash system or the like,
The processing for the transaction can be quickly performed at each time, and a comfortable and highly secure transaction can be performed.

[0039]

As described above, according to the present invention,
LO by LOG file generating means and reading means
Since all processes for generating a G file and reading a LOG file are executed inside the IC card, the contents of the LOG file and the contents of the movement of data relating to the generation of the LOG file, etc. are hidden in the IC card. Can be created, and LO consisting of transaction data
It is possible to provide an IC card that can prevent a third party from falsifying or falsifying the contents of the G file.

Further, according to the present invention, since the LOG file is generated inside the IC card, the upper application and the I / O file are generated more than in the method in which the upper application generates the LOG file and transmits it to the IC card.
It is possible to provide an IC card in which the amount of communication between C cards is reduced and the communication time can be significantly reduced.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an outline of an IC card system to which an IC card according to an embodiment of the present invention is applied.

FIG. 2 is a block diagram showing a configuration of an IC card according to the embodiment of the present invention.

FIG. 3 is a flowchart showing a command process in the embodiment.

FIG. 4 is a flowchart illustrating generation of a LOG file according to the embodiment.

FIG. 5 is a flowchart showing a reading process of a LOG file in the embodiment.

FIG. 6 is an explanatory diagram showing a file structure of the IC card in the embodiment.

FIG. 7 is an explanatory diagram showing a command format of the IC card in the embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 External device 2 Transaction data 3 Designated file 4 LOG file 10 IC card 11 CPU 12 ROM 13 EEPROM 14 RAM

Continuation of the front page (51) Int.Cl. ⁶ Identification symbol FI G07F 7/08 J (72) Inventor Kenichi Yamaoka 1-5-1, Taito, Taito-ku, Tokyo Toppan Printing Co., Ltd. (72) Inventor Oma Yasuyuki 3-19-2 Nishi Shinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Corporation (72) Inventor Yoshihiro Hatta 3-19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Corporation (72) Inventor Hirata Shinichi 3-19-2 Nishishinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Corporation

Claims (7)

[Claims] 1. An electronic transaction transmitted from the external device, comprising: a rewritable memory unit connected to an external device and comprising a plurality of memory areas; and an arithmetic unit for performing data processing based on an external command. In the IC card storing data generated in the memory means in the memory means, the arithmetic means fetches one or a plurality of data relating to the electronic transaction from one memory area of the memory means and generates the data as history information History information generating and storing means for moving the history information to another memory area and storing the same; and history information reading means for reading the stored history information out of the memory means. All the controls and operations related to the movement of the data and the movement of the history information of the history information generation / storage means are executed inside the IC card. IC card characterized by being done. 2. The IC card according to claim 1, wherein the other memory area is set in advance as one of the areas of the memory means. 3. When the other memory area is filled with data to be moved, the history information generation storage means sequentially overwrites and stores the data to be moved from the head position in the other area. The IC card according to claim 1. 4. The IC according to claim 1, wherein the history information is generated by any one or more of a subtraction unit, an addition unit, a compression unit, and an encryption unit of the transaction data. card. 5. The history information reading means sequentially reads history information, and transmits a predetermined signal to the external device connected to an IC card when the last information of the history information is read. 2. The IC card according to claim 1, wherein a reading position is moved to a predetermined position in the other memory area. 6. The IC card according to claim 1, wherein the history information reading means sequentially reads the history information stored most recently. 7. The IC card according to claim 1, wherein the history information reading unit sequentially reads the history information stored from the oldest.