JPS61241890A - Portable medium - Google Patents

Abstract

PURPOSE:To read out again erased data by collating a specific identification number supplied from the outside with a specific identification number stored in a data memory and reading again the invalid data out of the data memory according to the result of said collation. CONSTITUTION:A reread-out code, a specific identification number and a reread- out area are supplied to a CPU 3 from a CPU 11 of an IC card handling machine. Thus the CPU 3 decides the coincidence between the specific identification number supplied and a specific identification number stored in an area (a) of a data memory 4. When the coincidence is obtained between both numbers, the CPU 3 reads out the write data on a subject area and delivers it to the CPU 11. If no coincidence is obtained, the CPU 3 delivers a specific condition discordance signal to the CPU 11. In this reread mode the data can be read out directly without reading out the specific information on a subject area. In such a way, the invalid data is also read out with collation of the specific identification numbers. Then only a person who knows the specific identification number can perform the rereading.

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention relates to
The present invention relates to a portable medium such as an IC card with a built-in C chip.

[Technical Background of the Invention] Recently, IC cards have been developed and put into practical use as memory cards for writing data. This IC card includes a central processing unit (CPU), a mask ROM that stores control programs, and an EPROM.
It has a built-in IC chip such as a data memory consisting of. The above CPU is connected to the terminal on the surface of the card, and data is input and output from the outside through this terminal.
Data is written to and read from the data memory under the control of the CPU.

[Problems of Background Art] However, the above-mentioned IC card has an EPROM built-in as a memory.

For this reason, data once stored cannot be physically erased. Therefore, in order for the external device to have the concept that the data has been erased, it is necessary to logically erase it in some way. In addition, since there may be cases where it is desired to read it again, a rereading function must also be provided. However, if all card users could use this function, IC
The drawback was that the security of the card was significantly reduced.

Furthermore, if the data is physically erased, there is also the drawback that if the data is read out again by an external device after being erased, the data does not remain and cannot be read out again.

[Purpose of the Invention] This invention has been made in view of the above circumstances, and its purpose is to prevent a specific right holder from using a specific password even after data stored in a non-volatile data memory is erased. It is an object of the present invention to provide a portable medium in which erased data can be read out again by inserting the portable medium.

[Summary of the Invention] In order to achieve the above object, the present invention has a control element and a non-volatile data memory divided into a plurality of areas, and when erasing stored data, the corresponding area of the data memory is The specified password supplied from the outside is compared with the specified password stored in the data memory, and the invalid data in the data memory is determined based on the verification result. It is designed to read out the data again.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

In FIG. 2, 1 is an IC card as a portable medium. A connecting portion 2 is provided on the surface of this IC card 1, and is composed of, for example, a plurality of terminals 2a, . . . , 2h. Terminal 2a is for operating power supply voltage (+5V), terminal 2b is for grounding, terminal 2C is for clock signal, terminal 2d is for reset signal, terminals 2e to 2q
is for data input/output, and terminal 2h is the power supply voltage for writing (+2
1V).

Also, inside the IC card 1, as shown in FIG.
unit)3. It is constituted by a data memory 4 composed of a non-repeatable EPROM in which a password (for example, 4 digits) and data are recorded, an interface circuit 5, and a mask ROM 6 in which various control programs are recorded. Each of the above parts is composed of an IC chip and is provided on one substrate. Further, the interface circuit 5 and the connection section 2 are wired.
- As shown in FIG. 3, the data memory 4 is composed of a password storage area 7a in which a plurality of passwords are stored and a data storage area b in which data is stored. In the above password storage area a, the user (card holder)
, the password of a specific person who can read invalid data, etc. are stored. Further, the data storage area b is divided into a plurality of areas, and the first byte (1 byte) of each area stores specific information for that area.

As shown in Figure 4, the above specific information stores data (flag) in the 7th bit indicating whether valid data has been written to the area, that is, whether it has not been written or is being written. , the sixth bit stores data (flag) indicating whether the data in that area is valid or invalid, that is, data (flag) indicating whether valid data has been erased. Dummy data is stored in the fifth bit. For example, if the 7th bit is rOJ, it indicates no writing, if it is NJ, it indicates a write current, and if the 6th bit is ``0'', it indicates valid data, and if it is ``1'', it indicates valid data.
In this case, it indicates invalid data.

5 and 6 show the configuration of an IC card handling device 1110 as a terminal device according to the present invention. That is, 11 is a CPU (central processing unit) that controls the whole, 12 is a keyboard for inputting data, 13 is a CR display device, and 14 is a ROM (read-only) that stores a control program.
15 is a RAM (random access memory) in which data is stored; 16 is a dot printer that outputs various print data; 17 is a floppy disk 19 inserted from a floppy disk insertion slot 18 for storing data; Floppy disk device for playback, 2
Reference numeral 0 denotes an IC card reading/writing unit that reads data from the memory of the IC card 1 inserted through the card insertion slot 21 or writes data into the memory.

The IC card reading and sending unit 20 is a card handling unit 1110.
It is connected to the main body by a cable 22. That is, as shown in FIG. 7, the card insertion slot 21
A transport path 31 is provided for transporting the IC card 1 inserted therein. The transport bus 31 is provided with a plurality of pairs of rotatable transport rollers 32, which are positioned so as to sandwich the tC card 1 from above and below when transporting it. The pair of transport rollers 32 are provided along the transport bus 31 at equal intervals.

The distance from the center of each of these transport rollers 32 to the center of the adjacent transport roller 32 has the width dimension in the card transport direction. Therefore, the transport path 31 of the IC card 1 is defined by the transport guide 33.

Further, the CP in the IC card 1 is placed on the transport guide 33.
A read-in section 34 is arranged to exchange data with the LJ3. This reading/writing device 34 is electrically connected to the connecting section 2.

Next, handling of an IC card in such a configuration will be explained. First, let's talk about writing data in Part 8.
This will be explained with reference to the flowchart shown in the figure. For example, now, a write designation code and write data are supplied from the CPU 11 of the IC card handling machine 10 to the CPU 3. Then,
The CPU 3 loads the write data into 1 and reads the specific information from the corresponding area in the data storage area b in the data memory 4 (ST1). It is determined whether or not the flag is set in the 7th bit of the specific information. It is determined whether the data has been written (ST2). If the result of this determination is not written, C
PU3 writes the write data into the corresponding area and sets a flag at the seventh bit of the specific information to indicate that valid data has been stored (ST3.4). In addition, if the determination result in step 2 above is that it has been written, the CPU
3 supplies a specific condition mismatch signal to GPtJll (S
T5),.

Next, reading of write data will be explained with reference to the flowchart shown in FIG. That is, the read designation code and the read area are supplied from the CPU 11 of the IC card handling machine 10 to the CPU 3. Then, the CPU 3 reads the specific information from the corresponding area in the data storage area b in the data memory 4 (5TII), and determines whether it has been written or not, depending on whether the flag is set in the 7th bit of the specific information. is determined (ST12). If the result of this judgment is that the data has been written, the CPLJ3 judges whether the data is valid data or invalid data, depending on whether the flag is set at the 6th bit (ST13). If the result of this judgment is valid data, CPLI3 reads the write data of the target area and outputs it to CPLll (ST14).
. In addition, if it is determined in step 12 that the data is not included, and if invalid data is determined in step 13, the CPU
3 outputs a specific condition mismatch signal to the CPU 11 <5T15).

Next, data deletion will be explained with reference to the flowchart shown in FIG. That is, the CPU 11 of the IC card handler 1110 supplies the erase code and the erase area to the CPU 3. Then, the CPU 3 reads the specific information from the corresponding area in the data storage area b in the data memory 4.
Based on whether or not the flag is set at the 6th bit, it is determined whether writing has been completed or not (ST22>. As a result of this judgment, in the case of a write operation, the CPU 3 determines whether or not the flag is set at the 6th bit. Based on this, it is determined whether the data is valid or invalid (ST23). If the result of this determination is valid data, the CPU 3 sets a flag in the 6th bit of the specific information,
Make the valid data of the corresponding area invalid data. As a result, it is made impossible to read from the area where the invalid data is stored, and it is made impossible to read from an external device, so that the invalid data appears to have been erased.

Next, rereading of erased data will be explained with reference to the flowchart shown in FIG.

In other words, we handle IC cards! A rereading code, a specific password, and a rereading area are supplied to the CPU 3 from the CPL110. Then, the CPU 3 determines whether or not the supplied specific password matches the specific password stored in area a of the data memory 4 (ST31).

If the judgment result is a match (ST32), the CPU 3 reads the data (invalid data) in the target area,
It is output to the CPU 11 (ST33). Also, if the specific passwords do not match in step 31 above (ST3
2) The CPU 3 outputs a specific condition mismatch signal to the CPU 11 (ST34). At the time of re-reading, it is possible to directly read out the specific information of the target area without reading it.

As described above, whether reading data held in a storage area is valid or invalid can be specified from the outside, and once specified, irreversibility is maintained thereafter. This makes it impossible for general users to read data once invalidated.

In addition, among the plurality of stored passwords, a certain
! ! By checking the iE, even invalid data can be read. As a result, only those who know this specific password can perform re-reading.

Therefore, this leads to the positioning of a specific rights holder different from general users, and the safety of the IC card is improved.

[Effects of the Invention] As detailed above, according to the present invention, even after erasing data stored in a non-volatile data memory, a specific rights holder can erase the erased data by inputting a specific password. A portable medium from which the data can be read out again can be provided.

[Brief explanation of drawings]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is a block diagram schematically showing the configuration of an electric circuit of an IC card, FIG. 2 is an external perspective view of the IC card, and FIG. Figure 4 is a diagram for explaining the configuration of the data memory, Figure 4 is a diagram showing the configuration of specific information, Figure 5 is an external perspective view of the card handling machine, Figure 6 is a schematic block diagram of the card handling machine, Figure 7 The figure is a sectional view showing the structure of the IC card reading/writing section, and FIGS. 8 to 11 are flowcharts for explaining the operation. 1... IC-card (portable medium), 2... Connect section, 2 a to 2 h... terminal, 3-G P
U (III III element), 4... Data memory, a... Password storage area, b... Data storage area, 5... Interface circuit, 6... Mask RO
M, 10...IC card handling machine, 11...CPU,
13... CRT display device, 20... IC card reading/writing unit, 34... reading/writing device. Applicant Agent Patent Attorney Takehiko Suzue Figure 1 Figure 3 Figure 4

Claims (3)

[Claims] (1) In a portable medium having a control element and a non-volatile data memory divided into a plurality of areas, when erasing stored data, it is invalidated by adding data indicating invalidation to the corresponding area of the data memory. a verification means for verifying a specific password supplied from the outside with a specific password stored in the data memory; and a verification device for rewriting invalid data in the data memory according to the verification result by the verification device. 1. A portable medium comprising: reading means. (2) The portable medium according to claim 1, wherein the control element is a CPU. (3) The portable medium according to claim 1, wherein the data memory is constituted by an EPROM.