JPS62219047A - Access control system for privacy data - Google Patents

Abstract

PURPOSE:To prevent privacy data in an electronic card from being easily read and written by transmitting transmission control procedures from a host device to the electronic card and accessing data in the electronic card in accordance with transmission control procedures. CONSTITUTION:A microprocessor system 16 reads out and executes a program which loads transmission control procedures from a loader storage area 12, and specific transmission control procedures are stored in a transmission control procedure storage area 13 from the host device 19 through a reception line 18. The transmission control procedure program is read out from the area 13 and is executed, and data is written on a privacy data storage area 14 from the host device 19 through the reception line 18 in accordance with specific data transmission control procedures, and privacy data is read out from the area 14 and is transmitted to the host device 19 through a transmission line 17 in accordance with specific data transmission control procedures. Since the host device 19 reads and writes privacy data from and in a nonvolatile memory in accordance with specific transmission control procedures after storing these procedures in an IC card 11, a data transmission control means is certainly changed each time when privacy data is read or written.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a confidential data access control system for reading and writing confidential data in an electronic card.

[Conventional technology]

Conventionally, this type of electronic card system has had a fixed data transmission control procedure between the host device and the electronic card. In such an electronic card system, in order to protect confidential data on the electronic card, the PIN number etc. is stored in the non-volatile memory of the electronic card, and only when the correct PIN number is sent from the host device to the electronic card. The system was designed to allow access to confidential data from higher-level devices.

[Problem that the invention seeks to solve]

The access control method for confidential data in the conventional electronic card system described above stores the PIN number etc. in the non-volatile memory of the electronic card, so if the PIN number is known to a third party, the confidential data on the electronic card will be lost. The disadvantage is that it is no longer possible to protect the

An object of the present invention is to provide a confidential data access control method that eliminates such drawbacks.

[Means for solving problems]

FIG. 1 shows a functional block diagram of the access control method of the present invention. This access control method consists of a load storage section 1 that stores a program for loading a specific transmission control procedure from a host device 6, a transmission control procedure storage section 2 that stores the loaded transmission control procedure, and a transmission control procedure storage section 2 that stores confidential data. a transmission control procedure loading unit 4 that reads and executes a program from the load storage unit 1 and loads the transmission control procedure from the host device 6 into the transmission control procedure storage unit 2;
The access unit 5 reads and writes confidential data in the confidential data storage unit 3 according to the transmission control procedure stored in the transmission control procedure storage unit 2, and sends and receives confidential data to and from the host device 6. There is.

In such a confidential data access control method, first, the transmission control procedure loading section 4 reads and executes a program for loading a transmission control procedure from the load storage section 1, and then requests a specific transmission control procedure from the host device 6. Load the procedure into the transmission control procedure storage unit 2. Next, the access unit 5 reads a specific transmission control procedure stored from the transmission control procedure storage unit 2, and uses this transmission control procedure to write confidential data from the host device 6 to the confidential data storage unit 3, or writes the confidential data to the confidential data storage unit 3. Confidential data is read from the storage unit 3 to the host device 6.

In this way, the host device 6 sends a specific transmission control procedure to the transmission control procedure storage unit 2 before reading and writing confidential data.
4, the confidential data storage section 3 is written or read using this transmission control procedure, so even if the transmission control procedure becomes known to a third party, it cannot be accessed by another person afterwards. If the transmission control procedure is used, a third party cannot read or write confidential data, so that confidential data is protected.

〔Example〕

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 2 shows an IC card system to which the present invention is applied. The IC card 11 has a load storage area 12 that stores a program for loading a specific transmission control procedure, and a transmission control procedure storage area 1 that stores the loaded transmission control procedure.
3, a non-volatile memo 5 consisting of a confidential data storage area 14 for storing confidential data of an IC card, and a microprocessor system 16. This IC
The card 11 is connected to a host device 19 via a transmission line 17 and a reception line 18.

First, the microprocessor system 16 reads and executes a program for loading a transmission control procedure from the load storage area 12, and uses the reception line 18 from the host device 19 to transfer a specific transmission control procedure to the transmission control procedure storage area. 13. Next, a transmission control procedure program is read and executed from the transmission control procedure storage area 13, and data is written from the host device 19 to the confidential data storage area 14 through the reception line 18 using a specific data transmission control procedure, or Read confidential data from area 14,
The data is transmitted to the host device 19 through the transmission line 17 using a specific data transmission control procedure.

As described above, in this embodiment, the host device 19 performs a specific transmission control procedure on the IC before reading and writing confidential data.
After data is stored in the card 11, reading and writing to the non-volatile memory is performed using this transmission control procedure, so the data transmission control procedure is always changed each time confidential data is read or written, but is not limited to this. The data transmission control procedure may be changed only when necessary.

Further, in the above embodiments, an IC card is used as the electronic card, but it is needless to say that the present invention is not limited to this.

〔Effect of the invention〕

As explained above, in the present invention, the transmission control procedure is sent from the host device to the electronic card, and the data in the electronic card is accessed in accordance with the transmission control order, so even if the transmission control procedure is known to a third party, the Another transmission control procedure can be used, and the advantage is that confidential data in the electronic card cannot be easily read or written.

[Brief explanation of drawings]

FIG. 1 is a functional block diagram of a confidential data access control method according to the present invention, and FIG. 2 is a diagram showing an embodiment of the present invention. 1...Load storage unit 2...Transmission control procedure storage unit 3...Secret data storage unit 4...Transmission control procedure load unit 5...Access unit 6 .19...Host device 11...IC card 15...Nonvolatile memory 16...Microprocessor system 17...
...Transmission line 18...Reception line

Claims (1)

[Claims] (1) A load storage section that stores a program for loading a specific transmission control procedure from a host device, a transmission control procedure storage section that stores the loaded transmission control procedure, and a confidential data storage section that stores confidential data. and a transmission control procedure loading section that reads and executes a program from the load storage section and loads the transmission control procedure from the host device into the transmission control procedure storage section; An access control method for confidential data in an electronic card, comprising an access unit that reads and writes confidential data in a data storage unit and sends and receives confidential data to and from a host device.