JPS62257555A - Ic card - Google Patents

Abstract

PURPOSE:To make a storing area unaccessible unless both a discriminating code and identification number are properly inputted, by providing a storage section which stores data and a control section which controls data in accordance with a program and specifically constituting them. CONSTITUTION:A storage section 411 provided with a storing section 41 which stores data and control section 40 which controls data in accordance with a previously stored program, contains storing areas 41C for storing data, another area 41D for storing identification numbers to be used for accessing each storing area, index area 41B which is set in corresponding with each storing area 41C and stores codes for designating the identification numbers, and another area 41D which stores discriminating codes set in corresponding with each index area. Moreover, the control section 40 is provided with a means which accesses the relevant storing area 41C when a discriminating code and identification number are properly inputted. Therefore, the identification number of the storing areas 41C corresponding to an inputted identification number of collated with the inputted number and, when they coincide with each other, the relevant storing area can be made accessible. When both the discriminating code and identification number are not properly inputted, the storing area cannot be accessed.

Description

DETAILED DESCRIPTION OF THE INVENTION (Field of Industrial Application) The present invention relates to an IC card that performs a directory management function. The present invention relates to an IC card that provides a directory management function for accessing a storage area.

(Prior Art) In a conventional general-purpose computer, a directory is formed in an external storage device such as a disk by attaching an identification code to each storage area, and this allows programs and data to be read, written, and sorted. , directory management for searching, etc. was widely practiced.

Furthermore, conventionally, especially in an IC card having a plurality of storage areas, each storage area is accessed by inputting a designated number.

(Problems to be Solved by the Invention) In conventional IC cards, each storage area is accessed by specifying a number, so it is complicated to remember the number of each storage area. A directory is set up on the external device of the IC card League Writer Kasa,
If you access each storage area by name,
Although the complexity of having to remember numbers is eliminated, it is necessary to provide the external device with means for translating names into numbers.

In this case, since the directory is outside the IC card, a third party can read the directory1, and even if the data is inside the IC card, the directory can be used to target any storage area and illegally use the data. There is a risk that people will find out if you can do it.

In addition, in an IC card that includes multiple storage areas, if consecutive numbers are assigned to each storage area so that they can be indexed, the allocation may change due to changes in the plan, for example, if a certain storage area is deleted, empty numbers will be created. Alternatively, when attempting to insert one storage area in a required order, inconveniences arise such as having to lower the numbers of subsequent storage areas.

(Means for Solving the Problems) According to the IC card having a directory management function according to the present invention, there is provided a storage section for storing data, and data is stored in a11 based on a program stored in advance in the storage section. The storage section has one or more storage areas for storing data and a password for storing one or more PIN codes for accessing each storage area. a code area, and one or more index areas that store a code that is set corresponding to each storage area and specifies at least one secret code among the proof codes for accessing each storage area; , an identification number area for storing an identification code provided corresponding to each index area in order to access each index area, and the control unit also checks whether the identification code and the password are correctly input. means for accessing the storage area when the

(Operation) In order to access a required storage area, the control unit checks the manually entered identification code and the identification code of the corresponding index area, and when they match, accesses the index area. The stored password is compared with the password of the corresponding storage area, and when they match, the storage area can be accessed.

(Effects of the Invention) According to the present invention, the storage area cannot be accessed unless both the identification code and the password are input correctly. Therefore, if you do not know the security level set for the index area, that is, the identification code of the index area before checking using the PIN code, you will not be able to access the index area. has the same effect.

Also, since letters can be used as identification codes,
It is familiar and convenient for humans to handle. Note that the identification code is not limited to letters, but may also use numbers or symbols.

Further, since the identification code can be arbitrarily selected, each index area can be named in such a way that the series of relationships among the index areas is detected and the contents of the corresponding storage area are not guessed. Therefore, the number of attempts required to reach a required storage area through malicious trial and error increases, and security can be increased.

Moreover, in the case of a numeric identification code, it is possible to specify a storage area of 10 to the power of the number of digits, but if letters or symbols are used for the identification code, it is possible to specify a storage area of approximately 100 to the power of the number of digits. can do.

(Example) Hereinafter, an example of the present invention will be described in detail based on the drawings.

FIG. 2 is a diagram showing the circuit configuration of the present invention.

IC card 1 has CPLI chip 40 and memory chip 4
1 is installed. In this figure, the chips are shown as having a two-deep configuration, but a chip consisting of these as one chip may also be used. The IC card 1 is provided with five contact terminals 5 to enable electrical connection with an external circuit.

The CPU depth 4o has a calculation system 61 based on the program.
CPLJ401 as a control unit that performs 1 and its block [1
r < OM 402, which stores the gram, etc., and R, which temporarily stores the data, etc. in
A M 403 is included. The memory deep 41 includes an E[PROM 411] in which data can be electrically erased and written any number of times.

The IC card is used by being connected to a host computer via an IC card reader/writer shown in FIG. Is the keyboard clear? It is used to input various commands (=1 cloak) and data (information) such as No. 3, readout, and input, and is connected to a post computer or reader/writer. The reader/writer, host computer, and keyboard may be made integrally, or they may be separate devices and connected by a communication means.

FIG. 4 is a conceptual diagram showing the system of information processing in the IC card according to the present invention. Inside the CPU chip 4o, there is a 3 1 Q 3 (Ba
5ic Input 0output System:
In addition to the basic input/output system) 40A, a memory management program 40B and other 40G are included. The memory chip 41 includes a memory format mark area 41A indicating whether information is written in the memory;
It includes an index area 41B1, a storage area 41C1, and 41D. Arrows 3 and 4 do not indicate that information such as instructions and data is exchanged between the CPU chip 40 and the memory chip 41.

The memory management program 40B includes an address calculation procedure for finding an address corresponding to desired data in the storage area 41C. Index area 41B
Parameters indicating the address of the data storage area (starting address of the storage area (destination Ofi address), number of records, record length, etc.) are stored in the memory management block.
The corresponding address is accessed according to the address calculation procedure in the program 40B.

FIG. 5 shows the configuration of the EEPROM 411 in an embodiment of the present invention. This EEPROM consists of a system area that stores information for managing the entire IC card, and a user area that stores data to be actually recorded and information for managing that data. The system area is provided with a password area where the password used with this IC card is stored and a key lock area to manage incorrect input of the password.

The PIN number includes a code that identifies the individual card user [personal key number, business entity's card tube 1'f! There is a management key that identifies a person, a business entity key that identifies the relationship between data (or storage area) and a business entity, and an issuer key that identifies the issuer of an IC card.

On the other hand, the user area consists of a storage area group consisting of a plurality of (X) storage areas and an index area group consisting of index areas provided corresponding to each of the storage areas.

Each index area is shown in the middle of FIG.
The n index area corresponds to the No. n storage area. ) is divided into storage area definition information and storage area management information. This will be explained again with reference to FIG. Further, in the index area, an identification code area is provided on the right side of FIG. 5 in which an identification code for accessing the index area is stored. This will also be explained again with reference to FIG. Furthermore, each storage area is divided into m records from the 1st to the mth record (m can be arbitrarily set), as illustrated in the NQn storage area in Figure 5. One piece of data is stored in a record.

In the above, the identification code area has a relationship (Nc
The n identification code corresponds to mn index areas. ) may be provided.

FIG. 6 shows the structure of the mn index area corresponding to the NQn storage area in the user area of FIG. 5 in more detail. First, the storage area definition information shown in FIG. 6 will be explained. A storage area start address is defined in the first and second bytes. This is IIIQ n
&! This shows the first address of the storage area. The third byte contains the security level W in the case of m writing,
S,L.

(WriLc 5equality Level, ) and the safety level R, S in the case of reading,
L, (ReadSculity Level
) is defined. The security level is set by giving different levels of confidentiality depending on the content of the information, and selecting and setting the TIN number required for access according to the level of confidentiality.

In other words, the information in this memory area is dark i!
I[Define whether access is possible if there is a number.

The security level in this embodiment is defined using 4 bits, and the most significant bit indicates whether the entity 4-1 is required or not.
The lower 3 bits set whether the personal key, management, 1-1, and issuer key are required or not. The fourth and fifth bytes define the type of entity key required for writing and reading, respectively. In this embodiment, since it is defined using 8 bits, it is possible to define 8F[i class entities. In other words, eight business entities can participate in the composite IC card. This entity key level can be defined differently for reading and writing depending on the content of the information. The sixth byte defines the length of the record in the corresponding storage area, and the seventh byte defines the number of records (m in FIG. 3) that can be used in that storage area. The 8th byte indicates the mode of the corresponding storage area, for example, when all records in the storage area are written in and out at the same time, the mode is set to full stop mode, which disables reading, or the writing is performed again from the 1st code. A fortune-telling mode, etc. indicating whether to set the circulation mode to be set is defined.

The 9th and 10th bytes indicate an identification code area for storing an identification code related to the present invention, and each byte stores an identification code consisting of two characters, one character each. The characters stored in each of these bytes are 180/CCI
It can be represented using an 8-bit code according to the TT code, but any other arbitrary code may be used.

Next, storage area management information will be explained. The lower two bits of the 11th and 12th bytes contain the number of incorrect inputs of the password during writing and reading, respectively. The 13th byte serves as an address pointer υl that specifies the address of the next record to be written in the data writing process. The 14th byte is the storage area Status Pi 1 ~, where when the number of key errors in the 11th or 12th byte reaches 3,
A storage area lock bit is defined to prohibit access to the storage area, and a permanent lock bit is defined to permanently lock access to the storage area. Both lock bits are defined for both read and write access.

Note that the upper five pits of the 11th and 12th bytes are used to write the number of times the storage area lock bit of the 14th byte has been released (unlocked), so they are set separately for data input/output and data readout. It is being

If this unlocking is repeated 31 times and the storage area becomes open after that, the storage area is made permanently unable to be unlocked. In that case, the permanent lock bit in the storage area status of the 14th byte is written. In addition, the first
The 5th and 16th bytes are reserved.

Next, referring to FIG. 7, the procedure for accessing the index area when setting the storage area will be described. When writing to the index area is instructed, it is checked in step 101 whether the index area is in a state where tl writing is possible. This is the memory format mark area 4 shown in Figure 4.
This is done by checking 1A. If the index area has already been written in m, an error process is performed in step 102 and no writing is performed, but if the index area is in red writing, the required number of index areas is input in step 103. The number of index areas corresponds to the number of index areas shown in FIG. Next, in step 104, the index area number corresponding to the storage area to be recorded first is input.

Next, in steps 105 to 107, the start address, record name, maximum number of records, etc. of the storage area to be stored in the first to eighth bytes of FIG. 6 are input. Next, in step 108, the security level 1!11 explained for the 3rd, 4th, and 5th bytes in FIG. 6 is also required to access the storage area. Furthermore, in step 10, two characters of the identification code according to the present invention to be stored in the 9-'3 and 10-th pies 1- are input.

These index parameters can be input directly into the EEPROM.
The information is not input to the storage area 411, but is temporarily stored in the memory of the IC card reader/writer or the RAM 403 of the IC card. Next, step 110
The above-mentioned index parameters are written to the index area of the EEPROM 411 at once. Next, read the index parameters written in step 111 to check whether they have been written correctly.
In the next step 112, the parameters are compared with the original parameters.

If there is an error here, an error will be displayed in step 113 and the input will have to be made again. If the index parameters entered are correct, it is checked in step 114 whether all the index areas specified have been written, and the flow described in F is repeated as many times as the input index number to write to all index areas. Complete.

FIG. 1 is a flowchart showing the procedure of read operation J3 and write operation in the IC card according to the present invention. First, in step 201, the IC card is read as a reader.
When inserted into the writer, the necessary initial settings are performed. Next, when a password 13 (key), identification code, command, or data is input in step 202, it is determined in step 203 whether the input is a password. If the answer is YES, it is determined in step 204 whether or not the keylock area is locked, which prohibits access to the storage area, based on the contents of the keylock area shown in FIG. Here, if it is determined to be YES, an error message is displayed at step 205 and the process returns to step 202, but if it is determined to be no, the password is verified in step 206. Here, determine whether there is a match or mismatch and RA the result.
Store in M403.

If it is determined No in step 203, is the password? Identification code I3, which is other than R, is input of command or data. In steps 207 and 208, it is determined based on the input command whether to read data from the storage area or write data into the storage area. When neither reading nor writing is performed, other processing is performed in step 209.

When reading or di-writing is determined in step 207 or 208, it is determined in step 211 or 212 whether or not there is an index area corresponding to the input identification code. Here, if it is determined that there is no
In step 213 or 214, it is determined whether the content of the error count area provided in RAM 403 is "2". If the answer is No, the error count area in the RAM is incremented by one count i in step 215 or 216. The error counts performed in steps 213 and 214 are performed in the same error count area.

As a result, the number of incorrect inputs of the input identification code is incremented by one. This count (fi is step 213
Or, if it is determined as "2" in step 214, this is the third erroneous input, so step 217 or 218 eliminates the third erroneous input and prohibits all input in step 202. A message to that effect is displayed and this flow ends. Alternatively, at this time, the reader/writer may be notified of the error in the identification code, and the reader/writer may sound a buzzer or the like to notify the person in charge of the error as a warning. Incorrect input of the identification code will be stored in RAM, so if you reset it or pull out the IC card from the reader/writer, the error message will be volatilized, so you can correct it by reinserting the IC card. You can start at step 201.

When it is determined in step 211 or 212 that the correct identification code has been input, step 220 or 221
Read out the storage area management information using the button 22.
At step 2 or 223, it is determined whether the read or output is in a locked state based on the 14th byte in FIG. Here, if it is determined to be locked, an error is displayed in step 224 or 225 and the process returns to step 202, but if it is determined not to be locked, step 2
A key check is made at 26 or 227.

This key check is performed for each storage area, as described above for the third, fourth, and fifth bytes in Figure 6. Since a number, that is, a security level is set, a key check is performed according to this number. That is, if the result of key verification and storage in the RAM in step 206 matches the predetermined Show 1 number, then in step 228 or 229 the data in the storage area is read out or the data input in step 202 is read out. Writing to the storage area is performed, and step 2
The process returns to 02 and is ready for the next input. If it is determined in step 226 or 227 that the predetermined PIN number does not match, then in step 230 or 231
Alternatively, the erroneous inputs are counted in the 11th pie i~, and the process returns to step 202.

[Brief explanation of drawings]

FIG. 1 shows reading of an IC card according to the present invention and;
■Flow chart for explaining the pushing operation, Part 2
The figure is a block diagram showing the structure of an IC card according to the present invention, FIG. Figure 1 is a conceptual diagram showing the system of information processing in the IC card according to the present invention. 6 is an explanatory diagram showing in more detail the contents of the 11 index areas shown in FIG. 5, and FIG. 7 shows an operating procedure for storing various parameters of the index areas shown in FIG. 6 170-. Chart, Figure 8 is in the storage area III
It is a figure which shows another Example.

Claims (4)

[Claims] (1) It has a storage section that stores data and a control section that controls the data based on a program stored in advance in the storage section, and the storage section has one or more storage sections that store data. a storage area; a PIN code area for storing one or more PIN codes for accessing each storage area; and a PIN code area set corresponding to each storage area for accessing each storage area; one or more index areas that store codes specifying at least one password; and an identification code area that stores identification codes provided corresponding to each index area for accessing each index area. , and further, the control unit includes means for accessing the storage area when the identification code and the password are correctly input. (2) In the IC card according to claim 1, the identification code area is provided within the index area and stores an identification code for accessing the index area. IC card. (3) In the IC card according to claim 1 or 2, the storage section has a count storage means,
The control unit includes means for storing erroneous input of the identification code in the count storage means, and means for prohibiting input of the identification code when the count value of the count storage means reaches a predetermined value. An IC card featuring (4) The IC card according to claim 3, wherein the count storage means is provided in a RAM.