JP2004334745A - Ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card whose security property can be increased without carrying out any excessive processing to lock a key, or excessively consuming a memory area even when access conditions are different from each other according as a card is issued or the card is operated. <P>SOLUTION: Status recognition information showing whether an IC card is set in an issue phase or an operation phase is stored in a data memory, and the access condition information of the issue phase and the access condition information of the operation phase are stored in the respective areas of a data memory. When a command is inputted from the outside, whether or not the IC is set in the issue phase or the operation phase is judged by referring to the status recognition information, and processing to the command is execute by referring to the corresponding access condition information of the above mentioned access condition information based on the judgement result. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an IC card that has a built-in IC chip that has a control element such as a CPU and a non-volatile memory that can be written and rewritten, and has a means for selectively inputting and outputting data from the outside.
[0002]
[Prior art]
In recent years, as a new portable data storage medium, an IC card which has a control element such as a rewritable nonvolatile memory and a CPU and has a built-in IC chip having means for inputting and outputting data from outside has been developed. Have been.
Generally, this type of IC card has only one access condition for each of a plurality of data areas created in the memory. Therefore, when the access conditions are different between when issuing and operating the IC card in each data area. , Security is reduced. In order to maintain security, it is known to lock the key used at the time of card issuance before operating the card.However, this method requires extra processing and consumes extra memory area. Would.
[0003]
Note that an IC card that can rewrite the access condition information for each data area in the memory after the primary issue of the IC card using a dedicated command for rewriting the access condition information input from the outside is known ( Patent Document 1).
[0004]
[Patent Document 1]
JP 2000-306060 A
[Problems to be solved by the invention]
Conventionally, as described above, since only one access condition is provided for each data area, if the access conditions are different between the data area at the time of issuance and at the time of operation, security is reduced. In order to maintain security, extra processing such as locking the key used at the time of issuance before operation is necessary, and there is a problem that a memory area is consumed extra.
According to the method of Patent Document 1, it is necessary to externally input a dedicated command for rewriting access condition information.
[0006]
Therefore, the present invention does not perform extra processing such as locking a key as in the related art and does not consume extra memory area even when access conditions are different between when a card is issued and when it is operated. An object of the present invention is to provide an IC card that can enhance security.
[0007]
[Means for Solving the Problems]
The IC card according to the present invention includes a memory having a plurality of areas for storing data, and a control unit for accessing each area of the memory, and selectively receives data from an external device. In an IC card that performs output, state recognition information storage means for storing state recognition information indicating whether the IC card is in an issue state or an operation state, and provided in the memory and each area of the memory. Access condition information storage means for storing access condition information indicating an access condition for the area in the issue state and access condition information indicating an access condition for the area in the operation state for each issue state; Refer to the state recognition information stored in the recognition information storage means to determine whether the IC card is in the issued state. State determining means for determining whether the command is in a state, and processing means for performing processing for the command by referring to corresponding access condition information in the access condition information storage means based on the determination result of the state determining means. are doing.
[0008]
Further, the IC card of the present invention has a memory having a plurality of areas for storing data and a control unit for accessing each area of the memory, and selectively communicates data with the outside. A state recognition information storage means for storing state recognition information indicating whether the IC card is in an issue state or an operation state, and provided in the memory; A first access condition information storage unit for storing access condition information indicating an access condition to the region in an issued state for each region; and a first access condition information storage unit in the memory provided in a different region from the first access condition information storage unit. And second access condition information storage means for storing access condition information representing an access condition to the area in the operating state for each area of the memory. When the state recognition information stored in the state recognition information storage unit is rewritten from the value indicating the issue state to the value indicating the operation state, the state of the operation state stored in the second access condition information storage unit is changed. Access condition information changing means for overwriting the access condition information in the issued state stored in the first access condition information storage means, and the first access condition when a command is input from outside. Processing means for performing processing for the command by referring to the access condition information stored in the information storage means.
[0009]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows an example of the configuration of an IC card system for handling an IC card according to the present embodiment. This IC card system allows the IC card 1 to be connected to a terminal device 3 such as a personal computer via a card reader / writer 2, and connects a keyboard 4, a CRT display unit 5, and a printer 6 to the terminal device 3. Be composed.
[0010]
FIG. 2 shows a functional block diagram of the IC card 1. As shown in the figure, the IC card 1 manages a part that executes basic functions such as an R / W (read / write) unit 11, a password setting / collation unit 12, and an encryption / decryption unit 13, and manages these basic functions. And a supervisor section 14. The supervisor unit 14 interprets and executes a function code or a function code to which data is added, which is included in a command message input from the card reader / writer 2.
[0011]
As shown in FIG. 3, for example, as shown in FIG. 3, the IC card 1 includes a contact unit 21 for communicating with the card reader / writer 2, a control unit 22 such as a CPU, and a storage unit for rewriting the stored contents. It comprises a non-volatile data memory 23, a working memory 24, and a program memory 25 as possible storage means, which are composed of one IC chip (or a plurality of IC chips). This IC chip is embedded in the IC card, and is electrically connected to the card reader / writer 2 via the contact portion 21 on the card surface.
[0012]
The data memory 23 is used for storing various data, and is composed of a rewritable nonvolatile memory such as an EEPROM, for example.
The program memory 24 is configured by, for example, a mask ROM, and stores a control program of the control unit 22, an application program, and the like.
The working memory 25 is a working memory for temporarily storing processing data and the like when the control unit 22 performs processing, and is constituted by, for example, a RAM.
[0013]
FIG. 4 shows the configuration of the data memory 23 of the IC card 1. The data memory 23 generally includes a manufacturer area 31 into which data is written by an IC card manufacturer and a file area 32. The file area 32 includes one MF (master file), a plurality (or one) DF (a dedicated file), a plurality of (or one) data EF (elementary) existing under the MF and each DF. File and key EF, and each DF and EF is a data area in which the DF / EF definition information area 33 and a key itself for performing collation or authentication for establishing various data and access rights are stored. 34.
[0014]
The DF / EF definition information area 33 stores DF definition information 35 for defining a DF and EF definition information 36 for defining an EF. The DF definition information 35 includes information such as DF access condition information 37 and DF name 38, and the EF definition information 36 includes information such as EF access condition information 39, EF type information 40, and EF size 41. .
[0015]
FIG. 5 illustrates a configuration example of a command message input to the IC card 1. This command message is composed of, for example, instruction data (CLA / INS) and parameter data (P1 / P2 / Lc / Data / Le). There are some command messages that do not exist for the Le and Data parts.
[0016]
The result of the command processing is output from the IC card 1 as a response message as shown in FIG. 6, for example. This response message is composed of data and status, but some response messages do not exist for the data part.
[0017]
FIG. 7 shows the configuration of the DF access condition information 37 and the EF access condition information 39 written in the data memory 23. The EF access condition information 39 is input to the IC card 1 by a command for creating an EF, for example, and written into the data memory 23. With this command, in addition to the access condition information, EF type information (key EF, record data EF, binary data EF, etc.), and information such as the size of the EF are input, and these information are used as EF definition information 36 in the data memory. 23. The same applies to the DF access condition information 37.
[0018]
The access condition divides the type (rank) of the key to be collated or authenticated into, for example, seven types from rank 1 to rank 7, and sets which rank of the key needs to be collated or authenticated. For example, “1” is set if collation or authentication is required, and “0” is set if collation or authentication is unnecessary. When “1” is set for a plurality of ranks, for example, it is recognized that an OR (OR) condition, that is, verification or authentication of a key of any rank is necessary.
[0019]
Normally, two or more types of access conditions are set, such as an access condition for a read command and an access condition for a write command. Here, a case where there are two types of access conditions of a reading system and a writing system will be described. FIG. 7A shows access condition information for a read command, and FIG. 7B shows access condition information for a write command.
[0020]
Normally, the IC card 1 is subjected to issuance processing by a card issuer or the like, and then passed to the card holder and used for operation of various applications. Since the issuing process and the operation process often differ in the supported commands and processing contents, they are often managed by being divided into issuance and operation (or other) phases (states).
[0021]
As a method for the IC card 1 (control unit 22) to recognize the transition from the issuing phase (issuing state) to the operating phase (operating state), there is a method using a command for instructing a change of the phase. When this command is input from the card reader / writer 2, the control unit 22 in the IC card 1 issues the state recognition information (not shown) stored in the manufacturer area 31 of the data memory 23 in the issuing phase. Rewrite from the value to a value indicating the operation phase. Normally, it is not possible to return to the issuance phase once the operation has shifted from the issuance phase to the operation phase.
The control unit 22 in the IC card 1 refers to this state recognition information every time a command is input from the card reader / writer 2 in order to determine which phase the IC card 1 is in.
[0022]
FIG. 8 shows that the DF access condition information 37 and the EF access condition information 39 in the data memory 23 are stored for each of the issue phase and the operation phase. The access condition information in these two phases, that is, the DF access condition information 37a, 37b and the EF access condition information 39a, 39b are input to the IC card 1 by, for example, a file creation command as in the description of FIG. Both are written in the DF / EF definition information area 33 of the data memory 23.
When the control unit 22 refers to the access condition information, it refers to the access condition information 37a, 39a of the issuance phase when it is in the issuance phase, and refers to the access condition information 37b, 39b of the operation phase when it is in the operation phase. .
[0023]
FIG. 9 shows the structure of collation / authentication state information indicating the collation or authentication state of a key stored in the working memory 24, and is composed of seven bits corresponding to seven types of key ranks 1 to 7. Have been.
In the initial state, the bits corresponding to all ranks 1 to 7 are set to “0”, and if the verification or authentication of the key ends normally, the bit corresponding to the rank of the key becomes “1”. Is set. When the IC card 1 is reset, or when the collation or authentication of the key ends abnormally, all bits are set to “0”.
[0024]
Next, the operation of command processing in such a configuration will be described with reference to the flowchart shown in FIG.
First, in step S1, when a command message is received from the card reader / writer 2, the process proceeds to step S2. In step S2, by referring to the state recognition information stored in the manufacturer area 31 of the data memory 23, it is determined whether the IC card 1 is in the issue phase or the operation phase, and the process proceeds to step S3. .
[0025]
In step S3, it is confirmed whether or not the command data CLA, INS of the received command message is a code supported by the IC card 1 in the phase determined in step S2. If the result of this check is that the command data is not supported by the IC card 1, the error status is set in the response message in step S4, and the response message is output to the card reader / writer 2 in step S5. Proceed to the command message input waiting state.
[0026]
If the result of the check in step S3 is that the command data is supported by the IC card 1, the flow advances to step S6 to determine whether the received command message belongs to a reading system, a writing system, or access condition reference unnecessary. to decide. If the result of this determination is that the command message is a command that does not require access condition reference, the command is processed in step S7, and the result of the process is output to the card reader / writer 2 as a response message in step S5. Proceed to the message input waiting state.
[0027]
If the result of determination in step S6 is that the command message belongs to one of the reading system and the writing system, the process proceeds to steps S8 and S9. In steps S8 and S9, the access condition information of FIG. 7 is compared with the verification / authentication state information of FIG. 9, and it is confirmed whether or not the access condition is satisfied in the following manner.
[0028]
For example, when the received command message belongs to the reading system, in the EF definition information 36 of the EF specified by the command message, at least one rank set to “1” in the access condition information of the reading system is used for collation / If “1” is also set in the authentication status information (that is, collation / authentication is normally completed at this rank), it is determined that the access condition is satisfied, and the process proceeds to step S7. In step S7, the read command is processed, and in step S5, the result of the process is output to the card reader / writer 2 as a response message, and the process proceeds to a standby state for input of the next command message.
[0029]
In steps S8 and S9, in cases other than the above, it is determined that the access condition is not satisfied, and the process proceeds to step S4. In step S4, the error status is set in the response message, and in step S5, the response message is output to the card reader / writer 2, and the process proceeds to the input command input waiting state.
[0030]
As in the case of this example (FIG. 8), when access condition information corresponding to both the issue phase and the operation phase is stored, the access condition information corresponding to the current phase of the IC card 1 is referred to. It does not refer to the other access condition information.
[0031]
As described above, according to the above-described IC card 1, the access condition information corresponding to each of the issue phase and the operation phase can be referred to. The security can be improved without performing extra processing such as locking the key used at the time of issuance before moving to step (1).
[0032]
In the above-described embodiment, the access condition information (DF access condition information 37a, 37b and EF access condition information 39a, 39b) for each of the issue phase and the operation phase are both DF and EF definition information 35, 36. Although the case where the data is stored in the data memory 23 has been described, the access condition in the operation phase is not referred to in the issue phase, and the access condition in the issue phase is not referred to in the operation phase. Thus, the sizes of the DF and EF definition information 35 and 36 can be reduced, and the data area 34 of the data memory 23 can be used efficiently.
[0033]
For example, when the access condition information is input to the IC card 1 together with other file definition information by the file creation command, the access condition information of the operation phase is stored in another predetermined area of the data memory 23. FIG. 11 shows this state, and shows an example in which the DF access condition information 37b and the EF access condition information 39b of the operation phase are stored in a specific area in the data area 34.
[0034]
When a command for rewriting the state recognition information stored in the manufacturer area 31 of the data memory 23 from the value indicating the issue phase to the value indicating the operation phase is input, the state recognition information is stored in the data area 34. The DF access condition information 37b and the EF access condition information 39b of the operation phase are overwritten on the DF access condition information 37a and the EF access condition information 39a of the issue phase in the DF and EF definition information 35 and 36. Thus, only the access condition information corresponding to each phase is stored as the DF and EF definition information 35 and 36.
[0035]
Next, after overwriting the DF access condition information 37b and the EF access condition information 39b of the operation phase with the DF access condition information 37a and the EF access condition information 39a of the issue phase, the DF access condition information 37b and the EF access condition of the operation phase are originally overwritten. By erasing a specific area in the data area 34 in which the information 39b has been stored, it is reused as an area for storing various data in the operation phase.
[0036]
In the case of this example (FIG. 11), regardless of the phase of the IC card 1, only the corresponding access condition information is stored as the DF and EF definition information, so this access condition information is referred to.
[0037]
As described above, the access condition information of the operation phase is stored in another predetermined area of the data memory 23, and when the issue phase is changed to the operation phase, the access condition information of the operation phase is included in the definition information. By overwriting the access condition information of the issue phase and deleting the access condition information of the original operation phase and reusing it as a data area, the data area 34 of the data memory 23 can be used more efficiently.
[0038]
【The invention's effect】
As described above in detail, according to the present invention, even when access conditions are different between when a card is issued and when it is operated, an extra process such as locking a key as in the related art is performed, and a memory area is saved. It is possible to provide an IC card capable of improving security without consuming it.
[Brief description of the drawings]
FIG. 1 is a block diagram schematically showing a configuration of an IC card system for handling an IC card according to an embodiment of the present invention.
FIG. 2 is a functional block diagram of an IC card.
FIG. 3 is a block diagram schematically showing a configuration of an IC card.
FIG. 4 is a diagram schematically showing a configuration of a data memory.
FIG. 5 is a diagram showing a configuration of a command message.
FIG. 6 is a diagram showing a configuration of a response message.
FIG. 7 is a diagram showing a configuration of access condition information.
FIG. 8 is a diagram schematically illustrating a configuration of a data memory when access condition information is stored for each of an issue phase and an operation phase.
FIG. 9 is a diagram showing a configuration of verification / authentication status information.
FIG. 10 is a flowchart for explaining the operation of command processing.
FIG. 11 is a diagram schematically showing a configuration of a data memory for describing a modification of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... Card reader / writer, 3 ... Terminal device, 4 ... Keyboard, 5 ... CRT display part, 6 ... Printer, 21 ... Contact part, 22 ... Control part (state judgment means, access condition information change means) , Processing means), 23 data memory (state recognition information storage means, access condition information storage means), 24 working memory, 25 program memory, 31 manufacturer area, 32 file area, 33 DF / EF definition Information area, 34: Data area, 35: DF definition information, 36: EF definition information, 37: DF access condition information, 39: EF access condition information, 37a: DF access condition information of issue phase, 37b: DF of operation phase Access condition information, 39a: EF access condition information of issue phase, 39b: EF access condition information of operation phase.

Claims (4)

An IC card having a memory having a plurality of areas for storing data, and a control unit for accessing each area of the memory, and selectively inputting and outputting data to and from an external device.
State recognition information storage means for storing state recognition information indicating whether the IC card is in an issue state or an operation state;
Access condition information storage means provided in the memory for storing, for each area of the memory, access condition information indicating an access condition to the area in an issue state and access condition information indicating an access condition to the area in an operation state; ,
State determination means for determining whether the IC card is in an issue state or an operation state by referring to state recognition information stored in the state recognition information storage means when a command is input from outside;
Processing means for performing processing for the command by referring to corresponding access condition information in the access condition information storage means based on a result of the determination by the state determination means;
An IC card characterized by comprising: An IC card having a memory having a plurality of areas for storing data, and a control unit for accessing each area of the memory, and selectively inputting and outputting data to and from an external device.
State recognition information storage means for storing state recognition information indicating whether the IC card is in an issue state or an operation state;
First access condition information storage means provided in the memory for storing access condition information indicating an access condition to the area in the issued state for each area of the memory;
A second access condition which is provided in an area of the memory separate from the first access condition information storage means and stores access condition information indicating an access condition to the area in an operating state for each area of the memory; Information storage means;
When the state recognition information stored in the state recognition information storage unit is rewritten from a value indicating the issue state to a value indicating the operation state, the access of the operation state stored in the second access condition information storage unit is performed. Access condition information changing means for overwriting condition information on the issued access condition information stored in the first access condition information storage means;
Processing means for performing processing on the command by referring to access condition information stored in the first access condition information storage means when a command is input from outside;
An IC card characterized by comprising: The access condition information changing means changes the operating condition access condition information stored in the second access condition information storing means to the issuing state access condition information stored in the first access condition information storing means. 3. The IC according to claim 2, further comprising: means for erasing, from the memory, an area as the second access condition information storage means, which has stored the access condition information of the operation state when overwriting. card. When the state recognition information stored in the state recognition information storage unit is rewritten from the value indicating the issue state to the value indicating the operation state, it is impossible to rewrite the value indicating the issue state again. The IC card according to claim 2, wherein

Images