JPH08190614A - Ic card - Google Patents

Abstract

PURPOSE: To solve problems on security so that access from other applications is impossible and to effectively utilize the memory. CONSTITUTION: The IC card has an application input means which inputs at least plural applications to an electrically rewritable memory (EEPROM) 104, an application specific information input means which inputs specific information corresponding to the applications to the EEPROM 104, and an application execution means which executes the applications according to the specific information, and respective CPU instruction codes in the applications are CPU instruction codes that are allowed to be used, and only when the operation range of the CPU instruction codes is an area to store the applications or an area that the respective applications are allowed to be used in common, the applications are executed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an IC card with a CPU, and more particularly to an IC card loaded with a plurality of application programs.

[0002]

2. Description of the Related Art IC cards have been attracting attention as new information recording media, especially as information recording media to replace magnetic cards, and are becoming increasingly popular. In particular, since an IC card having a built-in CPU has a high degree of security, it is expected to be used in various fields. IC in general
The card contains three types of memories such as RAM, ROM, and EEPROM, all of which are accessed by the built-in CPU. A program (routine program) to be executed by the CPU is stored in the ROM,
The EEPROM stores personal data for the user. The RAM is also used as a work area when the CPU executes instructions.

In addition to the routine program stored in the ROM, an application program suitable for various uses may be input (loaded) from the outside of the IC card to the IC card for processing. At this time, a plurality of application programs may be loaded on the IC card and each program may be executed as needed.
In this case, in the first conventional method, one PC
In the address space that can be accessed by (program counter), multiple applications (CP
The U instruction code group) is loaded and the CPU instruction code of the designated application is executed to realize the application processing. In the second conventional method, the IC card has divided areas of a predetermined size, and an application is set in each area so that one application cannot access another application. .

However, in the above-mentioned first conventional method, when the application program is loaded into the IC card, there is a means for checking the processing contents of the CPU instruction code used in the application and the access range. Since it does not exist, the application can freely access the inside of the IC card. That is, one application can access another application. This was a problem in terms of security. In the above second conventional method, even if there are a plurality of areas where security is maintained, the size of the area is predetermined, so the number of application settings is limited by it, and the application size is limited. There is a problem that the memory cannot be effectively used because some are large and some are small.

[0005]

As described above, in the IC card to be used by loading a plurality of application programs, it is required to solve the security problem and effectively use the memory. Was there. Under such circumstances, the present invention intends to provide an IC card that loads a plurality of application programs and solves the security problem with the IC card to be used and can effectively use the memory. To do.

[0006]

The IC card of the present invention comprises:
An IC card to be used by loading a plurality of application programs in an electrically rewritable memory, and at least an application input means for inputting a plurality of applications into the electrically rewritable memory. An application specific information input means for inputting predetermined specific information corresponding to an application into the electrically rewritable memory (EEPROM), and in accordance with the specific information input by the application specific information input means An application executing means for executing an application, each CPU instruction code in the input application is a CPU instruction code permitted to be used, and the operation range of the CPU instruction code is an application storage scheduled area or , Only if the common use in the application is a region that is permitted, in accordance with identification information input by the input means to the application specifying information, it is characterized in that the application is executed. Further, in the above, the application input means comprises I / O, ROM and RAM, the application specific information input means comprises I / O, ROM and RAM, and the application execution means comprises CPU and ROM. To do. Further, in the above, the CPU instruction codes that are permitted to be used are a data movement instruction between registers excluding the stack register, a bit operation instruction of a register, and a jump instruction of an address,
In the case of the jump instruction of the address, it can be executed only in an application storage scheduled area or an area in which common use is permitted for each application according to the specific information.
An EEPROM is an example of the electrically rewritable memory described above.

In the above, the application is I
It means a program and data referred to by the program for executing a certain application program of a user input to the C card. Further, the specific information is an LF (Appli) indicating that the program has not been loaded in the memory map of the electrically rewritable memory EEPROM shown in FIG.
(Cation Loading Flag), ALEN indicating the length of the application, AP-NAME indicating the name of the application, APSAD indicating the start address of the storage area of the application program.
D, APEEDD indicating the final address of the storage area of the application program, JADD indicating the start of the application, AP-LEN indicating the length of the application program, and the like.

[0008]

As described above, in the IC card of the present invention, the input application is the CPs in the application.
Only when the U instruction code is a CPU instruction code permitted to be used and the operation range of the CPU instruction code is an application storage planned area or an area which is commonly used by each application, is the application specific information. The plurality of application programs are loaded by being executed according to the specific information input by the input means to prevent access from one application to another in the IC card to be used. The above problem can be solved, and a plurality of areas where security is maintained can exist, which enables effective use of memory.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An IC card embodiment of the present invention will be described with reference to the drawings. FIG. 1A is a diagram showing a hardware configuration of an IC card according to the first embodiment of the present invention, and FIG. 1B is a diagram showing a functional configuration of the IC card according to the first embodiment of the present invention. 1 in FIG.
00 is an IC card, 101 is a CPU, 102 is a ROM,
103 is RAM, 104 is EEPROM, 105 is I /
O line, 106 is V _CC (power supply voltage), 107 is RST
(Reset line), 108 is CLK (clock line), and 109 is GND (ground line). The basic configuration of the IC card of this embodiment is the same as that of a conventional IC card, as shown in FIG. 1, and includes a CPU 101, a ROM 102 as a memory, a RAM 103, and an EEPROM.
104, I / O line 105, V _CC (power supply voltage line) 106, RST (reset line) 107, and C
Although having an LK (clock line) 108 and a GND (ground line) 109, the EEP shown in FIG.
A specific information area SA is provided in a predetermined area other than the application program of the ROM memory map and the data area of the application program, and an LF (Applicatio) indicating that the program has not been loaded is provided therein.
n LoadingFlag), ALEN indicating the length of the application, AP-NAME indicating the name of the application, APSADD indicating the start address of the storage area of the application program, APADED indicating the last address of the storage area of the application program, JAD showing start
D, AP-L indicating the length of the application program
The specific information such as EN is written. The IC card according to the present embodiment is allowed to be used C according to the specific information written in the predetermined area of the EEPROM.
Of the PU instruction code, a data movement instruction code between registers excluding stack registers, a bit operation instruction code of a register, and an address jump operation code, an address jump operation code is an application storage scheduled area according to the specific information, or Determine whether it is an area where common use is permitted for each application,
The application can be executed only when the jump instruction code of the address is the application storage scheduled area according to the specific information or the area which is commonly used by each application. and again,
The IC card of this embodiment includes an application input means including I / O, ROM and RAM, I / O, ROM and RA.
Application-specific information input means consisting of M, EEP
Application storage means composed of ROM, CPU, R
And an application execution means composed of an OM. FIG. 2 shows the ROM 102, RAM 103, E
The address of the memory of the EPROM 104 is shown.

FIG. 3 shows an EEPROM memory map in which specific information, an application program, and reference data of the application program are written in a predetermined area for each application. As described above, specific information such as the program name and the start address and end address of the area is written as the specific information. FIG. 4 shows a memory map of the ROM. 0000 to 0007 are system areas, and 0008 to 0.
Reference numeral 015 is a common area (function group) that is permitted to be accessed by the application program, in which an address for indirectly jumping the program is written in the functional subroutine, and 0016 to 27FF are loaded with processing programs and applications of each functional subroutine. , A processing program storage area for execution. For example, if there is a jump instruction in the application execution and it is jumped to the 000E address of ROM, RA
An instruction to transfer the data 2 of M to the register is executed.
FIG. 5 shows a memory map of the RAM. System addresses are at addresses FEC0 to FEFE, user areas are at addresses FF00 to FF9E.
FFA0 to FFBE are System Areas, and User Area is generally a common area for all applications.

FIG. 6A shows an example of an application load command for loading an application.
Application load commands are CLA (command class), INS (command instruction), A
LEN (application name length), AP-NA
ME (application name), APSADD (start address of storage area of application program), APEADD (end address of storage area of application program), JADD (start address of application), AP-LEN (length of application program) ), AP-PRO (application program). FIG. 6B is an example of the format of Response to the application load command.

FIG. 7A shows an application data write command 1 for writing application data.
Here's an example. The application data write command includes CLA (command class), INS (command instruction), ALEN (application name length), AP-NAME (application name), ADSADD (start address of application data storage area), ADEADD (end address of storage area for storing application data), AD-L
EN (application data length), AD-DAT
It is composed of A (application data). Figure 7
(B) is an example of the format of Response to the application data write command.

FIG. 8A shows an example of an application selection command for selecting an application. Application selection commands are CLA (command class), INS (command instruction), ALE
N (application name length), AP-NAME
(Application name). FIG.
(B) shows Re for the application selection command
It is an example of format of sponse.

FIG. 9 shows a group of CPU instruction codes that are permitted to be loaded in the IC card. The data instruction code group A between registers excluding the stack register and the bit operation instruction code of the registers are roughly shown. It is divided into a group B and an address jump code group C. In this,
When the jump instruction code group C is executed, it is executed after confirming that the area is an application storage scheduled area or an area permitted to be commonly used by each application according to the specific information.

Next, the operation of the embodiment IC card will be briefly described with reference to FIG. First, when the IC card is reset, it goes to the device side (Answer to Reset)
Is sent (S101) and the command wait state is entered (S1
02), the command including the user's application program, actual data, specific information, etc. from the device side is once received in the RAM, the CPU of the IC card, the RO
The following processing is executed by M. When the command is received in RAM, first the command loads the Load Ap into the EEPROM.
Check whether or not it is a license command (LAC). (S103) When the command is LAC, Load Application
A function command was performed (S103A)
After that, the device again waits for a command from the device, and if the command is not LAC, then write A to write the application program data to the EEPROM
application Data Command (W
Check whether it is AC) or not. (S104) If the command is WAC, Write A
After the applicationData Command process is performed (S104A), the state of waiting for a command from the device is entered again. Then, if the command is not WAC, then the command executes Select Application which executes a predetermined program in the EEPROM.
Check if it is Command (SAC). (S105) Here, if the command is SAC, Select
After executing the Application Command processing (S105A), the state of waiting for a command from the apparatus is again established. At this time, if the command is not SAC, an abnormal end state is sent to the device side (S106),
Waiting for a command from the device.

Load that loads the application
The process of the Application Command (LAC) will be briefly described with reference to FIG. First, Loa
d Application Command (LAC)
(S201), the EEPRO shown in FIG. 3 is entered.
The name of the specified application is searched in the area from M address 6040 to UASP. (S202) The UASP determines the value in advance during the issuing process. If there is an application name, the abnormal state end is sent (S211) and the process ends. (S20
8) If there is no application name, the start address of the application program (AP-PRO) of the received command is set to the CPU command code check address (CAD).
D) and fetch the CPU instruction code (S20
3) Check the instruction code. (S204) When the CPU instruction code is the data movement instruction code group A and the bit operation instruction code group B of the register, the corresponding register is checked, and the case of the stack register is excluded (S205). If the register check is NG, an abnormal end state is sent (S211) and the process is ended (S208). If the register check is OK, if all the CPU instruction codes have not been checked (S203) again. ), (S204),
If it has been completed, a normal end state is sent (S209), and then the process ends. (S210) If the CPU instruction code is the address jump instruction code group C, the instruction operation area is checked (S206). Command operation area check (S206)
Then, it is executable only when the operation range of the instruction code is an application storage scheduled area or an area where common use is permitted for each application according to the specific information. If all the CPU command code checks have been completed, the AP-PRO received in the RAM is written in the EEPROM (S207), ADSADD, A
DEADD, APSADD, APEADD, and JADD are written in the EEPROM (S208), the normal state end is sent (S209), and the process is terminated (S210).
When all the CPU command code checks are not completed, (S203) and (S204) are performed again. Further, in the command operation area check (S206), if the operation range check of the instruction code is not OK, an abnormal end state is sent (S211) and the processing is ended. (S210)

Wri for writing application data
te Application Data Comma
The nd (WAC) process will be briefly described with reference to FIG. First, Write Application D
The process of ata Command (WAC) is started (S3
01) and the address 6040 of the EEPROM shown in FIG.
Search for the name of the application specified by the command in the area up to UASP. (S302) If there is no application name, an abnormal end status is sent (S311), and the process ends. (S306) If there is an application name, it is determined whether or not the application data has been written, but if it has been written, an abnormal end state is sent (S31).
1), the process is terminated (S306), and when the writing is not completed, the command received AD-LEN is ADSADD to AD
Check to see if it is in the EADD range. (S303) Here, if it is out of the range, an abnormal end state is sent (S31).
1) and then the process ends. (S306) If it is within the range, AD-DATA (application data) is written from AADSADD by the amount of AD-LEN (application data length), and ADSADD, A
Write DEADD in the corresponding part of the application management information, and load LF (Load application F
lag) is set to the application data written status (S304). If the process of step S304 does not end normally, an abnormal state end is sent (S311), and if it ends normally, a normal end state is sent (S305) and the process ends. (S306)

Next, Se for selecting an application
lect Application Command (S
AC) will be briefly described with reference to FIG. First,
Select Application Command
When the process of d (SAC) is started (S401), the area of address 6040 to UASP of the EEPROM shown in FIG. 3 is searched for the name of the application specified by the command. (S402) If there is no application name, an abnormal end state is sent (S411) and the process ends. (S406) If there is an application name, the user area of the RAM is erased and set to FF (S403), the normal state end is sent (S404), and then the program is jumped to the address indicated by the JADD of the EEPROM (S405). After executing the processing, the processing ends. (S406)

[0019]

As described above, in the IC card of the present invention, in which an application card is loaded with a plurality of application programs and used, one application can be transferred to another application without providing a plurality of areas where security is maintained. In the end, it is possible to provide an IC card that solves the security problem and can effectively use the memory.

[Brief description of drawings]

FIG. 1 is a configuration diagram of an example IC card.

FIG. 2 is a diagram for explaining an address of each memory of the embodiment IC card.

FIG. 3 is a diagram for explaining an EEPROM memory map.

FIG. 4 is a diagram for explaining a memory map of a ROM.

FIG. 5 is a diagram for explaining a memory map of RAM.

FIG. 6 is a diagram showing a load application command.

FIG. 7 is a diagram of a write application data command (specific information write command).

FIG. 8 is a diagram of a select application command (application select command)

FIG. 9 is a diagram showing a CPU instruction code which is permitted to be loaded in the IC cart.

FIG. 10 is a diagram for explaining the operation of the IC card.

[Fig. 11] Flow part for load application command processing

FIG. 12 is a flow chart of write application data command (specific information write command) processing.

FIG. 13 is a flow chart of select application command (application select command) processing.

[Explanation of symbols]

100 IC card 101 CPU 102 ROM 103 RAM 104 EEPROM 105 I / O line 106 V _CC 107 RST 108 CLK 109 GND LAC application load command WAC application data write command SAC application selection command

Claims (3)

[Claims] 1. An IC card to be used by loading a plurality of application programs in an electrically rewritable memory, for inputting at least a plurality of applications into the electrically rewritable memory. Application input means, application specific information input means for inputting predetermined specific information corresponding to the application into the electrically rewritable memory, and the specific information input by the application specific information input means. An application executing means for executing an application in response to each of the CPU application codes, and each CPU instruction code in the input application is a CPU instruction code permitted to be used, and C
Only when the operation range of the PU instruction code is the application storage scheduled area or the area where common use is permitted for each application, the application is executed in accordance with the specific information input by the input means in the application specific information. An IC card characterized by 2. The application input means according to claim 1, comprising I / O, ROM and RAM, the application specific information input means comprising I / O, ROM and RAM, and the application executing means, CPU and ROM.
An IC card characterized by comprising: 3. The CPU instruction code permitted to be used according to claim 1 or 2, which is a data movement instruction between registers excluding a stack register, a bit operation instruction of a register, and a jump instruction of an address. In the case of a jump instruction, the IC card can be executed only in an application storage planned area or an area where common use is permitted for each application according to specific information.