JP2002230511A - Multiple authentication portable information processing medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable information processing medium stably operable by preventing loading of a tampered and fraudulent application in an IC chip. SOLUTION: In the portable information processing medium, an encrypted application program AP is loaded and used after deciphering. It has a first authentication code for authenticating the encrypted application program, and a second authentication code for authenticating the program after it is deciphered inside the portable information processing medium. The first authentication code is authenticated along with the second authentication code.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a portable information processing medium such as an IC card which prevents an unauthorized program from being loaded.

[0002]

2. Description of the Related Art An application program used in a portable information processing medium, for example, an IC card having a built-in IC chip having an arithmetic unit and a storage unit, has a code describing its operation. It is composed of a portion and a data portion in which personal information is written, and such information is protected by being entirely or partially encrypted. Conventionally, an authentication code has been added to an encrypted application program so that the application program can be authenticated as being tampered with. However, in the method of confirming the authentication code after decryption, it is necessary to perform a dangerous process of decrypting the application program that has been tampered with illegally in the card. In the method of confirming the authentication code before decryption, it is not possible to confirm whether the program has been decrypted correctly in the card.

The present invention has been made in view of such circumstances, and prevents a falsified unauthorized application from being loaded into an IC chip of a portable information processing medium such as an IC card, thereby achieving stable operation. It is an object to provide a portable information processing medium that can be used.

[0004]

SUMMARY OF THE INVENTION According to the present invention, there is provided a portable information processing medium which loads an encrypted application program, decrypts the application program, and authenticates the encrypted application program. An authentication code and a second authentication code for authentication after being decrypted in the portable information processing medium, wherein the first authentication code is authenticated including the second authentication code.

[0005]

Embodiments of the present invention will be described below with reference to the drawings. INDUSTRIAL APPLICABILITY The present invention is applicable to a portable information processing medium that can load an application program and perform various processes, such as an IC card including a credit card and a mobile phone.
This will be described using a card as an example. FIG. 1 is a conceptual diagram illustrating the configuration of a multiple authentication card according to the present invention, and FIG. 2 is a diagram illustrating authentication processing in the multiple authentication card.

[0006] In FIG.
The program and the encrypted AP mean an encrypted application program. The authentication code 2 is calculated from the application program (FIG. 1) and added to the program (FIG. 1). The calculation of the authentication code uses, for example, a method of calculating a hash value for the data of the application program, or a method of calculating using the key data. Next, the program is encrypted (FIG. 1), and from the data of the encrypted AP and the authentication code 2,
Similarly, the authentication code 1 is calculated and added. In order to perform authentication, it is necessary to store data such as a hash calculation algorithm and a key in an IC card.

[0007] Loading and decryption of the encrypted AP to which the two authentication codes are added will be described with reference to the processing flow of FIG. It is assumed that the IC card side knows in advance that the encrypted application has a data structure in which two authentication codes are added. Receives a load command from a reader / writer or host computer and
When the encrypted AP to which the two authentication codes are added is read (step S1), an authentication code 1 is calculated from the encrypted AP and the authentication code 2 (step S2), and this is compared with the added authentication code 1. (Step S3).
If the two do not match as a result of the comparison (step S4
NO), the loading process ends with the authentication failure. Since the read encrypted AP does not function, it may be left as it is, and preferably it is deleted. If the authentication is successful (step S4: YES), the encrypted AP is decrypted (step S5). Next, the authentication code 2 is obtained from the decrypted AP.
Is calculated (step S6), and this is compared with the added authentication code 2 (step S7). If they do not match (NO in step S8), the decoding is not correctly performed, and the loading process ends. If the two match (YES in step S8), the confirmation of correct decoding ends, and the instruction can be executed (step S8).
9).

[0008]

As described above, according to the present invention, it is possible to eliminate the danger of writing and decrypting and developing illegal data in a portable information processing medium, so that dangerous data can be processed without being taken into an IC chip. It is also possible to perform authentication after the application program is decrypted, so that the application can be executed after authenticating that the application has been correctly loaded, and the portable information processing of stable operation can be performed. A medium can be provided.

[Brief description of the drawings]

FIG. 1 is a conceptual diagram illustrating the configuration of a multiple authentication card according to the present invention.

FIG. 2 is a diagram illustrating an authentication process in a multiple authentication card.

[Description of Signs] AP: Application program.

Claims (1)

[Claims] A first authentication code for authenticating the encrypted application program on a portable information processing medium to be used after loading and decrypting the encrypted application program; A multi-authentication portable information processing medium, comprising: a second authentication code for performing authentication after being decrypted in a medium, wherein the first authentication code is authenticated including the second authentication code.