JP2015022486A - Identifier generation device, identifier generation method, and identifier generation program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an identifier generation device, an identifier generation method, and an identifier generation program that optimize a size of unique identification information included in an application identifier, and enables a load such as a TSM managing an application installed in an IC chip to be lessened.SOLUTION: An identifier generation device is configured to: transmit an application selection command to an IC chip; acquire an execution result of the application selection command from the IC chip; when an application identifier is included in the execution result, repeatedly execute a process of recording the application identifier in an application identifier candidate list until the application identifier is not included in the execution result; and generate an application identifier not overlapping with an application identifier recorded in the application identifier candidate list as an application identifier of an application for settlement to be installed in the IC chip.

Description

  The present invention relates to a technique of an apparatus and a method for generating an application identifier of an application installed in an IC chip.

  In recent years, mobile phones adopting NFC (Near Field Communication) technology have a card emulation function that behaves in the same way as a non-contact IC (Integrated Circuit) card, thereby using the mobile phone as an alternative to a non-contact IC card. Became possible. In a general system that uses a contactless IC card for payment, there is a single payment application installed on the contactless IC card. The owner of the contactless IC card is a payment operator and installs only the payment application of the company.

  However, when a mobile phone is used as an alternative to a contactless IC card, a SIM (Subscriber Identify Module) card (installed with an IC chip) on which a payment application is installed is the property of the carrier and installed there. Since the application to be installed is installed with the authority of the communication carrier, there is a possibility that the payment application of a plurality of payment operators may be simultaneously installed on the SIM card. Patent Document 1 discloses an IC card capable of managing data used in services of Company A and Company B, respectively.

  The IC card application compliant with the international standard ISO / IEC 7816-4 is not limited to the settlement application, but is identified by the identification information “application identifier” required when selected from the reader (reader / writer). The reading device transmits an application identifier together with the selection command, and the IC card that receives the selection interprets the selection command, searches for and selects an application that matches the application identifier. When payment applications of a plurality of payment providers are installed on the SIM card, the application identifier includes payment brand registration information (information indicating a payment company), payment means (credit, debit, prepaid, etc.) information, and unique identification information. Composed by concatenation.

  At the time of settlement, the reader adds settlement brand registration information to the selection command and transmits it to the mobile phone. The SIM card mounted on the mobile phone searches for a payment application using the received payment brand registration information as a key, and responds with the success or failure of the search and, if successful, the application identifier of the found payment application. If the search is successful, the reading device adds the payment brand registration information to the selection command again and transmits it to the mobile phone. The SIM card performs a search for an application that is not yet a search target except for the application that is the target of the search, and if the search is successful, the application identifier of the payment application that is found when successful. respond. The reading device repeatedly executes this until the search fails, and acquires all application identifiers having the specified payment brand registration information among the payment applications installed in the SIM card, and displays the display unit of the reading device. To display. If there are a plurality of settlement means (settlement methods) in the SIM card, all of them are displayed on the display unit of the reading device, and one of them is selected for settlement.

JP 2010-218028 A

  Incidentally, unique identification information is set for each payment method in order to make the application identifiers of all payment applications installed in a single SIM card unique. This unique identification information is set when the payment application is installed in the SIM card. “TSM (Trusted Service Manager)” which is an issuance processing server of a telecommunications carrier that installs a settlement application on a SIM card records an application identifier of the application issued on the SIM card and is installed on the SIM card The application identifiers of applications are managed so that they do not overlap. For example, the unique identification information of the ABC card of the credit card company A is set to “0001”, and the unique identification information of the BCD card of the credit card company B is set to “0002”.

  However, the number of digits of this unique identification information must be determined assuming the number of settlement operators. Even if the number of applications does not fit in a single SIM card, a sufficient number of digits must be allocated assuming the existing number of payment operators and the number that will increase in the future. The product life of the SIM card is generally about 10 years, and the identifier of the application once installed must be recorded for about 10 years until it is deleted.

  Therefore, the present invention can eliminate such a situation, optimize the size of the unique identification information included in the application identifier, and reduce the load on the TSM that manages the application installed in the IC chip. An object of the present invention is to provide an identifier generation device, an identifier generation method, and an identifier generation program.

  In order to solve the above-described problem, the invention described in claim 1 is an identifier generation device that generates an application identifier of an application installed in an IC chip, and transmits an application selection instruction to the IC chip. An application that obtains an execution result of a selection instruction from the IC chip and repeatedly executes a process of recording the application identifier in a list until the execution result is not included in the execution result when the execution identifier includes the application identifier. A verification unit; and an identifier generation unit configured to generate an application identifier that does not overlap with an application identifier recorded in the list as an application identifier of the application installed in the IC chip. And features.

  According to a second aspect of the present invention, in the identifier generation device according to the first aspect, the identifier generation unit generates a temporary application identifier, and determines whether or not the temporary application identifier is recorded in the list. If it is determined that it is recorded in the list, the unique identification information included in the temporary application identifier is changed to generate a new temporary application identifier, and the new temporary application identifier is A series of processes for determining whether or not the temporary application identifier is recorded in the list are repeatedly executed until it is determined that the temporary application identifier is not recorded in the list. An application identifier is assigned to the application installed in the IC chip. And generating a publication identifier.

  According to a third aspect of the present invention, in the identifier generating device according to the first aspect, the application is a payment application, and the application identifier is a connection of payment brand registration information, payment means information, and unique identification information. It is characterized by comprising.

  According to a fourth aspect of the present invention, in the identifier generating device according to the second or third aspect, at least payment brand registration information designated by a user is added to the application selection command, and the application confirmation unit Is characterized in that the application identifier including the added payment brand registration information is recorded in the list.

  According to a fifth aspect of the present invention, in the identifier generation device according to any one of the second to fourth aspects, the identifier generation unit includes the unique identification information included in the temporary application identifier in the series of processes. The values indicated by are added one by one.

  The invention according to claim 6 is an identifier generation method executed by an identifier generation apparatus for generating an application identifier of an application installed in an IC chip, wherein an application selection instruction is transmitted to the IC chip, and the application selection is performed. Obtaining an execution result of an instruction from the IC chip, and when the execution identifier includes the application identifier, repeatedly executing a process of recording the application identifier in a list until the execution result is not included in the execution result; Generating an application identifier that does not overlap with an application identifier recorded in the list as an application identifier of the application installed in the IC chip.

  According to a seventh aspect of the present invention, a computer that generates an application identifier of an application installed in an IC chip transmits an application selection instruction to the IC chip, and acquires an execution result of the application selection instruction from the IC chip. If the application identifier is included in the execution result, the process for recording the application identifier in the list is repeatedly executed until the process is not included in the execution result, and the application identifier is recorded in the list. An application identifier that does not overlap with an application identifier is made to function as an identifier generation unit that generates an application identifier of the application installed in the IC chip.

  According to the present invention, it is possible to optimize the size of unique identification information included in an application identifier, and to reduce the load of TSM or the like that manages an application installed in an IC chip.

It is a figure which shows the example of an outline structure of the application provision system S which concerns on this embodiment. It is a block diagram which shows the example of a schematic structure of the portable terminal 1 which concerns on this embodiment. It is a block diagram which shows the example of a schematic structure of IC chip C mounted in the SIM card 18 which concerns on this embodiment. 6 is a flowchart illustrating an example of an application identifier generation process in the control unit 11 of the mobile terminal 1.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment when the present invention is applied to an application providing system.

  First, with reference to FIG. 1 etc., the structure and function outline | summary of the application provision system which concerns on this embodiment are demonstrated.

  FIG. 1 is a diagram illustrating a schematic configuration example of the application providing system S according to the present embodiment. As shown in FIG. 1, the application providing system S includes a mobile terminal 1 (an example of an identifier generation device of the present invention), a UI (User Interface) application providing server 2, a TSM (Trusted Service Manager) 3, and the like. The The UI application providing server 2 and the TSM 3 are connected to a network NW configured by the Internet, a mobile communication network, or the like. The mobile terminal 1 is, for example, a mobile phone or a smartphone, and can access the UI application providing server 2 and the TSM 3 via the network NW. The mobile terminal 1 is equipped with a SIM card 18 (small IC card) and a CLF (Contactless Front End) 19. The SIM card 18 is one of UICCs (Universal Integrated Circuit Cards). For example, the SIM card 18 is equipped with a contact IC chip whose function is expanded based on a conventional SIM (Subscriber Identity Module). The CLF 19 is a non-contact type IC chip that performs non-contact communication defined by the NFC standard, and is an antenna for transmitting and receiving various signals to and from a reading device (not shown) in the field of non-contact communication. It is connected to the. When the user places the portable terminal 1 over the reading device, a command (for example, indicating a payment request) transmitted from the reading device is transmitted to the SIM card 18 via an interface (not shown). Yes.

  FIG. 2 is a block diagram illustrating a schematic configuration example of the mobile terminal 1 according to the present embodiment. As shown in FIG. 2, the mobile terminal 1 includes a control unit 11, a storage unit 12, a wireless communication unit 13, a display unit 14, an input unit 15, an IC card interface 16, and the like. They are connected to each other via a bus 17.

  The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. For example, an OS (Operating System) and middleware are stored in the ROM. Temporary work data is stored in the RAM.

  The storage unit 12 is configured by a nonvolatile memory such as a flash memory, for example. The storage unit 12 stores various applications (consisting of application program languages) and setting data, and the identifier generation program of the present invention. This application includes a UI application. The UI application is an application for installing a payment application on the SIM card 18, and is different for each payment operator, for example. The identifier generation program of the present invention may be incorporated as a function of the OS, middleware, or application. A CPU (an example of a computer) of the control unit 11 executes the identifier generation program of the present invention, thereby functioning as an application confirmation unit, an identifier generation unit, and the like in the present invention, and performs an application identifier generation process described later. . By this application identifier generation process, an application identifier that does not overlap with the application identifier of the payment application already installed in the SIM card 18 is assigned to the newly installed payment application without using the TSM 3. be able to.

  The wireless communication unit 13 includes an antenna and controls wireless communication performed with a base station in the mobile communication network. The display unit 14 includes, for example, a touch panel type display panel, and performs display control on the display panel and reception of instructions from the user. The input unit 15 has an operation button for inputting an instruction, and outputs a signal corresponding to the operation button to the control unit 11. The IC card interface 16 serves as an interface between the control unit 11 and the SIM card 18.

  FIG. 3 is a block diagram illustrating a schematic configuration example of the IC chip C mounted on the SIM card 18 according to the present embodiment. As shown in FIG. 3, the IC chip C includes a CPU 181, a ROM 182, a nonvolatile memory 183, a RAM 184, an I / O circuit 185, and the like, and these components are connected to each other via a bus 186. The nonvolatile memory 183 is, for example, a flash memory, but may be an EEPROM. The ROM 182 or the nonvolatile memory 183 stores, for example, an OS and middleware. The non-volatile memory 183 stores a plurality of installed payment applications. The payment application is an IC applet for a SIM card, and is different for each payment company and each payment means. A unique application identifier is assigned to the settlement application stored in the nonvolatile memory 183 (the application identifier is also stored). Here, the application identifier (Application Identifier: AID, 5 to 16 bytes) is an application provider registration identifier (Registration application provider identifier: RID, 5 bytes) + an individual application identifier extension (Proprietary application identifier extension: PIX, 0 to 11 bytes). For example, the application identifier is configured by connecting payment brand registration information, payment means information, and unique identification information.

  The I / O circuit 185 has eight connection terminals C1 to C8 defined by ISO / IEC7816 or the like. Here, the C1 terminal is a power supply terminal (VCC), and the C5 terminal is a ground terminal (GND). The C2 terminal is a reset terminal (RST), and the C3 terminal is a clock terminal (CLK). The C7 terminal is used for communication between the CPU 181 and the control unit 11. The C6 terminal is used for communication between the CPU 181 and the CLF 19. Note that SWP (Single Wire Protocol) is applied as a communication protocol between the CPU 181 and the CLF 19.

  When the CPU 181 receives a command from the CLF 19, the CPU 181 executes command processing (for example, settlement processing) according to the command, and sends (replies) a response indicating the result of the processing to the CLF 19. When the CPU 181 receives a command from the control unit 11, the CPU 181 executes command processing (for example, installation processing) according to the command, and sends a response indicating the result of the processing to the control unit 11.

  The UI application providing server 2 is a server that provides a UI application to the mobile terminal 1 via the network NW. The UI application providing server 2 stores a UI application for each settlement operator. The TSM 3 is a server that provides a payment application to the mobile terminal 1 via the network NW. The TSM 3 manages to which portable terminal 1 the payment application is provided (that is, installed in the SIM card 18). However, in the present embodiment, the TSM 3 does not need to manage the application identifier of the payment application provided to the mobile terminal 1, and payment brand registration information (information indicating a payment company) and payment means (credit, debit, prepaid) Etc.) Information and information unique to the portable terminal 1 (for example, a telephone number, a terminal ID, or a SIM number) may be stored and managed in association with each other.

  Next, an operation example until the payment application is installed in the SIM card 18 will be described. When installing a payment application on the SIM card 18, first, the control unit 11 of the mobile terminal 1 accesses the UI application providing server 2 according to an instruction from the user via the input unit 15, and requests a UI application. Thus, for example, a UI application of a desired settlement operator is downloaded from the UI application providing server 2 and installed. Next, when the control unit 11 of the mobile terminal 1 starts the installed UI application on the OS, the control unit 11 of the mobile terminal 1 accesses the TSM 3 according to the UI application, and sets the payment application specified by the user. By making a request, the settlement application is downloaded from the TSM 3 and installed in the SIM card 18. In other words, the UI application operating on the OS of the mobile terminal 1 transmits a request for installing the payment application to the SIM card 18 to the TSM 3, but before transmitting the request to the TSM 3, the control unit 11. Executes an application identifier generation process for generating an application identifier of the settlement application to be installed.

  FIG. 4 is a flowchart illustrating an example of an application identifier generation process in the control unit 11 of the mobile terminal 1. The process shown in FIG. 4 is started in response to an instruction from the user after the UI application is activated. In FIG. 4, the control unit 11 creates an application selection command to which payment brand registration information designated by the user is added, for example (step S1). At this time, since the control unit 11 has acquired the designated payment brand registration information and payment means information, the control unit 11 is configured to create an application selection command to which the payment brand registration information and payment means information are added. May be.

  Next, the control unit 11 transmits the created application selection command to the SIM card 18 via the IC card interface 16 (step S2). When the CPU 181 of the SIM card 18 receives the application selection command, the CPU 181 executes processing according to the application selection command, whereby payment brand registration information (or payment brand registration information and payment means added to the application selection command) is executed. Information (which may be information) is used as a key (that is, the first part of the application identifier is a key), and a settlement application corresponding to the application identifier is searched (for example, forward matching search). As a result, when the settlement application is found (for example, hit by a forward match search) (that is, the settlement application is stored in the nonvolatile memory 183), the CPU 181 of the SIM card 18 An execution result including the application identifier of the settlement application (execution result of the application selection command) is transmitted to the control unit 11. On the other hand, when the payment application is not found, the CPU 181 of the SIM card 18 transmits an execution result (execution result of the application selection command) indicating that there is no payment application to the control unit 11. Alternatively, when the settlement application is not found, the CPU 181 of the SIM card 18 may not transmit the execution result to the control unit 11. That is, the CPU 181 of the SIM card 18 may be configured to respond with an application identifier only when the search is successful.

  Next, when the control unit 11 receives (acquires) the execution result of the application selection command transmitted from the SIM card 18 (step S3), the control unit 11 determines whether the payment application is successfully selected (step S4). . When the application identifier is included in the execution result of the application selection command, it is determined that the payment application has been successfully selected (step S4: YES). In this case, the control unit 11 records the application identifier included in the execution result of the application selection instruction in the application identifier candidate list (step S5). Next, the control unit 11 changes the application selection command to the next candidate designation (step S6), returns to step S2, and transmits the application selection command to the SIM card 18 via the IC card interface 16. Note that the normal selection command selects the application that was found first, but by specifying the next candidate selection function, it is possible to exclude and search for applications that have already been searched.

  As described above, the control unit 11 transmits an application selection command to the SIM card 18, acquires the execution result of the application selection command from the SIM card 18, and includes an application identifier in the execution result. The process of recording the application identifier in the application identifier candidate list is repeatedly executed until it is not included in the execution result.

  If the application identifier is not included in the execution result of the application selection command (the response to the execution result of the application selection command may not be received), it is determined that the payment application is not successfully selected (step S4: NO). ), Go to step S7. In step S7, the control unit 11 sets unique identification information (unique identifier), which is a variable, to “0”. Subsequently, the control part 11 produces | generates the temporary application identifier comprised by payment brand registration information and payment means information, and the said unique identification information (step S8).

  Next, the control unit 11 determines whether or not the generated temporary application identifier is recorded in the application identifier candidate list (step S9). When it is determined that the temporary application identifier is recorded in the application identifier candidate list (step S9: YES), the control unit 11 adds “1” to the unique identification information (step S10), and returns to step S8. A new temporary application identifier is generated. That is, in this case, the control unit 11 generates a new temporary application identifier by changing the unique identification information included in the temporary application identifier. If the controller 11 determines that the generated temporary application identifier is not recorded in the application identifier candidate list (step S9: NO), the control application 11 uses the temporary application identifier to be installed in the SIM card 18. As the application identifier (step S11), and the process shown in FIG. 4 ends. In this way, an application identifier that does not overlap with the application identifier recorded in the application identifier candidate list is generated as the application identifier of the payment application installed in the SIM card 18.

  As described above, the control unit 11 generates a temporary application identifier, determines whether or not the temporary application identifier is recorded in the application identifier candidate list, and is recorded in the application identifier candidate list. If it is determined, the unique identification information included in the temporary application identifier is changed to generate a new temporary application identifier. Then, the control unit 11 performs a series of processes of determining whether or not the new temporary application identifier is recorded in the application identifier candidate list, and if the temporary application identifier is not recorded in the application identifier candidate list. The process is repeatedly executed until it is determined, and a temporary application identifier that is determined not to be recorded in the application identifier candidate list is generated as the application identifier of the settlement application installed in the SIM card 18.

  Then, when the application identifier is generated by the application identifier generation process, the control unit 11 adds the generated application identifier to the request for installing the above-described settlement application in the SIM card 18 according to the UI application, Send the request to TSM3. When the TSM 3 receives the request from the mobile terminal 1, the TSM 3 creates an installation instruction using the application identifier added to the request and transmits the install instruction to the mobile terminal 1 (UI application). And the control part 11 of the portable terminal 1 will transmit this to the SIM card 18 according to UI application, if an installation command is received from TSM3. As a result, the CPU 181 of the SIM card 18 installs the payment application to which the application identifier generated by the application identifier generation process is assigned according to the received installation command.

  As described above, according to the embodiment, the mobile terminal 1 transmits an application selection command to the SIM card 18, acquires the execution result of the application selection command from the SIM card 18, and includes an application identifier in the execution result. Is included, the process of recording the application identifier in the application identifier candidate list is repeatedly executed until it is not included in the execution result. And since the portable terminal 1 was comprised so that the application identifier which does not overlap with the application identifier currently recorded on the application identifier candidate list | wrist might be produced | generated as an application identifier of the application for payment installed in the SIM card 18, it is set as an application identifier. The size of the unique identification information included can be optimized, and the load on the TSM 3 or the like that manages the payment application installed in the SIM card 18 can be reduced. By optimizing the size of the application identifier of the payment application in the credit payment service using the mobile terminal 1, the amount of data exchanged at the time of payment can be optimized, and the time required for the payment processing can be shortened. Become. Also, the TSM 3 can release resources for recording and managing application identifiers that have been required so far. In addition, in the series of processes in steps S8 to S10 described above, the data amount of the application identifier can be reduced as much as possible by configuring the value indicated by the unique identification information included in the temporary application identifier to be incremented by one. it can.

  In the above embodiment, an example in which the present invention is applied to installation of a payment application has been described. However, the present invention can also be applied to an application other than the payment application.

1 Mobile terminal 2 UI application providing server 3 TSM
11 Control Unit 12 Storage Unit 13 Wireless Communication Unit 14 Display Unit 15 Input Unit 16 IC Card Interface 17 Bus 18 SIM Card 19 CLF
181 CPU
182 ROM
183 Non-volatile memory 184 RAM
185 I / O circuit C IC chip

Claims (7)

An identifier generation device that generates an application identifier of an application installed in an IC chip,
A process of transmitting an application selection instruction to the IC chip, obtaining an execution result of the application selection instruction from the IC chip, and recording the application identifier in a list when the application identifier is included in the execution result; , An application confirmation unit that repeatedly executes until it is not included in the execution result;
Identifier generating means for generating an application identifier that does not overlap with an application identifier recorded in the list as an application identifier of the application installed in the IC chip;
An identifier generating apparatus comprising:   The identifier generation means generates a temporary application identifier, determines whether or not the temporary application identifier is recorded in the list, and determines that the temporary application identifier is recorded in the list, the temporary application identifier A series of processes for generating a new temporary application identifier by changing the unique identification information included in the file and determining whether or not the new temporary application identifier is recorded in the list. Repeat until it is determined that the identifier is not recorded in the list, and generate the temporary application identifier determined as not recorded in the list as the application identifier of the application installed in the IC chip The feature of claim 1. Identifier generating device. The application is a payment application,
The identifier generation apparatus according to claim 2, wherein the application identifier is configured by concatenation of settlement brand registration information, settlement means information, and unique identification information. At least the payment brand registration information designated by the user is added to the application selection instruction,
4. The identifier generation apparatus according to claim 2, wherein the application confirmation unit records the application identifier including the added payment brand registration information in the list.   5. The identifier according to claim 2, wherein the identifier generating unit adds one value indicated by the unique identification information included in the temporary application identifier in the series of processes one by one. Generator. An identifier generation method executed by an identifier generation apparatus that generates an application identifier of an application installed in an IC chip,
A process of transmitting an application selection instruction to the IC chip, obtaining an execution result of the application selection instruction from the IC chip, and recording the application identifier in a list when the application identifier is included in the execution result; Repeatedly executing until it is not included in the execution result;
Generating an application identifier that does not overlap with an application identifier recorded in the list as an application identifier of the application installed in the IC chip;
An identifier generation method comprising: A computer that generates an application identifier of an application installed in the IC chip;
A process of transmitting an application selection instruction to the IC chip, obtaining an execution result of the application selection instruction from the IC chip, and recording the application identifier in a list when the application identifier is included in the execution result; , An application confirmation unit that repeatedly executes until it is not included in the execution result, and an identifier generation that generates an application identifier that does not overlap with an application identifier recorded in the list as an application identifier of the application installed in the IC chip An identifier generating program that functions as means.

Images