JP3982777B2 - IC card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card having an EEPROM (Electrically Erasable and Programmable Read Only Memory), and more particularly to an IC card in which a file layout and system data can be written by an initialization command.
[0002]
[Prior art]
As shown in FIG. 5, the reader / writer 1 transmits a command (command) to the IC card 2, and the IC card that receives the command interprets the command and executes processing such as writing / reading. The result is returned to the reader / writer 1 as a response.
[0003]
As shown in FIG. 6, the IC card 2 has a CPU 2a, a RAM 2b, a ROM 2c, and an EEPROM 2d, reads a program stored in the ROM 2c into the CPU 2a, and sends a command transmitted from the reader / writer 1 to the I / O. When the data is received through the port, the data transmitted together with the command is read and necessary processing is performed, the result is written in a predetermined file area of the EEPROM 2d, and a response is output through the I / O port.
[0004]
FIG. 7 shows an EEPROM 3 composed of an application program area and an operating system (OS) area. When the files of applications A, B, and C are assigned in this order from the start address of the application area, A directory, B directory, and C directory are formed from the end of the application area to the top in the order of file area allocation. The directory is file control information. As shown in FIG. 8, the file ID for identifying the file, the start address where the file is stored, the area capacity, and attribute information (read / write access right (key) information ), It consists of a check code.
[0005]
In FIG. 7, the OS area following the application area has a pointer indicating the last address of the allocated file area and a pointer indicating the last stacked directory from the start address and area capacity indicated in the directory. Data used by the OS is set. The area between the pointers P and P ′ is a memory area that can be further allocated.
[0006]
As shown in FIG. 9, the command from the reader / writer adds a data length Lc and a data part (file ID, area capacity, attribute information) to the command classification (CLA), command (INS), and parameters P1 and P2. The file allocation is performed by a create file command.
FIG. 10 is a diagram for explaining the file structure in the EEPROM of the IC card. MF (Master File) is a file that means a file in the entire data memory. A DF (Dedicated File) arranged under the MF is a dedicated file, and has a hierarchical structure in which other DFs are arranged under the DF. In MF and DF, data is stored in a basic file. The creation of such a hierarchical file layout will be described with reference to FIG.
[0007]
FIG. 11 is a diagram showing an example of a command / response on the transmission line between the terminal side and the IC card side.
If the MF is selected (the pointer is in the MF), a create DF command for creating the dedicated file DF is transmitted from the terminal side, and a response indicating that this has been normally received and processed on the IC card side is returned. Then, a create DF command is sequentially transmitted to create a DF file.
[0008]
Next, when data is created in a dedicated file, a select DFn instruction for selecting the target dedicated file DFn is sent, and when the normal reception processing is returned on the IC card side as a response, the create data 1 is sequentially added. Then, an instruction is sent as in the create data 2, and the data is stored in the basic file of the dedicated file DFn.
In the above example, the application area is described, but data is similarly created for the area managed by the OS using the manufacturer's command.
[0009]
[Problems to be solved by the invention]
In this way, the conventional file creation process repeats the process of sending a file creation command to the IC card one file at a time and the operation of obtaining a response, so communication takes a very long time. Therefore, there is a problem that the sequence of commands is known on the transmission line, and the file structure created inside is leaked, which is a security problem. In addition, regarding the writing of data for the OS, the amount of data that can be written at one time is determined to be, for example, 32 bytes. Therefore, in order to write 1 Kbyte of data, it is necessary to write the data 32 times. Communication took time and there were security issues.
An object of the present invention is to solve the above-described problems, and aims to speed up initialization processing such as creation of a file layout and writing of OS data and improve security.
[0010]
[Means for Solving the Problems]
The present invention includes an arithmetic unit, a main memory, a read-only memory, and a non-volatile memory, and shows file layout data for application and at least the last address of the file area for developing and writing to the non-volatile memory by an initialization instruction An IC card in which OS data including a pointer is stored in a read-only memory and the application file layout data and the OS data are expanded to a nonvolatile memory by an initialization command. A check code is attached, and after the application file layout data and the OS data are expanded to a non-volatile memory by an initialization instruction, the check code calculated for all areas is collated. .
The present invention also includes an arithmetic unit, a main memory, a read-only memory, and a non-volatile memory, and file layout data for an application to be expanded and written to the non-volatile memory by an initialization command and at least the last address of the file area An OS card that stores OS data including a pointer indicating the read-only memory in a read-only memory and expands the application file layout data and the OS data to a nonvolatile memory by an initialization command. Is attached with a check code, and after the application file layout data and the OS data are expanded to a non-volatile memory by an initialization instruction, the check code is collated with a check code stored in advance in the non-volatile memory. It is characterized by that.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below. In the following, the IC card has the structure and commands shown in FIGS. 5 to 11. In the present invention, file layout data, OS data such as pointers are further stored in the ROM, and these are used as initialization commands. Is added with a function of developing and writing to the EEPROM.
FIG. 1 is a diagram for explaining the initialization process of the present invention, FIG. 2 is a diagram for explaining an example of an initialization command for performing file layout, FIG. 3 is a diagram for explaining the contents of the file layout process by the initialization command, and FIG. It is a figure which shows the example which applies the initialization command of this invention only to fixed information.
[0012]
In FIG. 1, for example, when 16 KB in the 32 KB ROM is a program area and the remaining 16 KB is remaining, file layout information, OS data, etc. are created and stored in advance as an initialization data area. When the file layout and OS data are written in the EEPROM at the factory shipment stage, the initialization data such as the file layout data and OS data stored in the ROM is copied into the EEPROM by the newly added initialization command. By this copying, as described with reference to FIG. 7, DF and data are sequentially written in the application area, and at the same time, the directory is written, and data such as a pointer is also written in the area managed by the OS. Completes.
[0013]
In each application, the file container itself has few variable parts, and the OS data is the same. Therefore, this part is stored in advance in a non-rewritable ROM as file layout data and OS data, and an initialization command is stored. Thus, the initialization process is completed simply by copying the file layout data and OS data in the ROM into the EEPROM. Therefore, only one command is sent from the terminal side to the IC card, and communication overhead is not included. High-speed processing is possible. Furthermore, since file information data and OS data are stored in the ROM, security can be greatly enhanced.
[0015]
FIG. 2 shows an example of the initialize command used in the present invention. It consists of CLA indicating the command classification, INS as the instruction code, parameters P1 and P2, the start address to be read out in the ROM, LEN indicating the length of the data to be read out, and data. Further, a check code may be added so that collation can be performed when file layout data and OS data are read from the ROM and written to the EEPROM. For example, after reading the file layout data and OS data from the ROM with the initialize command and expanding it to the EEPROM, the check code for all areas is calculated on the terminal side or IC card side, and the check code attached to the initialize command This is done by collating with In addition, a check code obtained by the above calculation may be stored in the ROM in advance and collated with the check code of the initialization command.
[0016]
Next, the relationship with a conventionally used initialization command will be described by taking a file layout as an example.
Assuming that the conventional initialization command held by the IC card is IN1, as shown in FIG. 3 (a), the file layout is erased except for the master file (MF). On the other hand, assuming that the initialization command added in the present invention is IN2, as shown in FIG. 3B, the hierarchical structure of the master file MF, the dedicated file DF, data, etc. is created with one command for the file layout. It has a function. By properly using such initialization commands IN1 and IN2, a file can be created as appropriate.
[0017]
Also, as shown in FIG. 4, only fixed information is written in the ROM as file layout data, read with one command using IN2 and laid out in the EEPROM, and variable information such as personal information is conventionally used. These file creation commands may be sent one by one to perform file layout.
[0018]
【The invention's effect】
According to the present invention, since the file layout data and the OS data can be written with one initialization command, high-speed processing is possible without including communication overhead, and the file layout data and OS data are stored in the ROM. Therefore, the contents do not appear on the transmission line, and the security can be greatly improved.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating initialization processing according to the present invention.
FIG. 2 is a diagram for explaining an initialize command.
FIG. 3 is a diagram for explaining the contents of an initialize command.
FIG. 4 is a diagram showing an example in which the initialization command of the present invention is applied only to information other than personal information.
FIG. 5 is a diagram for explaining communication between a reader / writer and an IC card.
FIG. 6 is a diagram illustrating the configuration of an IC card.
FIG. 7 is a diagram illustrating a configuration of an EEPROM.
FIG. 8 is a diagram illustrating the configuration of a directory.
FIG. 9 is a diagram illustrating a command configuration.
FIG. 10 is a diagram for explaining a file structure in an EEPROM of an IC card.
FIG. 11 is a diagram showing command response states between the terminal side and the IC card side.
[Explanation of symbols]
1 ... reader / writer, 2 ... IC card, 3 ... EEPROM, 4 ... write register.

Claims (2)

Computing device, a main memory, read only memory, OS have a nonvolatile memory, containing a pointer to the last address of the file layout data and at least file area for the application to write to expand the nonvolatile memory the initialization instruction An IC card that stores the application data in a read-only memory and expands the application file layout data and the OS data to a non-volatile memory by an initialization instruction;
A check code is attached to the initialization instruction, and after the application file layout data and the OS data are expanded to the non-volatile memory by the initialization instruction, the check code calculated for all areas is collated. IC card characterized by that. Computing device, a main memory, read only memory, OS have a nonvolatile memory, containing a pointer to the last address of the file layout data and at least file area for the application to write to expand the nonvolatile memory the initialization instruction An IC card that stores the application data in a read-only memory and expands the application file layout data and the OS data to a non-volatile memory by an initialization instruction;
The initialization instructions are denoted by the check code, after deploying the file layout data and the OS data for the application to the nonvolatile memory in the initialization instruction, matching the check code stored in advance in nonvolatile memory An IC card characterized by that.

Images