JP4542766B2 - Portable electronic device - Google Patents

Description

  The present invention is referred to as a so-called IC card that has a control element such as a rewritable nonvolatile memory and a CPU and has an IC (integrated circuit) chip provided with means for inputting / outputting data from the outside. Relates to a portable electronic device.

  In recent years, as a new portable data storage medium, a so-called IC card having a built-in IC chip having a rewritable nonvolatile memory and a control element such as a CPU and having means for inputting and outputting data from the outside. Has been developed.

  In general, this type of IC card outputs a status word (SW) for a received command as a result of a predetermined process. That is, when a command input from the outside is received, the received command is processed, and a status word is output to the outside as the processing result. For example, in the key collation command, if the collation does not match, a status word such as “6300 (collation mismatch)” is output.

  However, in the case of the above-described prior art, when a CLA byte or INS byte determined by the command code standard is randomly attacked, “6300” is output as a status word at CLA = 00 and INS = 20, It was found that there was a key matching command, and there was a big problem that it was inferior in security.

  This is particularly a problem in applications that require high security, such as applications that make financial settlements.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a portable electronic device that can obtain high security against random attack of commands.

When the portable electronic device of the present invention receives a command input from the outside, the portable electronic device performs processing on the received command, and outputs the status word to the outside as the processing result. , Identification means for identifying whether to output a normal status word indicating the processing content or a specific status word indicating content different from the normal status word, and the identification result of this identification means And a status output means for selectively outputting the normal status word or a specific status word showing contents different from the normal status word .

Further, when the portable electronic device of the present invention receives a command input from the outside, the portable electronic device performs processing on the received command, and outputs the status word to the outside as the processing result. If the process does not end normally after performing the process for, whether to output a normal status word indicating the process contents or a specific status word indicating contents different from the normal status word Identification means for identifying, and status output means for selectively outputting the regular status word or a specific status word indicating a content different from the regular status word based on the identification result of the identification means.

Further, when the portable electronic device of the present invention receives a command input from the outside, the portable electronic device performs processing on the received command, and outputs the status word to the outside as the processing result. When the process is normally completed after the process is performed, whether to output a normal status word indicating the process contents or a specific status word indicating contents different from the normal status word is identified. And a status output means for selectively outputting the normal status word or a specific status word indicating a content different from the normal status word based on the identification result of the identification means.

  Further, when the portable electronic device of the present invention receives a command input from the outside, the portable electronic device performs processing on the received command, and outputs the status word to the outside as the processing result. After the process is performed, if the process does not end normally, the determination means for determining whether the received command is a specific command, and the command received by the determination means is a specific command If it is determined that the normal status word indicating the processing content is output to the outside, and if the command received by the determination means is determined to be a specific command, a specific status word indicating content different from the normal status word is output. Status output means for outputting a status word to the outside.

In addition, the portable electronic device of the present invention can register a plurality of applications. When each registered application receives a command input from the outside, the portable electronic device performs processing on the received command and outputs a status word as a processing result. In the portable electronic device that outputs to the outside, after processing the received command, output a normal status word indicating the processing content or output a specific status word indicating the content different from the normal status word Switching means for switching according to the currently selected application, and a specific status word indicating contents different from the normal status word or the normal status word is selectively output based on the switching result of the switching means. Status output means It is equipped with.

In addition, the portable electronic device of the present invention can register a plurality of applications. When each registered application receives a command input from the outside, the portable electronic device performs processing on the received command and outputs a status word as a processing result. In the portable electronic device that outputs to the outside, after processing the received command, if the processing does not end normally, either output a normal status word indicating the processing content or the normal status word Switching means for switching whether to output a specific status word indicating different contents according to the currently selected application, and based on the switching result of the switching means, the normal status word or the contents different from the normal status word specific status word shown It has and a status output means for outputting selectively.

In addition, the portable electronic device of the present invention can register a plurality of applications. When each registered application receives a command input from the outside, the portable electronic device performs processing on the received command and outputs a status word as a processing result. In a portable electronic device that outputs to the outside, after processing the received command, if the processing ends normally, a normal status word indicating the processing content is output or different from the normal status word A switching means for switching whether to output a specific status word indicating the contents according to the currently selected application, and a specification indicating contents different from the normal status word or the normal status word based on the switching result of the switching means Select status word for It has and a status output means for outputting to.

  Furthermore, the portable electronic device of the present invention can register a plurality of applications. When each registered application receives a command input from the outside, the portable electronic device performs processing on the received command and outputs a status word as a processing result. In the portable electronic device that outputs to the outside, after processing the received command, if the processing does not end normally, it is determined whether or not the currently selected application is a specific application If the determination means and the determination means determine that the currently selected application is not a specific application, a normal status word indicating the processing content is output to the outside, and the application for which the determination means is currently selected Identified as a specific application If it has and a status output means for outputting a specific status word indicating different contents and status word of the normal to the outside.

  According to the present invention, after processing a received command, whether to output a normal status word indicating the processing content or whether to output a specific status word indicating content different from the normal status word is identified. By selectively outputting a regular status word or a specific status word based on the identification result, a portable electronic device can be provided that can obtain high security against a random attack of a command.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows a configuration example of a terminal device that handles an IC card as a portable electronic device according to the present invention. That is, this terminal device enables the IC card 1 to be connected to the control unit 3 comprising a CPU or the like via the card reader / writer 2, and the control unit 3 includes a keyboard 4, a CRT display device 5, and a printer 6. Connected and configured.

  The IC card 1 can register a plurality of applications. For example, as shown in FIG. 2, a control element (control unit) 11 such as a CPU, a data memory 12 as a memory (storage means), a working memory 13, a program The memory 14 and the contact portion 15 for obtaining electrical contact with the card reader / writer 2 are included. Of these, the control element 11, the data memory 12, the working memory 13, and the program memory 14 are It is composed of one IC chip (or a plurality of IC chips) 16. The IC chip 16 and the contact portion 15 are integrated into an IC module and embedded in the IC card body.

The data memory 12 is used for storing various data, and is composed of a rewritable nonvolatile memory such as an EEPROM, for example.
The working memory 13 is a memory for temporarily storing processing data when the control element 11 performs processing, and is configured by, for example, a RAM.
The program memory 14 is configured by a mask ROM, for example, and stores a control program for the control element 11 and the like.

  FIG. 3 shows a part of the data memory 12, and stores a state setting flag 21, key data 22, and application issue information 23, respectively. The status setting flag 21 outputs which status word, that is, a normal status word (a normal status word indicating processing contents), or a specific status indicating a content different from the normal status word. This is for identifying whether to output a word, and is set by a flag setting command.

  Here, the specific status word is a status word indicating contents different from a regular status word indicating that the corresponding command is not supported. For example, the status word for the key collation command is “6D00 (INS not yet). Support) ”as a specific status word.

  The key data 22 is used to establish an access right of a flag setting command for setting the state setting flag 21, and collation key data or authentication key data is set.

  The application issue information 23 indicates that the application has already been issued, and is set to issued when an application with high security is issued.

  FIG. 4 shows a part of the working memory 13 in which an access condition flag 31 and application identification information 32 are stored. The access condition flag 31 is a flag indicating that the access right has been established, and is set according to the result of collation or authentication of the key data 22. The application identification information 32 indicates the type of application currently selected.

  FIG. 5 shows a part of the program memory 14, and stores a command search table 41 that can specify for each command whether a normal status word is output or a specific status word is output. In the command search table 41, for each command supported by the IC card, CLA, INS, access condition information, command format information, SW information for specifying which status word is output, and the like are registered. .

FIG. 6 shows a format example of a flag setting command for setting the state setting flag 21, and includes a command header 51 and flag information 52.
FIG. 7 shows a format example of the key collation command, which is composed of a command header 61 and a key value 62.

  Next, processing of a command for outputting a specific status word will be described with reference to the flowchart shown in FIG. When a command sent from the card reader / writer 2 is received, the process proceeds to step S1. In step S1, it is checked whether or not the received command is registered in the command search table 41.

  As a result of this check, if it is registered in the command search table 41, the process proceeds to step S2. In step S2, it is checked whether the access right is established by referring to the access condition flag 31. If the access right is established as a result of this check, the process proceeds to step S3. In step S3, it is checked whether or not the received command has an appropriate format by referring to the format information in the command search table 41.

  If it is determined that the format is appropriate, the process proceeds to step S4. In step S4, the received command is processed. Next, in step S5, it is checked whether or not the process of step S4 has been completed normally. As a result of this check, if the processing is completed normally, the process proceeds to step S6. In step S6, a normal completion status word is output to the card reader / writer 2 and a command wait state is entered.

  If it is not registered in the command search table 41 in step S1, the access right is not established in step S2, the format is not appropriate in step S3, or the process is normal in step S5. If not, the process proceeds to step S7. In step S7, by referring to the SW information in the command search table 41, it is checked whether to output a specific status word or a normal status word. That is, it is checked whether the received command is a predetermined specific command (for example, a key collation command).

  As a result of this check, when a specific status word is output (when the received command is a specific command), the process proceeds to step S8. In step S8, by referring to the state setting flag 21, it is checked whether the state setting flag 21 is set to output a specific status word or to output a normal status word. As a result of this check, if the status setting flag 21 is set to output a specific status word, the process proceeds to step S9. In step S9, a specific status word (specific error status) is output to the card reader / writer 2 to enter a command waiting state.

  When a normal status word is output in step S7 (when the received command is not a specific command), or when the state setting flag 21 is set to output a normal status word in step S8, step Proceed to S10. In step S10, a normal status word (normal error status) is output, and a command wait state is entered.

  As described above, when the received command is processed and the process is not completed normally, the command search table 41 is referred to output a specific status word or a normal status word. When a specific status word is output, it is checked whether the state setting flag 21 is set to output a specific status word or a normal status word, and a state setting flag is set. If 21 is set to output a specific status word, it outputs a specific status word. In the above check, when a normal status word is output, or when the state setting flag 21 is set to output a normal status word, a normal status word is output.

  Next, processing of a command that outputs a specific status word even when the processing ends normally will be described with reference to a flowchart shown in FIG. Note that the same steps as those in FIG. 8 are denoted by the same reference numerals, description thereof is omitted, and only different portions will be described.

  If the process ends normally in step S5, the process proceeds to step S11. In step S11, by referring to the SW information in the command search table 41, it is checked whether to output a specific status word or a normal status word. That is, it is checked whether the received command is a predetermined specific command (for example, a key collation command).

  If a specific status word is output as a result of this check (if the received command is a specific command), the process proceeds to step S12. In step S12, by referring to the state setting flag 21, it is checked whether the state setting flag 21 is set to output a specific status word or to output a normal status word. As a result of this check, if the status setting flag 21 is set to output a specific status word, the process proceeds to step S13. In step S13, a specific status word (specific error status) is output to the card reader / writer 2 to enter a command waiting state.

  When a normal status word is output in step S11 (when the received command is not a specific command), or when the state setting flag 21 is set to output a normal status word in step S12, step Proceed to S6. In step S6, a normal completion status word is output to the card reader / writer 2 and a command wait state is entered.

  As described above, even when the process ends normally, the same process as that when the process does not end normally is performed.

  Next, processing of a command for outputting a specific status word by a specific application will be described with reference to a flowchart shown in FIG. Note that the same steps as those in FIG. 8 are denoted by the same reference numerals, description thereof is omitted, and only different portions will be described.

  If it is not registered in the command search table 41 in step S1, the access right is not established in step S2, the format is not appropriate in step S3, or the process is normal in step S5. If not, the process proceeds to step S14. In step S14, it is checked whether or not the currently selected application is a predetermined specific application (for example, an application requiring high security) by referring to the application identification information 32.

  As a result of the check, if a specific application is selected, the process proceeds to step S15. In step S15, by referring to the application issue information 23, it is checked whether or not the issued state is set. As a result of this check, if the application issue information 23 is set to the issued state, the process proceeds to step S9. In step S9, a specific status word is output and a command wait state is entered.

  If a specific application is not selected in step S14, or if the application issue information 23 is not set to the issued state in step S15, the process proceeds to step S10. In step S10, a normal status word is output and a command wait state is entered.

  As described above, when the process for the received command is performed and the process does not end normally, it is checked whether or not a specific application is selected by referring to the application identification information 32, and the specific application is checked. Is selected, it is checked whether it is set to the issued state by referring to the application issue information 23, and if it is set to the issued state, a specific status word is output. In the above check, when a specific application is not selected, or when the application issue information 23 is not set to the issued state, a normal status word is output.

  Next, processing of a command that outputs a specific status word even when processing is normally completed in a specific application will be described with reference to a flowchart shown in FIG. Note that the same steps as those in FIG. 10 are denoted by the same reference numerals, description thereof is omitted, and only different portions will be described.

  If the process ends normally in step S5, the process proceeds to step S16. In step S16, it is checked whether or not the currently selected application is a predetermined specific application (for example, an application requiring high security) by referring to the application identification information 32.

  As a result of the check, if a specific application is selected, the process proceeds to step S17. In step S17, by referring to the application issue information 23, it is checked whether or not the issued state is set. As a result of this check, if the application issue information 23 is set to the issued state, the process proceeds to step S18. In step S18, a specific status word (specific error status) is output to the card reader / writer 2 to enter a command waiting state.

If a specific application is not selected in step S16, or if the application issue information 23 is not set to the issued state in step S17, the process proceeds to step S6. In step S6, a normal end status word is output and a command wait state is entered.
As described above, even when the process is normally completed in a specific application, the same process as that when the process is not normally completed is performed.

The block diagram which shows the structure of the terminal device which handles IC card as a portable electronic device which concerns on embodiment of this invention. 1 is a block diagram schematically showing the configuration of an IC card. The schematic diagram which shows a part of data memory. The schematic diagram which shows a part of working memory. The schematic diagram which shows a part of program memory. The schematic diagram which shows the format of a flag setting command. The schematic diagram which shows the format of a key collation command. The flowchart explaining the process of the command which outputs a specific status word. The flowchart explaining the process of the command which outputs a specific status word also when a process is complete | finished normally. The flowchart explaining the process of the command which outputs a specific status word by a specific application. The flowchart explaining the process of the command which outputs a specific status word even when a process is normally complete | finished by a specific application.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... IC card (portable electronic device), 2 ... Card reader / writer (external device), 11 ... Control element, 12 ... Data memory, 13 ... Working memory, 14 ... Program memory, 15 ... Contact part, 21 ... State Setting flag, 22 ... key data, 23 ... application issue information, 31 ... access condition flag, 32 ... application identification information, 41 ... command search table (storage means),

Claims (12)

In a portable electronic device that receives a command input from the outside, performs processing for the received command, and outputs a status word to the outside as the processing result.
An identification means for identifying whether to output a normal status word indicating the processing content or a specific status word indicating a content different from the normal status word after processing the received command;
Status output means for selectively outputting the regular status word or a specific status word indicating the content different from the regular status word based on the identification result of the identification means;
A portable electronic device comprising: In a portable electronic device that receives a command input from the outside, performs processing for the received command, and outputs a status word to the outside as the processing result.
After processing the received command, if the processing does not end normally, a normal status word indicating the processing content is output or a specific status word indicating content different from the normal status word is output An identification means for identifying what to do;
Status output means for selectively outputting the regular status word or a specific status word indicating the content different from the regular status word based on the identification result of the identification means;
A portable electronic device comprising: In a portable electronic device that receives a command input from the outside, performs processing for the received command, and outputs a status word to the outside as the processing result.
Whether the normal status word indicating the processing content is output or the specific status word indicating the content different from the normal status word is output when the processing is normally completed after processing the received command Identifying means for identifying
Status output means for selectively outputting the regular status word or a specific status word indicating the content different from the regular status word based on the identification result of the identification means;
A portable electronic device comprising:   The portable electronic device according to claim 1, wherein the specific status word is a status word indicating that the received command is not supported.   The identification means has a flag for identifying whether to output a normal status word or a specific status word, and outputs a normal status word or a specific status depending on the setting state of this flag The portable electronic device according to any one of claims 1 to 3, wherein whether to output a word is identified.   The identification means has storage means for storing for each command whether to output a normal status word or a specific status word, and by referring to this storage means, the normal status word is output. 4. The portable electronic device according to claim 1, wherein it is identified whether or not a specific status word is output. 5. In a portable electronic device that receives a command input from the outside, performs processing for the received command, and outputs a status word to the outside as the processing result.
A determination means for determining whether or not the received command is a specific command when the processing is not normally completed after performing the processing on the received command;
When it is determined that the command received by the determination means is not a specific command, a normal status word indicating the processing content is output to the outside, and when the command received by the determination means is determined to be a specific command Status output means for outputting a specific status word indicating content different from the regular status word to the outside
A portable electronic device comprising: In a portable electronic device that can register a plurality of applications and receives a command input from the outside in each registered application, performs processing for the received command, and outputs a status word to the outside as a processing result.
After processing the received command, whether to output a normal status word indicating the processing content or whether to output a specific status word indicating content different from the normal status word depends on the currently selected application Switching means for switching,
A status output means for selectively outputting the regular status word or a specific status word indicating a content different from the regular status word based on the switching result of the switching means;
A portable electronic device comprising: In a portable electronic device that can register a plurality of applications and receives a command input from the outside in each registered application, performs processing for the received command, and outputs a status word to the outside as a processing result.
After processing the received command, if the processing does not end normally, a normal status word indicating the processing content is output or a specific status word indicating content different from the normal status word is output Switching means for switching according to the currently selected application;
A status output means for selectively outputting the regular status word or a specific status word indicating a content different from the regular status word based on the switching result of the switching means;
A portable electronic device comprising: In a portable electronic device that can register a plurality of applications and receives a command input from the outside in each registered application, performs processing for the received command, and outputs a status word to the outside as a processing result.
Whether the normal status word indicating the processing content is output or the specific status word indicating the content different from the normal status word is output when the processing is normally completed after processing the received command Switching means for switching according to the currently selected application,
A status output means for selectively outputting the regular status word or a specific status word indicating a content different from the regular status word based on the switching result of the switching means;
A portable electronic device comprising:   The switching means has issue identification information for identifying whether or not the selected application has been issued. When the issue identification information has been issued, the switching operation is performed. The portable electronic device according to any one of claims 8 to 10, wherein the portable electronic device is performed. In a portable electronic device that can register a plurality of applications and receives a command input from the outside in each registered application, performs processing for the received command, and outputs a status word to the outside as a processing result.
A determination means for determining whether or not the currently selected application is a specific application if the process does not end normally after performing the process on the received command;
When the determination means determines that the currently selected application is not a specific application, a regular status word indicating the processing contents is output to the outside, and the application currently selected by the determination means is a specific application. If it is determined that there is a status output means for outputting a specific status word indicating the content different from the regular status word to the outside,
A portable electronic device comprising:

Images