JP4742469B2 - IC card, IC card processing apparatus and processing method using a plurality of OSs - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an IC card equipped with a plurality of OSs, an IC card processing apparatus using the IC card, and a processing method.
[0002]
[Prior art]
With the progress of integrated circuit technology and the like, an IC card incorporating a CPU and a memory is being put into practical use and attracting attention. Since advanced security functions and multi-functions are possible, it is expected to be used in various fields.
[0003]
An IC chip of a recent IC card generally includes a CPU, a memory, a cryptographic processing dedicated circuit, and the like.
The memory typically includes read-only memory (ROM), rewritable non-volatile memory, such as EEPROM or FRAM, and random access memory (RAM).
[0004]
In the past, dedicated machine language programs that realize specific functions have been stored in ROM and stored in IC cards. For example, an operating system (OS) of an IC card, various OS level programs, and application programs that provide services are stored in the ROM, and personal data of the user is stored in the EEPROM.
Recently, an IC card having a configuration in which an interpreter called a multi-application type card OS is resident has appeared. In an IC card equipped with such an interpreter, a program written in a program language is recorded in a rewritable nonvolatile memory, so that an application program is added even after the card is issued after the OS is installed on the card. You can also delete unnecessary programs.
Typical multi-application OSs include MULTOS, JavaCard, and Windows for SmartCard.
In this type of IC card, the OS kernel is often stored in a ROM and stored in a non-volatile memory in which various OS level programs, service providing application programs, and user personal data can be rewritten. An OS level program may be stored in the ROM.
[0005]
Until now, the multi-application OS has only an interpreter corresponding to one kind of program language because of the processing capability of the OS and the capacity of the IC card built-in memory. Therefore, an IC card equipped with a predetermined multi-application OS can only use an allocation program created in a program language belonging to the OS. For example, an application mounted on a MULTOS IC card is written in MEL language (MULTOS Executable Language), JavaCard uses Java language, and Windows for SmartCard supports only applications written in Virtual Basic language.
[0006]
FIG. 1 is a block diagram illustrating an exemplary configuration of an IC card using a multi-application OS and an IC card processing apparatus.
The IC card processing device 1 includes an IC card 10, a terminal device 20, for example, a read / write device, and a host computer 30.
The terminal device 20 is a terminal device of the host computer 30 that manages the IC card 10, and performs various processes on the IC card 10 based on instructions from the host computer 30.
[0007]
As shown in FIG. 1, the IC card 10 includes a CPU 11, an interface (I / F) 12, a cryptographic processor 13, a random access memory (RAM) 14, a read-only memory (ROM) 15, and a rewritable nonvolatile memory. A memory 16 is provided. The function of each component will be described in detail in the description of the embodiment of the present invention described later.
[0008]
The IC card having such hardware is equipped with software having the configuration shown in FIG.
FIG. 2 is a schematic diagram showing an example of a software configuration in a conventional multi-application OS IC card (hereinafter referred to as a single OS IC card) containing one OS.
[0009]
The core of this hierarchical structure is an OS kernel unit 21 stored in the ROM 15. The OS kernel unit 21 manages hardware resources of the IC card and provides an interface for accessing the IC card hardware from an upper layer program. The OS kernel unit 21 controls the operation of the upper layer program.
[0010]
In FIG. 2, a processing module which is OS level software is arranged in the upper layer of the OS kernel unit 21. The processing module allows various functions of the OS kernel to be conveniently used by upper layer application programs. These processing modules are recorded in the EEPROM 16 or the ROM 15. Here, a description will be given taking the case of being recorded in the EEPROM 16 as an example.
[0011]
Examples of such processing modules include an interpreter that processes a program language, a program loader that adds or updates a program, an application programming interface, and a cryptographic processing library. For convenience of explanation, various processing modules other than the interpreter are referred to as a module 23 here.
The OS kernel 21, interpreter 22, and other various OS level processing modules 23 are combined into an IC card OS.
Various application programs that provide specific services are arranged in the upper layer of the processing module 23. Here, it is assumed that application 1 and application 2 are arranged.
[0012]
FIG. 3 is a flowchart showing a procedure for processing a command received from the outside in the IC card having the software configuration shown in FIG. Here, a description will be given by taking as an example processing of a command for executing the application 1 in the IC card and a command for downloading the application to the IC card.
When a command is transmitted from the host computer 30 and the I / F 12 receives the command, the command is interpreted by the OS and its contents are confirmed (step 31).
[0013]
If the command is a command for executing the application 1 that already exists in the IC card, the application 1 is stored in the EEPROM 16 of the IC card by the file manager processing module using the address information of the application 1 included in the command. Search (step 32). If found, the application 1 is executed (step 33), that is, the application 1 is read into the RAM 14 or directly referred to in the EEPROM 16, and the procedure described in the application 1 is sequentially executed in the CPU 11. To do.
[0014]
If the command is a command for downloading the application 2 to the IC card, the program loader processing module of the OS is operated, and the components of the application 2 transmitted following the load command are authenticated and specified in the EEPROM 16. (Step 34).
[0015]
As a result of the authentication process, if the command is not a command belonging to the installed OS, the process of the command is rejected (step 35).
[0016]
[Problems to be solved by the invention]
As described above, when only one OS is mounted on one IC card, the use of the IC card is restricted, and the card owner can use an application written in a program language corresponding to the OS of the IC card. Can only be used. In order to use an application created in a programming language that does not support the OS, it is necessary to hold a plurality of IC cards equipped with an OS capable of operating those applications and use them appropriately as necessary. For example, since an application that can be mounted on a MULTOS IC card cannot be used with an IC card mounted with JavaCard or Windows for SmartCard, it has three types of cards.
Furthermore, when a new application is to be used, it is necessary to load the application on the IC card under the control of the IC card OS. Therefore, if the application is not described in which language, the load operation of the application is performed. The card holder cannot install the application in the different language on his own IC card.
IC cards are quickly spread and used for various purposes, and it is expected that a large number of applications written in different languages will appear. Therefore, a single OS IC card is a problem in pursuing convenience.
[0017]
If multiple operating systems can be installed on a single card, interpreters of different programming languages can be stored on a single IC card, and many applications created in different programming languages can be used on a single card. Become.
In order to install a plurality of OSs on a single card, a large capacity memory is required first. Currently, the capacity of ROM often used for IC cards is about 32 to 64 kbytes, and about 16 kbytes or about 32 kbytes of EEPROM is the mainstream. On the other hand, the OS kernel size is about several kilobytes to 20 kilobytes, and the typical application size is also several kilobytes. Therefore, at the present time, it is difficult to simultaneously install a plurality of OSs and a plurality of applications on a single IC card due to a limitation on memory capacity.
However, as the capacity of the IC card built-in memory increases, the capacity of the IC card memory will increase in the near future, and it is expected that larger size software can be stored in the IC card. For example, a 64 kbyte EEPROM may soon be put into practical use. Therefore, in order to mount a plurality of OSs on a single card, there is a possibility that the limitation of memory capacity is not a problem.
[0018]
However, when a plurality of OSs are mounted on one IC card, there is a difficulty in programming technology. For example, based on the single OS IC card software of FIG. 3, how is the structure of multiple OS software arranged in the ROM 15 and EEPROM 16 of the IC card and operated? In addition, for example, after receiving a command, the IC card identifies an OS to be used from a plurality of OSs, smoothly switches between OSs, and without worrying about the OS to which the application belongs. There are problems such as whether to load, add, or execute a desired application program in accordance with only the card owner's instructions.
[0019]
The present invention has been made in view of such problems, and an object of the present invention is to provide an IC card having a plurality of IC card OSs and an IC card processing apparatus using the IC cards having the plurality of OSs. And providing a processing method.
[0020]
[Means for Solving the Problems]
In order to achieve the above object, an IC card according to the present invention is an IC card having a CPU, a memory, and an interface for performing input / output with an external device, and the memory includes at least the external device and the IC card. Operating system basic part (OS basic part) for controlling the input / output of the IC card, and a plurality of IC card OSs that execute and manage application programs that provide predetermined functions of the IC card while referring to the OS basic part And an OS loader that decodes a command input from an external device via the interface and identifies and activates an IC card OS that can execute the command, and is stored under the control of the OS basic unit. Upon receiving a command from an external device via the interface, the OS loader decodes the command and executes the command Start by identifying the ability of the IC card OS, to execute the command by the IC card OS.
[0021]
Preferably, the command input from the external device includes information on an IC card OS that can execute the command.
[0022]
In order to achieve the above object, the IC card processing device according to the present invention includes a CPU, a memory, and an interface for performing input / output with an external device, and the memory includes at least A basic part (OS basic part) of an operating system that controls input / output with the external device, and a plurality of applications that execute and manage application programs that provide predetermined functions of the IC card while referring to the OS basic part An IC card OS and an OS loader that decodes a command input from an external device via the interface and identifies an IC card OS that can execute the command are stored. The IC card to which the external device belongs A command including OS information is transmitted to the IC card, and the IC card is controlled under the control of the OS basic unit. The command is received via the interface, and the OS loader decodes the information of the IC card OS included in the command, starts the IC card OS, and executes the command via the IC card OS. .
[0023]
In order to achieve the above object, an IC card processing method according to the present invention includes a CPU, a memory, and an interface for performing input / output with an external device, and includes an OS basic unit, a plurality of IC card OSs, and an OS. A method of processing an IC card equipped with a loader, wherein the external device transmits a command including information of an IC card OS to which the external device belongs to the IC card, and the IC card controls the interface under the control of the OS basic unit. The OS loader decodes the information of the IC card OS included in the command, identifies and activates the IC card OS, and causes the IC card OS to execute the command. .
[0024]
By providing the OS loader, the OS loader receives a command sent from an external device to the IC card under the control of the OS basic unit, decodes the OS information included in the command, and identifies the IC card OS to be used. After that, it is possible to switch to the OS and perform processing such as loading and execution of an application depending on the card OS to be used. The cardholder does not need to be aware of the existence of a plurality of card OSs and what programming language the application is written in, and can select and easily execute the card OS by loading or executing the application.
[0025]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.
IC card and IC card processing device
The IC card and the IC card processing apparatus according to the present embodiment have the same configuration as the IC card 10 and the IC card processing apparatus 1 shown in FIG. 1 described above. Hereinafter, the present embodiment will be described with reference to FIG. explain.
[0026]
As described above, the IC card processing device 1 includes the IC card 10, the terminal device 20, for example, the read / write device, and the host computer 30. The terminal device 20 performs various processes on the IC card 10 based on instructions from the host computer 30 that manages the IC card 10.
In this embodiment, the IC card 10 is issued and managed by an IC card issuing company, and has a plurality of OSs and respective OS level software installed therein, and a plurality of OSs carried by the IC card owner. IC card using A contact IC card will be described as an example of the IC card.
As shown in FIG. 1, the IC card 10 includes, for example, a CPU 11, an interface (I / F) 12, a cryptographic processor 13, a random access memory (RAM) 14, a read-only memory (ROM) 15, and a rewritable memory. A non-volatile memory EEPROM 16 is provided.
[0027]
Based on a command from the terminal device 20 or a command preset in the IC card, the CPU 11 performs communication with the terminal device 20 through the I / F 12 according to an application stored in the EEPROM 16 as desired. For example, processing such as authentication of the owner and the IC card, settlement of the price, diagnosis of the IC card, and the like are performed.
Data temporarily generated when the CPU 11 performs processing is stored in the RAM 14.
[0028]
When the IC card 10 is attached to the terminal device 20 via the I / F 12, the power and clock are supplied and signals are transmitted to and received from the terminal device 20. That is, the I / F 12 outputs a signal received from the terminal device 20 to the CPU 11 and transmits a signal input from the CPU 11 to the terminal device 20.
[0029]
The cryptographic processor 13 is a dedicated cryptographic processing circuit. The cryptographic processor 13 generates random numbers and performs cryptographic operations such as RSA.
[0030]
The RAM 14, ROM 15, and EEPROM 16 constitute a memory system of the IC card 10. Each function will be described with the software configuration of the IC card described below.
[0031]
The IC card having a plurality of OSs having such hardware has the software configuration shown in FIG.
FIG. 4 is a conceptual diagram showing an example of a software configuration in a multi-application OS IC card (hereinafter referred to as a multi-OS IC card) containing a plurality of OSs according to the present invention.
[0032]
Similar to the single OSIC card described above, the kernel part 41 of the OS stored in the ROM 15 is at the core of the software hierarchical structure in the multi-OS IC card. The OS kernel unit 41 is designed corresponding to the hardware of the IC card 10 and manages its hardware resources. The OS kernel unit 41 controls the interface (I / F) 12 of the IC card 10 and inputs / outputs data to / from an external device. The OS kernel unit 41 provides an interface for accessing the IC card hardware from the upper layer program. Based on the above functions, the OS cannel 41 controls the operation of each upper layer program.
The kernel part 41 of the OS stored in the ROM 15 is installed before the IC card is issued by the IC card manufacturer and cannot be rewritten.
[0033]
In the present embodiment, as shown in FIG. 4, the OS loader 42 is arranged in the EEPROM 16 in the upper layer of the OS kernel unit 41. The OS loader 42 decodes the content of the command received from the external device via the I / F 12 under the control of the OS cannel 41, and identifies and selects the OS to be used by the command and the application added to the command. To do.
[0034]
On the upper layer of the OS loader 42 are a plurality of OS processing module portions mounted on the IC card. This part is also recorded in the EEPROM 16. Each IC card OS is composed of the OS kernel 41 and a plurality of processing modules of each OS. Each OS processing module is provided so that the OS kernel functions can be conveniently used by upper layer application programs. It is desirable to describe these OS-level software in machine language because of processing speed, capacity, and security.
Examples of such processing modules include an interpreter that processes a program language, a command interpreter that processes commands, a program loader that adds or updates programs from the outside, an application programming interface, and a cryptographic processing library. For convenience of explanation, here, various processing modules other than the interpreter are represented by one module.
Further, as an example of the embodiment of the present invention, a case where two OSs (OSa and OSb) are mounted will be described as an example. Each of the two OSs includes an interpreter a43 and a processing module a44, and an interpreter b45 and a processing module b46.
[0035]
The OS loader 42 recognizes the OS belonging from the contents of the received command, activates OS level software such as a corresponding interpreter, and processes the command and application.
By placing the OS loader 42 and the processing modules 43, 44, 45, and 46 of each OS in the rewritable EEPROM 16, it is possible to add and delete OSs. In this case, the contents of the OS loader 42 are corrected appropriately. Thus, the newly added OS can be easily identified and selected.
[0036]
Application programs that provide various services are arranged in the upper layer of each processing module. As shown in FIG. 4, application 1 (47) and application 2 (48) belonging to OSa, and application 3 (49) and application 4 (50) belonging to OSb are arranged.
[0037]
As described above, an interpreter is required to execute an application program written in a programming language. The interpreter sequentially converts the source code of the application program into executable code. If necessary, necessary processing modules are called, and the IC card system data is used to access the IC card hardware, thereby realizing predetermined functions of the IC card.
Note that there are some which operate in the machine language of the CPU of the IC chip and are not a program language application. In this case, it is not necessary to operate the interpreter.
[0038]
There are various application programs depending on the service provided by the IC card, and such an application program is usually installed in the IC card before issuing the card. In an IC card using a multi-application OS, programs can be added and updated even after the IC card is issued.
[0039]
Next, the configuration of the OS loader 42 will be described with reference to FIGS.
The OS loader 42 is a program that can be executed at the OS kernel level. For example, as shown in FIG.
FIG. 5 is a diagram showing an example of the arrangement in the EEPROM 16 of the OS loader of the IC card using a plurality of OSs according to the embodiment of the present invention.
In FIG. 5, the capacity of the EEPROM 16 is 64 kbytes, and the address on the left is displayed in hexadecimal notation in units of blocks (1 block = 16 bytes). The size of the OS loader 42 is 1 kbyte or less, all the processing modules of OSa are called OSa system software, and all the processing modules of OSb are called OSb system software, and each size is 2 kbytes or less.
[0040]
The OS loader 42 includes the contents shown in FIG.
FIG. 6 is a diagram showing an example of contents of an OS loader of an IC card using a plurality of OSs according to the embodiment of the present invention.
The OS loader 42 has a command decoding unit that is a program for decoding commands received from the I / F 12. The command decoding unit 61 interprets the received command and identifies the IC card OS information attached to the command.
In addition, information of each OS mounted on the IC card is registered as an OS loader 42 as a constant. In the present embodiment, for example, the first OS is registered as OSa, the recorded location is EEPROM, and the address is 0041H. Similarly, it is registered that the second OS is OSb, the recorded location is EEPROM, and the address is 00C1H.
[0041]
Based on the OS information included in the received command, the OS loader 42 identifies and selects the OS to which the command belongs.
FIG. 7 is a diagram showing a format of a command received by an IC card using a plurality of OSs according to the present invention.
This command has a command header including a control code at the head, and the command header includes an IC card OS identifier that is data for identifying an OS that can execute the command, and a command type code indicating the operation content of the command. There is. From the type code, for example, it can be determined that operations such as loading and execution of an application are performed. The body of the command has an address of an application or data operated by the command, and data to be operated by the command is also added if necessary.
The OS loader 42 receives the command received from the I / F 12 under the control of the OS kernel 41, identifies the OS to which the command belongs from the OS identifier in the command header, and starts up. The activated OS obtains a command type by a command interpreter, writes data to a specified address, or executes an application at a specified address.
The above is the description of the hardware and software configuration of the IC card 10 in the IC card processing apparatus 1.
[0042]
When the IC card 10 having such a hardware configuration and software configuration is mounted on the terminal device 20, the IC card 10 is activated by receiving power and a clock signal from the terminal device 20 via the I / F 12. Then, the IC card 10 performs processing based on a command from the host computer 30 via the terminal device 20.
The terminal device 20 is, for example, a terminal device normally used in a store or the like, and is connected to a host computer 30 of an IC card manufacturing company or a company providing a service via a communication line. And communication data between the attached IC card 10 are transferred.
[0043]
The IC card 10 is mounted on the terminal device 20 and activated, and the IC card itself authenticates, that is, whether the IC card 10 is an IC card that can be processed by the IC card processing device 1. After that, it is checked whether the owner is a valid owner. When the IC card 10 is authorized, the IC card 10 can communicate with the host computer 30 via the terminal device 20. The host computer 30 and the IC card 10 execute instructions to the IC card 10 transmitted from the host computer 30 while sequentially performing communication.
[0044]
Multi-OS IC card processing
A process of processing the multi-OS IC card 10 having the above hardware and software configuration using the above IC card processing apparatus 1 will be described with reference to FIG.
FIG. 8 is a flowchart showing a process of identifying and selecting an IC card OS to be used by the OS loader and starting the IC card 10 using a plurality of OSs according to the embodiment of the present invention.
When the IC card 10 is attached to the terminal device 20, the IC card 10 is activated (step S81). That is, the OS kernel 41 is read into the RAM 14 (or directly referred to in the ROM 15), and data input / output with the host computer 30 via the terminal device 20, authentication processing of the IC card 10, encryption processing, etc. Control the behavior. The OS loader 42 is also read into the RAM 14 and is resident in the RAM 14 while the IC card 10 is attached to the terminal device 20. Each time the IC card 10 receives a command from the host computer 30 via the terminal device 20, the OS loader 42 performs an OS identification process to be used by the command.
[0045]
Next, under the control of the OS kernel 41, an authentication process is performed between the IC card 10 and the terminal device 20 (step S82). For example, if the IC card owner inputs a password and is an authorized owner, and the IC card is found to be an IC card that can be processed by the processing device 1, the host computer 30 requests the owner of the host computer 30. Wait for specification of processing to be performed.
[0046]
Next, when the owner of the IC card 10 inputs from the terminal device 20 and specifies that an operation is performed on a service provided by the host computer 30 (for example, download, execution, etc.), the host computer 30 issues a command to perform the operation. The data is transmitted to the IC card, and the IC card 10 receives the command via the terminal device 20 (step S83).
[0047]
When the IC card 10 receives the command, the OS kernel 41 calls the OS loader 42, interprets the command by the OS loader 42 (step S84), that is, reads the OS identifier in the command header and belongs to the command. Identify the OS.
[0048]
Next, the OS corresponding to the OS identifier is searched from the list of OSs installed in the IC card 10 registered in the OS loader 42, and the storage location and detailed address of the OS are specified (step S85).
[0049]
Next, the necessary system software of the OS stored in the specified location is read into the RAM 14 (or directly executed in the EEPROM 16), and a processing module such as an interpreter of the OS is operated (step S86).
[0050]
Control of command processing shifts to the activated OS, and subsequent processing is performed by control of the OS (step S87). The OS continues to decode the command using the command interpreter, determines the command type from the command type code, obtains an address for operating the command, and obtains write data if necessary.
A specific example of command processing by the IC card OS will be described with reference to FIGS.
After completing the command processing by the IC card OS, the software of the OS leaves the RAM 14, the control returns to the OS kernel 41, and waits for the reception of the next command (step S88).
The above is the description of the process of identifying, selecting, and starting the OS of the multi-OS IC card 10 by the OS loader 42 in the IC card processing apparatus 1.
[0051]
In order to compare the load and execution command processing flow in the conventional single OS IC card shown in FIG. 3, the processing for the same command in the multi-OS IC card 10 described above is shown in FIG. 9 and FIG. Indicated.
FIG. 9 is a flowchart of processing of an IC card when a command for loading an application is received using the multi-OS IC card according to the present invention.
[0052]
When a command is transmitted from the host computer 30 under the management of the OS kernel 41, the command is interpreted by the OS loader 42, and the OS to be used by the command is identified from the OS identifier in the command head (step 91).
[0053]
If the OS is OSa, the OSa system software is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command is processed under the control of the OSa (step 92).
[0054]
The OSa interprets the command by the command interpreter, and determines the command type from the command type code (step 93). If it is confirmed that the command is a command for downloading the application 1 to the IC card 10, the OSa program loader is operated, and the component of the application 1 transmitted following the load command is authenticated, and the EEPROM 16 is designated. (Step 94).
[0055]
If the OS is OSb, the OSb system software is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command is processed under the control of the OSb (step 95).
[0056]
The OSb interprets the command by the command interpreter, and determines the command type from the command type code (step 96). When it is confirmed that the command is a command for downloading the application 3 to the IC card 10, the OSb program loader is operated, and the components of the application 3 transmitted following the load command are authenticated and specified in the EEPROM 16. (Step 97).
After the application program is written, OSa or OSb is withdrawn from the RAM 14, and the processing of OSa or OSb ends.
[0057]
FIG. 10 is a flowchart of processing of an IC card when a command for executing an application is received using the multi-OS IC card according to the present invention.
[0058]
When a command is transmitted from the host computer 30 under the management of the OS kernel 41, the command is interpreted by the OS loader 42, and the OS to be used by the command is identified from the OS identifier at the head of the command ( Step 101).
[0059]
If the OS is OSa, the OSa system software is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command is processed under the control of the OSa (step 102).
[0060]
The OSa decodes the command by the command interpreter and determines the command type from the command type code (step 103). When it is confirmed that the command is a command for executing the application 2 existing in the IC card 10, an address where the application 2 is recorded is obtained from the command content.
Subsequently, the application 2 is searched for in the EEPROM 16 of the IC card 10 by the OSa file manager (step 104). If found, the application 2 is executed (step 105). That is, the application 2 is read into the RAM 14 (or directly executed in the EEPROM 16), and the procedure described in the application 2 is sequentially executed in the CPU 11.
[0061]
If the OS is OSb, the OSb system software is read into the RAM 14 (or directly executed in the EEPROM 16), and thereafter, the command is processed under the control of the OSb (step 106).
[0062]
The OSb interprets the command by the command interpreter and determines the command type from the command type code (step 107). If it is confirmed that the command is a command for executing the application 4 already existing in the IC card 10, the address where the application 4 is recorded is obtained from the command content.
Subsequently, the application 4 is searched for in the EEPROM 16 of the IC card 10 by the OSb file manager (step 108). If found, the application 4 is executed (step 109). That is, the application 4 is read into the RAM 14 (or directly executed in the EEPROM 16), and the procedure described in the application 4 is sequentially executed in the CPU 11.
[0063]
After executing the application 2 or the application 4, the OSa or OSb is withdrawn from the RAM 14, and the processing of the OSa or OSb is ended.
[0064]
The present invention is not limited to the embodiment described above, and various modifications can be made.
In the above-described embodiment, as shown in FIG. 4, the OS loader 42 and the processing modules 43, 44, 45, 46 of each OS are stored in the EEPROM 16. A part may be stored in the ROM. In that case, the OS to be loaded on the IC card and the contents of the OS loader 42 are determined in advance, loaded into the ROM before issuing the IC card, and the loaded OS cannot be modified after issuance.
In the above method, the case where two OSs are mounted is described as an example, but it is obvious that two or more OSs can be mounted in the present invention.
[0065]
Further, in the present embodiment, the present invention has been described by exemplifying a contact type IC card. However, the interface (I / F) 12 is not provided with a terminal, and may be a non-contact type IC card configured to be electromagnetically connected to an external device using a coil.
[0066]
【The invention's effect】
According to the present invention, a plurality of OSs can be mounted on a single IC card, the use of the IC card is greatly expanded, and the convenience in using the IC card is excellent.
Also, by providing an OS loader, each time a command is received, the OS to which the command belongs is identified and selected, and application processing is performed under the control of the OS to which the command belongs. It is not necessary to be aware of the OS to be used within the range of the OS installed in the IC card, and the IC card can be used as if it is a multi-application IC card that can process a plurality of languages on one OS. Excellent versatility and convenience.
In addition, since the OS loader and the OS processing module are recorded in a rewritable EEPROM and the OS loader can be modified, a new OS can be added, and unnecessary OSs can be deleted. Excellent flexibility in use of IC card.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an IC card processing apparatus according to the present invention.
FIG. 2 is a conceptual diagram showing a software configuration of a conventional IC card.
FIG. 3 is a flowchart showing a process of processing a command using the conventional IC card having the software configuration shown in FIG. 2;
FIG. 4 is a conceptual diagram showing a software configuration of an IC card using a plurality of OSs according to the present invention.
FIG. 5 is a diagram showing an arrangement in an EEPROM of an OS loader of an IC card using a plurality of OSs and system software of each OS according to the present invention.
FIG. 6 is a diagram showing a schematic content of an OS loader of an IC card using a plurality of OSs according to the present invention.
FIG. 7 is a schematic diagram showing a format of a command received by an IC card using a plurality of OSs according to the present invention.
FIG. 8 is a flowchart showing the steps of identifying, selecting and starting an IC card OS by an IC card OS loader using a plurality of OSs according to the present invention.
FIG. 9 is a flowchart showing a process of loading an application program onto an IC card in an IC card using a plurality of OSs according to the present invention.
FIG. 10 is a flowchart showing a process of executing an application that already exists in the IC card in the IC card using a plurality of OSs according to the present invention.
[Explanation of symbols]
1 ... IC card processing device
10 ... IC card
11 ... CPU
12 ... Interface (I / F)
13 ... Cryptographic processor
14 ... RAM
15 ... ROM
16: Rewritable non-volatile memory (EEPROM)
20 ... Terminal device
21 ... OS kernel part
22 Interpreter
23 ... Processing module
24 ... Application 1
25 ... Application 2
30: Host computer
41 ... OS kernel part
42 ... OS loader
43 ... interpreter a
44 ... Processing module a
45 ... interpreter b
46 ... Processing module b
47. Application 1
48 ... Application 2
49 ... Application 3
50 ... Application 4

Claims (4)

An IC card having a CPU, a memory, and an interface for performing input / output with an external device,
The memory includes at least a basic part (OS basic part) of an operating system that controls input / output with the external device, and an application that provides a predetermined function of the IC card while referring to the OS basic part. A plurality of IC card OSs that execute and manage programs and an OS loader that decodes a command input from an external device via the interface, identifies an IC card OS that can execute the command, and is activated are stored. ,
The OS loader receives a command from an external device via the interface under the control of the OS basic unit, the OS loader decodes the command, identifies an IC card OS that can execute the command, starts up, An IC card for executing the command by the IC card OS. The IC card according to claim 1, wherein the command input from the external device includes information of an IC card OS capable of executing the command. An IC card processing device having an external device for processing an IC card and an IC card for inputting / outputting data to / from the external device,
The IC card has a CPU, a memory, and an interface for performing input / output with an external device,
In the memory, at least a basic part (OS basic part) of an operating system that controls input / output with the external device, and an application program that provides a predetermined function of an IC card while referring to the OS basic part A plurality of IC card OSs that execute and manage and an OS loader that decodes a command input from an external device via the interface, identifies an IC card OS that can execute the command, and is activated,
The external device transmits a command including information of the IC card OS to which the external device belongs to, the IC card receives the command via the interface under the control of the OS basic unit, and the OS loader An IC card processing device that decodes information of an IC card OS included in a command, activates the IC card OS, and executes the command via the IC card OS. A processing method of an IC card having a CPU, a memory, an interface for inputting / outputting to / from an external device, and including an OS basic unit, a plurality of IC card OSs, and an OS loader,
The external device transmits a command including information of the IC card OS to which the external device belongs to the IC card,
The IC card receives the command via the interface under the control of the OS basic unit, and the OS loader decodes the information of the IC card OS included in the command to identify the IC card OS. The IC card processing method of starting and executing the command by the IC card OS.

Images