JP4793673B2 - Multi-application IC card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a multi-application IC card that can register a plurality of applications in one IC card.
[0002]
[Prior art]
The application is composed of code (program) and data. In the IC card, a plurality of codes and data portions can be registered in the rewritable non-volatile memory (EEPROM, FRAM, etc.) and can be deleted. If you want to modify (rewrite) only the code, such as code back-up or version upgrade, if you can easily modify it, create an application code to peek at the data part of the application by unauthorized card issuers and hackers and register it on the IC card already An unauthorized application code is loaded instead of an already-applied application code, and confidential data such as a secret key and personal information in the data part can be taken out.
[0003]
FIG. 5 is a conceptual diagram illustrating that an illegal application code is loaded. In order to upgrade the code of application 1 (FIG. 5A) consisting of code 1 and data 1, if a valid card issuer changes to code 1 ′ and uses application 1 ′ (FIG. 5B). Although it is good, if a hacker or the like registers an illegal code 2 and sets it as an application 1 ″ (FIG. 5C), confidential data may be leaked to a third party by illegally reading out the data 1 .
[0004]
[Problems to be solved by the invention]
In a multi-application IC card on which a plurality of applications can be mounted, the application code and data are paired, and are simultaneously registered and deleted to be independent of other registered applications and protected from leakage of confidential data. Although security can be improved by such a method, it becomes difficult to easily modify and improve the application code, and even when only the code is to be modified, it is deleted together with the data and re-registered.
[0005]
In this case, even if the data in the IC card being used, for example, personal information or the balance of electronic money is changed by the user, the data is deleted together with the application deletion or the application is changed. Either you give up.
[0006]
If the application code and data are replaced at the same time, the security will be improved, but in order to modify only the code, all the confidential data will be read out and the data will be re-registered along with the code. The security will not be maintained by reading it.
[0007]
An object of the present invention is to solve the above-described problems, and an object of the present invention is to allow only an application code having a valid certificate to be re-registered from an already registered application.
[0008]
[Means for Solving the Problems]
The present invention incorporates an IC chip having a rewritable nonvolatile memory and an arithmetic unit, and in an IC card in which a plurality of applications can be mounted on the nonvolatile memory, in response to an application code re-registration instruction, The rewrite certificate is created inside the IC card, the rewrite certificate created outside is loaded, the rewritten certificate created inside is collated, and then the code is rewritten.
The present invention also includes a built-in IC chip having a rewritable nonvolatile memory and an arithmetic unit, and a registration certificate for an application code loaded in an IC card in which a plurality of applications can be loaded in the nonvolatile memory. Generated inside the IC card, read out the generated registration certificate to the outside, loaded the re-registration certificate and correction code issued by the certificate authority based on the read out registration certificate into the IC card, and generated the registration certificate The code is rewritten after checking the certificate and the re-registration certificate.
Further, the present invention is characterized in that the registration certificate is deleted after registering the application.
[0009]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram illustrating an example of a multi-application IC card according to the present invention. In this example, the registration certificate is held in the IC card, and the code is corrected after clearing the verification between the registration certificate and the re-registration certificate.
When an unregistered application is registered in the IC card, the code, data, and registration certificate are loaded into the IC card. In the illustrated example, code 1, data 1, and registration certificate 1 are loaded (FIG. 1A). The registration certificate 1 is said to be a digital signature, and is generated by encrypting the hash value of the code 1 using an encryption key, and is issued by an authoritative certificate authority. The IC card retains these codes, data, and registration certificate in the nonvolatile memory, and updates the data according to the processing contents executed by the code when using the application.
[0010]
When the code part needs to be corrected, the corrected code 2 and the re-registration certificate 2 issued by the certificate authority are loaded onto the IC card (FIG. 1B). The IC card checks the registration certificate 1 and the re-registration certificate 2 to confirm whether they are illegal. This confirmation is performed using an encryption key for generating a registration certificate held in the IC card. If it is valid, code 2 is re-registered, the re-registration certificate is held as registration certificate 2 for code 2, and the previous registration certificate 1 is deleted (FIG. 1 (c)). The registration certificate 2 is used as a registration certificate when the code is next changed. In such a process, the issuance of the re-registration certificate in the certificate authority requires the registration certificate 1. Therefore, only the card issuer who knows the registration certificate of the application can change the code. Security can be ensured.
[0011]
FIG. 2 is a diagram for explaining another example of the multi-application IC card of the present invention. In this example, from the viewpoint of saving memory, the registration certificate is deleted after the registration is completed.
When registering an unregistered application in the IC card, after loading code 1, data 1 and a registration certificate, the registration certificate is deleted to save memory (FIG. 2A). When it is necessary to correct the code, when the code correction instruction is given to the IC card, the OS in the IC card generates a rewrite certificate (registration certificate) from the code 1 and prepares for re-registration of the code. Perform (FIG. 1B). The re-registration code 2 to this IC card and the renewal certificate 1 generated based on the code 2 and issued by the certificate authority are loaded onto the IC card (FIG. 1 (c)). The IC card collates the renewal certificate shown in FIG. 1B generated from the registered application code with the renewal certificate 1 shown in FIG. 1C loaded from the outside, and rewrites the code if it is valid. After the registration is completed, the rewrite certificate (registration certificate) is deleted to save memory (FIG. 1 (c)). In this process, only a card issuer or an application provider who knows how to create an application code and a renewal certificate can create a certificate and confirm the validity.
[0012]
FIG. 3 is a diagram for explaining another example of the multi-application IC card of the present invention. In this example, a code registration form (registration certificate) is sent to the certificate authority to apply for the re-registration certificate, and the certificate authority records that there is a request for code re-registration. I am trying to issue it.
When registering an unregistered application in the IC card, code 1, data 1 and a registration certificate are loaded into the IC card, and the registration certificate is deleted after registration is completed in order to save memory (FIG. 3A). . When it is necessary to modify the code, a code registration form (registration certificate) is generated in the IC card by a command for re-registration of the code or a command with a certificate, and preparation for re-registration of the read code is performed outside ( FIG. 3 (b)). The read-out code registration form is sent to the certificate authority together with the change code (or signature) to apply for the re-registration certificate. The certificate authority records that there is a code re-registration request and issues a re-registration certificate. The card issuer loads the change code and the re-registration certificate into the IC card, checks the re-registration certificate against the code registration form in the IC card, and rewrites the code if it is valid (FIG. 3C). ). After registration is completed, the registration certificate is deleted to save memory (FIG. 3D). If it is known that the rewriting has been performed illegally, the history of the certificate authority is introduced and the use of the card is stopped.
〔Example〕
Hereinafter, an embodiment of the multi-application IC card of FIG. 1 will be described. In the figure, 1 is an application provider, 2 is a certificate authority, 3 is a card issuer, 4 is an IC card, and 5 is a card user.
(1) The application provider creates application code and data, and registers application code 1 (or code signature) with the certificate authority.
(2) The IC card issuer requests the certificate authority for an application to be registered in the IC card.
(3) The certificate authority sends application code 1, data 1, and registration certificate 1 to the IC card issuer.
(4) The IC card issuer loads code 1, data 1, and registration certificate 1 onto the IC card.
(5) The IC card confirms that the registration certificate 1 is valid, and registers it in the IC card so that it can be used as an IC card.
(6) The user can use the IC card.
(7) If the code 1 is later modified due to a defect in the application or a change in specifications, the application provider creates the code 2 and registers it with the certificate authority.
(8) The application issuer requests code 2 for rewriting code 1 from the certificate authority.
(9) The certificate authority sends the re-registration certificate 2 to the IC card issuer in the application code.
(10) The IC card issuer loads the IC card 2, code 2, registration certificate 1, and re-registration certificate 2.
(11) The IC card confirms whether or not the re-registration certificate 2 is valid as compared with the registration certificate 1 registered in the IC card. Along with the re-registration certificate 2, if valid, the code 1 is replaced with the code 2 and the re-registration certificate 2 is held as the registration certificate 2.
(12) The user can use the IC card while the data content is maintained.
[0013]
【The invention's effect】
As described above, according to the present invention, it is possible to re-register only application code having a valid certificate from already registered applications, and it is possible to easily modify or improve the application code while maintaining high security. It can be performed.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of an IC card according to the present invention.
FIG. 2 is a diagram illustrating another example of an IC card according to the present invention.
FIG. 3 is a diagram illustrating another example of an IC card according to the present invention.
FIG. 4 is a diagram illustrating an example of issuing an IC card according to the present invention.
FIG. 5 is a conceptual diagram illustrating that an illegal application code is loaded.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Application provider, 2 ... Certification authority, 3 ... Card issuer, 4 ... IC card, 5 ... Card user.

Claims (3)

In an IC card with a built-in IC chip having a rewritable nonvolatile memory and an arithmetic unit, and a plurality of applications can be mounted on the nonvolatile memory.
In response to the re-registration instruction for the application code, create a renewal certificate for the registered code inside the IC card, load the rewrite certificate created externally, check the rewrite certificate created internally, A multi-application IC card characterized by rewriting. In an IC card with a built-in IC chip having a rewritable nonvolatile memory and an arithmetic unit, and a plurality of applications can be mounted on the nonvolatile memory.
A registration certificate for the loaded application code is generated inside the IC card, the generated registration certificate is read out, and the re-registration certificate and correction code issued by the certificate authority based on the read registration certificate A multi-application IC card, in which the code is rewritten after the generated registration certificate and the re-registration certificate are collated. After application registration of claim 1 or 2, multi-application IC card, wherein the deleting the registrations.

Images