JP5306079B2 - IC card, IC card processing device, and IC card processing system - Google Patents

Description

  The present invention relates to an IC card incorporating an IC (Integrated Circuit) chip having control elements such as a CPU, ROM, RAM, and EEPROM. The present invention also relates to an IC card processing apparatus for processing such an IC card. The present invention also relates to an IC card processing system including these IC cards and IC card processing devices.

  In recent years, IC cards (contact type and non-contact type) having excellent safety have been widely used. Such an IC card includes a non-volatile memory that can retain data even when power supply is cut off, a communication I / F that can communicate with a reader / writer, a control element such as a CPU that executes various operations, It has a ROM for storing operation programs and the like, and a RAM for temporarily storing data.

  IC cards are used not only for settlement of credit cards, commuter passes, and other commercial transactions, but also in various fields as ID cards for employee cards, membership cards, insurance cards, and the like. Compared to the conventional magnetic card, the IC card has an IC having a CPU, ROM, RAM, nonvolatile memory, etc., so that various functions can be realized and it is difficult to forge. This is also due to the significant improvement in

  The IC card operates based on a command transmitted from the reader / writer. For example, when the IC card receives a command transmitted from the reader / writer, the IC card executes processing based on the received command and returns response data.

  In addition, a technique for preventing erroneous processing due to execution of an illegal command from a reader / writer or an unintentional but once completed transaction processing retry command (retry) has been proposed (see Patent Document 1).

JP2007-257542

  An IC card application normally proceeds with a series of processes in accordance with a predetermined command order. For this reason, if an error is detected with respect to a predetermined command in the middle of a series of processing, the series of processing is restarted from the beginning. That is, if an error for a predetermined command is detected during a series of processing, the processing efficiency is poor.

  The technique disclosed in Patent Document 1 is a technique for storing a process count upper limit value and limiting the process count. Even with the technique disclosed in Patent Document 1, it is difficult to improve the poor processing efficiency.

  An object of the present invention is to provide an IC card, an IC card processing device, and an IC card processing system that are excellent in processing efficiency when an error caused by a predetermined command occurs.

  An IC card according to an embodiment of the present invention detects a command error caused by a first command from the IC card processing device received by the communication unit, a communication unit that communicates with an IC card processing device, A command error is transmitted to the IC card processing device based on the command error detection, and the IC card processing device is transmitted to the IC card processing device based on a second command inquired about an error from the IC card processing device received by the communication means. Command error information is transmitted, processing based on the third command corresponding to the first command from the IC card processing device received by the communication means is executed, and the execution result is sent to the IC card processing device. Command processing means for transmitting.

  An IC card processing apparatus according to an embodiment of the present invention includes a communication unit that communicates with an IC card, a first command transmitted to the IC card by the communication unit, and a message from the IC card by the communication unit. A command error caused by the first command is received, a second command for inquiring about an error to the IC card is transmitted by the communication unit, and command error information from the IC card is received by the communication unit. Command processing means for transmitting a third command corresponding to the first command to the IC card by the communication means.

  An IC card processing system according to an embodiment of the present invention includes an IC card and an IC card processing device, and the IC card processing device includes a first communication unit that communicates with the IC card, and the first communication. Means for transmitting a first command to the IC card, the first communication means for receiving a command error caused by the first command from the IC card, and the first communication means for A second command for inquiring an error to the IC card is transmitted, command error information from the IC card is received by the first communication means, and the first communication means receives the first command from the IC card. Command processing means for transmitting a third command corresponding to one command, and the IC card communicates with the IC card processing device. And detecting the command error caused by the first command from the IC card processing apparatus received by the second communication means, and based on the command error detection, the IC card processing apparatus The command error information is sent to the IC card processing device based on the second command that transmits the command error to the IC card and inquires about an error from the IC card processing device received by the second communication means. Transmitting and executing processing based on the third command corresponding to the first command from the IC card processing device received by the second communication means, and sending an execution result to the IC card processing device Second command processing means for transmitting.

  According to the present invention, it is possible to provide an IC card, an IC card processing device, and an IC card processing system that are excellent in processing efficiency when an error caused by a predetermined command occurs.

It is a figure showing a schematic structure of an IC card processing system concerning one embodiment of the present invention. It is a figure which shows schematic structure of the IC card which concerns on one Embodiment of this invention. It is a figure which shows an example of a format of an error inquiry command. It is a figure which shows an example of the format of error detailed response data. It is a figure which shows an example of the error management information preserve | saved at a working memory. It is a flowchart which shows the flow from reception of an error inquiry command to transmission of error detailed information.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of an IC card processing system according to an embodiment of the present invention.

  The IC card processing system includes an IC card 1 (information storage medium) and an IC card processing device 2. The IC card processing apparatus 2 includes a card reader / writer 202, a control unit 203, a keyboard 204, a display 205, and a printer 206.

  A card reader / writer 202, a keyboard 204, a display 205, and a printer 206 are connected to the control unit 203. The control unit 203 sends various commands to the IC card 1 via the card reader / writer 202, receives a response from the IC card, records data on the IC card 1, The data stored in 1 is read out.

  For example, when the IC processing system shown in FIG. 1 is applied to a payment system such as a credit card, that is, when the IC card 1 functions as a credit card, the IC card processing device 2 corresponds to a POS terminal or ATM. The IC card user (card holder) uses the keyboard 14 to input an external input PIN (Personal Identification Number) or the like. The IC card 1 also stores an internal PIN for performing verification processing for matching / mismatching with the external input PIN.

  Further, the IC card 1 can function not only as a credit card but also as, for example, an ETC charge settlement card (ETC card). That is, one IC card 1 can also support a plurality of applications.

  FIG. 2 is a diagram showing a schematic configuration of the IC card 1 shown in FIG. As shown in FIG. 2, the IC card 1 includes a control unit 101, a data memory 102, a working memory 103, a program memory 104, and a communication unit 105.

  The control unit 101 functions as a control unit and is, for example, a CPU. The data memory 102 is a non-volatile memory whose stored contents can be erased, and is constituted by, for example, an EEPROM. For example, the data memory 102 stores a plurality of files configured in a tree shape. The working memory 103 is a memory for temporarily storing data processed by the control unit 101 and processed data, and is configured by a RAM, for example. The program memory 104 is a memory that stores a program for executing processing based on a received command, and is configured by, for example, a mask ROM.

  The communication unit 105 communicates with the card reader / writer 12, receives a command transmitted from the card reader / writer 12, and returns a response to the received command. The communication unit 105 may be a contact type communication unit having a terminal for contacting and communicating with the card reader / writer 12, or for communicating with the card reader / writer 12 in a non-contact manner. The communication part corresponding to the non-contact type provided with the antenna may be sufficient. In addition, the communication part 105 may be a communication part corresponding to a contact type and a non-contact type provided with the terminal and antenna described above.

  Further, the control unit 101, the data memory 102, the working memory 103, the program, and the memory 104 are configured by one IC chip (or a plurality of IC chips) 100. Further, the IC chip 100 and the communication unit 105 are integrated into a module and embedded in the main body of the IC card 1.

  For example, an external input PIN input from an IC card user (card holder), that is, an external input PIN input via the keyboard 14 is transmitted from the card reader / writer 12 to the IC card 1. The IC card 1 receives the external input PIN transmitted from the card reader / writer 12 via the communication unit 105 and temporarily holds it in the working memory 102. The IC card 1 (control unit 101) collates the external input PIN temporarily held in the working memory 102 with the internal PIN held in the data memory 102, and verifies the matching / mismatching of both.

  Thereafter, the IC card 1 (control unit 101) transmits the verification processing result to the card reader / writer 12 via the communication unit 105. The main control unit 13 causes the CRT 15 to display the verification processing result received by the card reader / writer 12. The IC card user (card holder) refers to the display content of the CRT 15 and confirms the verification processing result.

  The above-described application of the IC card 1 normally proceeds with a series of processes in accordance with a predetermined command execution order. For this reason, if an error with respect to a predetermined command is detected in the middle of a series of processing, the series of processing is restarted from the beginning. In this case, the processing efficiency is poor. Therefore, the IC card processing system according to the present embodiment can redo from the predetermined command when an error with respect to the predetermined command is detected during a series of processes.

  For example, in a series of processing, the IC card 1 (communication unit 105) receives a predetermined command from the IC card processing device 2, and the IC card 1 (control unit 101) receives an error (command format error) caused by the predetermined command. Is detected. The program memory 104 of the IC card 1 stores a program for detecting a command format error. That is, the program memory 104 stores the correct format of each command.

  When the IC card 1 detects an error caused by a predetermined command, the IC card 1 transmits a command error response to the IC card processing device 2. The IC card processing device 2 (card reader / writer 202) transmits an error inquiry command for inquiring the details of the error to the IC card 1 based on the reception of the command error response. The IC card 1 (communication unit 105) transmits detailed error information to the IC card processing device 2 based on the reception of the error inquiry command. The IC card processing device 2 (card reader / writer 202) transmits, to the IC card 1, a correction command in which the error portion of the predetermined command is corrected based on the reception of the detailed error information. The IC card 1 (control unit 101) receives the correction command and repeats a series of processes from the middle based on the correction command.

  Further, the IC card 1 (the control unit 101) stores the number of retry processes (for example, the number of transmissions of detailed error information) and the maximum number of retries (for example, the maximum number of transmissions of error detailed information) based on command error detection. If the number exceeds the maximum number of retries, retry execution is not permitted. For example, when the retry processing count exceeds the retry upper limit count, even if the IC card 1 receives an error inquiry command from the IC card processing device 2, it does not transmit detailed error information to the IC card processing device 2. . As a result, the IC card processing apparatus 2 cannot receive the detailed error information within the time limit, determines that the series of processes cannot be redone, and starts the series of processes from the beginning. That is, the IC card processing device 2 starts transmitting a command to be transmitted at the beginning of a series of processes.

  For example, the IC card 1 can limit the upper limit number of retries based on a predetermined command to one. As a result, when the processing based on the predetermined command fails twice, the IC card processing device 2 starts over a series of processing of the application from the beginning.

  FIG. 3 is a diagram showing an example of the format of the error inquiry command described above. As shown in FIG. 3, the error inquiry commands are CLA (301), INS (302), and P1 (303). P2 (304) and Le (305) are included. CLA is an abbreviation for class, INS is an instruction code, P1 is an instruction parameter, P2 is an instruction parameter, and Le is an abbreviation for length. The IC card processing apparatus 2 sends this error inquiry command to the IC card 1 and inquires the IC card 1 about the details of the error.

  FIG. 4 is a diagram illustrating an example of a format of error detail response data. The error detail response data includes error information (401), SW1 (402), and SW2 (403). The error information includes information indicating an error location (the number of bytes from the top of the command APDU, the length of the error location), and information indicating an error reason (reason code). SW1 and SW2 indicate processing results of the error inquiry command.

  FIG. 5 shows error management information stored in the working memory 103. As shown in FIG. 5, the error management information includes error information 501, a command counter 502, a command execution permission flag 503, and processing state information 504.

  The error information 501 is the same information as the error information 401. That is, when an error is detected during execution of processing based on a predetermined command, error information 501 indicating the details of the detected error is stored in the working memory 103. The command counter 502 manages the number of executions of the error inquiry command and the maximum number of executions. In other words, the command counter 502 manages the number of times that the detailed error response data has been transmitted based on the error inquiry command (the number of executions), and manages the upper limit number of times. Until the number of executions of the error inquiry command exceeds the upper limit number of executions, for example, the command execution permission flag 503 is set to “1”, and when the number of executions of the error inquiry command exceeds the upper limit number of executions, the command execution permission flag 503 is set. Set to “0”.

  The processing state information 504 is information indicating a state before execution of processing based on a predetermined command. The control unit 101 of the IC card 1 stores the pre-execution state (processing state information 504) based on the predetermined command in the working memory 103 based on the error detection of the predetermined command. That is, the control unit 101 of the IC card 1 stores the pre-execution state (a state in the middle of a series of processes) based on the working memory 103. Thereby, when the correction command which corrected the predetermined command is received, the control part 101 of IC card 1 is based on the processing status information 504 from the state before execution of the processing based on the predetermined command (the state in the middle of a series of processing). The processing based on the correction command can be resumed.

  FIG. 6 is a flowchart showing a flow from reception of an error inquiry command to transmission of detailed error information.

  As described above, when the IC card 1 (control unit 101) detects an error (command format error) due to a predetermined command, the IC card 1 (communication unit 105) sends a command to the IC card processing device 2. Send an error response. The IC card processing device 2 (card reader / writer 202) transmits an error inquiry command for inquiring the details of the error to the IC card 1 based on the reception of the command error response.

  When receiving the error inquiry command, the IC card 1 checks the command format of the error inquiry command (ST601). If the command format of the error inquiry command is appropriate (ST601, YES), IC card 1 checks command execution permission flag 503 (ST602). For example, when the command permission flag 503 is set to “1” and the execution of the command is permitted (ST602, YES), the IC card 1 checks the number of executions of the error inquiry command by the command counter 502. (ST603). If the command execution count does not reach the command execution upper limit count (ST603, NO), the IC card 1 acquires error information 501 (ST604), and increments the error inquiry command execution count by the command counter 502 ( (ST605), error detailed response data is transmitted to the IC card processing apparatus 2 (ST606).

  When the command execution count reaches the command execution upper limit count (ST603, YES), the IC card 1 sets the command permission flag 503 to “0” (ST607), and the IC card processing device 2 Do not send detailed error response data.

  Further, as described above, the IC card 1 (the control unit 101) stores a pre-execution state (processing state information 504) based on a predetermined command based on detection of a command error caused by the predetermined command. If the IC card 1 receives a correction command corresponding to a predetermined command on condition that the pre-execution state (processing state information 504) is stored, the processing is resumed from the pre-execution state. When the IC card 1 receives a command (a command different from the correction command) that does not correspond to the predetermined command on condition that the pre-execution state (processing state information 504) is stored, Return to the state before starting. That is, resumption from the middle of a series of processing is prohibited, and it is a choice between re-starting the series of processing from the beginning or executing another processing.

  As described above, the IC card processing system according to the present embodiment can redo the series of processes from the process based on the predetermined command (correction command) even if an error caused by the predetermined command occurs during the series of processes. it can. Thereby, even if an error occurs during the series of processes, the series of processes can be efficiently performed.

  For example, when a mutual authentication process is required a plurality of times, an error caused by a predetermined command occurs in the middle of the Nth mutual authentication process, and the mutual authentication process is restarted from the first (first). Very inefficient. If the IC card processing system according to the present embodiment is applied, when an error due to a predetermined command occurs in the middle of the N-th mutual authentication process when such a plurality of mutual authentication processes are required. The process can be efficiently performed.

  In addition, there is a process that takes a relatively long time in the first half of the series of processes (a process for reading or writing large data), and an error caused by a predetermined command occurs in the second half of the series of processes. If you start over from the beginning, it is very inefficient. If the IC card processing system of this embodiment is applied, even if an error due to a predetermined command occurs during such a series of processing, the processing can be efficiently performed.

  Note that the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the scope of the invention in the implementation stage. In addition, the embodiments may be appropriately combined as much as possible, and in that case, the combined effect can be obtained. Further, the above embodiments include inventions at various stages, and various inventions can be extracted by appropriately combining a plurality of disclosed constituent elements. For example, even if some constituent requirements are deleted from all the constituent requirements shown in the embodiment, the problem described in the column of the problem to be solved by the invention can be solved, and the effect described in the column of the effect of the invention Can be obtained as an invention.

DESCRIPTION OF SYMBOLS 1 ... IC card, 2 ... IC card processing apparatus, 202 ... Card reader / writer, 203 ... Control part, 204 ... Keyboard, 205 ... CRT, 206 ... Printer, 101 ... Control part, 102 ... Data memory, 103 ... Working memory 104: Program memory, 105: Communication unit

Claims (12)

A communication means for communicating with the IC card processing device;
A command error resulting from the first command from the IC card processing device received by the communication means is detected, a command error is transmitted to the IC card processing device based on the command error detection, and the communication means Based on the received second command for inquiring an error from the IC card processing device, command error information is transmitted to the IC card processing device, and the first from the IC card processing device received by the communication means. Command processing means for executing a process based on a third command corresponding to the command and transmitting an execution result to the IC card processing device;
Equipped with a,
The command processing means detects an error in the data format of the first command, transmits the command error information indicating details of the error in the data format of the first command,
The command error information includes information indicating an error location,
The IC card , wherein the command processing means executes a process based on the third command in which the error part of the first command is corrected based on information indicating the error part .   The command error information includes information indicating an error location and an error reason,
  2. The IC card according to claim 1, wherein the information indicating the error location includes the number of bytes from the head of the command and the length of the error.   The command processing means transmits the command error to the IC card processing device based on the command error detection caused by the first command in a series of processing including processing based on the first command, 3. The IC card according to claim 2, wherein the series of processes is resumed from a process based on the third command obtained by correcting the first command.   4. The IC card according to claim 3, wherein the command processing means returns to a state before the start of the series of processes when a command different from the third command is received. The command processing means stores a retry processing count and a retry upper limit count based on the command error detection, and makes the retry process unexecutable when the retry processing count exceeds the retry upper limit count. The IC card according to claim 4 . The command processing means stores the pre-execution state of the process based on the first command based on the command error detection, and receives the third command on condition that the pre-execution state is stored. In this case, the processing is resumed from the pre-execution state, and when a command different from the third command is received on condition that the pre-execution state is stored, the state before the start of the series of processing is performed. 6. The IC card according to claim 5 , wherein the IC card is returned. A communication means for communicating with the IC card;
The communication means transmits a first command to the IC card, the communication means receives a command error resulting from the first command from the IC card, and the communication means transmits the command to the IC card. A second command for inquiring an error, receiving command error information from the IC card by the communication means, and a third command corresponding to the first command to the IC card by the communication means. Command processing means for transmitting
Equipped with a,
The command processing means receives the command error information indicating details of an error in the data format of the first command,
The command error information includes information indicating an error location,
The IC card processing device , wherein the command processing means transmits the third command in which the error part of the first command is corrected by information indicating the error part .   The command error information includes information indicating an error location and an error reason,
  8. The IC card processing device according to claim 7, wherein the information indicating the error location includes the number of bytes from the head of the command and the length of the error. An IC card processing system comprising an IC card and an IC card processing device,
The IC card processing device
First communication means for communicating with the IC card;
The first communication means transmits a first command to the IC card, the first communication means receives a command error resulting from the first command from the IC card, and the first communication means A second command for inquiring an error to the IC card by the communication means, command error information from the IC card is received by the first communication means, and the IC card is received by the first communication means. A first command processing means for transmitting a third command corresponding to the first command,
The first command processing means receives the command error information indicating details of an error in the data format of the first command;
The command error information includes information indicating an error location,
The command processing means transmits the third command in which the error part of the first command is corrected by information indicating the error part,
The IC card is
Second communication means for communicating with the IC card processing device;
Detecting the command error caused by the first command from the IC card processing device received by the second communication means, and transmitting the command error to the IC card processing device based on the command error detection The command error information is transmitted to the IC card processing device based on the second command for inquiring about an error from the IC card processing device received by the second communication means, and the second communication is performed. Second command processing means for executing processing based on the third command corresponding to the first command from the IC card processing apparatus received by the means and transmitting an execution result to the IC card processing apparatus and, with a,
The second command processing means detects an error in the data format of the first command, transmits the command error information indicating details of an error in the data format of the first command, and transmits the third command. An IC card processing system that executes processing based on the above .   The command error information includes information indicating an error location and an error reason,
  10. The IC card processing system according to claim 9, wherein the information indicating the error location includes the number of bytes from the head of the command and the length of the error.   In a series of processing including processing based on the first command, the second command processing means outputs the command error to the IC card processing device based on the command error detection caused by the first command. 11. The IC card processing system according to claim 10, wherein the series of processing is resumed from processing based on the third command transmitted and modified from the first command.   12. The IC card processing system according to claim 11, wherein when the second command processing means receives a command different from the third command, the second command processing means returns to the state before the start of the series of processing.

Images