JPH0253154A - Portable electronic equipment - Google Patents

Abstract

PURPOSE:To secure the different access conditions for the same area according to the commands by performing the access actions in response to the area access control condition information showing the collation conditions of identification number keys for each command instructing an access action. CONSTITUTION:An IC card 1 includes a control element (CPU) 15, a nonvolatile data memory 16 whose contents can be erased, and a contact part 18 where an electrical contact is secured between a program memory 17 and a card reader/writer 2. The memory 16 is divided into plural areas including an identification information area 16a where the registering state is identified for a data area, a control condition area 16b where the area access control condition information is stored for each command of the data area, and plural data areas 16c. The area 16b is set for each command of each area and contains the identification number key collation propriety conditions and the designated identification number key collation conditions for execution of the collation.

Description

[Detailed Description of the Invention] [Object of the Invention] (Industrial Application Field) The present invention is applicable to, for example, non-volatile data memory and C
The present invention relates to a portable electronic device called an IC card that has a built-in IC chip having a control element such as a PU.

(Conventional Q Technology) Recently, as a new portable data storage medium, an IC card containing a built-in IC chip having a nonvolatile data memory and a control element such as a CPU (central processing unit) has been developed. This kind of I
The C card accesses a built-in data memory using a built-in control element, and performs necessary input/output in response to a request from an external device. Further, data memory is defined by an area similar to the concept of a file, and this area is used as an access unit.

When accessing the data memory of such an IC card from the outside, a method is used that uses commands. That is, when the IC card is desired to perform a predetermined operation, the predetermined area is accessed by specifying the area to be accessed and using a command corresponding to the operation.

In addition, the IC card is used for the area to be accessed.
Check the control conditions to determine whether or not verification of the PIN key (PIN number) is required. This control condition is, for example, a condition for accessing an area, and is set in advance in the card by the entity (card issuer) that provides the card to the card user. As a result of checking the control conditions, if the control conditions are set as "necessary", the process moves on to checking the type of the input command. This check determines under what conditions the PIN keys must be set. For example, under the setting conditions that all multiple PIN keys must be verified, or only one or more must be verified. , determined by the IC card.

This setting condition is also defined in the above control conditions.

According to the setting conditions, the IC card checks the verification of the password, and if the check is normal, executes the process corresponding to the command in the specified area.

Furthermore, if there is an abnormality, it means that the predetermined key verification has not been performed, and an error is output to the outside, and the execution of this command is aborted.

Furthermore, in the control conditions for accessing the area, if the password key for accessing the area is defined as "unnecessary", the process corresponding to the command is immediately executed for the area.

However, as mentioned above, since we first check whether or not it is necessary to verify the PIN for area access,
When defining the necessary/unnecessary conditions for a PIN key, if it becomes "unnecessary" due to a memory cell failure or is intentionally set as "unnecessary", what commands will be entered for that area? However, there was a risk that it could be accessed.

Therefore, there is a drawback that data within the area may not be protected. Additionally, there was a demand for something that could change the access conditions for the same area depending on the command.

(Problems to be Solved by the Invention) As mentioned above, there is a desire for something that can eliminate the disadvantage that data within an area may not be protected, and that can also set different access conditions for the same area depending on the command. It is a mobile phone that can reliably protect data within an area, and also allows access conditions to be varied based on commands for the same area, making access control easier to operate. The purpose is to provide a capable electronic device.

[Structure of the Invention] (Means for Solving the Problems) A portable electronic device of the present invention includes a data memory section divided into a plurality of areas, and a device for reading and writing data to the data memory. When accessing a predetermined area of the data memory, a code key matching condition is set for each command to perform an access operation. A control means for performing an access operation according to area access control condition information shown is provided.

(Function) In the present invention, when accessing a predetermined area of a data memory, the access operation is performed in accordance with area access control condition information indicating the verification condition of a password for each command that performs the access operation. be.

(Example) Hereinafter, an example of the present invention will be described with reference to the drawings.

FIG. 2 shows an example of the configuration of a card handling device used as a terminal device in, for example, a home banking system or a shopping system, to which an IC card as a portable electronic device of the present invention is applied. That is, this device enables an IC card 1 to be connected to a control section 3 consisting of a CPU, etc. via a card reader/writer 2 as a card processing device, and also connects the control section 3 with a keyboard 4, a CRT display device 5, and a printer. 6 and a floppy disk device 7 are connected.

The IC card 1 is held by the user and is used to refer to a personal identification number known only to the user when purchasing a product, for example, and to store necessary data.The functional blocks of the IC card 1 are shown in Fig. 3. As shown in FIG. 2, it consists of parts that execute basic functions such as a read/write section 11, a password setting/password verification section 12, and an encryption/decryption section 13, and a supervisor 14 that manages these basic functions. . Lead
The write unit 11 has a function of reading, writing, or erasing data with the card league writer 2.

The password setting/password verification unit 12 has the function of storing the password set by the user and prohibiting reading of the password, as well as verifying the password after setting the password and granting permission for subsequent processing. The encryption/decryption unit 13 performs encryption and encryption of encrypted data to prevent leakage and forgery of communication data when transmitting data from the control unit 3 to another terminal device via a communication line, for example. It performs decoding, for example DES (D a te E n
This is a function that processes data according to an encryption algorithm that has sufficient cryptographic strength, such as Cryptlon Standard. The supervisor 14 has the function of decoding the function code input from the card reader/writer 2 or the function code to which data is added, and selecting and executing a necessary function among the basic functions.

In order to perform these various functions, the IC card 1 has a control element (for example, a CPU) as shown in FIG.
15. Nonvolatile data memory whose memory contents can be erased 1
6. Consists of a program memory 17 and a contact part 18 for obtaining electrical contact with the card league writer 2, of which the part within the broken line (control element 15, data memory 16, program memory 17)
is composed of one IC chip. The program memory 17 is composed of, for example, a mask ROM, and stores a control program for the control element 15, which includes subroutines for realizing each of the basic functions. The data memory 16 is used to store various data, such as EE
It is composed of PROM.

The data memory 16 is divided into a plurality of areas, including an identification information area 16a for identifying the registration status of the data area as shown in FIG. 5, and an area for each command in the data area as shown in FIG. Access control condition information (
control condition area 16b for storing personal identification key verification conditions)
and a plurality of data areas 16c as shown in FIG. 7, and each area has an area number r.
00-FFJ is given.

The area access control condition information stored in the control condition area 16b is set for each command information of each area, and is composed of a password key verification necessary/unnecessary condition and a specified password key verification condition.

As command information, for example, command information 1 is for writing data, and command information 2 is for reading data. The PIN key verification necessary/unnecessary condition indicates whether PIN key verification is necessary or not, and is set to "1" if PIN key verification is required, and "0" if not required. The specified PIN key verification conditions consist of a complete match (all matches), one or more matches, and the match conditions for key 1 and key 2 in the case of a complete match.
1", if one or more matches, it is "0", and if there is a complete match and the matching conditions of key 1 and key 2 are rOlOJ, it means that access is not possible, and "o.

1", it means that only pm-2 has been verified, and "1.
0" means that only key 1 has been verified, and "1.
1", it means that both key 1 and key 2 have been verified, and if one or more matches, the matching condition of key 1 and key 2 is "
0.0" means access is not possible, "0.1" means OK if key 2 has been verified, and "1,Q" means access is possible if key 1 has been verified. , "1.1" means that key 1 or key 2 has been verified and is acceptable.

As shown in FIG. 8, each data area is composed of a plurality of records (subdivided into record units). A write pointer is provided in this data area, and data is sequentially written into the unwritten area according to the address value of this write pointer.

The card reader/writer 2 is used to exchange function codes and data between the IC card 1 and the control section 3. Specifically, as shown in FIG. 9, there is a transport mechanism 21 that transports the IC card 1 inserted into a card insertion slot (not shown) to a predetermined position, and a transport mechanism 21 that transports the IC card 1 inserted into a card insertion slot (not shown) to a predetermined position.
A control circuit 2 consisting of a contact portion 22 that is electrically contacted with the contact portion 18 of the controller, and a CPU that controls the entire control circuit.
3. It is composed of an input/output interface circuit 24 for exchanging command data and response data between the control circuit 23 and the control section 3, and a data memory 25 for storing data.

Next, the access operation of the control element 15 according to the area access control condition information will be explained with reference to the flowchart shown in FIG. First, it is checked whether the supplied command is command information 1 or command information 2 (STI, 2). In the case of command information 1, it is checked whether the PIN key required/unnecessary condition is necessary or not (Sr1).

As a result of this check, if it is unnecessary, the command information 1
Execute the corresponding process. As a result of the above check, if necessary, perform processing corresponding to the specified PIN verification conditions (
Sr1.5.6).

That is, it is checked whether the designated password keys match completely or whether one or more matches, and in each case, a verification check is performed in accordance with the verification conditions of key 1 and key 2.

Further, if command information 2 is determined in step 2, it is checked whether the PIN key necessity/unnecessity condition is necessary or not (Sr1). As a result of this check, if the command information 2 is unnecessary, the process corresponding to the command information 2 is executed. As a result of the above check, if necessary, a process corresponding to the specified password key verification condition is performed (Sr1.9.10).

That is, it is checked whether the designated password keys match completely or whether one or more matches, and in each case, a verification check is performed in accordance with the verification conditions of key 1 and key 2.

Further, if command information 2 is not determined in step 2, it is determined that there is no corresponding command.

Next, the operation in such a configuration will be explained.

First, in a steady state, the IC card 1 is in a state of waiting for command information from the card reader/writer 2. At this time, the control unit 3 sends command information to the control element 15 via the card reader/writer 2 as "00". When a command (door mantle information 1) indicating writing of data in the ``area'' is input, the control element 15 first checks the type of the input command. Next, the control element 15 reads out area access control condition information in the control condition area 16b in the data memory 16 for the type of command in the area. In this case, it is necessary to verify the password, and the key 1
, key 2, processing for the above command is permitted.

Thereby, the control element 15 instructs the control unit 3 via the card reader/writer 2 to input the passwords of both keys 1 and 2. The control unit 3 uses the key 1 on the CRT display device 5.
, and instructs the operator to input the passwords for both keys. In response to this instruction, the operator uses the keyboard 4 to input the passwords corresponding to keys 1 and 2. By inputting the password, the control unit 3 supplies the password corresponding to the key 1 and the key 2 to the control element 15 in the IC card 1 via the card reader/writer 2. Thereby, the control element 15 performs a verification check between the two supplied passwords and the passwords corresponding to the keys 1 and 2 stored in the data memory 16 by the password setting/password collation section 12, respectively. As a result of this verification, if both passwords corresponding to keys 1 and 2 match, the control element 15 executes processing according to the above command. That is, data is written to area "00". As a result of the above verification, if both passwords corresponding to keys 1 and 2 do not match, or if only one password matches, the control element 15 sends a message to the control unit 3 via the card reader/writer 2 that the keys are not verified. An error is output, processing for command information 1 is stopped, and the process ends.

Further, when a command (command information 2) indicating reading of data in the "00" area is input as command information to the control element 15 from the control unit 3 via the card reader/writer 2, the control element 15 first receives the input. Check the type of command. Next, the control element 15 reads out area access control condition information in the control condition area 16b in the data memory 16 for the type of command in the area. In this case, it is necessary to verify the password, and the key 1
, key, 2, processing for the above command is permitted.

Thereby, the control element 15 instructs the control unit 3 via the card reader/writer 2 to input the password of either the key 1 or the key 2. The control unit 3 is a CRT display device 5
Instructs the operator to input the password for either key 1 or key 2.

In response to this instruction, the operator uses the keyboard 4 to input the password corresponding to key 1 or key 2. By inputting this password, the control unit 3 selects key 1 or key 2.
The corresponding PIN is sent to the IC via card reader/writer 2.
It is supplied to the control element 15 in the card 1. Thereby, the control code 15 performs a verification check between the supplied password and the passwords corresponding to the keys 1 and 2 stored in the data memory 16 by the password setting/password matching section 12.

As a result of this verification, if the password matches the password corresponding to key 1 or key 2, control element 15 executes processing according to the above command. That is, reading data from area "00" is executed. As a result of the above verification, key 1,
If both passwords corresponding to the key 2 do not match, the control element 15 outputs an error indicating that the key has not been verified to the control unit 3 via the card reader/writer 2, and the processing for the command information 2 is stopped and ends.

Further, when a command (command information 1) indicating writing of data in the "01" area is input as command information to the control element 15 from the control unit 3 via the card reader/writer 2, the control element 15 first inputs the Check the type of command issued. Next, the control element 15 reads out area access control condition information in the control condition area 16b in the data memory 16 for the type of command in the area. In this case, it is necessary to verify the password, and the key 2
Processing for the above command is permitted by checking the above.

As a result, the control element]-5 is connected to the card reader/writer 2.
The controller 3 instructs the controller 3 to input the password via the key 2. The control unit 3 instructs the operator to input the password of the key 2 on the CRT display device 5. In response to this instruction, the operator inputs the password corresponding to the key 2 using the keyboard 4. By inputting this password, the control section 3 supplies the password corresponding to the key 2 to the control element 15 in the IC card 1 via the card reader/writer 2. As a result, the control element 15
The password setting/password verification section 12 checks the supplied password against the password corresponding to the key 2 stored in the data memory 16. As a result of this verification, if the passwords corresponding to the keys 2 match, the control element 15 executes processing according to the above command. That is, data is written to area "01". As a result of the above verification, if the passwords corresponding to the keys 2 do not match, the control element 15 outputs an error message indicating that the keys have not been verified to the control unit 3 via the card reader/writer 2, and the processing for the command information 1 is canceled. finish.

Further, when a command (command information 1) indicating reading of data in the "01" area is input as command information to the control element 15 from the control unit 3 via the card reader/writer 2, the control element 15 first receives the input. Check the type of command. Next, the control element 15 reads out area access control condition information in the control condition area 16b in the data memory 16 for the type of command in the area. In this case, there is no need to verify the password, processing for the above command is permitted without performing key verification, and the control element 15 executes processing according to the command. That is, data reading for area "01" is suspended.

As mentioned above, when accessing a predetermined area of data memory, each command that performs an access operation
Since the access operation is performed according to the area access control condition information indicating whether or not verification of the PIN key is required or the conditions for specifying the PIN key, data in the area can be reliably protected. can.

In addition, when accessing a predetermined area, it is equipped with a check for the presence or absence of a pressurized key for each command, and the access conditions for the same area can be varied depending on the command. It can be made easier to operate.

In the above embodiments, an IC card is used as an example of the portable electronic device, but the portable electronic device is not limited to a card-shaped device, and may be a block-shaped or pencil-shaped device, for example.

[Effects of the Invention] As detailed above, according to the present invention, it is possible to reliably protect data within an area, and the access conditions for the same area can be varied depending on commands, thereby improving access control. It is possible to provide a portable electronic device that can be easily operated even in

[Brief explanation of the drawing]

The drawings are for explaining one embodiment of the present invention, and FIG. 1 is a flowchart for explaining access operations according to area access control condition information, and FIG. 2 is a block diagram showing the configuration of card handling equipment. 3 is a diagram showing the functional blocks of the IC card, FIG. 4 is a block diagram showing the configuration of the IC chip built into the IC card, and FIG. 5 is a diagram showing a storage example of the identification information area of the data memory. FIG. 6 is a diagram showing a storage example of the control condition area of the data memory, FIG. 7 is a diagram showing a storage example of the data area of the data memory, FIG. 8 is a diagram for explaining an example of the configuration of the data memory, and FIG. FIG. 9 is a block diagram showing the configuration of the card reader/writer. DESCRIPTION OF SYMBOLS 1... IC card (portable electronic device), 2... Card reader/writer, 3... Control unit, 15... Control element (CPU), 16... Data memory, 16a.
...Identification information area, 16b...Control condition area, 1
6c...Data area, 23...Control circuit. Applicant's Representative Patent Attorney Takehiko Suzue

Claims (1)

[Claims] Means for selectively inputting and outputting data from the outside, comprising a data memory divided into a plurality of areas and a control element for reading and writing data to the data memory. In a portable electronic device, when accessing a predetermined area of the data memory, a control means performs an access operation in accordance with area access control condition information indicating a verification condition for a password for each command to perform an access operation. A portable electronic device characterized by being provided with.