JP2003006582A - Ic card processing system and ic card processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the issuing system and issuing method of a portable electronic device capable of enabling respective managers to confirm authentication and the access right of the pertinent hierarchy of a memory by one key, simplifying a processing at the time of the authentication and reducing the number of required keys beforehand without lowering security. SOLUTION: The authentication is performed by using a manufacture number, a master key and a random number, common ciphered data are obtained by the authentication and the common ciphered data are turned to a MAC key.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a so-called IC having a controllable element such as a writable / rewritable non-volatile memory and a CPU and having a means for inputting / outputting data from the outside. BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable electronic device issuing system and an issuing method for writing issue data when issuing a portable electronic device called a card.

[0002]

2. Description of the Related Art Conventionally, IC cards (portable electronic devices)
Then, there is a method of restricting applicable commands by performing authentication using secure messaging.

This secure messaging is based on ISO /
IEC 7816-4: 1995-09-01. It is a function that performs authentication and encryption to protect messages.

In the method of limiting the above command, one authentication key (MAC key, message authentication code: M) is used.
Essage Authentication Cod
C) is generated by e), and data is encrypted by one data encryption key (ENC key). Therefore, in an environment where there are multiple administrators with different privileges that require secure messaging, it is necessary to set a key that defines individual privileges and a key that defines common privileges for secure messaging in the card. It was

For example, when the memory structure of the IC card has a hierarchical structure of a master folder and a lower data folder (DF) managed by the master folder (MF), a MAC key, an ENC key, and a key DF under the DF.
1, key DF2 is required, key MF under MF
1 defines access right to data in MF or DF, but cannot be used in secure messaging.

Therefore, in issuing a portable electronic device in which memory access rights are hierarchically managed, a key defining individual authority and a key defining common authority in each layer of the memory are respectively provided. There is a drawback that the administrator needs to have it, the key management becomes complicated, and the processing at the time of authentication is complicated.

[0007]

DISCLOSURE OF THE INVENTION The present invention, which issues a portable electronic device in which memory access rights are hierarchically managed, is common to keys for defining individual rights in each hierarchy of memory. This eliminates the disadvantage that each administrator must have a key that defines the authority, which makes key management complicated and the process at the time of authentication is complicated. Each administrator can authenticate with one key. Issuing a portable electronic device that can confirm the access right of the corresponding hierarchy of memory, simplify the process at the time of authentication, and reduce the number of keys required in advance without lowering security The purpose is to provide a system and an issuing method.

[0008]

The IC card processing system according to the present invention comprises an IC card processing device and an IC card, wherein the IC card processing device stores a master key. And a card unique number of the IC card obtained from the IC card, which is encrypted into first encrypted data using the master key stored in the first storage unit as an encryption key. And a second encrypted data encrypted by the first encryption means into second encrypted data, using a random number based on the card unique number of the IC card obtained from the IC card as an encryption key. And the second encryption data encrypted by the second encryption means as authentication data to the IC card.
And a first judging means for judging the authentication based on the judgment result of the authentication obtained in response to the first transmitting means, wherein the IC card has a master key and a card unique number. A second storage means that is stored, a generation means that generates a random number based on the card unique number;
Second transmitting means for transmitting the card unique number read from the second storing means to the IC card processing apparatus in response to a card unique number output request from the C card processing apparatus; and the second storing means. A third encryption means for encrypting the card unique number read from the third encryption data with the master key stored in the second storage means as an encryption key, and the second transmission means. In response to the output request of the random number used in the second encryption means from the IC card processing device obtained in response to the above, the random number generated by the generating means is transmitted to the IC card processing device. A third means for encrypting the third encrypted data encrypted by the third encrypting means into a fourth encrypted data by using the third transmitting means and the random number generated by the generating means as an encryption key. Darkness It means a, as the fourth fourth authentication data encrypted data encrypted by the encryption means, the I obtained in response to the third transmission means
Second judgment means for judging whether or not the authentication is made depending on whether or not the authentication data from the C card processing device matches, and the result of the authentication judgment by the second judgment means is transmitted to the IC card processing device. And a fourth transmitting means.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An IC card issuing system as an IC card processing system of the present invention will be described below with reference to the drawings.

As shown in FIG. 1, this IC card issuing system comprises a personal computer (PC) 1 and a reader / writer 3 connected to the PC 1 via a communication line 2. An IC card 4 as an issuance target card, which is connected to the reader / writer 3 by a connector (not shown) or the like, is attached to the reader / writer 3.

There are two types of PC 1 for primary issuance and one for secondary issuance, and the user is identified by a personal identification number or the like. PC1 for primary issue and PC for secondary issue
1 has a different processing program, and a master key (MS1,
MS2) is different.

The PC 1 includes a control unit 5 for controlling the entire PC 1, a memory 6 in which a control program is stored and various data is stored, an operation unit 7 such as a keyboard for giving operation instructions, operation guides and the like. It is composed of a display unit 8 to be displayed and an interface 9 for exchanging data with the reader / writer 3.

The control unit 5 uses the master key stored in the memory 6 as an encryption key for encryption of the manufacturing number (card unique information) supplied from the IC card 4 to generate the first encrypted data. Has an encryption function. The first encrypted data serves as a MAC key used for encryption when creating a command message to be described later.

The control unit 5 has an encryption function of encrypting the first encrypted data with the random number supplied from the IC card 4 as an encryption key to obtain the second encrypted data. .

The control unit 5 has an encryption function for encrypting a command message using the first encrypted data as an encryption key (MAC key). The encryption program (control unit processing program) is stored in the memory 6. Further, a random number buffer for storing the supplied random numbers is prepared in the memory 6.

When the command message to be transmitted to the IC card 4 is generated based on the command data, the control unit 5 has three types (three types of types 1 to 3) according to the security level of the command data. The command message of is generated.

For example, there are three types, types 1 to 3, and the security is gradually increased (increased).

In the case of type 1, as shown in FIG. 2, a 5-byte command header, raw command data, 4 to
It is composed of an 8-byte MAC. The MAC encrypts data in 8-byte units with the MAC key as the first encrypted data obtained at the time of authentication, which is data to which padding data is added so that the number of bytes with the raw command data is a multiple of 8. It is generated by performing. The data length of the generated MAC is described in the command header.

In the case of type 2, as shown in FIG. 3, it is composed of a 5-byte command header and encrypted data (8-byte unit). The encrypted data is the data in which the raw command data is padded so that the data length is a multiple of 8 bytes. It is generated by performing the conversion. The data length of the generated MAC is described in the command header.

In the case of type 3, as shown in FIG. 4, it is composed of a 5-byte command header, encrypted data (8-byte unit), and a 4- to 8-byte MAC.
The encrypted data is generated in the same manner as the encrypted data in the case of type 2. The MAC uses a command header (5 bytes) and encrypted data (8-byte units) to which 3-byte padding data is added. It is generated by performing encryption. The data length of the generated MAC is described in the command header.

A command code is described at the beginning of the command header of each command message.

The reader / writer 3 includes a CPU 10 for controlling the entire reader / writer 3, a memory 11 in which a control program is stored and various data is stored, and a PC 1
Interface 12, I for exchanging data with
It is composed of an interface 13 for exchanging data with the C card 4. Further, the reader / writer 3 has a detector (not shown) for detecting the insertion of the IC card 4, and outputs the detection result to the PC 1. Further, the reader / writer 3 may read the contents of the IC card 4 when the insertion of the IC card 4 is detected, and output data indicating whether or not the application or the like is an unrecorded issuing card to the PC 1.

The IC card 4 is, as shown in FIG.
A CPU (control element) 14 that controls the entire card 4, and an R that stores a program for controlling the internal operation of the card
OM (program memory) 15, RA used as a transmission / reception buffer for messages exchanged with the outside (reader / writer 3) and a temporary storage buffer for data being processed by the CPU 14.
M (working memory) 16, operation data used by reading and writing the value contents in application operation are stored, and a serial number unique to the card as key data for message concealment (implemented in combination with a master key described later). The data memory 17 is composed of an EEPROM or the like in which the above are stored, an interface 18 for exchanging data with the reader / writer 3, and a contact portion 19.

CPU 14, ROM 15, RAM 1
6, the data memory 17, the interface 18 is an IC
The contact portion 19 and I
The C chip 20 is integrally modularized and embedded in the IC card body.

The ROM 15 is provided with a command search table 15a in which CLA, INS, etc. are registered. In this command search table 15a, the type of command message based on the command code is registered. That is, codes indicating the three types of types 1 to 3 described above are registered.

When the command message is received, the CPU 14 determines the type of the command message by searching the command search table 15a based on the command code added to the beginning of the command header.

When the CPU 14 determines that the type of the command message is type 1, the M of the command message is determined based on the MAC length data described in the command header.
The command header and data excluding AC are extracted. Next, the CPU 14 adds padding data to the final portion so that the extracted data will be a multiple of 8 bytes, and deletes the MAC length data described in the command header. Then, the CPU 14 adds the padding data and deletes the MAC length data from the command header as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later. MAC is generated by performing encryption in units of 8 bytes using the MAC key of No. 2 as an encryption key. Next, the CPU 14 determines whether the generated MAC matches the MAC assigned to the command message, and if the determination result is a match, the CPU 14 executes command processing based on the command data in the command message. Then, CPU1
4 returns the processing result to the IC card 4 when this command processing is completed or when the MACs do not match.

When the CPU 14 determines that the type of the command message is type 2, the CPU 14 extracts the 8-byte encrypted data excluding the command header of the command message. Next, the CPU 14 decrypts this encrypted data in 8-byte units using the MAC key as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later as the decryption key. By doing so, the encrypted data is restored to the original command data. Then, CPU14
Executes command processing based on this command data. Then, the CPU 14 returns the processing result to the IC card 4 at the end of the command processing.

When the CPU 14 determines that the type of the command message is type 3, the M of the command message is determined based on the MAC length data described in the command header.
The command header excluding AC and the encrypted data are extracted. Next, the CPU 14 adds padding data to the final portion so that the extracted data will be a multiple of 8 bytes. Next, the CPU 14 encrypts this data in 8-byte units using the MAC key as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later as the encryption key. By MA
Generate C. Then, the CPU 14 generates the generated M
It is determined whether the AC matches the MAC assigned to the command message, and if the determination result is a match, the 8-byte unit encrypted data excluding the command header in the command message is extracted. Next, the CPU 14 decrypts this encrypted data in 8-byte units using the MAC key as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later as the decryption key. By doing so, the encrypted data is restored to the original command data. Then, the CPU 14 executes command processing based on this command data. Next, the CPU 14 returns the processing result to the IC card 4 when the command processing ends or when the MACs do not match.

The RAM 16 has an access condition flag indicating that the access right has been established and is set by collating or authenticating the key.

The data memory 17 is used for establishing the access right of the command and is authenticated by the MAC.
Key and ENC key are set.

FIG. 6 shows an example of a file structure in the data memory 17.

FIG. 6 shows the data memory 17 of the IC card 4.
Shows the file structure of the main folder (MF), the master key MS1 for primary issuance to the main folder (MF), the master key MS2 for secondary issuance, and the data folder (DF) hang down from this main folder (MF). Multiple keys for the data folder (DF) in (DF) (DF key 1, DF key 2)
It has a hanging hierarchical structure.

The primary issuance processing of the IC card 4 is to send the above management information to the IC card 4 by a command message.

That is, the above management information is given as the data for processing the command message, the command code and the execution parameter are set and transmitted to the IC card 4,
The IC card 4 secures a memory space in the EEPROM 17 according to the management information and sets each file.

That is, in the configuration shown in FIG.
When manufacturing the chip 20, the master key (MS1) for the same primary issue and the master key (MS for the secondary issue)
2) and also the manufacturing number (card unique information), and the master key (MS1 or MS2) corresponding to these is also sent to the PC1 side that sends a command message to the IC card 4 equipped with this IC chip 20. Have.

That is, the master key MS1 for the primary issue and the master key MS2 for the secondary issue are the IC
It is registered in the hardware module at the time of manufacturing the chip 20, and the master key MS1 is erased at the end of the process for the primary issue, and the master key MS2 is erased at the end of the process for the secondary issue.
The hardware module is mounted in the IC chip 20, and when the IC chip 20 is removed,
The registered master keys MS1 and MS2 are erased.

Next, the primary issue will be described with reference to the flowchart shown in FIG.

In this case, the serial number stored in the data memory 17 when the IC chip 20 is manufactured is used as the individual data of the IC card 4. Further, the master key MS1 for the primary issue registered in the hardware module when the IC chip 20 is manufactured is used.

First, the issuer icon on the screen of the display section 8 of the PC 1 is clicked (ST1). Then, the control unit 5
Judges the issuance of an IC card, and the display unit 8 displays a request for inserting the issuing IC card 4 into the reader / writer 3 (ST2).

Based on this display, the issuing IC card 4 is inserted into the reader / writer 3 (ST3).

On the basis of this insertion detection signal (output from the reader / writer 3 to the control unit 5 of the PC 1), the control unit 5 causes the display unit 8 to display the issuing machine program main menu (ST4) and activates the issuing machine application. Yes (ST
5). With this menu display, the issuing card type is selected by the operation unit 7 (ST6), and the primary issuing process is selected (ST7).

As a result, the control unit 5 performs the secure messaging process as the authentication process of the IC card 4 (S
T8), when the IC card 4 is authenticated (ST9),
Go to next step 10.

At this time, the control unit 5 of the PC 1 uses the first encrypted data obtained by the authentication processing as a MAC key, and the CPU 14 of the IC card 4 uses the third encrypted data obtained by the authentication processing. The encrypted data (same as the first encrypted data) is used as the MAC key.

As a result, the control unit 5 of the PC 1 selects one of the three types, which will be described later, based on the type of command message as the issue information file for one step stored in the memory 6, that is, the security level. By the method, a command message is generated by encrypting the command data using the MAC key as the first encrypted data stored in the memory 6 (ST10), and the encrypted command message of the IC card 4 is generated. It transmits to CPU14 (ST11).

Further, the CPU 14 of the IC card 4 determines the type of the received command message as the command search table 1
5a is determined (ST12), the command message is decompressed by this determination result and the MAC key as the third encrypted data (ST13), and the processing of this command is executed (ST14). CPU1 of IC card 4
4 outputs the result of processing by this command to the control unit 5 of the PC 1 (ST15).

As a result, the control unit 5 of the PC 1 receives the response message from the IC card 4 as the processing result (ST16) and confirms the response content (ST1).
7). After confirming this response content, if there is a next issue information file (ST18), the control unit 5 of the PC 1 acquires the command data for the next one step of the issue information file, and sets the command message type, that is, the security level. Based on this, a command telegram in which the command data is encrypted using the MAC key as the first encrypted data stored in the memory 6 is generated by any one of the three methods described later (ST19). The process returns to step 11 of transmitting the encrypted command message to the CPU 14 of the IC card 4.

Thereafter, steps 19, 11 to 17 are repeated until there is no step content in the issue information file, and when it is determined in step 18 that the next issue information file does not exist, the process ends.

When the IC card 4 is not authenticated (ST9), the issuing process is stopped.

In this example, the serial number is used as an easy-to-understand representative example of the individual data of the IC card 4, but in the case of concealing a command message, the serial number is not necessarily the serial number of the IC card 4. The complete uniqueness of each IC card 4 is not an essential condition.

Next, the processing from the generation of the command message in step 10 to the reception of the response message in step 16 will be described for each type of command message described above with reference to the flowcharts shown in FIGS. 8 to 10.

[Type 1] First, the control unit 5 controls the I
When the type of the command message for the command data to be transmitted to the C card 4 is determined to be type 1 (ST21), a command header (5 bytes) describing a code indicating type 1 is generated (ST22). Then, the control unit 5 adds padding data to the final part of the command data so that the total number of bytes of the command header and the command data is a multiple of 8 bytes (ST23). Next, the control unit 5 encrypts the command header and the command data to which the padding data is added in units of 8 bytes using the MAC key as the first encrypted data obtained at the time of authentication, which will be described later, as the encryption key. As a result, a MAC is generated (ST24). Then, the control unit 5 controls the MAC
Describe the number of bytes in the command header (ST2
5).

As a result, a command message consisting of this command header, command data and MAC is generated.

Thereafter, the control unit 5 sends the generated type-1 encrypted command message to the CP of the IC card 4.
It transmits to U14 (ST26).

When the CPU 14 receives the command message, it searches the command search table 15a based on the command code added to the beginning of the command header to determine the type of the command message as type 1 ( ST27).

When the CPU 14 determines that the type of the command message is type 1, the M of the command message is determined based on the MAC length data described in the command header.
The command header and data excluding AC are extracted (S
T28). Next, the CPU 14 adds padding data to the final portion so that the extracted data will be a multiple of 8 bytes, and deletes the MAC length data described in the command header (ST29).

Then, the CPU 14 adds the padding data and deletes the MAC length data from the command header to the third encrypted data (first encrypted data and A MAC is generated by performing encryption in units of 8 bytes using the MAC key (as the same) as an encryption key (ST30).

Then, the CPU 14 generates the generated MA.
It is determined whether C matches the MAC assigned to the command message (ST31). If the determination result is the same,
Command processing based on the command data in the command message is executed (ST32). Next, when the CPU 14 finishes processing the command or when the MACs do not match,
The processing result is returned to the IC card 4 (ST33).

[Type 2] First, the control section 5 sets I
When it is determined that the type of the command message for the command data to be transmitted to the C card 4 is type 2 (ST41), a command header (5 bytes) describing a code indicating type 2 is generated (ST42). Next, the control unit 5 adds padding data to the final part of the command data so that the total number of bytes of the command data will be a multiple of 8 bytes (ST43). Then, the control unit 5 generates encrypted data by encrypting the data to which the padding data is added with the MAC key as the first encrypted data obtained at the time of authentication described later as an encryption key. (ST44).

As a result, a command message including the command header and the encrypted data obtained by encrypting the command data is generated.

After that, the control unit 5 sends the generated type-2 encrypted command message to the CP of the IC card 4.
It transmits to U14 (ST45).

When the CPU 14 receives the command message, it searches the command search table 15a based on the command code added to the beginning of the command header to determine the type of the command message as type 2 ( ST46).

When the CPU 14 determines that the type of the command message is type 2, the CPU 14 extracts the 8-byte unit encrypted data excluding the command header of the command message (S).
T47). Next, the CPU 14 decrypts this encrypted data in 8-byte units using the MAC key as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later as the decryption key. By doing
Return the encrypted data to the original command data (ST4
8).

Next, the CPU 14 executes command processing based on this command data (ST49). Then, at the end of this command processing, the CPU 14 returns the processing result to the IC card 4 (ST50).

[Type 3] First, the control section 5
When the type of the command message for the command data to be transmitted to the C card 4 is determined to be type 3 (ST51), a command header (5 bytes) describing a code indicating type 3 is generated (ST52). Next, the control unit 5 adds padding data to the final part of the command data so that the total number of bytes of the command header and the command data is a multiple of 8 bytes (ST53). Then, the control unit 5
Encrypts the command header and the command data to which the padding data is added, using the MAC key as the first encrypted data obtained at the time of authentication, which will be described later, as an encryption key to generate encrypted data. (S
T54).

Then, the control section 5 adds 3-byte padding data to the command header and the encrypted data (ST55). Then, the control unit 5 encrypts the command header with the padding data and the encrypted data in 8-byte units using the MAC key as the first encrypted data obtained at the time of authentication, which will be described later, as the encryption key. By doing so, a MAC is generated (ST56). Next, the control unit 5 describes the number of bytes of this MAC in the command header (ST57).

As a result, a command message including the command header, the encrypted data for the command data, and the MAC is generated.

After that, the control unit 5 sends the generated type-3 encrypted command message to the CP of the IC card 4.
It transmits to U14 (ST58).

When the CPU 14 receives the command message, it searches the command search table 15a based on the command code added to the beginning of the command header, and determines that the type of the command message is type 3 ( ST59).

When the CPU 14 determines that the type of the command message is type 3, the CPU 14 determines the M of the command message based on the MAC length data described in the command header.
The command header excluding AC and the encrypted data are extracted (ST60). Next, the CPU 14 adds padding data to the final portion so that the extracted data will be a multiple of 8 bytes, and deletes the MAC length data described in the command header (ST61). Then,
The CPU 14 encrypts this data in 8-byte units by using the MAC key as the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later as the encryption key. Generate MAC (ST6
2). Then, the CPU 14 determines whether the generated MAC matches the MAC assigned to the command message (ST63). If the determination result is a match, the command header in the command message is excluded in 8-byte units. The encrypted data of is extracted (ST64). Then, CPU14
Is the third encrypted data (same as the first encrypted data) obtained at the time of authentication described later for this encrypted data.
The encrypted data is restored to the original command data by performing the decryption in units of 8 bytes by using the MAC key as the decryption key (ST65). Next, the CPU 14 executes command processing based on this command data (S
T66). Then, the CPU 14 returns the processing result to the IC card 4 when the command processing ends or when the MACs do not match (ST67).

The secure messaging process as the authentication process will be described with reference to the flowcharts shown in FIGS. 11 and 12.

That is, the control unit 5 of the PC 1 outputs a production number sending request to the CPU 14 of the IC card 4 (ST7).
1). The CPU 14 of the IC card 4 reads the manufacturing number stored in the data memory 17 based on the supplied manufacturing number sending request, and outputs it to the control unit 5 of the PC 1 (S).
T72). As a result, the control unit 5 of the PC 1 causes the master key MS stored in the memory 6 for the primary issue
Using 1 as a key, the serial number supplied from the IC card 4 is encrypted to generate first encrypted data, which is stored in the memory 6 (ST73).

The CPU 14 of the IC card 4 reads the master key MS1 for the primary issue from the hardware module of the data memory 17 (ST74),
The serial number is encrypted using the read master key MS1 as a key to generate third encrypted data, which is stored in the data memory 17 (ST75). Further, the CPU 14 of the IC card 4 generates a random number by the random number generation logic based on the manufacturing number and stores it in the random number buffer of the data memory 17 (ST76). Also, the CP of IC card 4
U14 uses the random number as a cryptographic key for the data memory 17
To encrypt the third encrypted data stored in
Authentication data is generated as encrypted data of and is stored in the data memory 17 (ST77).

The control unit 5 of the PC 1 uses the IC card 4
In response to the supply of the serial number from the
The data is output to the CPU 14 of the card 4 (ST78). The CPU 14 of the IC card 4 reads the random number stored in the data memory 17 based on the supplied random number transmission request,
The read random number is output to the control unit 5 of the PC 1 (ST
79).

Further, the control unit 5 of the PC 1 encrypts the first encrypted data stored in the memory 6 by using the supplied random number as an encryption key to generate authentication data as second encrypted data. , To the CPU 14 of the IC card 4 (ST80).

As a result, the CPU 14 of the IC card 4
Is the authentication data supplied from the PC1 and the EEPROM1.
The authentication data stored in 7 is compared, and if they match, the authentication is judged OK, and if they do not match, the authentication NG is judged (ST81). The CPU 14 of the IC card 4
The determination result of this authentication is output to the control unit 5 of the PC 1 (S
T82).

After this, when the primary issuing process ends, the CPU 14 of the IC card 4 erases the master key MS1 for the primary issuing registered in the hardware module of the data memory 17.

The secondary issuance of the IC card 4 for which the above-mentioned primary issuance processing has been completed will be described.

In this case, the operation is similar to the above-described primary issuing process. However, MS2 is used as a master key.

As described above, the key for which the authentication is performed and the access right is established can be used as the MAC key for secure messaging in the subsequent transactions.

Further, the key for which the authentication has been performed and the access right has been established can be used as the ENC key for secure messaging in subsequent transactions.

Next, in the command search table 15a,
In addition to the command type, the IC in the case where data for identifying which of the authenticated MAC key and the individual MAC key is used as the MAC key is stored
The processing when the CPU 14 of the card 4 receives the command message will be described with reference to the flowcharts shown in FIGS. 13 to 15.

That is, when the command message is received (ST91), the CPU 14 searches the command search table 15a by the command code described at the beginning of the command header (ST92). By this search, when the CPU 14 determines to use the individual MAC key in the type 1 command message (ST93), the CPU 14 uses the individual MAC key registered in advance in the data memory 17 as the MAC key to generate the MAC (ST94). .

Further, by the search in step 92,
When determining to use the authenticated MAC key in the type 1 command message (ST95), the CPU 14 confirms whether there is an authenticated key for the current DF currently being processed (ST96). If this can be confirmed, CPU
14 generates a MAC using the authenticated key (ST97).

If it cannot be confirmed in step 96, the CPU 14 determines the current DF currently being processed.
It is confirmed whether there is an authenticated key in the upper DF or MF for (ST98). If this confirmation is possible, the CPU 14 generates a MAC using the authenticated key (ST99).

If it cannot be confirmed in step 98, the CPU 14 determines that there is no key and performs error processing (ST100).

Further, by the search in step 92,
The CPU 14 is a type 2 command message and also an individual MA.
When it is determined to use the C key (ST101), the individual MAC key previously registered in the data memory 17 is set to M
The encrypted data in the command message is decrypted using the AC key (ST102).

Further, by the search in step 92,
When determining to use the authenticated MAC key in the type 2 command message (ST103), the CPU 14 confirms whether there is an authenticated key for the current DF currently being processed (ST104). If this is confirmed, C
The PU 14 decrypts the encrypted data in the command message using the authenticated key as the MAC key (ST10).
5).

If it cannot be confirmed in the above step 103, the CPU 14 determines the current D currently being processed.
It is confirmed whether or not an upper key DF or MF for F has an authenticated key (ST106). If this confirmation is possible, the CPU 14 decrypts the encrypted data in the command message using the authenticated key as the MAC key (ST.
107).

If it is not confirmed in step 105, the CPU 14 determines that there is no key, and performs an error process (ST108).

Further, by the search in step 92,
The CPU 14 is a type 3 command message and also an individual MA.
When it is determined to use the C key (ST109), the individual MAC key previously registered in the data memory 17 is set to M
MAC is generated as an AC key, and the encrypted data in the command message is decrypted (ST110).

Further, by the search in step 92 above,
When the CPU 14 determines the use of the authenticated MAC key in the type 3 command message (ST111), it confirms whether or not there is an authenticated key for the current DF currently being processed (ST112). If this is confirmed, C
The PU 14 uses the authenticated key as a MAC key for M
AC is generated and the encrypted data in the command message is decrypted (ST113).

If it cannot be confirmed in the above step 111, the CPU 14 determines the current D currently being processed.
It is confirmed whether or not there is an authenticated key in the upper DF or MF for F (ST114). If this confirmation is possible, the CPU 14 generates a MAC using the authenticated key as a MAC key, and decrypts the encrypted data in the command message (ST115).

If it is not confirmed in step 113, the CPU 14 determines that there is no key, and performs error processing (ST116).

As described above, each administrator needs to have a key for defining an individual authority and a key for defining a common authority, which solves the problem of complicated key management. A person can perform individual authorization and secure messaging with one key, and need not manage multiple keys.

That is, only the keys DF1 and DF2 are under the DF, and the key MF1 under the MF is M.
It can be used as a key for secure messaging by defining access right to data in F or DF.

Further, the key for which the authentication is performed and the access right is established can be used as the MAC key for secure messaging in the subsequent transactions.

Further, it can be conditioned that the authentication key in the current DF has been authenticated.

If the authentication key in the current DF is not authenticated, it is confirmed that there is an authenticated key in the DF or MF one level above. If there is an authenticated key, the key is MAC It can be a key.

Further, it has a flag for discriminating whether the authenticated key of the DF or MF one above is used as the MAC key or only the authenticated key in the current DF is used as the MAC key, and switching is possible. Can be

Further, it is possible to have a command search table for identifying whether the MAC key is an authenticated authentication key or an individual MAC key.

Further, the key for which the authentication has been performed and the access right has been established can be used as the ENC key for secure messaging in subsequent transactions.

Further, it can be conditioned that the authentication key in the current DF has been authenticated.

If the authentication key in the current DF is not authenticated, it is confirmed that there is an authenticated key in the DF or MF one level above. If there is an authenticated key, that key is ENC. It can be a key.

Further, it has a flag for discriminating whether the authenticated key of the DF or MF one level higher is the ENC key or only the authenticated key in the current DF is the ENC key, and switching is possible. Can be

Further, it is possible to have a command search table for identifying whether the ENC key is an authenticated authentication key or an individual ENC key.

Further, the key for which the authentication has been performed and the access right has been established can be used as the MAC key and ENC key of secure messaging in the subsequent transactions.

Further, it can be conditioned that the authentication key in the current DF has been authenticated.

If the authentication key in the current DF is not authenticated, it is confirmed that there is an authenticated key in the DF or MF one level above. If there is an authenticated key, the key is MAC-converted. Key and ENC key.

Also, the authenticated key of the DF or MF one above is used as the MAC key and the ENC key, or only the authenticated key in the current DF is used as the MAC key and the EN key.
It has a flag for identifying whether to use the C key and can be switched.

The MAC key and ENC key may be used as the authenticated authentication key, or the individual MAC key and EN
It is possible to have a command search table that identifies whether to use the C key.

[0112]

As described above in detail, according to the present invention,
In issuing a portable electronic device in which memory access rights are hierarchically managed, the administrator of each hierarchy is
With one key, you can check the authentication and the access right of the corresponding hierarchy of memory, simplify the process at the time of authentication, and reduce the number of keys required in advance without lowering security. It is possible to provide a system and a method for issuing a possible electronic device.

[Brief description of drawings]

FIG. 1 is a block diagram schematically showing a configuration example of an IC card issuing system according to an embodiment of the present invention.

FIG. 2 is a diagram showing an example of a command message.

FIG. 3 is a diagram showing an example of a command message.

FIG. 4 is a diagram showing an example of a command message.

FIG. 5 is a block diagram schematically showing a configuration example of an IC card.

FIG. 6 is a diagram showing an example of a file structure in a data memory of an IC card.

FIG. 7 is a flowchart illustrating a card primary issuing process.

FIG. 8 is a flowchart illustrating processing from generation of a command message to reception of a response message.

FIG. 9 is a flowchart illustrating processing from generation of a command message to reception of a response message.

FIG. 10 is a flowchart illustrating processing from generation of a command message to reception of a response message.

FIG. 11 is a flowchart illustrating secure messaging processing as authentication processing.

FIG. 12 is a flowchart illustrating secure messaging processing as authentication processing.

FIG. 13 is a flowchart illustrating processing when a command message is received by the IC card.

FIG. 14 is a flowchart illustrating processing when a command message is received by the IC card.

FIG. 15 is a flowchart illustrating processing when a command message is received by the IC card.

[Explanation of symbols]

1 ... PC, 2 ... communication line, 3 ... reader / writer, 4 ... I
C card, 5 ... control unit, 6 ... memory, 7 ... operation unit, 8 ...
Display, 9 ... Interface, 10 ... CPU, 11 ...
Memory, 14 ... CPU, 15 ... ROM, 15a ... Command search table, 16 ... RAM, 17 ... EEPRO
M, 19 ... Contact part, 20 ... IC chip.

Claims (9)

[Claims] 1. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and an IC card obtained from the IC card. Of the card unique number of the first encryption means using the master key stored in the first storage means as an encryption key to obtain the first encrypted data, and the IC obtained from the IC card. Second encryption means for encrypting the first encrypted data by the first encryption means into second encrypted data using a random number based on the card unique number of the card as an encryption key; First transmitting means for transmitting to the IC card, the second encrypted data encrypted by the encrypting means as authentication data, and the first transmitting means which are obtained in response to the first transmitting means. The IC card comprises a first determining means for determining the authentication based on the result of the authentication, and the IC card has a second storing means for storing a master key and a card unique number, and a card unique number. Generating means for generating a random number, and a second means for transmitting the card unique number read from the second storage means to the IC card processing device in response to the card unique number output request from the IC card processing device. A third encryption for encrypting the transmitting means and the card unique number read from the second storage means into third encrypted data using the master key stored in the second storage means as an encryption key. Generated by the generation means in response to an output request of the random number used in the second encryption means from the IC card processing device obtained in response to the encryption means and the second transmission means. And third transmitting means for transmitting the random number to the IC card processing device, the random number generated by said generating means as an encryption key,
Fourth encryption means for encrypting the third encrypted data encrypted by the third encryption means into fourth encrypted data; and a fourth encryption means encrypted by the fourth encryption means. Secondly, the encrypted data of No. 4 is used as the authentication data, and whether the authentication is performed or not is determined depending on whether or not the authentication data from the IC card processing device obtained in response to the third transmitting unit matches.
And a fourth transmitting means for transmitting the authentication determination result by the second determining means to the IC card processing device. 2. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and an IC card obtained from the IC card. Of the card unique number of the first encryption means using the master key stored in the first storage means as an encryption key to obtain the first encrypted data, and the IC obtained from the IC card. Second encryption means for encrypting the first encrypted data by the first encryption means into second encrypted data using a random number based on the card unique number of the card as an encryption key; First transmitting means for transmitting to the IC card, the second encrypted data encrypted by the encrypting means as authentication data, and the first transmitting means which are obtained in response to the first transmitting means. Based on the result of the authentication judgment, the first judging means for judging the authentication, the second judging means for judging the security level of the command data to be transmitted to the IC card, and the second judging means. And a first generation unit that generates various command messages based on the security level, the first encryption data encrypted by the first encryption unit, and the command data. Second transmitting means for transmitting the command message generated by the generating means to the IC card, wherein the IC card stores the master key and the card unique number, and the card unique memory. Second generation means for generating a random number based on the number, and read from the second storage means in response to an output request of the card unique number from the IC card processing device. Third transmitting means for transmitting the card unique number to the IC card processing device, and the card unique number read from the second storage means, using the master key stored in the second storage means as an encryption key. , A third encryption means for encrypting the third encrypted data, and a random number used in the second encryption means from the IC card processing device obtained in response to the third transmission means. In response to the output request, a fourth transmitting unit that transmits the random number generated by the generating unit to the IC card processing device, and a random number generated by the second generating unit as an encryption key, and the third unit. Fourth encrypting means for encrypting the third encrypted data encrypted by the above encrypting means into the fourth encrypted data, and the fourth encrypting means encrypted by the fourth encrypting means. Authenticate data As a second parameter, a second judgment is made based on whether or not the authentication data from the IC card processing device obtained in response to the fourth transmission means matches.
From the IC card processing device obtained in response to the fifth transmitting means, and a fifth transmitting means for transmitting the authentication determination result by the second determining means to the IC card processing device. The third determination means for determining the type of the command message, the type of the command message determined by the third determination means, and the third encrypted data encrypted by the third encryption means. On the basis of this, the extraction means for extracting the command data in the command message, the processing means for performing the processing based on the command data extracted by the extraction means, and the processing result by this processing means are transmitted to the IC card processing device. An IC card processing system comprising: a sixth transmitting means. 3. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and a card specific to the IC card. A first transmitting means for transmitting a request to output a number; a card unique number of an IC card obtained in response to the first transmitting means; and a master key stored in the first storing means as an encryption key. As a first encryption means for encrypting the first encrypted data, and when the encryption is performed by the first encryption means, a random number output request is transmitted to the IC card. The second transmitting means and the random number obtained in response to the second transmitting means are used as the encryption key to encrypt the first encrypted data by the first encrypting means into the second encrypted data. Second dark Encryption means, third transmitting means for transmitting the second encrypted data encrypted by the second encrypting means as authentication data to the IC card, and the third transmitting means. A first judging means for judging the authentication based on a judgment result of the authentication obtained as a response, wherein the IC card stores a master key and a card unique number, and a second storing means; Generating means for generating a random number based on the card unique number; and transmitting the card unique number read from the second storage means to the IC card processing device in response to a request for outputting the card unique number from the IC card processing device. And a card unique number read from the second storage means, and encrypted into the third encrypted data using the master key stored in the second storage means as an encryption key. Generating in response to the output request of the random number used in the second encrypting means from the IC card processing device, which is obtained in response to the third encrypting means for encrypting, and the fourth transmitting means. Fifth transmitting means for transmitting the random number generated by the means to the IC card processing device, and the random number generated by the generating means as an encryption key,
Fourth encryption means for encrypting the third encrypted data encrypted by the third encryption means into fourth encrypted data; and a fourth encryption means encrypted by the fourth encryption means. Secondly, the encrypted data of No. 4 is used as the authentication data, and whether the authentication is performed or not is determined depending on whether or not the authentication data from the IC card processing device obtained in response to the fifth transmitting unit matches.
And a fourth transmitting means for transmitting the authentication determination result by the second determining means to the IC card processing device. 4. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and a card specific to the IC card. A first transmitting means for transmitting a request to output a number; a card unique number of an IC card obtained in response to the first transmitting means; and a master key stored in the first storing means as an encryption key. As a first encryption means for encrypting the first encrypted data, and when the encryption is performed by the first encryption means, a random number output request is transmitted to the IC card. The second transmitting means and the random number obtained in response to the second transmitting means are used as the encryption key to encrypt the first encrypted data by the first encrypting means into the second encrypted data. Second dark Encryption means, third transmitting means for transmitting the second encrypted data encrypted by the second encrypting means as authentication data to the IC card, and the third transmitting means. A first judgment means for judging the authentication based on the judgment result of the authentication obtained in response, a second judgment means for judging the security level of the command data transmitted to the IC card, and the second judgment. First generation means for generating various command messages based on the security level determined by the means, the encryption key for the first encrypted data by the first encryption means, and the command data. And a fourth transmitting means for transmitting the command message generated by the first generating means to the IC card, wherein the IC card stores a master key and a card unique number. Second storage means, second generation means for generating a random number based on the card unique number, and read from the second storage means in response to an output request of the card unique number from the IC card processing device. Fifth transmitting means for transmitting the card unique number to the IC card processing device, the card unique number read from the second storing means, and the master key stored in the second storing means as an encryption key. As a random number used by the third encryption means for encrypting the third encrypted data and the second encryption means from the IC card processing device obtained in response to the fourth transmission means. In response to the output request from the second generation means, the sixth transmission means for transmitting the random number generated by the second generation means to the IC card processing device; and the random number generated by the generation means as an encryption key.
Fourth encryption means for encrypting the third encrypted data encrypted by the third encryption means into fourth encrypted data; and a fourth encryption means encrypted by the fourth encryption means. Secondly, the encrypted data of No. 4 is used as the authentication data, and whether the authentication is performed or not is determined depending on whether the authentication data from the IC card processing device obtained in response to the sixth transmitting unit matches.
From the IC card processing device obtained in response to the seventh transmitting means, and the seventh transmitting means for transmitting the authentication determination result by the second determining means to the IC card processing device. The third determination means for determining the type of the command message, the type of the command message determined by the third determination means, and the third encrypted data encrypted by the third encryption means. On the basis of this, the extraction means for extracting the command data in the command message, the processing means for performing the processing based on the command data extracted by the extraction means, and the processing result by this processing means are transmitted to the IC card processing device. An IC card processing system comprising: an eighth transmitting means. 5. An IC card processing method in an IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device sends a request for outputting a card unique number to the IC card, The card unique number of the IC card obtained in response to the transmission is encrypted into the first encrypted data using the pre-stored master key as the encryption key, and when this encryption is performed, the above IC card To the second encrypted data, using the random number obtained in response to this transmission as an encryption key, and encrypting the first encrypted data into second encrypted data. As authentication data, the above IC
Authentication is judged based on the judgment result of the authentication transmitted to the card, and the IC card responds to the output request of the card unique number from the IC card processing device. The card unique number stored in advance is transmitted to the IC card processing device, a random number is generated based on the card unique number stored in advance, and the card unique number is used as a cryptographic key using the master key stored in advance. , Third encrypted data, and in response to a random number output request from the IC card processing device, the generated random number is transmitted to the IC card processing device, and the generated random number is an encryption key. , The third encrypted data is encrypted into fourth encrypted data, and the fourth encrypted data is used as authentication data to transmit the random number. It is determined whether or not the authentication is based on whether or not the authentication data obtained from the IC card processing device matches, and the result of this authentication determination is transmitted to the IC car unit. IC card processing method. 6. An IC card processing method in an IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device is provided with respect to the IC card.
By transmitting an output request for the card unique number, the IC card transmits a card unique number stored in advance in response to the output request for the card unique number, and by transmitting the card unique number, the IC card becomes
A random number is generated based on a card unique number stored in advance, the master key stored in advance is used as an encryption key, the card unique number is encrypted into third encrypted data, and the generated random number is used as an encryption key. As
By encrypting the third encrypted data into the fourth encrypted data and transmitting the card unique number, the IC card processing device uses the master key stored in advance as the encryption key to perform the first encryption. The data is encrypted, a random number output request is transmitted, and the IC card processing device is transmitted by transmitting the random number output request, the IC card transmitting the generated random number, and the random number transmission by transmitting the random number output request. Using the random number as an encryption key, the first encrypted data is encrypted into second encrypted data, the second encrypted data is transmitted as authentication data, and the IC card is transmitted by transmitting the authentication data. It is determined whether or not the authentication is performed based on whether the transmitted authentication data and the authentication data as the fourth encrypted data match, and the determination result of this authentication is transmitted. The transmission of the authentication result of the determination, the IC card processing apparatus, based on the determination result of the transmitted authenticated to determine authentication, IC card processing method characterized by. 7. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and an IC card obtained from the IC card. Of the card unique number of the first encryption means using the master key stored in the first storage means as an encryption key to obtain the first encrypted data, and the IC obtained from the IC card. Second encryption means for encrypting the first encrypted data by the first encryption means into second encrypted data using a random number based on the card unique number of the card as an encryption key; First transmitting means for transmitting to the IC card, the second encrypted data encrypted by the encrypting means as authentication data, and the first transmitting means which are obtained in response to the first transmitting means. The first determination means for determining the authentication based on the authentication determination result, and the transmission of the command message including the command header, the command data, and the MAC generated by these command header and the command data to the IC card. Second to judge
Of the command header and the command data based on the determination means of the second determination means and the first determination data of the first encryption means. First generating means for generating a MAC; second generating means for generating a command message to be transmitted to the IC card by the command header, the command data and the MAC generated by the first generating means; Second transmitting means for transmitting the command message generated by the second generating means to the IC card, wherein the IC card stores a master key and a card unique number, and a second storing means. Third generation means for generating a random number based on a unique number, and the second storage means in response to an output request of the card unique number from the IC card processing device. Third transmitting means for transmitting the card unique number read from the card to the IC card processing device, and the card unique number read from the second storing means for the master key stored in the second storing means. Used as an encryption key by a third encryption means for encrypting third encrypted data, and by the second encryption means from the IC card processing device obtained in response to the third transmission means. In response to the output request of the generated random number, fourth transmitting means for transmitting the random number generated by the generating means to the IC card processing device, and the random number generated by the third generating means as an encryption key, Fourth encryption means for encrypting the third encrypted data encrypted by the third encryption means into fourth encrypted data; and a fourth encryption means encrypted by the fourth encryption means. 4 encryption days Authentication data is used as authentication data, and it is determined whether or not authentication is performed based on whether or not the authentication data from the IC card processing device obtained in response to the fourth transmission means matches.
From the IC card processing device obtained in response to the fifth transmitting means, and the fifth transmitting means for transmitting the authentication determination result by the third determining means to the IC card processing device. And a fourth judgment means for judging that the encrypted command message of is composed of a command header, command data, and a MAC generated by these command header and command data. Based on the determination, the data including the command header and the command data in the command message is encrypted by the third encrypted data by the third encryption means, and the fourth generation is performed to generate the MAC. Means and the MAC generated by the fourth generation means and the MAC in the command message, and when they match, the command in the command message is compared. An IC card processing system comprising: processing means for performing processing based on command data; and sixth transmitting means for transmitting the processing result of this processing means to the IC card processing device. 8. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and an IC card obtained from the IC card. Of the card unique number of the first encryption means using the master key stored in the first storage means as an encryption key to obtain the first encrypted data, and the IC obtained from the IC card. Second encryption means for encrypting the first encrypted data by the first encryption means into second encrypted data using a random number based on the card unique number of the card as an encryption key; First transmitting means for transmitting to the IC card, the second encrypted data encrypted by the encrypting means as authentication data, and the first transmitting means which are obtained in response to the first transmitting means. A first judgment means for judging the authentication based on the judgment result of the authentication, and a second judgment means for judging the transmission of the command message including the command header and the encrypted data of the command data to the IC card. Based on the judgment of the second judging means, the command data is encrypted by the first encrypted data by the first encrypting means, and the first generating means for generating encrypted data. And second generating means for generating a command message to be transmitted to the IC card by the command header and the encrypted data generated by the first generating means, and a command message generated by the second generating means. To the IC card, the IC card including a second storage unit storing a master key and a card unique number; Third generation means for generating a random number based on a unique number, and the card unique number read from the second storage means in response to an output request for the card unique number from the IC card processing device, is subjected to the IC card processing. Third transmitting means for transmitting to the device, and the card unique number read from the second storing means into third encrypted data using the master key stored in the second storing means as an encryption key. In response to a third encryption means for encrypting, and an output request of the random number used in the second encryption means from the IC card processing device, which is obtained in response to the third transmission means, in response to the output request. Fourth transmission means for transmitting the random number generated by the generation means to the IC card processing device, and encryption by the third encryption means using the random number generated by the third generation means as an encryption key. Fourth encryption means for encrypting the encrypted third encrypted data into fourth encrypted data, and the fourth encrypted data encrypted by the fourth encryption means as authentication data, Thirdly judging whether or not to authenticate based on whether or not the authentication data from the IC card processing device obtained in response to the fourth transmitting means matches.
From the IC card processing device obtained in response to the fifth transmitting means, and the fifth transmitting means for transmitting the authentication determination result by the third determining means to the IC card processing device. In the command message based on the judgment of the fourth judgment means for judging that the encrypted command message of is composed of the command header and the encrypted data of the command data. Based on the command data decrypted by this decryption means, and the decryption means for decrypting the encrypted data of No. 1 into command data by the third encrypted data by the above-mentioned third encryption means. An IC card processing system, comprising: a processing means for performing processing; and a sixth transmission means for transmitting the processing result of this processing means to the IC card processing device. Beam. 9. An IC card processing system comprising an IC card processing device and an IC card, wherein the IC card processing device has a first storage means for storing a master key, and an IC card obtained from the IC card. Of the card unique number of the first encryption means using the master key stored in the first storage means as an encryption key to obtain the first encrypted data, and the IC obtained from the IC card. Second encryption means for encrypting the first encrypted data by the first encryption means into second encrypted data using a random number based on the card unique number of the card as an encryption key; First transmitting means for transmitting to the IC card, the second encrypted data encrypted by the encrypting means as authentication data, and the first transmitting means which are obtained in response to the first transmitting means. And a command message including a command header, encrypted data of command data, and a MAC generated by the encrypted data of the command header and command data. Second judging means for judging transmission to the IC card, and based on the judgment of the second judging means, the first encryption for the data composed of the command header and the encrypted data of the command data. I by the first generation means for performing the encryption with the first encrypted data by the means to generate the MAC, the command header and the encrypted data of the command data, and the MAC generated by the first generation means.
The IC card includes a second generation unit that generates a command message to be transmitted to the C card and a second transmission unit that transmits the command message generated by the second generation unit to the IC card. Second storage means for storing the master key and the card unique number, third generation means for generating a random number based on the card unique number, and a response to the card unique number output request from the IC card processing device. Third transmitting means for transmitting the card unique number read from the second storage means to the IC card processing device; and the card unique number read from the second storage means for the second storage means. Third encryption means for encrypting third encrypted data using the master key stored in the third encryption key as an encryption key, and the IC card processing obtained in response to the third transmission means. Fourth transmission means for transmitting the random number generated by the generation means to the IC card processing device in response to an output request of the random number used by the second encryption means from the processing device; Fourth encryption means for encrypting the third encrypted data encrypted by the third encryption means into the fourth encrypted data using the random number generated by the generation means as the encryption key, Whether the fourth encrypted data encrypted by the fourth encrypting means is used as the authentication data and the authentication data from the IC card processing device obtained in response to the fourth transmitting means is the same or not. Whether to authenticate or not depending on the third
From the IC card processing device obtained in response to the fifth transmitting means, and the fifth transmitting means for transmitting the authentication determination result by the third determining means to the IC card processing device. Fourth, it is determined that the encrypted command message of is composed of a command header, encrypted data of command data, and a MAC generated by the encrypted data of the command header and command data.
Of the command header in the command telegram and the encrypted data of the command data based on the judgment of the fourth judgment means and the third encryption by the third encryption means. The fourth generation means for encrypting the encrypted data and generating the MAC is compared with the MAC generated by the fourth generation means and the MAC in the command message, and when they match, the command message is transmitted. Based on the command data decrypted by the decryption means, which decrypts the encrypted data in the command data into the command data by the third encrypted data by the third encryption means. An IC card processing system comprising: a processing means for performing the above processing; and a sixth transmitting means for transmitting the processing result by this processing means to the IC card processing device. Temu.