JP2003016403A - Information storage medium, ic chip equipped with memory area, information processor having ic chip equipped with memory area, and memory managing method for information storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To efficiently control the right to access each application allocated to the memory area of an IC card. SOLUTION: By introducing a hierarchical structure into memory areas on the IC card, applications allocated to the memory areas are registered in directories to manage the memory areas by directories. Password codes are set by the applications or directories to control the right to access. If a portable terminal is lost, the right to access applications in the IC card is automatically lost.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information storage medium having a relatively large capacity memory area, and an I having a memory area.
Information processing device having C chip, IC chip having memory area, memory management method of information storage medium, and particularly information storage medium mounted and used in information processing device such as mobile phone and PDA (Personal Digital Assistant) The present invention relates to an IC chip having a memory area, an information processing device having an IC chip having a memory area, and a memory management method for an information storage medium.

More specifically, the present invention relates to an information storage medium in which one or more applications are allocated on a memory area, an IC chip having the memory area, an information processing apparatus having the IC chip having the memory area, and information storage. More particularly, the present invention relates to a medium memory management method, and in particular, an information storage medium for controlling access right to each application assigned to a memory area, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, The present invention relates to a memory management method for an information storage medium.

[0003]

2. Description of the Related Art Conventionally, various devices using personal identification numbers and passwords have been devised and put to practical use for personal identification and authentication processing. (Here, in general, "PIN" refers to a character string represented by a combination of numbers from 0 to 9, and "Password" uses general characters such as alphabets in addition to numbers. (In this specification, the personal identification number and the password are collectively referred to as a "personal identification code".)

For example, when using a cash card in a bank or other financial institution, the cash
Prompt the user to enter a personal identification number or password using a dispenser, etc. as a means of personal authentication, and after confirming that the user has entered the correct personal identification number or password, withdraw from the cash dispenser, etc. It is designed to operate.

[0005] In addition to this, application of a secret code, such as input of a retreat code of a safety box installed in an accommodation facility such as a hotel, input of a password when logging in to a computer, or for concealing information on an information terminal Examples vary.

Conventionally, in a storage medium such as a magnetic stripe arranged on one bank cash card, only a storage area usable only for the bank is provided. Therefore, the input of the personal identification number or password as described above is only an access to this single storage area. Therefore, the user needs to prepare a card for each purpose or use and properly use a plurality of cards.

Recently, non-contact type IC cards have become widespread. For example, ICs installed at cash dispensers, concert hall entrances, station ticket gates, etc.
The card reader / writer can contactlessly access the IC card held by the user. Here, the user inputs the personal identification number and password to the IC card reader side, and collates the input personal identification number and password with the personal identification number and password stored on the IC card. Identity verification or authentication processing is performed between the card reader / writer. When the identity verification or the authentication process is successful, for example, the application stored in the IC card can be used.
Here, as the application held by the IC card, for example, value information such as electronic money or electronic ticket can be cited.

[0008] Recently, IC cards having a relatively large capacity storage space have appeared and have become popular along with the improvement in miniaturization technology. Since a conventional cash card or the like carries only a single storage area, that is, a single application, it is necessary to carry a plurality of cards for each use or purpose. On the contrary,
According to such an IC card with a large-capacity memory, a plurality of applications can be stored at the same time, so that one IC card can be used for a plurality of purposes. For example, two or more applications such as electronic money for making electronic payments and electronic tickets for entering a specific concert venue are stored on one IC card, and one IC card can be used for various purposes. It can be applied to various uses.

Further, by mounting such an IC card with a large-capacity memory function (or an IC chip in which the IC card is a semiconductor chip) on a mobile terminal such as a mobile phone, the user can use the mobile terminal. By possessing, the electronic value information can be exchanged with the outside such as electronic payment.

Since conventional cash cards have only a single purpose (discussed above), a magnetic stripe on a cash card can manage the security of the entire card by having a single PIN or password. It was

On the other hand, in an IC card with a memory function capable of holding a plurality of applications and a mobile terminal equipped with such an IC card (or IC chip), it is necessary to control the access right for each application. There is. This is because, if access to all the applications on the IC card is opened with only one secret code, the security at the time of loss or theft is significantly lowered.

Further, as the memory area mounted on the IC card is expanded with the progress of manufacturing technology, many applications can be allocated to the memory area on the IC card. However, if each application is simply assigned to the memory area, the user will have trouble arranging each application, and it will be difficult for the user to classify and organize the applications in the memory area.

Further, if the access right of each application is controlled by using an individual personal identification code or the like, if it is desired to use a plurality of related applications in a series of transactions, the individual personal identification codes can be sequentially used in the same transaction. Since input work is involved, the operability of the device is significantly reduced.

[0014]

An object of the present invention is to provide an excellent information storage medium having a relatively large capacity memory area, an IC chip having a memory area, and an IC having a memory area.
An object is to provide an information processing device having a chip and a memory management method for an information storage medium.

A further object of the present invention is a mobile phone or PD.
A superior information storage medium that can be mounted and used in an information processing device such as an A (Personal Digital Assistant), an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, and information storage It is to provide a memory management method for a medium.

A further object of the present invention is to provide a memory area with 1
The above applications can be assigned,
An excellent information storage medium, an IC chip with a memory area,
An information processing device having an IC chip having a memory area,
It is to provide a memory management method for an information storage medium.

A further object of the present invention is to provide an excellent information storage medium capable of controlling the access right to each application assigned to the memory area, an IC chip having the memory area, and an IC having the memory area. An object is to provide an information processing device having a chip and a memory management method for an information storage medium.

A further object of the present invention is to provide an excellent information storage medium capable of efficiently managing a plurality of applications assigned to the memory area, an IC chip having the memory area, and an IC having the memory area. An object is to provide an information processing device having a chip and a memory management method for an information storage medium.

[0019]

SUMMARY OF THE INVENTION The present invention has been made in consideration of the above problems, and is an information storage medium, an IC chip having a memory area, and an IC having a memory area.
A memory management method for an information processing device having a chip or an information storage medium, comprising: a memory allocation unit or step for allocating the memory area to each application; and an access right to each application allocated to the memory area. A personal identification code setting unit or step for setting a personal identification code for controlling the access control unit; and an access permission / prohibition state management unit or step for managing the access permission / prohibition state of each application assigned to the memory area. The management means or step sets the application to which the personal identification code is set to the inaccessible state by default, and sets the corresponding application to the access permitted state in response to the coincidence of the personal identification code input by the user. Information storage medium IC chip with a memory area,
An information processing device having an IC chip having a memory area,
Alternatively, it is a memory management method for the information storage medium.

Here, a cartridge configured to have a large credit card size by mounting an antenna on an IC chip is generally called an "IC card". The IC chip is used by being built in a mobile terminal such as a mobile phone or PDA, or other information processing device. Further, the IC card may be inserted into the information processing device for use. I
As a usage pattern of the C chip or the IC card, there is a function relating to value information such as prepaid electronic money and electronic ticket. The function provided by the IC chip or the IC card is also referred to as “application” below.

The memory allocating means or step can manage the memory space of the IC card in a hierarchical structure by hierarchically allocating the memory area to the application using the directory. As a result, by putting related applications such as a plurality of applications used in a series of transactions in the same directory, the user can efficiently classify and organize the applications.

Since the external device is equipped with a card reader, the IC chip can access the IC chip via a wireless interface. The access right to the memory area such as the IC chip is controlled by the coincidence of the secret code. IC
After inputting a personal identification code on an information processing device having a chip and unlocking the device, the device may be wirelessly connected to an external device to allow access to the memory area. Alternatively, after establishing the wireless connection between the IC chip in the information processing device and the external device, the access right may be controlled based on the personal identification code input on the external device.

In such a case, the secret code setting means or step may set a secret code for controlling the access right for each application and directory. Further, the access permission / denial state managing means or step sets the application and the directory in which the personal identification code is set to the inaccessible state by default, and selects the corresponding application or directory in response to the coincidence of the personal identification code input by the user. It is possible to set the access permission state.

In addition, the access permission / denial state managing means or step responds to that the personal identification code input by the user matches the personal identification code set in the directory, and then all the applications and subdirectories under the directory are identified. You may make it an access permitted state.

Therefore, according to the IC card and the memory management method for the IC card according to the present invention, a hierarchical structure is introduced in the memory space, and by allocating a directory to each application, the application can be efficiently arranged in directory units. Can be managed.

For example, applications that are closely related to each other, such as applications used for a series of transactions, are registered in the same directory (further,
By registering subdirectories that are closely related to each other in the same directory), the applications and directories in the memory area are arranged in an orderly manner, and the classification and organization of applications becomes efficient.

Further, according to the information storage medium, the IC chip having the memory area, the information processing apparatus having the IC chip having the memory area, and the memory management method of the information storage medium according to the present invention, individual applications are provided. In addition to setting the secret code to the directory, the secret code can also be set to the directory, so that the access right can be efficiently controlled not only in the application unit but also in the directory unit.

For example, by inputting a personal identification code corresponding to a certain directory, a matching / authentication process is performed,
You can also give access to all applications (as well as subdirectories) in the directory. Therefore, for example, it is possible to obtain access rights for all applications used in a series of transactions by only entering the PIN code once in the corresponding directory, which improves access control efficiency and device usability. Is improved.

The IC card or the memory management method for an IC card according to the present invention further comprises secret key setting means or step for setting a secret key for authentication to each application and directory assigned to the memory area. May be. In such a case, the access permission / prohibition state management means or step can set the access-disabled application or directory to the access-permitted state through mutual authentication using a secret key with a predetermined certificate authority. .

Further, it may further comprise access prohibiting means or step for returning the application and the directory in the access-permitted state to the inaccessible state in response to the power-off of the IC card.

If the IC card is lost or stolen, the user may be damaged by unauthorized use or unauthorized use of the application or directory. According to the present invention, all applications and directories are automatically set in the access-prohibited state in response to the power-off of the IC card. Therefore, in the case where the IC card is lost, the access-permitted state can be maintained and other malicious It is possible to prevent unauthorized use by users.

Further, input failure number holding means or step for holding the number of input failure times of the personal identification code for each application and directory assigned to the memory area, and the personal identification code for each application and directory assigned to the memory area. It may further comprise a maximum allowable input failure frequency setting means or step for setting the maximum allowable input failure frequency. In such a case, the access permission / inhibition state management means or step can set the application or directory in which the number of input failures reaches the maximum allowable number of inputs to the inaccessible state.

Further, an input failure number initialization means or step for clearing the input failure frequency held in the input failure frequency holding means or step by the administrator who has undergone the mutual authentication processing with a predetermined certificate authority is further provided. May be.

Further objects, features and advantages of the present invention are as follows.
It will be clarified by a more detailed description based on embodiments of the present invention described below and the accompanying drawings.

[0035]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 schematically shows the hardware configuration of a mobile terminal 10 according to an embodiment of the present invention. The mobile terminal 10 is, for example, a mobile phone or a PDA (Personal).
It is an information processing terminal such as a digital assistant) that is small and lightweight and can be always carried by the user.

The mobile terminal 10 shown in the figure is equipped with an IC chip 50 which is driven by power supply by wireless communication with an external device and has a memory function, and controls the operation inside the mobile terminal 10 in a centralized manner. Controller 11,
A user input device 12 including keys / buttons for a user to input various character strings such as a personal identification number and a password and commands, and a liquid crystal display (LCD) for displaying the processing result on the screen.
The display device 13 such as y) is provided. Of course, in order to realize the original function of the mobile terminal 10, peripheral devices and circuit components other than those shown may be provided.

Here, a cartridge configured to have a credit card size by mounting an antenna on an IC chip is generally called an "IC card".

The form in which the mobile terminal 10 is equipped with the IC chip 50 is not unique. For example, an IC in the form of a semiconductor chip may be built in together with a radio antenna, or an IC chip formed in a card shape, that is, an IC.
The card may be used by inserting it into a card slot or the like provided in the mobile terminal 10. As a usage pattern of the IC chip or the IC card, there is a function relating to value information such as prepaid electronic money and electronic ticket. The function provided by the IC chip or the IC card is also referred to as “application” below.

The controller 11 is a CPU (Central Pr
Ocessing Unit), ROM (Read Only Memory), RA
It is configured by integrating M (Random Access Memory) and the like. The controller 11 controls various operations in the mobile terminal 10 by executing the program code stored in the ROM.

The IC chip 50 has a wireless interface 14 for wireless connection with the external device 100 and a wired interface 15 for wired connection with the controller 11 on the portable terminal 10 side. Regarding the wireless interface 14, for example, a contact interface standard defined by ISO 7816 or ISO 144
The radio interface standard defined in 43 can be used. The connection method between the IC chip 50 and the external device 100 will be described later.

For the IC chip 50, for example, a non-contact IC chip technology is applied, and the wireless interface 1
It is driven by a radio wave from the external device 100 received via route 4. In other words, when the user is not holding the portable terminal 10 over the external device 100, the external device 100
The radio wave from the device does not reach and the operation of the IC chip 50 is weakened. In this embodiment, the access right to the inside of the IC chip 50 disappears in response to the interruption of the radio wave (described later).

The IC chip 50 according to this embodiment has a relatively large capacity memory area. Such a memory area is provided by a miniaturization technique or the like. The memory area is composed of a semiconductor memory, a magnetic stripe, or another readable / writable storage medium. One or more applications are assigned to this memory area. Examples of the application referred to here include value information such as electronic money and electronic tickets.

Further, in this embodiment, a hierarchical structure is introduced in the memory space in the IC chip 50, and by allocating a directory to each application, the application can be efficiently managed in directory units. The details of this point will be given later.

In order to protect this kind of value information from unauthorized use or plagiarism, by setting a password such as a password or password for each application, the access right to the memory area is controlled for each application. There is. For example, the personal identification code input through the wireless interface 14 or the wired interface 15 and the personal identification code of each application are compared and collated,
Access is granted for matching applications (see below).

Further, in the present embodiment, a hierarchical structure is introduced in the memory space and a directory is assigned to each application. In addition to setting a personal identification code for each application, a personal identification code is also set for the directory. can do. Therefore, in addition to controlling the access right on an application-by-application basis, the access right can be efficiently controlled on a directory-by-directory basis. However, details regarding control of the access right will be given later.

The external device 100 is a device that uses an application assigned to the memory area of the IC chip 50. For example, a reader / writer for wirelessly connecting to the IC chip 50 by applying the technology of a non-contact IC chip. It includes a writer 101. Of course, the external device 100 is also equipped with circuit components and peripheral devices for performing arithmetic processing for a specific business, a display device and an input device (not shown) for interactive input with the user. ing.

The external device 100 is, for example, an AT in a bank.
Devices that use electronic money, such as M (Automatic Teller Machine) terminals, devices that use electronic tickets, such as gates at concert venues, ticket gates at stations and airports, and devices that process electronic value information. It corresponds to a device that performs identity verification or authentication processing, such as a safety box at an accommodation facility.

According to the system configuration as shown in FIG.
The user inputs the personal identification code from the user input device 12 on the mobile terminal 10 to unlock. In some cases, confirm the value input by the user on the display device 13,
The personal identification code input to the IC chip 50 built in the mobile terminal 10 is transmitted via the wired interface 15. Then, in the IC chip 50, the personal identification code set in each application or each directory in the memory area is collated with the personal identification code input by the user. Then, the user is given an access right to the memory area assigned to the matching application or directory. Alternatively, after establishing a wireless connection between the IC chip 50 in the mobile terminal 10 and the external device 100,
The access right to the application may be controlled based on the personal identification code input on the external device 100.

Wireless communication between the reader / writer 101 and the IC chip 50 is realized based on the principle of electromagnetic induction, for example. FIG. 2 shows a reader / writer 10 based on electromagnetic induction.
1 conceptually illustrates the mechanism of wireless communication between 1 and the IC chip 50. The reader / writer 101 includes an antenna L _RW composed of a loop coil, and a current I _{RW is} passed through the antenna L _RW to generate a magnetic field around the antenna. On the other hand, on the IC chip 50 side, the IC chip 50 is electrically
A loop coil L _c is formed in the periphery of the. The reader / writer 10 is attached to the end of the loop coil L _c on the IC chip 50 side.
An induced voltage is generated by the magnetic field generated by the loop antenna L _c on the first side and is input to the terminal of the IC chip 50 connected to the end of the loop coil L _c .

Although the degree of coupling between the antenna L _RW on the reader / writer 101 side and the loop coil L _c on the IC chip 50 side varies depending on the positional relationship with each other, it is assumed that one transformer is formed as a system. It can be captured and modeled as shown in FIG.

The reader / writer 101 modulates the current I _RW flowing through the antenna L _RW , so that the voltage V _O induced in the loop coil L _c on the IC chip is modulated, and this is utilized. The reader / writer 101 can send data to the IC chip 50. The transmission data referred to here is provided by a personal identification code such as a personal identification number or a password input by the user on the external device 100 side to obtain an access right to an application or a directory, or an application such as electronic money or an electronic ticket. Value information is included.

The IC chip 50 also has a function (Load Switchin) of varying the load between the terminals of the loop coil L _c according to the data to be returned to the reader / writer 101.
g). When the load between the terminals of the loop coil L _c changes, the impedance between the antenna terminals changes on the reader / writer 101 side, and the passing current I _{RW of the} antenna L _RW is changed.
And a change in the voltage V _RW . By demodulating this variation, the reader / writer 101 can receive the return data of the IC chip 50. External device 100 is I
The data received from the C chip 50 includes value information provided by applications such as electronic money and electronic tickets.

In this embodiment, a hierarchical structure using directories is introduced into the storage area in the IC chip 50 built in the mobile terminal 10. Then, each application assigned to the memory area can be registered in a directory of a desired hierarchy. For example, by registering closely related applications (such as applications used for a series of transactions) in the same directory (and by registering closely related subdirectories in the same directory), it is possible to The directory arrangement is neat, and users can efficiently classify and organize applications.

Further, in order to hierarchically control the access right, the personal identification code can be set not only for each application but also for each directory. For example, by inputting a personal identification code corresponding to a certain directory, access rights to all applications (and subdirectories) in the directory can be given through the matching / authentication process. Therefore, for example, it is possible to obtain access rights for all applications used in a series of transactions by only entering the PIN code once in the corresponding directory, which improves access control efficiency and device usability. Is improved.

FIG. 4 shows the portable terminal 10 according to this embodiment.
2 illustrates the functional configuration in the IC chip 50 incorporated in the.

As shown in the figure, the IC chip 50 has an RF section 51 to which an antenna for wireless communication with a reader / writer 101 on the external device 100 side is connected, and, for example, purchased ticket information and bank depositor information. A memory 52 having a storage area such as (electronic money) allocated for each application, and a collation unit 53 for performing collation and comparison of a secret code.
, A wired interface 54, and a control unit 55 that controls these components in a centralized manner.

The control unit 55 has a CPU (Central Processi).
ng Unit), ROM (Read Only Memory), RAM (Ran
dom Access Memory) and so on. The control unit 55 controls the operation in the IC chip 50 by executing the program code stored in the ROM. Further, the control unit 55 can communicate with the controller 11 on the mobile terminal 10 side via the wired interface 54.

Memory 52 is used to allocate storage areas for one or more applications. The memory 52 may be a readable / writable storage medium such as a magnetic stripe in addition to a semiconductor memory, and is not limited to a particular device.

In this embodiment, a hierarchical structure using directories is introduced in the storage space of the memory 52. That is, each application assigned to the memory area can be registered in a directory of a desired hierarchy. For example, related applications such as applications used for a series of transactions can be registered in the same directory (further, related subdirectories can be registered in the same directory).

The application and the directory allocated in the memory 52 have a secret code defining area. Therefore, for each application,
Alternatively, a personal identification code can be set for each directory. Further, the access right to the memory 52 can be given not only for each application but also for each directory. Detailed description regarding the hierarchical structure and hierarchical access right control in the memory 52, and the secret code defining area will be given later.

The collation unit 53 collates the personal identification code sent through the wired interface 54 with the personal identification code set in the memory area assigned to each application or directory to access the coincident memory area. Allow The memory area to which access is permitted is the reader / writer 1 via the RF unit 51.
Reading and writing is possible from 01.

The secret code sent through the wired interface 54 is, in short, the secret code input by the user on the portable terminal 10. That is, according to the present embodiment, the user can operate the external device 1 that is unfamiliar with the operation.
Instead of the user interface on 00, the personal identification code can be input and operated on his / her own portable terminal 10, which is familiar with the operation, to receive the verification process.

FIG. 5 schematically shows a configuration example of the memory space in the memory 52 shown in FIG. In the example shown in the figure, the directory 1 corresponding to the root directory has an application 1A and an application 1B.
And directory 2 corresponding to a subdirectory.

The directories 2 and below include the application 2A and the directories 3-1 and 3-2 corresponding to the sub directories.

The directories 3-1 and below include the applications 3-1A and 3-1B, and the directories 3-2 and below include the applications 3-2A and 3-2B.
Also, an application 3-2C is included.

As shown in FIG. 5, each application and directory allocated on the memory 52 includes
A secret code definition area is provided. FIG. 6 schematically shows the data structure of this secret code definition area. As shown in the figure, the personal identification code definition area includes a personal identification number area, an input failure frequency storage area, a maximum allowable input failure frequency setting area, a personal identification number use selection area, and an access permission flag. .

When accessing each application or directory, the IC chip 50 prompts the user to input a personal identification code. For example, a warning sound is emitted on the mobile terminal 10 or a dialog is displayed on the display device 13 to prompt the user to input the personal identification code.

Only when the personal identification codes input by the user match, the access permission flag of the personal identification code defining area of the corresponding application or directory is set,
Allow access to it.

The access permission flag is a flag for indicating the access permission / prohibition state of the corresponding application or directory, and the application or directory for which the access permission flag is set is in the access permission state. The access permission flag of the application or directory to which the PIN code is set is inaccessible by default, and after the PIN code verification process and the authentication process using the private key succeed, the access permission flag is set and the access permission flag is set. Change to a permitted state. Further, if the access permission flag is continuously set, if the IC chip 50 or the mobile terminal 10 is lost or stolen, the user may be damaged by unauthorized use or unauthorized use of the application or the directory. IC according to the present embodiment
The chip 50 has a mechanism for automatically making the access-permitted state inaccessible, but details thereof will be described later.

When an incorrect personal identification code is input, the record in the input failure frequency storage area is updated each time. Then, when the input failure count reaches the maximum allowable input failure count set in the maximum allowable input failure count setting area, access to the corresponding application or directory is prohibited.

Generally, the number of input failures should be cleared once the input is successful. In this way, a malicious user is prevented from inexhaustively inspecting the personal identification code. Further, when the user mistakenly reaches the maximum allowable number of input failures and fails to input the secret code, only the administrator who manages the IC chip 50 may clear the input failure number storage area. For authentication of this administrator, for example, authentication with a secret key as described later can be used.

Further, when the personal identification code is input to the directory and the access is permitted, it is possible to permit the access to all the applications and the directories lower than that. For example, like the directory 2 shown in FIG.
The personal identification code for the directory itself and the personal identification code for the lower layer directory are individually arranged to control the access right of only the application belonging to the directory 2, and the directory 3-1 and the subordinate directory 3-1 below the directory 2. It is also possible to set a secret code that controls the access right of only 3-2.

Further, it is possible to select whether or not to set the personal identification code in the target area by the personal identification code use selection area in each personal identification code definition area. That is,
If the personal identification code is set, access to the corresponding application or directory is permitted by successful authentication with the personal identification code. On the other hand, the application or directory for which the personal identification code is not set does not need the collation processing of the personal identification code and can freely access the location.

In addition, a secret key can be set in each application or directory in addition to the secret code. Therefore, it can be used as an authentication means in addition to the personal authentication by inputting the personal identification code.

FIG. 7 shows, in the form of a flowchart, a processing procedure for controlling the access right to the directory or application according to the personal identification code input by the user.

When the user inputs the personal identification code (step S1), the collating unit 53 accesses the personal identification code definition area of the application or the directory in the memory space and determines whether the personal identification code matches (step S1). S2).

When the personal identification code of the application or the directory matches the personal identification code input by the user, the access permission flag in the personal identification code definition area is set to enable access (step S3).

The secret code can be sent to the IC chip 50 via the wired interface 54, for example, what the user has input on the user input device 12 of the portable terminal 10. Alternatively, by holding the IC chip 50 over the reader / writer 101 of the external device 100, the external device 1
00 input using the user interface,
It can also be sent to the C chip.

FIG. 8 shows, in the form of a flowchart, a processing procedure for controlling the access right to the directory or application by using the secret key instead of the secret code input by the user.

First, an authentication process is performed with a predetermined certificate authority using a secret key set for a desired directory or application (step S11).

If the authentication process is successful (step S12), the access permission flag in the secret code definition area is set to enable access (step S13).

Of course, both the collation process with the personal identification code entered by the user as shown in FIG. 7 and the authentication process using the secret key shown in FIG. May be performed. In such a case, the application or directory can be protected from unauthorized use or unauthorized use at a higher security level.

When a password as shown in FIG. 7 is used to control the access right to an application or a directory, a malicious user may inspect the password secretly to break the security barrier. Yes (especially when using a PIN code with a small number of digits).
For this reason, in the present embodiment, the access control is performed by setting the maximum allowable input count in the personal identification code definition area and setting the application or the directory whose input failure count has reached the maximum allowable input count to the inaccessible state. I am trying to do it.

FIG. 9 shows, in the form of a flow chart, a processing procedure for controlling the access right to the application or the directory based on the number of input failures of the secret code.

When the user inputs the personal identification code (step S21), the collating unit 53 accesses the personal identification code defining area of the application or the directory in the memory space to determine whether the personal identification code matches (step S21). S22).

When the personal identification code of the application or directory matches the personal identification code entered by the user, the access permission flag in the personal identification code definition area is set to make the corresponding application or directory accessible ( Step S23).

On the other hand, if the personal identification code of the application or the directory does not match the personal identification code input by the user, the number of input failures in the personal identification code definition area is updated (step S24).

Then, in step S25, it is determined whether or not the updated input failure count reaches the maximum allowable input count set in the personal identification code defining area (step S25).

If the number of input failures reaches the maximum allowable number of inputs, the setting of the access permission flag in the personal identification code definition area is canceled and the corresponding application or directory is made accessible. (Step S26).

As a result, a malicious user can crack down on the act of inspecting the personal identification code.

If the user mistakenly reaches the maximum allowable number of input failures and fails to input the personal identification code,
Only the administrator who manages the IC chip 50 may clear the input failure frequency storage area. For authentication of this administrator, for example, authentication using a secret key can be used.

For example, when the conventional cash card is lost, the deposit itself is not stored in the name of the card. Therefore, the user of the card contacts the handling bank and deals with the bank deposit itself. You can prevent damage by stopping the service. On the other hand, in the case of an IC chip having a memory area, highly monetizable value information such as electronic money and electronic tickets is stored in a semiconductor memory or the like in the IC chip, so it can be picked up by a malicious person. If it happens, there is a high possibility that it will be misused and suffer financial loss.

Therefore, in this embodiment, the IC chip 50 is used.
(Or, in response to the power-off of the mobile terminal 10 having the IC chip 50 built-in), all the access permission flags of each PIN definition area are cleared, and all applications and directories are automatically deleted. Access is prohibited. As a result, when the IC chip 50 is lost, it can be prevented from being illegally used by other malicious users in the access permitted state.

FIG. 10 schematically shows a mechanism for automatically making the memory area in the access-permitted state inaccessible by cutting off the power supply. The mechanism shown is
This can be realized by configuring the storage area with a storage medium of a type (volatile type) in which the storage content is held by power supply, such as a semiconductor memory.

Access permission flags 201-1 to 201-
As shown in FIG. 6, n is provided in each secret code definition area of the application or directory to which the memory area is assigned. Each access permission flag 201-
A contact A and a contact B are arranged in each of 1 to 201-n. Each end of the contact A and the contact B can be connected via switches SW1 and SW2 arranged in parallel. Then, the access permission state can be set by opening both the contact A and the contact B, and the access disabled state can be set by short-circuiting.

In the IC chip 50, access permission flag controllers 202-1 to 202-n are provided in the same number as the access permission flags (that is, the same number as the total number of applications and directories assigned to the memory area). There is.

When the IC chip 50 is powered on,
The switch SW1 in the figure is open.

In the normal operation, when the access to the corresponding application or directory is permitted by the input of the secret code, the access permission flag controller 202 opens the switch SW2 in the corresponding access permission flag 201. As a result, since both the contact A and the contact B are opened, the access permission flag 20
1 is set to the access permitted state.

To prohibit access, switch S
By short-circuiting W2, the contact A and the contact B are short-circuited regardless of the state of the one switch SW1, and the access permission flag is set to the inaccessible state.

Here, when the power supply of the IC chip 50 (or the mobile terminal 10 incorporating the IC chip 50) is cut off in the access permission state in which the switch SW1 is opened, the power supply voltage is set to the first voltage V. _The voltage detector 203 detects the threshold voltage V _th in the process of decreasing from _cc to 0 [V]. The power supply voltage detector 203 responds to the detection of the threshold voltage V _th by each access permission flag 201-1.
All the switches SW1 in ˜201 to n are short-circuited.
As a result, each of the access permission flags 201-1 to 201-1
Since the contacts A and B in 1 to n are short-circuited regardless of the state of the other switch SW2, all the access permission flags can be simultaneously changed to the inaccessible state.

[Supplement] The present invention has been described in detail with reference to the specific embodiments. However, it is obvious that those skilled in the art can modify or substitute the embodiments without departing from the scope of the present invention.

In the present specification, the case where the IC chip according to the present invention is built in and used in a mobile terminal such as a mobile phone or a PDA has been described, but the gist of the present invention is not limited to this. For example, when the IC chip is used as a stand-alone device or built in other types of equipment, the IC
Even when a chip is used, the effects of the present invention can be similarly obtained.

In short, the present invention has been disclosed in the form of exemplification, and the contents described in this specification should not be construed in a limited manner. To determine the gist of the present invention,
The claims section mentioned at the beginning should be taken into consideration.

[0105]

As described above in detail, according to the present invention,
An excellent information storage medium, an IC chip having a memory area, and an information processing apparatus having an IC chip having a memory area, which can be mounted and used in an information processing device such as a mobile phone or a PDA (Personal Digital Assistant) A memory management method for an information storage medium can be provided.

Further, according to the present invention, an excellent information storage medium having a relatively large capacity memory area and capable of efficiently controlling the access right to each application assigned to this memory area. It is possible to provide an IC chip having a memory area, an information processing device having an IC chip having a memory area, and a memory management method for an information storage medium.

According to the present invention, by introducing a hierarchical structure in the memory area on the IC chip, each application allocated on the memory area is registered in the directory, and the memory area is efficiently managed for each directory. can do.

Further, according to the present invention, a personal identification code is set for each application and each directory,
Depending on the case, the access right can be controlled for each application, or the access right can be controlled for each directory. For example, for all applications included in the directory, it is possible to provide a method of identity verification or authentication processing with the same usability as the current IC chip.

Further, according to the present invention, when the IC chip or the portable terminal incorporating the IC chip is lost, I
Since the access right to the application in the C chip is automatically lost, it is possible to prevent unauthorized use by others.

The identification or authentication processing by the IC chip according to the present invention can be used together with the authentication method by the secret key. As a result, it becomes possible to handle value information such as electronic money with higher security.

[Brief description of drawings]

FIG. 1 is a diagram schematically showing a hardware configuration of a mobile terminal 10 according to an embodiment of the present invention.

FIG. 2 is a diagram conceptually showing a mechanism of wireless communication between a reader / writer and an IC chip 50 based on electromagnetic induction.

FIG. 3 is a diagram in which a system including a reader / writer 101 and an IC chip 50 is regarded as one transformer and modeled.

FIG. 4 is an I built in the mobile terminal 10 according to the present embodiment.
It is a block diagram showing a functional configuration in a C chip 50.

5 is a diagram schematically showing a configuration example of a memory space in a memory 52 shown in FIG.

FIG. 6 is a diagram schematically showing a data structure of a secret code definition area.

FIG. 7 is a flowchart showing a processing procedure for controlling an access right to a directory or an application according to a personal identification code input by a user.

FIG. 8 is a flowchart showing a processing procedure for controlling an access right to a directory or an application by using a secret key instead of a secret code input by a user.

FIG. 9 is a flowchart showing a processing procedure for controlling access right to an application or a directory based on the number of input failures of a personal identification code.

FIG. 10 is a diagram schematically showing a mechanism for automatically making an access-disabled memory area inaccessible by cutting off the power supply.

[Explanation of symbols]

10 ... Mobile terminal 11 ... Controller 12 ... User input device 13 ... Display device 14 ... Wireless interface 15 ... Wired interface 50 ... IC chip 51 ... RF section 52 ... memory 53 ... Collating unit 54 ... Wired interface 55 ... Control unit 100 ... External device 101 ... Reader / Writer 201 ... Access permission flag 202 ... Access permission flag controller 203 ... Power supply voltage

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06F 12/14 320 G06F 9/06 660D (72) Inventor Masahiro Sueyoshi 6-7 Kitashinagawa, Shinagawa-ku, Tokyo No. 35 Sony Corporation (72) Inventor Fumio Kubo No. 7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo F-Terms at Sony Corporation (reference) 2C005 MA33 MB03 MB08 SA06 SA12 SA23 5B017 AA03 BA05 CA15 5B035 AA06 AA13 BB09 BC00 CA11 CA29 CA39 5B076 FB01 5B082 EA12

Claims (40)

[Claims] 1. An information storage medium having a memory area, comprising: a memory allocation unit for allocating the memory area to each application; and an access right for controlling each application allocated to the memory area. A personal identification code setting unit that sets a personal identification code, and an access permission / prohibition state management unit that manages an access permission / prohibition state of each application assigned to the memory area, wherein the access permission / prohibition state management unit is set with a personal identification code. The information storage medium is characterized in that the application is set in the inaccessible state by default, and the corresponding application is set in the access permitted state in response to the coincidence of the personal identification code input by the user. 2. The memory allocating means hierarchically allocates a memory area to an application using a directory, and the personal identification code setting means provides a personal identification code for controlling access right to each application and directory. The access permission / prohibition state management means sets the application and the directory for which the personal identification code is set to the inaccessible state by default, and accesses the corresponding application or directory in response to the coincidence of the personal identification code input by the user. The information storage medium according to claim 1, wherein the information storage medium is set in a permitted state. 3. The access permission / denial state managing means, in response to the password input by the user matching the password set in the directory, permits access to all applications and subdirectories under the directory. 3. The state is set to a state.
The information storage medium described in. 4. A secret key setting means for setting a secret key for authentication with respect to each application allocated to the memory area is further provided, and the access permission / denial state managing means is connected to a predetermined certification authority. The information storage medium according to claim 1, wherein an application in an inaccessible state is set to an access permitted state through mutual authentication using a secret key. 5. A secret key setting means for setting a secret key for authentication with respect to each application and directory assigned to the memory area is further provided, and the access permission / inhibition state managing means is configured to communicate with a predetermined certification authority. The information storage medium according to claim 2, wherein an application or directory in an inaccessible state is set in an access permitted state through mutual authentication using a secret key between them. 6. An access prohibition means is further provided for returning an application in an access permitted state to an inaccessible state in response to the power supply to the IC chip being cut off.
The information storage medium according to claim 1, wherein: 7. The apparatus according to claim 2, further comprising access prohibiting means for returning the application and the directory in the access-permitted state to the inaccessible state in response to the power-off of the IC chip. Information storage medium. 8. An input failure number holding means for holding the number of input failures of the personal identification code for each application assigned to the memory area, and a maximum allowable number of input failures of the personal identification code for each application assigned to the memory area. 3. The maximum allowable input failure frequency setting means for setting, further comprising the access permission / denial state management means for setting an application in which the input failure frequency has reached the maximum allowable input frequency to an inaccessible state. The information storage medium described in. 9. An input failure number holding means for holding the number of input failure times of a personal identification code for each application and directory assigned to the memory area, and a maximum permissible personal identification code for each application and directory assigned to the memory area. Further comprising a maximum allowable input failure frequency setting means for setting the number of input failures, wherein the access permission / denial state management means sets an application or directory whose input failure frequency has reached the maximum allowable input frequency to an inaccessible state. The information storage medium according to claim 1, wherein the information storage medium is a storage medium. 10. An input failure number initialization means for clearing the number of input failures held in the input failure number holding means by an administrator who has undergone mutual authentication processing with a predetermined certificate authority. The information storage medium according to claim 8. 11. An IC chip having a memory area, comprising: a memory allocation means for allocating the memory area to each application; and a secret code for controlling an access right to each application allocated to the memory area. The security code setting means for setting a code, and the access permission / prohibition state management means for controlling the access permission / prohibition state of each application assigned to the memory area are provided. An IC chip having a memory area, characterized in that an application is set in an inaccessible state by default, and in response to a coincidence of a personal identification code input by a user, the corresponding application is set in an access permitted state. 12. The memory allocating means hierarchically allocates a memory area to an application using a directory, and the personal identification code setting means provides a personal identification code for controlling an access right to each application and directory. The access permission / prohibition state management means sets the application and the directory for which the personal identification code is set to the inaccessible state by default, and accesses the corresponding application or directory in response to the coincidence of the personal identification code input by the user. The IC chip having a memory area according to claim 11, wherein the IC chip is set to a permission state. 13. The access permission / denial state management means, in response to the secret code entered by the user matching the secret code set in the directory, permits access to all applications and subdirectories under the directory. The IC chip having the memory area according to claim 12, which is brought into a state. 14. A secret key setting means for setting a secret key for authentication to each application assigned to the memory area is further provided, and the access permission / inhibition state managing means is provided with a predetermined certification authority. 12. The memory area I according to claim 11, wherein an application in an inaccessible state is set to an access permitted state through mutual authentication using a secret key.
C chip. 15. A secret key setting means for setting a secret key for authentication to each application and directory allocated to the memory area is further provided, and the access permission / inhibition state management means is provided with a predetermined certification authority. 13. The IC chip having a memory area according to claim 12, wherein an application or a directory in an inaccessible state is set in an access permitted state through mutual authentication using a secret key between them. 16. The memory according to claim 11, further comprising access prohibiting means for returning an application in an access-permitted state to an inaccessible state in response to a power-off of the IC chip. IC chip with area. 17. The method according to claim 12, further comprising access prohibiting means for returning an application and a directory in an access-permitted state to an inaccessible state in response to a power-off of the IC chip. IC chip with memory area. 18. An input failure number holding means for holding the number of input failures of the personal identification code for each application assigned to the memory area, and a maximum allowable number of input failures of the personal identification code for each application assigned to the memory area. 12. The maximum allowable input failure frequency setting means for setting is further provided, and the access permission / denial state management means sets an application in which the input failure frequency has reached the maximum allowable input frequency to an inaccessible state. An IC chip having the memory area according to claim 1. 19. An input failure number holding means for holding the number of input failure times of a personal identification code for each application and directory assigned to the memory area, and a maximum permissible personal identification code for each application and directory assigned to the memory area. Further comprising a maximum allowable input failure frequency setting means for setting the number of input failures, wherein the access permission / denial state management means sets an application or directory whose input failure frequency has reached the maximum allowable input frequency to an inaccessible state. An IC chip comprising the memory area according to claim 11. 20. An input failure number initialization means for clearing the number of input failures held in the input failure number holding means by an administrator who has undergone mutual authentication processing with a predetermined certificate authority is further provided. An IC chip comprising the memory area according to claim 18. 21. An information processing apparatus having an IC chip having a memory area, comprising: a memory allocation means for allocating the memory area to each application; and an access right to each application allocated to the memory area. The security code setting means for setting a security code for controlling, and the access permission / prohibition state management means for managing the access permission / prohibition state of each application assigned to the memory area are provided. By default, the application to which the code is set is set to the inaccessible state, and the corresponding application is set to the access-permitted state in response to the coincidence of the personal identification code input by the user. An information processing device having an IC chip. 22. The memory allocating means hierarchically allocates a memory area to an application using a directory, and the personal identification code setting means provides a personal identification code for controlling access right to each application and directory. The access permission / prohibition state management means sets the application and the directory for which the personal identification code is set to the inaccessible state by default, and accesses the corresponding application or directory in response to the coincidence of the personal identification code input by the user. The information processing device having an IC chip having a memory area according to claim 21, wherein the information processing device is set to a permission state. 23. The access permission / denial state management means permits access to all applications and sub-directories under the directory in response to the password input by the user matching the password set in the directory. 23. An information processing apparatus having an IC chip having a memory area according to claim 22, which is brought into a state. 24. A secret key setting means for setting a secret key for authentication to each application allocated to the memory area is further provided, and the access permission / inhibition state managing means is for communicating with a predetermined certification authority. 22. The memory area I according to claim 21, wherein an application in an inaccessible state is set to an access permitted state through mutual authentication using a secret key.
An information processing device having a C chip. 25. A secret key setting means for setting a secret key for authentication to each application and directory assigned to the memory area is further provided, and the access permission / inhibition state managing means is configured to communicate with a predetermined certification authority. 23. An information processing apparatus having an IC chip having a memory area according to claim 22, wherein an application or directory in an inaccessible state is set in an access permitted state through mutual authentication using a secret key between them. . 26. The method according to claim 21, further comprising access prohibition means for returning an application in an access-permitted state to an inaccessible state in response to the power supply to the IC chip being cut off. An information processing device having an IC chip having a memory area. 27. The method according to claim 22, further comprising an access prohibition unit for returning the application and the directory in the access permitted state to the inaccessible state in response to the power supply to the IC chip being cut off. Information processing apparatus having an IC chip including the memory area. 28. Input failure number holding means for holding the number of input failures of the personal identification code for each application assigned to the memory area, and the maximum allowable number of input failures of the personal identification code for each application assigned to the memory area. 22. The maximum allowable input failure frequency setting means for setting, further comprising the access permission / denial state management means for setting an application in which the input failure frequency has reached the maximum allowable input frequency to an inaccessible state. An information processing apparatus having an IC chip having the memory area according to claim 1. 29. An input failure number holding means for holding the number of input failure times of the secret code for each application and directory assigned to the memory area, and the maximum permissible secret code for each application and directory assigned to the memory area. Further comprising a maximum allowable input failure frequency setting means for setting the number of input failures, wherein the access permission / denial state management means sets an application or directory whose input failure frequency has reached the maximum allowable input frequency to an inaccessible state. An information processing apparatus having an IC chip having the memory area according to claim 21. 30. An input failure number initialization means for clearing the input failure number held in the input failure number holding means by an administrator who has undergone mutual authentication processing with a predetermined certification authority is further provided. An information processing device comprising an IC chip including the memory area according to claim 28. 31. A memory management method for an information storage device, comprising: a memory allocation step of allocating the memory area to each application; and a secret code for controlling an access right to each application allocated to the memory area. A personal identification code setting step of setting a code, and an access permission / prohibition state management step of managing an access permission / prohibition state of each application assigned to the memory area are provided. In the access permission / prohibition state management step, a personal identification code is set. A memory management method for an information storage device, characterized in that an application is set in an inaccessible state by default, and in response to a coincidence of a personal identification code input by a user, the corresponding application is set in an access permitted state. 32. In the memory allocating step, memory areas are hierarchically allocated to applications using directories, and in the personal identification code setting step, a personal identification code for controlling access right is assigned to each application and directory. In the access permission / denial state managing step, the application and the directory in which the personal identification code is set are set in the inaccessible state by default, and the corresponding application or directory is accessed in response to the coincidence of the personal identification code input by the user. 32. The memory management method for an information storage device according to claim 31, wherein the memory management method is set to a permitted state. 33. In the access permission / denial state managing step, in response to the secret code entered by the user matching the secret code set in the directory, access permission is granted to all applications and subdirectories under the directory. 33. The memory management method for an information storage device according to claim 32, wherein the method is performed. 34. A secret key setting step of setting a secret key for authentication to each application allocated to the memory area, further comprising: 32. The memory management method for an information storage device according to claim 31, wherein an application in an inaccessible state is set to an access permitted state through mutual authentication using a secret key. 35. A secret key setting step of setting a secret key for authentication to each application and directory allocated to the memory area, further comprising: 33. The memory management method for an information storage device according to claim 32, wherein an application or directory in an inaccessible state is set to an access permitted state through mutual authentication using a secret key between them. 36. The method according to claim 31, further comprising an access prohibition step of returning an application in an access permitted state to an inaccessible state in response to the power supply to the information storage device being cut off. Memory management method for information storage device. 37. The method according to claim 3, further comprising an access prohibition step of returning an application and a directory in an access permitted state to an inaccessible state in response to the power supply to the information storage device being cut off.
2. A memory management method for an information storage device according to 2. 38. An input failure number holding step of holding the number of input failures of the personal identification code for each application assigned to the memory area, and a maximum allowable number of input failures of the personal identification code for each application assigned to the memory area. 32. A maximum allowable input failure frequency setting step for setting, wherein in the access permission / denial state management step, an application whose input failure frequency has reached the maximum allowable input frequency is set to an inaccessible state.
A method for managing memory of an information storage device according to claim 1. 39. An input failure frequency holding step of retaining the input failure frequency of the security code for each application and directory assigned to the memory area, and the maximum allowable security code for each application and the directory assigned to the memory area. Further comprising a maximum allowable input failure frequency setting step for setting the number of input failure times, wherein in the access permission / denial state management step, an application or directory whose input failure frequency has reached the maximum allowable input frequency is set to an inaccessible state. 33. The memory management method for an information storage device according to claim 32. 40. An input failure frequency initialization step for clearing the input failure frequency held in the input failure frequency holding step by an administrator who has undergone mutual authentication processing with a predetermined certificate authority is further provided. The memory management method for an information storage device according to claim 38 or 39.