JP4207403B2 - Information storage medium, IC chip having memory area, information processing apparatus having IC chip having memory area, and memory management method for information storage medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information storage medium having a relatively large memory area, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, a memory management method for the information storage medium, Information storage medium used in information processing equipment such as a telephone or a PDA (Personal Digital Assistant), an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, and a memory of the information storage medium It relates to the management method.
[0002]
More specifically, the present invention relates to an information storage medium in which one or more applications are allocated on a memory area, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, and a memory of the information storage medium The present invention relates to a management method, and in particular, an information storage medium for controlling access rights to each application assigned to a memory area, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, and an information storage medium The present invention relates to a memory management method.
[0003]
[Prior art]
Conventionally, various devices using a personal identification number and password for identity verification and authentication processing have been devised and put into practical use. (Here, “password” generally refers to a character string represented by a combination of numbers from 0 to 9, and “password” refers to a general character such as an alphabet in addition to numbers. (In the present specification, a password and a password are also referred to as a “password”.)
[0004]
For example, when using a cash card in a bank or other financial institution, the cash dispenser or the like prompts the user to enter a personal identification number or password as a means of personal authentication, and the user correctly After confirming that the PIN or password has been entered, the withdrawal operation is performed from a cash dispenser or the like.
[0005]
In addition to this, there are various application examples related to the security code such as entering the reef code of a safety box installed in the accommodation facility such as a hotel, entering the password when logging into the computer, or concealing information on the information terminal. It is.
[0006]
Conventionally, in a storage medium such as a magnetic stripe arranged on one bank cash card, only a storage area that can be used only for the bank is provided. Therefore, the input of a password or password as described above is only an access to this single storage area. Therefore, the user needs to prepare a card for each purpose or application and use a plurality of cards properly.
[0007]
Recently, non-contact type IC cards have become widespread. For example, an IC card reader / writer installed at a cash dispenser, an entrance / exit of a concert hall, a ticket gate of a station, or the like can access an IC card held by a user without contact. Here, the user inputs the personal identification number or password to the IC card reader side, and collates the entered personal identification number or password with the personal identification number or password stored on the IC card. Identity verification or authentication processing is performed between the card reader / writer. When the identity verification or authentication process is successful, for example, an application stored in the IC card can be used. Here, examples of applications held by the IC card include value information such as electronic money and electronic tickets.
[0008]
In recent years, IC cards having a relatively large storage space have appeared and spread in conjunction with improvements in miniaturization technology. Since a conventional cash card or the like has only a single storage area, that is, a single application, it is necessary to carry a plurality of cards according to each use or purpose. On the other hand, according to such an IC card with a large-capacity memory, a plurality of applications can be stored simultaneously, so that one IC card can be used for a plurality of purposes. For example, two or more applications such as electronic money for making electronic payments and electronic tickets for entering a specific concert venue are stored on a single IC card. It can be applied to various uses.
[0009]
Further, by mounting such an IC card with a large-capacity memory function (or an IC chip in which the IC card is a semiconductor chip) on a mobile terminal such as a mobile phone, the user possesses the mobile terminal. By doing so, electronic value information can be exchanged with the outside including electronic payment.
[0010]
Since conventional cash cards have only a single use (as described above), the magnetic stripe on the cash card could manage the security of the entire card by having a single PIN or password.
[0011]
On the other hand, in an IC card with a memory function capable of holding a plurality of applications and a portable terminal equipped with such an IC card (or IC chip), it is necessary to control access rights for each application. This is because, if access to all applications on the IC card is released with only one personal identification code, the security at the time of loss or theft is significantly reduced.
[0012]
In addition, when the memory area mounted on the IC card is expanded as the manufacturing technology advances, a large number of applications can be allocated to the memory area on the IC card. However, if each application is simply allocated on the memory area, the arrangement of the applications becomes complicated for the user, and it becomes difficult for the user to classify and organize the applications on the memory area.
[0013]
In addition, if the access rights are controlled using individual passwords, etc., if you want to use a number of related applications in a series of transactions, you will be required to enter passwords sequentially within the same transaction. This intervenes and the operability of the equipment is significantly reduced.
[0014]
[Problems to be solved by the invention]
An object of the present invention is to provide an excellent information storage medium having a relatively large memory area, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, and a memory management method for the information storage medium Is to provide.
[0015]
A further object of the present invention is to provide an excellent information storage medium, an IC chip having a memory area, and a memory area that can be used by being mounted on an information processing device such as a mobile phone or a PDA (Personal Digital Assistant). Another object of the present invention is to provide an information processing apparatus having an IC chip and a memory management method for an information storage medium.
[0016]
Still another object of the present invention is to provide an excellent information storage medium, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, to which one or more applications can be allocated on the memory area, An object of the present invention is to provide a memory management method for an information storage medium.
[0017]
A further object of the present invention is to have an excellent information storage medium, an IC chip having a memory area, and an IC chip having a memory area, which can control access rights to each application assigned to the memory area. An object of the present invention is to provide a memory management method for an information processing apparatus and an information storage medium.
[0018]
A further object of the present invention is to have an excellent information storage medium, an IC chip having a memory area, and an IC chip having a memory area, which can efficiently manage a plurality of applications assigned to the memory area. An object of the present invention is to provide a memory management method for an information processing apparatus and an information storage medium.
[0019]
[Means and Actions for Solving the Problems]
The present invention has been made in view of the above problems, and is an information storage medium, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, or a memory management method for an information storage medium Because
Memory allocation means or step for allocating the memory area to each application;
A code setting means or a step for setting a code for controlling the access right for each application assigned to the memory area;
Access status management means or step for managing the access status of each application assigned to the memory area; and
With
The access permission state management means or step sets an application in which a password is set to an inaccessible state by default, and sets the corresponding application to an access permission state in response to a match of the password entered by the user. ,
An information storage medium, an IC chip having a memory area, an information processing apparatus having an IC chip having a memory area, or a memory management method for an information storage medium.
[0020]
Here, a cartridge having a large credit card size by mounting an antenna on an IC chip is generally called an “IC card”. The IC chip is used by being incorporated in a portable terminal such as a cellular phone or a PDA, or other information processing apparatus. In some cases, an IC card is inserted into an information processing apparatus. As a usage form of the IC chip or the IC card, there is a function related to value information such as prepaid electronic money or electronic ticket. Hereinafter, the function provided by the IC chip or the IC card is also referred to as “application”.
[0021]
The memory allocation means or step can manage the memory space of the IC card in a hierarchical structure by hierarchically allocating memory areas to applications using directories. Accordingly, by putting related applications such as a plurality of applications used in a series of transactions in the same directory, the user can efficiently classify and organize the applications.
[0022]
The external device can access the IC chip via the wireless interface by including a card reader. The right to access a memory area such as an IC chip is controlled by matching the passwords. It is also possible to allow access to the memory area by inputting a personal identification code on an information processing device incorporating an IC chip and releasing the lock and wirelessly connecting to an external device. Alternatively, after establishing a wireless connection between the IC chip in the information processing machine and the external device, the access right may be controlled based on a password entered on the external device.
[0023]
In such a case, the password setting means or step may set a password for controlling access rights for each application and directory. Further, the access permission state management means or step sets an application and a directory in which a secret code is set to an inaccessible state by default, and selects a corresponding application or directory in response to a match of a secret code input by a user. The access permission state can be set.
[0024]
In addition, the access permission state management means or step, in response to the fact that the password entered by the user matches the password set in the directory, allows access to all applications and subdirectories under the directory. You may make it.
[0025]
Therefore, according to the IC card and the IC card memory management method according to the present invention, a hierarchical structure is introduced in the memory space, and by assigning a directory to each application, the application can be efficiently managed in units of directories. Can do.
[0026]
For example, by registering closely related applications such as applications used for a series of transactions in the same directory (and registering closely related subdirectories in the same directory), The arrangement of the directory is orderly, and the classification and organization of applications become efficient.
[0027]
According to the information storage medium, the IC chip having the memory area, the information processing apparatus having the IC chip having the memory area, and the memory management method for the information storage medium according to the present invention, the personal identification code In addition to setting a password, a password can be set for a directory, so that the access right can be efficiently controlled in units of directories in addition to the access right being controlled in units of applications.
[0028]
For example, by inputting a personal identification code corresponding to a certain directory, it is possible to give access rights to all applications (and subdirectories) in the directory through verification / authentication processing. Therefore, for example, the access right of all applications used in a series of transactions can be obtained only by inputting the password to the corresponding directory once, so that the access control becomes efficient and the usability of the device is improved. Will improve.
[0029]
The IC card or the IC card memory management method according to the present invention may further comprise a secret key setting means or step for setting a secret key for authentication for each application and directory assigned to the memory area. Good. In such a case, the access enable / disable state management means or step can set an application or directory in an inaccessible state to an access permission state through mutual authentication using a secret key with a predetermined certificate authority. .
[0030]
Further, it may further comprise access prohibiting means or a step for returning the application and the directory in the access permitted state to the inaccessible state in response to the power supply of the IC card being cut off.
[0031]
If the IC card is lost or stolen, the application or directory may be used without permission or the user may be damaged. According to the present invention, all applications and directories are automatically prohibited from being accessed in response to the power-off of the IC card. It is possible to prevent unauthorized use across users.
[0032]
Also, an input failure number holding means or step for holding the number of input failures of the code for each application and directory assigned to the memory area, and a maximum allowable input of the code for each application and directory assigned to the memory area It may further comprise a maximum allowable input failure frequency setting means or step for setting the number of failures. In such a case, the access enable / disable state management means or step can set an application or directory in which the number of input failures has reached the maximum allowable input count to an inaccessible state.
[0033]
Further, the system may further comprise an input failure frequency initialization unit or step for clearing the input failure frequency stored in the input failure frequency storage unit or step by an administrator who has undergone mutual authentication processing with a predetermined certificate authority. .
[0034]
Other objects, features, and advantages of the present invention will become apparent from a more detailed description based on embodiments of the present invention described later and the accompanying drawings.
[0035]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0036]
FIG. 1 schematically shows a hardware configuration of a mobile terminal 10 according to an embodiment of the present invention. The mobile terminal 10 is an information processing terminal that is configured to be small and lightweight, such as a mobile phone or a PDA (Personal Digital Assistant), and can be carried by the user at all times.
[0037]
The illustrated mobile terminal 10 is driven by power supply by wireless communication with an external device and is equipped with an IC chip 50 having a memory function, and a controller 11 that comprehensively controls the operation in the mobile terminal 10. , A user input device 12 consisting of keys / buttons and the like for the user to input various character strings and commands including a personal identification number and password, and a liquid crystal display (LCD) for displaying processing results on the screen ) And the like. Of course, in order to realize the original function as the mobile terminal 10, peripheral devices and circuit components other than those illustrated may be provided.
[0038]
Here, a cartridge having a large credit card size by mounting an antenna on an IC chip is generally called an “IC card”.
[0039]
Moreover, the form in which the portable terminal 10 is equipped with the IC chip 50 is not unique. For example, an IC in the form of a semiconductor chip may be built in together with a wireless antenna, or an IC chip configured as a card, that is, an IC card, is inserted into a card slot or the like provided in the mobile terminal 10. You may make it use. As a usage form of the IC chip or the IC card, there is a function related to value information such as prepaid electronic money or electronic ticket. Hereinafter, the function provided by the IC chip or the IC card is also referred to as “application”.
[0040]
The controller 11 is configured by integrating a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. The controller 11 controls various operations in the portable terminal 10 by executing program codes stored on the ROM.
[0041]
The IC chip 50 includes a wireless interface 14 for wireless connection with the external device 100 and a wired interface 15 for wired connection with the controller 11 on the mobile terminal 10 side. For the wireless interface 14, for example, a contact interface standard defined in ISO 7816 or a wireless interface standard defined in ISO 14443 can be used. The connection method between the IC chip 50 and the external device 100 will be described later.
[0042]
The IC chip 50 is applied with, for example, a non-contact IC chip technology, and is driven by radio waves from the external device 100 received via the wireless interface 14. In other words, when the user does not hold the portable terminal 10 over the external device 100, the radio wave from the external device 100 does not reach and the operation of the IC chip 50 is reduced. In the present embodiment, the right to access the IC chip 50 is lost in response to the interruption of radio waves (described later).
[0043]
The IC chip 50 according to the present embodiment includes a relatively large capacity memory area. Such a memory area is provided by a miniaturization technique or the like. The memory area is composed of a semiconductor memory, a magnetic stripe, or other readable / writable storage media. One or more applications are allocated on this memory area. Examples of applications mentioned here include value information including electronic money and electronic tickets.
[0044]
In this embodiment, a hierarchical structure is introduced in the memory space in the IC chip 50, and by assigning a directory to each application, the application can be efficiently managed in units of directories. Details will be given later.
[0045]
In order to protect this type of value information from unauthorized use or theft, the access right to the memory area is controlled on a per-application basis by setting a password such as a password or password for each application. For example, the security code input via the wireless interface 14 or the wired interface 15 is compared with the security code of each application, and an access right for the matching application is given (described later).
[0046]
Further, in the present embodiment, a hierarchical structure is introduced in the memory space, and a directory is assigned to each application. In addition to setting a password for each application, a password can also be set for a directory. it can. Therefore, in addition to being able to control access rights in units of applications, it is possible to efficiently control access rights in units of directories, but details regarding control of access rights will be given later.
[0047]
The external device 100 is a device that uses an application assigned to the memory area of the IC chip 50. For example, a reader / writer 101 for wireless connection with the IC chip 50 is applied by applying a non-contact IC chip technology. Contains. Of course, the external device 100 is also equipped with circuit components and peripheral devices that perform specific business operation processing, a display device for performing interactive input with the user, and an input device (both not shown). ing.
[0048]
The external device 100 is an electronic device such as a device using electronic money such as an ATM (Automatic Teller Machine) terminal in a bank or a device using an electronic ticket such as a gate of a concert hall, a station or a ticket gate of an airport. It corresponds to a device for processing value information, and further to a device for performing identity verification or authentication processing, such as a safety box of an accommodation facility.
[0049]
According to the system configuration as shown in FIG. 1, the user inputs the personal identification code from the user input device 12 on the portable terminal 10 and releases the lock. In some cases, the value input by the user is confirmed on the display device 13, and the code code input to the IC chip 50 built in the mobile terminal 10 is transmitted via the wired interface 15. In the IC chip 50, the password set in each application or directory in the memory area is compared with the password entered by the user. The user is then given access rights to the memory area assigned to the matching application or directory. Alternatively, after establishing a wireless connection between the IC chip 50 in the mobile terminal 10 and the external device 100, the access right to the application may be controlled based on a password entered on the external device 100. .
[0050]
Wireless communication between the reader / writer 101 and the IC chip 50 is realized based on the principle of electromagnetic induction, for example. FIG. 2 conceptually illustrates a wireless communication mechanism between the reader / writer 101 and the IC chip 50 based on electromagnetic induction. The reader / writer 101 has an antenna L formed of a loop coil. _RW This antenna L _RW Current I _RW To generate a magnetic field around it. On the other hand, on the IC chip 50 side, the loop coil L is electrically disposed around the IC chip 50. _c Is formed. Loop coil L on the IC chip 50 side _c At the end is the loop antenna L on the reader / writer 101 side. _c An induced voltage is generated by the magnetic field generated by the loop coil L _c The signal is input to the terminal of the IC chip 50 connected to the end.
[0051]
Antenna L on the reader / writer 101 side _RW And loop coil L on the IC chip 50 side _c The degree of coupling varies depending on the positional relationship with each other, but the system can be regarded as forming one transformer, and can be modeled as shown in FIG.
[0052]
The reader / writer 101 has an antenna L _RW Current I _RW By modulating the loop coil L on the IC chip _c Induced voltage V _O The reader / writer 101 can transmit data to the IC chip 50 using the modulation. The transmission data mentioned here is provided by a code such as a code number or a password input by the user on the external device 100 side or an application such as electronic money or an electronic ticket for obtaining access rights to the application or directory. Value information is included.
[0053]
Further, the IC chip 50 determines whether or not the loop coil L depends on the data to be returned to the reader / writer 101. _c It has a function to change the load between the terminals (Load Switching). Loop coil L _c When the load between the two terminals fluctuates, the impedance between the antenna terminals changes on the reader / writer 101 side, and the antenna L _RW Passing current I _RW And voltage V _RW Appears as fluctuations. By demodulating this fluctuation, the reader / writer 101 can receive the return data of the IC chip 50. The data received by the external device 100 from the IC chip 50 includes value information provided by applications such as electronic money and electronic tickets.
[0054]
In the present embodiment, a hierarchical structure using a directory is introduced to the storage area in the IC chip 50 built in the mobile terminal 10. Each application assigned to the memory area can be registered in a directory of a desired hierarchy. For example, by registering closely related applications such as applications used for a series of transactions in the same directory (and registering closely related subdirectories in the same directory), The arrangement of the directory is orderly, and the classification and organization of the application is improved for the user.
[0055]
In addition, in order to hierarchically control access rights, a password can be set for each directory as well as a password for each application. For example, by inputting a personal identification code corresponding to a certain directory, it is possible to give access rights to all applications (and subdirectories) in the directory through verification / authentication processing. Therefore, for example, the access right of all applications used in a series of transactions can be obtained only by inputting the password to the corresponding directory once, so that the access control becomes efficient and the usability of the device is improved. Will improve.
[0056]
FIG. 4 illustrates a functional configuration in the IC chip 50 built in the mobile terminal 10 according to the present embodiment.
[0057]
As shown in the figure, the IC chip 50 includes an RF unit 51 to which an antenna that performs wireless communication with the reader / writer 101 on the external device 100 side, and purchased ticket information or bank depositor information (electronic money), for example. ), Etc., a memory 52 having a storage area allocated for each application, a collation unit 53 for comparing and collating passwords, a wired interface 54, and a control unit 55 for comprehensively controlling these components. .
[0058]
The control unit 55 is configured by integrating a central processing unit (CPU), a read only memory (ROM), a random access memory (RAM), and the like. The control unit 55 controls the operation in the IC chip 50 by executing the program code stored in the ROM. Further, the control unit 55 can communicate with the controller 11 on the mobile terminal 10 side via the wired interface 54.
[0059]
The memory 52 is used for allocating storage areas for one or more applications. The memory 52 may be a readable / writable storage medium such as a magnetic stripe in addition to a semiconductor memory, and is not limited to a specific device.
[0060]
In the present embodiment, a hierarchical structure using directories is introduced into the storage space of the memory 52. That is, each application assigned to the memory area can be registered in a directory of a desired hierarchy. For example, applications that are closely related such as an application that is used for a series of transactions can be registered in the same directory (further, subdirectories that are closely related are registered in the same directory).
[0061]
The application and directory allocated in the memory 52 have a code definition area. Accordingly, a password can be set for each application or for each directory. Further, the access right to the memory 52 can be performed in units of applications and in units of directories. A detailed description of the hierarchical structure and hierarchical access right control in the memory 52 and the code code definition area will be given later.
[0062]
The verification unit 53 is a wired interface. - The security code sent through the interface 54 is checked against the security code set in the memory area assigned to each application or directory, and access to the matching memory area is permitted. The memory area permitted to be accessed can be read and written from the reader / writer 101 via the RF unit 51.
[0063]
In short, the personal identification code sent through the wired interface 54 is a personal identification code input by the user on the portable terminal 10. That is, according to the present embodiment, the user receives the collation process by inputting the password code on his / her portable terminal 10 not familiar with the operation, but on the user's own familiar mobile terminal 10. be able to.
[0064]
FIG. 5 schematically shows a configuration example of the memory space in the memory 52 shown in FIG. In the example shown in the figure, the directory 1 corresponding to the root directory includes an application 1A and an application 1B, and a directory 2 corresponding to a subdirectory.
[0065]
Further, under the directory 2, an application 2A, a directory 3-1 corresponding to a subdirectory, and a directory 3-2 are included.
[0066]
In addition, the directory 3-1 and lower include the application 3-1A and the application 3-1B, and the directory 3-2 and lower include the application 3-2A, the application 3-2B, and the application 3-2C. ing.
[0067]
As shown in FIG. 5, each application and directory allocated on the memory 52 is provided with a code definition area. FIG. 6 schematically shows the data structure of the security code definition area. As shown in the figure, the password code definition area is composed of a password number area, an input failure count storage area, a maximum allowable input failure count setting area, a password use selection area, and an access permission flag. .
[0068]
When accessing each application or directory, the IC chip 50 prompts the user to input a password. For example, by issuing a warning sound on the mobile terminal 10 or displaying a dialog on the display device 13, the user is prompted to input a personal identification code.
[0069]
Only when the passwords entered by the user match, an access permission flag is set in the password code definition area of the corresponding application or directory, and access to the password is permitted.
[0070]
The access permission flag is a flag for indicating whether or not the corresponding application or directory is accessible, and the application or directory for which the access permission flag is set is in an access permission state. The access permission flag of the application or directory for which the password is set is inaccessible by default, and after the password verification process and the authentication process using the secret key are successful, the access permission flag is set and the access permission flag is set. Turns into a permission state. If the access permission flag is set continuously, the user may suffer damage due to unauthorized use / unauthorized use of the application or directory when the IC chip 50 or the portable terminal 10 is lost or stolen. The IC chip 50 according to the present embodiment includes a mechanism that automatically makes the access permission state inaccessible, and details thereof will be described later.
[0071]
In addition, whenever an incorrect password is input, the record in the input failure frequency storage area is updated. Then, when the input failure count reaches the maximum allowable input failure count set in the maximum allowable input failure count setting area, access to the corresponding application or directory is prohibited.
[0072]
Generally, the number of input failures should be cleared once input is successful. In this way, it is possible to prevent a malicious user from investigating the secret code. Further, when the user mistakenly reaches the maximum allowable input failure count and fails to input the password, only the administrator who manages the IC chip 50 may clear the input failure count storage area. For the authentication of the manager, for example, authentication using a secret key as described later can be used.
[0073]
In addition, when a password is input to a directory and access is permitted, it is possible to permit access to all lower-level applications and directories. For example, like the directory 2 shown in FIG. 5, a personal identification code for the directory itself and a personal identification code for the lower directory are individually arranged to control the access rights of only the applications belonging to the directory 2. It is also possible to set a code and a password that controls the access rights of only the directories 3-1 and 3-2 lower than the directory 2.
[0074]
In addition, it is possible to select whether or not to set a security code in the target area by a security code use selection area in each security code definition area. That is, if a password is set, access to the corresponding application or directory is permitted upon successful authentication with the password. On the other hand, an application or directory in which a password is not set does not require a password verification process, and can be freely accessed.
[0075]
A secret key can be set for each application and directory separately from the password. Therefore, it can be used as an authentication means separately from the personal authentication by inputting the personal identification code.
[0076]
FIG. 7 shows a processing procedure for controlling the access right to the directory or the application in the form of a flowchart according to the password entered by the user.
[0077]
When the personal identification code is input from the user (step S1), the collation unit 53 accesses the personal identification code definition area of the application or directory in the memory space and determines whether the personal identification code matches (step S2).
[0078]
If the password code of the application or directory matches the password code entered by the user, an access permission flag in the password code definition area is set to make it accessible (step S3).
[0079]
For example, the password entered by the user on the user input device 12 of the portable terminal 10 can be sent to the IC chip 50 via the wired interface 54. Alternatively, the IC chip 50 can be held over the reader / writer 101 of the external device 100 and input using the user interface of the external device 100 can be transmitted to the IC chip via the wireless interface, that is, the RF unit 51.
[0080]
FIG. 8 is a flowchart showing a processing procedure for controlling the access right to the directory or application using the secret key, not the password entered by the user.
[0081]
First, authentication processing is performed with a predetermined certificate authority using a secret key set for a desired directory or application (step S11).
[0082]
If the authentication process is successful (step S12), an access permission flag in the code code definition area is set to enable access (step S13).
[0083]
Of course, the access right control of the application and the directory is performed by using both the collation process with the password entered by the user as shown in FIG. 7 and the authentication process using the secret key shown in FIG. It may be. In such a case, an application or directory can be protected from unauthorized use or unauthorized use at a higher security level.
[0084]
When the access right to an application or directory is controlled by using a password as shown in FIG. 7, a malicious user may breach the security code by scrutinizing the password (particularly, particularly). When using a PIN code with a small number of digits). For this reason, in this embodiment, in the PIN code definition area, the maximum allowable number of inputs is set, and the application or directory in which the number of input failures reaches the maximum allowable number of inputs is set to an inaccessible state. I try to do it.
[0085]
FIG. 9 is a flowchart showing a processing procedure for controlling access rights to an application or a directory based on the number of input failures of the password.
[0086]
When the personal identification code is input from the user (step S21), the collation unit 53 accesses the personal identification code definition area of the application or directory in the memory space and determines whether the personal identification code matches (step S22).
[0087]
If the password of the application or directory matches the password entered by the user, an access permission flag in the password code definition area is set to make the corresponding application or directory accessible (step S23). .
[0088]
On the other hand, if the password code of the application or directory does not match the password code entered by the user, the number of input failures in the password code definition area is updated (step S24).
[0089]
In step S25, it is determined whether or not the updated number of input failures has reached the maximum allowable number of inputs set in the code definition area (step S25).
[0090]
If the number of input failures has reached the maximum allowable number of inputs, the setting of the access permission flag in the PIN code definition area is canceled and the corresponding application or directory is made accessible (step S26). ).
[0091]
As a result, it is possible to crack down on an action in which a malicious user examines a personal identification code.
[0092]
Further, when the user mistakenly reaches the maximum allowable input failure count and fails to input the password, only the administrator who manages the IC chip 50 may clear the input failure count storage area. For the authentication of the administrator, for example, authentication using a secret key can be used.
[0093]
For example, if a conventional cash card is lost, the deposit itself is stored on the card. During ~ Therefore, the card user can prevent damage by contacting the handling bank and stopping the transaction of the bank deposit itself. On the other hand, in the case of an IC chip having a memory area, valuable information such as electronic money and electronic tickets is stored in a semiconductor memory or the like in the IC chip, so that it is picked up by a malicious person. If this happens, there is a high possibility of being abused and incurring economic losses.
[0094]
Therefore, in the present embodiment, in response to the power supply of the IC chip 50 (or the mobile terminal 10 incorporating the IC chip 50) being turned off, all access permission flags in each code code definition area are cleared. Automatically disable all applications and directories. As a result, when the IC chip 50 is lost, it can be prevented from being illegally used by other malicious users in the access-permitted state.
[0095]
FIG. 10 schematically shows a mechanism for automatically making the memory area in an access-permitted state inaccessible by turning off the power. The illustrated mechanism can be realized by configuring the storage area with a storage medium of a type (volatile type) in which stored contents are held by power supply, such as a semiconductor memory.
[0096]
As shown in FIG. 6, the access permission flags 201-1 to 201-n are provided in each code code definition area of the application or directory to which the memory area is allocated. A contact A and a contact B are disposed in each of the access permission flags 201-1 to 201-n. Each end of the contact A and the contact B can be connected via switches SW1 and SW2 arranged in parallel. Then, it is possible to set an access permission state by opening both the contact A and the contact B, and to set an access impossible state by short-circuiting.
[0097]
In the IC chip 50, the access permission flag controllers 202-1 to 202-n are provided in the same number as the access permission flags (that is, the same number as the total number of applications and directories allocated to the memory area).
[0098]
When the power supply of the IC chip 50 is on, the switch SW1 in FIG.
[0099]
In the normal operation, when access to the corresponding application or directory is permitted by inputting the personal identification code, the switch SW2 in the corresponding access permission flag 201 is opened by the access permission flag controller 202. As a result, since both the contact A and the contact B are opened, the access permission flag 201 is set to the access permission state.
[0100]
When the access is prohibited, the switch SW2 is short-circuited, so that the contact A and the contact B are short-circuited regardless of the state of one of the switches SW1, and the access permission flag is set to the inaccessible state.
[0101]
Here, when the power of the IC chip 50 (or the portable terminal 10 incorporating the IC chip 50) is cut off in the access permission state in which the switch SW1 is opened, the power supply voltage is changed to the first voltage V. _cc Threshold voltage V on the way to 0 [V] _th Is detected by the voltage detector 203. The power supply voltage detector 203 has a threshold voltage V _th In response to the detection, all the switches SW1 in the access permission flags 201-1 to 201-n are short-circuited. As a result, the contacts A and B in each of the access permission flags 201-1 to 201-n are short-circuited regardless of the state of the other switch SW2, so that all the access permission flags are simultaneously shifted to the inaccessible state. be able to.
[0102]
[Supplement]
The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present invention.
[0103]
In the present specification, the case where the IC chip according to the present invention is used in a portable terminal such as a mobile phone or a PDA has been described as an example, but the gist of the present invention is not limited to this. For example, when the IC chip is used stand-alone or when the IC chip is used by being incorporated in another type of device, the effects of the present invention can be obtained.
[0104]
In short, the present invention has been disclosed in the form of exemplification, and the description of the present specification should not be interpreted in a limited manner. In order to determine the gist of the present invention, the claims section described at the beginning should be considered.
[0105]
【The invention's effect】
As described above in detail, according to the present invention, an excellent information storage medium that can be used in an information processing device such as a mobile phone or a PDA (Personal Digital Assistant), and an IC chip having a memory area An information processing apparatus having an IC chip having a memory area and a memory management method for an information storage medium can be provided.
[0106]
In addition, according to the present invention, an excellent information storage medium and memory area that have a relatively large memory area and can efficiently control the access right to each application assigned to the memory area. , An information processing apparatus having an IC chip having a memory area, and a memory management method for an information storage medium can be provided.
[0107]
According to the present invention, by introducing a hierarchical structure in the memory area on the IC chip, each application allocated on the memory area can be registered in the directory, and the memory area can be efficiently managed for each directory. it can.
[0108]
In addition, according to the present invention, a security code can be set for each application and for each directory, and according to circumstances, the access right can be controlled in units of applications, or the access right can be controlled in units of directories. . For example, it is possible to provide a method of identity verification or authentication processing having the same usability as the current IC chip for all applications included in the directory.
[0109]
Further, according to the present invention, when the IC chip or the portable terminal incorporating the IC chip is lost, the access right to the application in the IC chip is automatically lost, so that it is illegally used by others. Can be prevented.
[0110]
The identity verification or authentication process by the IC chip according to the present invention can be used together with the authentication method using the secret key. As a result, value information such as electronic money can be handled with higher security.
[Brief description of the drawings]
FIG. 1 is a diagram schematically showing a hardware configuration of a mobile terminal 10 according to an embodiment of the present invention.
FIG. 2 is a diagram conceptually illustrating a mechanism of wireless communication between an IC chip 50 and a reader / writer based on electromagnetic induction.
FIG. 3 is a diagram modeling a system including a reader / writer 101 and an IC chip 50 as one transformer.
FIG. 4 is a block diagram showing a functional configuration in an IC chip 50 built in the mobile terminal 10 according to the present embodiment.
5 is a diagram schematically showing a configuration example of a memory space in the memory 52 shown in FIG. 4; FIG.
FIG. 6 is a diagram schematically showing a data structure of a password code definition area.
FIG. 7 is a flowchart showing a processing procedure for controlling access rights to a directory or an application in accordance with a password entered by a user.
FIG. 8 is a flowchart showing a processing procedure for controlling an access right to a directory or an application using a secret key, not a password entered by a user.
FIG. 9 is a flowchart showing a processing procedure for controlling the access right to an application or a directory according to the number of input failures of the password.
FIG. 10 is a diagram schematically showing a mechanism for automatically making a memory area in an access-permitted state inaccessible by shutting off the power supply.
[Explanation of symbols]
10 ... Mobile terminal
11 ... Controller
12 ... User input device
13 ... Display device
14 ... Wireless interface
15 ... Wired interface
50 ... IC chip
51 ... RF section
52 ... Memory
53. Verification unit
54 ... Wired interface
55 ... Control unit
100 ... External device
101 ... Reader / Writer
201 ... access permission flag
202 ... access permission flag controller
203 ... Power supply voltage device

Claims (15)

An integrated circuit device mounted on an information processing device,
A wireless interface for wireless communication with an external device;
A wired interface for wired communication with the information processing apparatus;
A memory area,
Memory allocation means for allocating the memory area to each application using a directory including one or more applications or one or more subdirectories under one directory ;
A code setting means for setting a code for controlling an access right through the wireless interface for each application and directory assigned to the memory area;
An access enable / disable state managing means for managing an access enable / disable state of each application and directory assigned to the memory area;
The access enable / disable state management means, by default, disables access to the application and directory in which the code is set from the wireless interface , and selects the corresponding application or directory in response to the match of the code entered by the user. Set the access permission state from the wireless interface ,
An integrated circuit device. In response to the fact that the password entered by the user matches the password set in the directory, the access permission / prohibition state management means sets all applications and subdirectories under the directory to an access-permitted state.
The integrated circuit device according to claim 1. A secret key setting means for setting a secret key for authentication for each application and directory assigned to the memory area;
The access permission / prohibition state management means sets an application or directory in an inaccessible state to an access permission state through mutual authentication using a secret key with a predetermined certificate authority.
The integrated circuit device according to claim 1. An access prohibiting means for returning the application and the directory in the access permission state to the inaccessible state in response to the power supply to the device being cut off;
The integrated circuit device according to claim 1. An input failure frequency holding means for holding the input failure frequency of the code for each application and directory allocated to the memory area;
A maximum allowable input failure frequency setting means for setting a maximum allowable input failure frequency of a password for each application and directory assigned to the memory area;
The accessible state management means sets the application or directory in which the number of input failures has reached the maximum allowable input number to an inaccessible state.
The integrated circuit device according to claim 1. It further comprises an input failure number initialization means for clearing the number of input failures held in the input failure number holding means by an administrator who has undergone mutual authentication processing with a predetermined certificate authority.
The integrated circuit device according to claim 5. An information processing apparatus comprising the integrated circuit device according to claim 1. The information processing apparatus according to claim 7, wherein the information processing apparatus is an information storage medium. The information processing apparatus according to claim 8, wherein the information storage medium is an IC card type storage medium. A memory management method for a memory area of an integrated circuit device according to claim 1, comprising:
A memory allocation step of allocating the memory area to each application using a directory including one or more applications or one or more subdirectories under one directory;
A code setting step for setting a code for controlling an access right through the wireless interface for each application and directory assigned to the memory area;
An access enable / disable state management step for managing the access enable / disable state of each application and directory assigned to the memory area;
With
In the access enable / disable state management step, the application and directory in which the code is set are made inaccessible from the wireless interface by default, and the corresponding application or directory is returned in response to the match of the code entered by the user. Set the access permission state from the wireless interface,
A memory management method for an information storage device. In the access permission state management step, in response to the fact that the password entered by the user matches the password set in the directory, all applications and subdirectories under the directory are placed in an access-permitted state.
The memory management method for an information storage device according to claim 10. A secret key setting step for setting a secret key for authentication for each application and directory assigned to the memory area;
In the access permission / inhibition state management step, an application or directory in an inaccessible state is set in an access permission state through mutual authentication using a secret key with a predetermined certificate authority.
The memory management method for an information storage device according to claim 10. An access prohibiting step for returning the application and the directory in the access permission state to the inaccessible state in response to the power supply to the information storage device being cut off;
The memory management method for an information storage device according to claim 10. An input failure frequency holding step for holding a password input failure frequency for each application and directory assigned to the memory area;
A maximum allowable input failure count setting step for setting a maximum allowable input failure count of a password for each application and directory allocated to the memory area;
In the access enable / disable state management step, an application or directory whose input failure count has reached the maximum allowable input count is set to an inaccessible state.
The memory management method for an information storage device according to claim 10. An input failure frequency initialization step for clearing the number of input failures held by the input failure frequency holding step by an administrator who has undergone mutual authentication processing with a predetermined certificate authority;
The memory management method for an information storage device according to claim 10.

Images