JP2001052131A - IC card and its issuing method and program - Google Patents

Abstract

(57) [Summary] [Problem] In an open-platform IC card compatible with multi-applications,
Provided is an IC card and a method for issuing the IC card, which eliminates troublesome authentication procedures in linking ID information between a plurality of applications and adding / deleting applications. An open platform type IC card is provided.
An IC card having a simple application adding means for adding a simple application program through a simple authentication procedure defined separately from the authentication procedure after the application program is mounted through the authentication procedure. IC card, method for issuing the same, and program.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention belongs to the technical field of IC cards. In particular, multi-application compatible ICs
Cards, issuing methods, and programs.

[0002]

2. Description of the Related Art Conventionally, an application program operating on an IC card is an IC card included in the IC card.
The specifications of the chip and the OS are strongly restricted. Therefore, it is necessary not only to develop an application program but also to develop a dedicated IC chip and OS for each limited custom application. As described above, the load in product development of an IC card is extremely large.

Therefore, a ROM (read only memory) portion of an IC chip, which cannot be rewritten later, stores only a minimum necessary OS function, and a program portion including application-specific functions includes: An electrically erasable EEPROM (electrically erasabl)
It has been proposed to reduce the development load by storing in e programmable read only memory). This technique is a technique called an open platform such as MULTOS or JAVACard.

[0004]

However, with the emergence of such open platform technology, a new application program has been installed.
At the time of deletion, it is indispensable to use a “digital certificate” as a means of confirming validity. Since it is necessary to request a trusted third party (certification organization) to generate this digital certificate, there are problems that the procedure is complicated and the cost is high.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and an object of the present invention is to provide a multi-application compatible open-platform IC card for linking ID information between a plurality of applications. An object of the present invention is to provide an IC card, an issuance method thereof, and a program therefor which eliminate the trouble of an authentication procedure for adding / deleting an application and save various costs incurred there.

[0006]

The above object is achieved by the present invention described below. That is, the IC card according to claim 1 of the present invention is an IC card having an open platform type IC card OS, and after installing an application program through an authentication procedure,
A simple application adding means for adding a simple application program through a simple authentication procedure defined separately from the authentication procedure is provided.

According to the present invention, after the application program is installed via the authentication procedure, the simple application program can be added by the simple application adding means through the simple authentication procedure defined separately from the authentication procedure. it can. That is, the authentication procedure of the simple application program is determined by the form of the simple authentication procedure having a degree of freedom in design, regardless of the authentication procedure. Therefore, in an open platform type IC card that supports multiple applications,
An IC card is provided that eliminates the hassle of an authentication procedure in linking ID information between a plurality of applications and adding an application.

According to a second aspect of the present invention, there is provided an IC card according to the first aspect, further comprising a simple application deleting means for deleting the additionally installed simple application program through the simple authentication procedure. It was made. According to the present invention,
Through the simple authentication procedure by the simple application deletion means, the additionally installed simple application program is deleted. Therefore, in an open platform type IC card compatible with multi-applications, there is provided an IC card which eliminates troublesome authentication procedures in linking ID information between a plurality of applications and deleting applications.

According to a third aspect of the present invention, there is provided the IC card according to the first or second aspect, wherein the application program has a portion for realizing the simple application adding means in the IC card. Things. According to the present invention, simple application adding means is realized by installing an application program.

According to a fourth aspect of the present invention, there is provided the IC card according to the first or second aspect, wherein the application program has a portion for implementing the simple application deleting means in the IC card. Things. According to the present invention, a simple application deleting unit is realized by installing an application program.

According to a fifth aspect of the present invention, there is provided an IC card issuance method, wherein an application program having a function of realizing a function of adding a simple application program through a simple authentication procedure in the IC card is mounted on the IC card. And an application program mounting step of mounting the application program. According to the present invention, an authentication procedure for mounting an application program having a part for realizing a function of adding a simple application program in an IC card through a simple authentication procedure in an authentication process on the IC card is performed. The application program is mounted in the mounting process. Therefore, I
An IC card issuance method is provided that eliminates the hassle of an authentication procedure in linking D information and adding an application.

According to a sixth aspect of the present invention, there is provided the IC card issuing method according to the fifth aspect, further comprising a simple application adding step of adding a simple application program through the simple authentication procedure. Things. According to the present invention, a simple application program is added through a simple authentication procedure in a simple application adding process. Therefore, a custom application limited by the simple application program can be realized, and the load in product development of the IC card is extremely reduced.

The program according to claim 7 of the present invention is a program to be mounted on an IC card having an open platform type IC card OS. Has a simple application adding function of adding a simple application program through a separately defined simple authentication procedure.

According to the present invention, after the application program is installed through the authentication procedure, the simple application program can be added by going through the simple authentication procedure defined separately from the authentication procedure by the simple application adding means. it can. That is, the authentication procedure of the simple application program is determined by the form of the simple authentication procedure having a degree of freedom in design, regardless of the authentication procedure. Therefore, there is provided a program that is mounted on an open platform type IC card compatible with multi-applications and that eliminates the troublesome authentication procedure in linking ID information between a plurality of applications and adding an application.

[0015]

Next, the present invention will be described with reference to embodiments. First, open platform type I
The C card will be described. An open-platform IC card is an IC card that is characterized by portability and interoperability of application programs to an IC card equipped with the same kind of open-platform OS based on different products / types of IC chips. That is.

For example, an IC card is composed of hardware (IC chip, etc.) and an operating system (OS).
And an application program. The hardware can be freely selected with specifications suitable for the intended use. The operating system or API (application program
g interface) is used as a standard, and a function that satisfies the standard is realized on the selected hardware. As a result, portability of application programs between IC cards is secured,
Enables connection operation between C cards.

Specifically, for example, “MULTOS”,
An IC card equipped with an operating system such as "Java". In these operating systems, elements other than commands and functions that are considered to be commonly used are separated from the operating system. For example, commands, encryption keys, commands, file structures, and the like for each application are defined on the application side. As a result, it is possible to add and delete applications after issuance. In addition, the platform (IC chip + O
It is possible to develop an application that does not depend on S).

FIG. 1 shows the configuration of the IC card of the present invention.
In FIG. 1, 1 is hardware, 2 is an operating system, 3 is a load certificate, 4 is an application program, 5 is ID (identification) information, 6 is simple application adding / deleting means, and 7 and 8 are simple application programs. is there. The hardware 1 has an IC chip mounted on an IC card. The IC chip is a data processing device having a memory and an MPU (micro processing unit). In some cases, the IC chip has a cryptographic coprocessor along with the memory and the MPU. Such an I having an IC chip (having a processor)
The C card is also called a “smart card”. In addition,
The simple application program is an application mounted on an IC card through a simple authentication procedure.

The operating system 2 is, for example, Java. As a specification for operating Java on an apparatus having only an IC card or a small memory, Java is used.
There is vaCard. This Java Card is a JV
M (Java virtual machine), which is based on the Java execution environment. However, since the JVM itself is too large for a normal IC card at full specifications, a subset is often used.

[0020] Java Card has the following features. The application program created for any IC card platform is Java Ca
It can be operated on all IC card platforms employing rd. A plurality of applications can be operated by one IC card. Java is well known to those skilled in the art and will not be described in detail here.

The operating system 2 is, for example, MULTOS. MULTOS is based on MXI (Mo
ndex International), MasterCard
It is a general-purpose OS for a multi-application IC card promoted by the MAOSCO Consortium, which is operated by E.
MULTOS has the following features. A plurality of applications can be mounted on one IC card. Firewall between applications (Fire
walls: fire walls). An application can be safely incorporated into an IC card from the outside.
MULTOS is well known to those skilled in the art and will not be described in detail here.

In the MULTOS, the load certificate 3 is obtained from a certificate authority for each scheme according to a designated procedure. The application program needs to be registered in the certificate authority in advance. Without this certificate the application cannot be loaded.

The application program 4 is registered in a certificate authority in advance. After registering with the certificate authority, the application program is sent directly to the card issuing facility where it is stored. When performing a card issuing process, a digital certificate (a load certificate, a deletion certificate, etc.) is obtained from a certificate authority. Then, the digital certificate and the application program are installed together on the IC card at the same time. That is, it is necessary to obtain the load certificate 3 before installation. In the example shown in FIG. 1, there is one application program 4. A plurality of application programs can be mounted on MULTOS, but instead, a plurality of simple applications can be mounted on the IC card of the present invention. In the example shown in FIG. 1, the application program 4 has an IC card
Information 5, simple application program adding / deleting means, and a simple application 7 are included.

The ID information 5 is information used for a user authentication procedure for determining whether the user of the IC card is a legitimate user. For example, information obtained by encrypting a password. When a plurality of application programs are installed in an open platform type operation system, it is difficult to link the ID information.

Simple application addition / deletion means 6
Adds a simple application program through a simple authentication procedure defined separately from the authentication procedure.
The simple application adding / deleting means 6 deletes the additionally installed simple application program through a simple authentication procedure. Issue commands / functions are used for the simple authentication procedure in the simple application addition / deletion means 6. The simple application 7 indicates the added one, and the simple application 8 indicates the deleted one.

Next, an IC card issuing method according to the present invention will be described. FIG. 2 is a flowchart showing the process of issuing an IC card according to the present invention. First, in step S1 of FIG.
Manufactures IC cards (platforms). Next, in step S2, the IC mounted on the IC card is
Is initialized. Next, in step S3, a load certificate is obtained. Next, in step S4, the application program is loaded (mounted) together with the load certificate acquired in step S3. Next, in step S5, the second and third application programs are loaded as needed. Next, in step S6, the IC card is distributed to end users.
Next, in step S7, simple applications are added / deleted as necessary. At this time, there is no need to obtain a certificate or the like from a certificate authority.

[0027]

As described above, according to the present invention, an open platform type I compatible with multi-applications
By allowing a simple application program to be added to the application program itself mounted on the C card, when multiple application programs are mounted on the same card, there is no need to worry about linking personal information for each application program. That is,
This is effective in reducing the work load in the issuing process and in dynamic loading operation. Programs can be added or deleted without being aware of the security issuing system for each scheme. For example, it is not necessary to request a load certificate or a delete certificate from the CA every time. More detailed services can be provided by adding / deleting simple application programs. For example, a service program or the like can be added or deleted without performing a complicated authentication procedure. Differentiated services can be provided for each user. Clarify the master-slave relationship of application programs,
When the use of the application program is suspended, the use of the simple application program can be suspended at the same time. For example, when payment for a communication service as an application is delayed in a mobile communication terminal, use of a credit service as a simple application can be stopped by a block command.

Further, according to the IC card according to the first aspect of the present invention, in the multi-application compatible open platform type IC card, the linkage of ID information between a plurality of applications is achieved. An IC card is provided which eliminates the hassle of an authentication procedure in attaching a card or adding an application. According to the IC card according to the second aspect of the present invention, there is provided an open platform type IC card compatible with multi-applications, which eliminates the troublesome authentication procedure in linking ID information between a plurality of applications and deleting applications. Provided. Claim 3 of the present invention
According to the IC card according to the above, simple application adding means is realized by installing the application program. According to the IC card according to the fourth aspect of the present invention, a simple application deleting unit is realized by installing the application program. An IC according to claim 5 of the present invention.
According to the card issuing method, I
An IC card issuance method is provided which eliminates the hassle of an authentication procedure in linking D information and adding an application. According to the IC card issuing method according to claim 6 of the present invention, it is possible to realize a custom application limited by a simple application program, and the load on product development of an IC card is extremely reduced. According to the program according to claim 7 of the present invention, the program is mounted on an open platform type IC card compatible with multi-applications. A program to solve the problem is provided.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an IC card of the present invention.

FIG. 2 is a flowchart showing an IC card issuing method of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Hardware 2 Operating system 3 Load certificate 4 Application program 5 ID information 6 Simple application addition / deletion means 7, 8 Simple application program

Claims (7)

[Claims] 1. An open platform type IC card O
An IC card having an S and having a simple application adding means for adding a simple application program through a simple authentication procedure defined separately from the authentication procedure after mounting the application program through the authentication procedure. An IC card, characterized in that: 2. The IC card according to claim 1, further comprising a simple application deleting means for deleting the additionally installed simple application program through the simple authentication procedure. 3. The IC card according to claim 1, wherein said application program has a portion for realizing said simple application adding means in said IC card. 4. The IC card according to claim 1, wherein the application program is the IC card.
An IC card having a portion for realizing the simple application deleting means in the C card. 5. An authentication step of performing an authentication procedure for mounting an application program having a function of adding a simple application program to the IC card through a simple authentication procedure in the IC card, and the application program. A method for issuing an IC card, the method comprising: loading an application program loaded with: 6. The IC card issuing method according to claim 5, further comprising a simple application adding step of adding a simple application program through the simple authentication procedure. 7. An open platform type IC card O
A program to be mounted on an IC card having an S.
A program characterized by having a simple application adding function of adding a simple application program through a simple authentication procedure defined separately from the authentication procedure after the application program is installed through the authentication procedure.