JP2001338268A - Memory card application equipment - Google Patents

Abstract

(57) [Problem] To provide a memory card applied device capable of changing a control function for a memory card with a security protection function by external information without being easily analyzed by a third party. A first programmable logic unit (8) for storing encrypted information on a memory card (7) with a security function added thereto, or encrypting and transmitting information protected on the memory card (7) to the outside, A second programmable logic unit 13 having a function of decrypting the encrypted program change information received via the communication line 4; and a first programmable logic unit 8 based on the decrypted program change data. And a programmable logic data writing circuit unit 9 for writing and changing the program. The data management and distribution center 5 communicates the memory card control function with security function without being easily analyzed by a third party. The function is changed via the line 4.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a memory card application device, which is a personal computer, a set-top box, a mobile phone, and a memory card writing device for a convenience store having a built-in memory card controller. It includes terminals and the like.

[0002]

2. Description of the Related Art FIG. 3 is a block diagram showing a system configuration of a conventional memory card application device with a built-in memory card controller having a security protection function using a custom LSI.

As shown in FIG. 3, the memory card applied device includes a CPU 1, a memory 2, a communication interface 3, a memory card 7, and a memory card controller 11 with a security function using a custom LSI. I have. In FIG. 3, reference numeral 4 denotes a public telephone line,
Communication lines 5 for satellite broadcasting, CATV, etc. are data management and distribution centers.

[0004] The operation of the memory card applied device will be described. By the operation of the programs stored in the CPU 1 and the memory 2, the memory card 7 can perform data transfer through the memory card controller 11 with a security protection function to the inside of the memory card applied device. Furthermore, for example, music and video data are received in an encrypted state by communication with a data management and distribution center 5 via a communication line 4 such as a public telephone line, satellite broadcasting, or CATV through a communication interface 3. It is also possible to add a security function to the memory card 7 and store it. Further, for example, billing information protected by security in the memory card 7 can be encrypted and transmitted to the data distribution center 5 along the same route.

[0005] As shown in FIG. 4, a memory card application device having a programmable logic device 12 instead of the memory card controller 11 is already known.

The programmable logic device 12 has a programmable logic section 8 and a programmable logic data writing circuit section 9 for writing data to the programmable logic section 8. In the programmable logic unit 8, a program for operating the programmable logic device 12 as a memory card controller with a security function is written.

In this memory card applied device,
The operation described in the operation description of the memory card application device shown in FIG. 3 is possible. The difference between the operation of the memory card application device shown in FIG. 4 and that of the memory card application device shown in FIG.
With respect to the realization of this function, the programmable logic device 12 is used in order to enable the function to be changed in the market.

[0008]

As described above, in order to handle important data, in the memory card controller 11 with a security function, it is important that a third party cannot decrypt the security mechanism. is there. Further, when the security mechanism is broken unfortunately, or when it is necessary to change the function of the memory card controller 11 with a security function, it is desirable that the security mechanism can be immediately changed in the market.

In the conventional memory card application device shown in FIG. 3, since a custom LSI is used for the memory card controller 11 with the security function, the function of the memory controller 11 with the security function after shipment to the market. It has the disadvantage that it cannot be changed.

On the other hand, in the conventional memory card application device shown in FIG. 4, the function of the programmable logic device 12 can be changed by the program data distributed from the data management distribution center 5. However, since the program data distributed from the data management distribution center 5 to the programmable logic device 12 of the memory card application device is data that has not been subjected to any encryption processing, the program data transmitted to the input terminal for the program of the programmable logic device 12 is not transmitted. On the path of the communication line 4, the third
When a user uses a measuring device such as a logic analyzer, there is a possibility that the operation of the memory controller 12 with the security function can be analyzed based on the distributed program data.

[0011] The present invention solves the above-mentioned problems, and the function of the control means for a memory card with a security function can be changed by external information without being easily analyzed by a third party. It is an object of the present invention to provide a memory card application device capable of performing such operations.

[0012]

According to a first aspect of the present invention, there is provided a memory card application device comprising: a communication interface for communicating externally via a communication line; a memory card; Memory card control means for receiving the stored information via a communication line, storing the information with a security function added to the memory card, and encrypting and transmitting the information protected by the memory card to the outside via the communication line And a decryption means for decrypting the encrypted program change information received via the communication line, and a program document for writing and changing the program of the memory card control means based on the decrypted program change data. And an insertion means.

With this configuration, when the encrypted program change information is received from the outside via the communication line,
The program change information is decrypted by the decryption means, and the program of the memory card control means is written and changed by the program writing means. in this way,
While the function of the control means for the memory card with security function can be changed, the program change information is also encrypted and sent to this memory card applied device, so that it can be easily analyzed by a third party. No reliability is improved.

According to a second aspect of the present invention, in the memory card application device of the first aspect, the memory card control means, the decoding means, and the program writing means are integrated on the same device. And

According to this configuration, the exchange of the decrypted information is performed only within the same device, so that it is virtually impossible to retrieve the decrypted information from the outside, and the reliability is further improved.

According to a third aspect of the present invention, in the memory card application device according to the first or second aspect, the decoding means is a programmable logic unit in which a function of a decoding circuit is written. I do.

[0017]

(Embodiment 1) FIG. 1 is a block diagram showing a system configuration of a memory card applied device according to an embodiment corresponding to the first aspect of the present invention. As shown in FIG. 1, this memory card applied device includes a CPU 1, a memory 2, a communication interface 3 for communicating with the outside via a communication line 4 such as a public telephone line, satellite broadcasting, or CATV, and a memory card 7. ,
And a programmable logic device 6. The programmable logic device 6 includes a programmable logic unit 8 as a memory card control unit, a programmable logic data writing circuit unit 9 as a program writing unit for writing data into the programmable logic circuit unit 8, a decoding circuit unit 10, Is provided. In the programmable logic unit 8, a program for operating as a memory card controller with a security function is written. In FIG. 1, reference numeral 5 denotes a data management and distribution center.

Next, the operation of the memory card applied device will be described. By the operation of the programs stored in the CPU 1 and the memory 2, the memory card 7 can perform data transfer to the inside of the memory card applied device through the programmable logic unit 8 in which the memory card controller function with the security protection function is written. .
The memory card applied device further receives, for example, music and video data in an encrypted state by communicating with a data management and distribution center 5 via a communication interface 4 via a communication interface 3 and a memory card 7. Can be stored with a security function.
Further, for example, billing information protected by security in the memory card 7 can be encrypted and transmitted to the data distribution center 5 along the same route.

Next, a programmable logic unit 8 in which a memory card controller function with a security function is written.
The operation in the case where the function is changed after the product is shipped to the market will be described. Data management distribution center 5 and CPU 1
The following operation is performed by the operation of the program stored in the memory 2. The encrypted programmable logic device program data transmitted from the data management and distribution center 5 passes through the communication interface 3 via the communication line 4 and the programmable logic device 6.
Is input to the decoding circuit unit 10 in FIG. Decoding circuit unit 10
Is written into the programmable logic section 8 by the programmable logic data writing circuit section 9 as program writing means.

As described above, the programmable logic circuit unit 8
Even if the function is changed, since the program data for the programmable logic device sent from the data management and distribution center 5 is encrypted, the function of the memory card controller with security function can be easily analyzed by a third party. Public telephone lines, satellite broadcasting and CAT
The function can be changed via the communication line 4 such as V.

Since the exchange of the decrypted information is performed only in the programmable logic device 6, it is substantially impossible to extract the decrypted information from the outside, and the reliability is further improved. (Embodiment 2) FIG. 2 is a block diagram showing a system configuration of a memory card applied device according to an embodiment corresponding to the second aspect of the present invention. As shown in FIG. 2, the memory card applied device includes a CPU 1 and
It comprises a memory 2, a communication interface 3 for communicating with the outside via a communication line 4 such as a public telephone line, satellite broadcasting, CATV, etc., a memory card 7, and a programmable logic device 14. The programmable logic device 14 includes a first programmable logic unit 8 as a memory card control unit in which a program for operating as a memory card controller with a security function is written, and a program for operating as a decoding circuit. The second programmable logic circuit section 13 as a written decoding means, and the programmable logic data writing circuit as a program writing means for writing data in the first and second programmable logic circuit sections 8 and 13 A part 9 is provided. In FIG. 2, reference numeral 5 denotes a data management and distribution center.

For data transfer from the memory card 7 to the data management and distribution center 5, the same operation as in the above embodiment is performed. Next, an operation in a case where the function of the first programmable logic circuit unit 8 in which the memory card controller function with security function is written is changed after shipment to the market will be described. The following operations are performed by the operation of the data management and distribution center 5, the CPU 1, and the programs stored in the memory 2. The encrypted program data for the programmable logic device transmitted from the data management distribution center 5 passes through the communication interface 3 via the communication line 4 and the decryption circuit function in the programmable logic device 14 is written. The input to the second programmable logic unit 13. The program data decoded by the programmable logic unit 13 is written to the first programmable logic circuit 8 and the second programmable logic unit 13 by the programmable logic data writing circuit unit 9.

In such a procedure, the program data decoded by the second programmable logic unit 13 includes only one of the first programmable logic circuit 8 and the second programmable logic unit 13. May be rewritten.

As described above, even when the functions of the first programmable logic circuit 8 and the second programmable logic unit 13 are changed, the program data for the programmable logic device transmitted from the data management and distribution center 5 is encrypted. Therefore, the function as a memory card controller with a security function can be changed via a communication line 4 such as a public telephone line, satellite broadcasting or CATV without being easily analyzed by a third party. Become.

Further, since the exchange of the decrypted information is performed only in the programmable logic device 14, it is substantially impossible to extract the decrypted information from the outside, and the reliability is further improved.

Further, in this embodiment, the programmable logic unit 13 in which the function of the decoding circuit is written is adopted as the decoding means, and the program itself of the programmable logic unit 13 is changed by the decoded information. Therefore, the encryption method itself can be changed, and the reliability is further improved.

[0027]

As described above, according to the memory card application device of the present invention, the encrypted information is received via the communication line, stored with the security protection function added to the memory card, and stored in the memory card. Memory card control means for encrypting and transmitting confidential information to the outside via a communication line, and decryption means for decrypting encrypted program change information received via the communication line; And a program writing means for writing and changing the program of the memory card control means based on the converted program change data, so that the function of the memory card control means with security function can be provided from the data management and distribution center. Changing functions via public telephone lines, satellite broadcasting, CATV, or other communication lines without being easily analyzed by a third party It becomes possible, and the reliability is improved.

Further, by integrating the memory card control means, the decoding means, and the program writing means on the same device, the exchange of the decoded information is performed only in the same device. It is virtually impossible to extract information from the outside, and the reliability is further improved.

Further, by employing a programmable logic unit in which the function of the decryption circuit is written as the decryption means, the function of the memory card control means with security function can be changed while also changing the encryption method itself. This also improves reliability.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a system configuration of a memory card applied device according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a system configuration of a memory card application device according to another embodiment of the present invention.

FIG. 3 is a block diagram showing a system configuration of a conventional memory card applied device with a built-in memory card controller having a security function using a custom LSI.

FIG. 4 is a block diagram showing a system configuration of a conventional memory card application device having a built-in memory card controller with a security function using a programmable logic device.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 CPU 2 Memory 3 Communication interface 4 Communication line 5 Data management and distribution center 6, 14 Programmable logic device 7 Memory card 8 Programmable logic part (memory card control means) 9 Programmable logic data writing circuit part (program writing means) 10 Decoding Circuit part (decoding means) 13 Programmable logic part (decoding means)

Claims (3)

[Claims] 1. A communication interface for communicating with the outside via a communication line, a memory card, and encrypted information received via the communication line and stored with a security function added to the memory card. A memory card control means for encrypting and transmitting the information protected outside to the outside via a communication line, and a decoding means for decoding the encrypted program change information received via the communication line, A memory card application device comprising: a program writing unit that writes and changes a program of a memory card control unit based on decrypted program change data. 2. The memory card application device according to claim 1, wherein the memory card control means, the decoding means, and the program writing means are integrated on the same device. 3. The decoding means is a programmable logic unit in which the function of the decoding circuit is written.
Memory card application equipment described in.