JP2007087120A - IC card mounted with a plurality of OSs, and issuance delegation method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an IC card capable of delegating an issuing process between OSs in an IC card having a plurality of OSs.
A dual interface IC card 1 is provided with a contact OS 20 and a non-contact OS 21 as OSs. The common kernel 30 is a common kernel for the contact OS 20 and the non-contact OS 21. A common kernel 30 that is accessible to both the contact OS 20 and the non-contact OS 21 has a function of storing issued data in the common buffer 142, and a function of processing the issued data stored in the common buffer 142. By providing the contact delegation module 301, the contact OS 20 can delegate the issuing process to the non-contact OS 21 and the non-contact OS 21 to the contact OS 20 via the common kernel 30.
[Selection] Figure 3

Description

  The present invention relates to an IC card having a plurality of communication I / Fs and mounted with a plurality of OSs corresponding to the respective communication I / Fs, and more particularly to a technology for issuing such an IC card.

  Dual interface IC cards that have both the functions of contact IC cards popular in financial applications and the functions of non-contact IC cards popular in traffic applications (commuter pass) and door gate systems are becoming widespread. By consolidating the functions of contact IC card and non-contact IC card into one IC card, IC card users are freed from possessing multiple IC cards, and from the card issuing company, Since the number of issued IC cards can be reduced, the cost for issuing an IC card can be reduced.

  Preferably, the application mounted on the dual interface IC card is preferably managed by a single operating system (OS). However, if the standard of an application that operates with a contact communication interface (IF: InterFace) (for example, a file system) and the standard of an application that operates with a non-contact I / F are different, In some cases, it is necessary to mount an OS that operates with a contact I / F and an OS that operates with a non-contact I / F.

  In Patent Document 1, as in the dual interface IC card described above, the IC card operates in an IC card having a plurality of communication I / Fs and mounting a plurality of OSs corresponding to the respective communication I / Fs. An invention is disclosed in which an OS corresponding to a communication I / F can be quickly selected and activated.

  By using the invention of Patent Document 1, the convenience of an IC card having a plurality of communication I / Fs typified by a dual interface IC card can be enhanced. However, when issuing such an IC card, an IC card issuing machine having a plurality of reader / writers each having a different communication I / F is used, and data is individually stored for each OS corresponding to each communication I / F. Must be written.

If the communication I / F of the IC card to be manufactured is determined, the IC card issuing machine need only have some reader / writers corresponding to the communication I / F. However, the IC card issuing machine has to be newly purchased or modified, and there is a problem that the equipment owned by the IC card manufacturer is enlarged. In addition, there is a problem that it takes time to issue data by individually writing data for each OS corresponding to each communication I / F.
JP 2004-318307 A

  Therefore, in view of such a problem, the present invention includes a plurality of communication I / Fs typified by a dual interface IC card, and an IC card on which an OS corresponding to each communication I / F is mounted. When issuing an IC card, an object is to provide an IC card and an IC card program capable of issuing all of them by using only one communication I / F.

  A first invention that solves the above-described problem is an IC card that includes a plurality of communication units and that includes a plurality of operating systems (OS) that are executed by the respective communication units. The IC card is stored in a volatile memory. A function of storing issued data in an I / F area accessible from all OSs installed in the IC card, and a function of passing issued data stored in the I / F area to the OS A delegation module is provided for each installed OS, and when the main OS that is the OS corresponding to the communication means on which the IC card is operating cannot process the issued command received from the terminal device, the main OS The delegation module stores a part or all of the issuance command as the issuance data in the I / F area, and is designated by the main OS. The delegation module of the other OS that has been transferred delivers the issuance data stored in the I / F area to the OS, so that the main OS delegates the issuance processing to the other OS. .

  Preferably, in the IC card according to the first invention, the plurality of communication means provided in the IC card include at least contact-type means and non-contact-type means.

In addition, the second invention is provided with an IC card having a plurality of communication means and mounted with a plurality of operating systems (OS) executed by the respective communication means, corresponding to the communication means in which the IC card is operating. The issuance delegation method in which the main OS, which is the OS that has been delegated, delegates the issuance process to another OS,
A step in which the main OS determines whether the issued command received from the terminal device can be processed;
When the main OS cannot process the issued data, the main OS provides part or all of the issued command as issued data in a volatile memory from all the OSs mounted on the IC card. Storing in an accessible I / F area;
Passing the issued data stored in the I / F area to an OS other than the main OS delegated by the main OS;
An OS delegated by the main OS processes the issuance data stored in the I / F area and stores response data of the issuance process in the I / F area;
The response data stored in the I / F area is transmitted to the terminal device by the communication means in which the IC card is operating;
It is characterized by having.

  According to the present invention described above, in an IC card that includes a plurality of communication I / Fs typified by a dual interface IC card, and in which an OS corresponding to each communication I / F is mounted, the IC card includes the delegation module. By providing each OS, it is possible to delegate the issuing process to the other OS via the delegation module. When issuing an IC card, all the issuing operations are performed by using only one communication I / F. It can be performed.

  An embodiment in which the present invention is applied to a dual interface IC card will now be described in detail with reference to the drawings. FIG. 1 is a diagram for explaining a dual interface IC card 1 (hereinafter abbreviated as “dual card 1”) to which the present invention is applied.

  As shown in FIG. 1A, the dual card 1 is a cash card size card, and the dual card 1 has two communication I / Fs, a contact communication I / F and a non-contact communication I / F. An IC chip 10 is mounted. When the dual card 1 operates with the contact communication I / F, the contact terminal 1a of the IC card is used. When the dual card 1 operates with the non-contact communication I / F, the antenna 1b built in the dual card 1 is used. .

  FIG. 2 is a block diagram of the IC chip 10 mounted on the dual card 1. The IC chip 10 includes a central processing unit 11 (hereinafter referred to as “CPU”), a read-only memory 16 (hereinafter referred to as “ROM”), and an EEPROM 15 (as a rewritable memory) via a bus 17. Electrically Erasable Programmable Read-Only Memory), random access memory 14 (Random Access Memory, hereinafter referred to as RAM), volatile memory, contact I / F circuit 12 for communicating data with a terminal device not shown A contact I / F circuit 13 is connected.

  The present invention does not limit the specifications of the IC chip 10, and the IC chip 10 having specifications suitable for the application of the dual card 1 can be selected. For example, the capacities of the ROM 16 and the EEPROM 15 are not limited, and the rewritable memory may be a memory other than the EEPROM such as a ferroelectric memory or a flash memory. The IC chip 10 may include other devices (not shown) such as a timer circuit and a cryptographic operation circuit.

  FIG. 3 is a software block diagram of the dual card 1 shown in FIG. The dual card 1 operates as an OS when the dual card 1 is operating with a contact I / F, and when the dual card 1 is operating with a non-contact I / F. Two OSs, a non-contact OS 21 that is an OS to be installed, are mounted.

  Each OS has a command library that is a collection of programs for processing commands received from a terminal device (not shown), and in this command library, issuance that is used at least when the dual card 1 is issued. Contains commands. Hereinafter, the command library of the contact OS 20 will be referred to as a contact command LIB 200 (LIB: Library), and the command library of the non-contact OS 21 will be referred to as a non-contact command LIB 201.

  The common kernel 30 shown in FIG. 3 is a program that is the core of the contact OS 20 and the non-contact OS 21 and is a program that is used by both the contact OS 20 and the non-contact OS 21. The common kernel 30 has a function of controlling the hardware resources of the IC chip 10 shown in FIG. 2, and has a function of writing data to the RAM 14 and the EEPROM 15, a function of performing data communication with the terminal device, etc. Provide to the contact OS 21.

  In the dual card 1, the common kernel 30 uses the contact I / F circuit 12 as a program for data communication with the terminal device, and contacts data communication conforming to a standard such as ISO / IEC7816 via the contact terminal 1a. And a non-contact communication module 311 that uses the non-contact I / F circuit 13 and performs non-contact data communication according to a standard such as ISO / IEC14443 through the antenna 1b.

  In the dual card 1 according to the present invention, it should be noted that the common kernel 30 stores the issue data in the common buffer 142 provided in the RAM 14 which is a volatile memory, and the issue data stored in the common buffer 142. A delegation module having a function to process is provided for each installed OS. In FIG. 3, the delegation module for the contact OS 20 is described as a contact delegation module 300, and the delegation module for the non-contact OS 21 is described as a non-contact delegation module 301.

  As described above, the common kernel 300 that is accessible to both the contact OS 20 and the non-contact OS 21 includes the contact delegation module 301 and the non-contact delegation module 311, so that the contact OS 20 becomes a non-contact OS 21 and a non-contact OS 21. The contact OS 21 can delegate the issue process to the contact OS 20 via the common kernel 30.

  FIG. 4 is a memory map of the dual card 1 shown in FIG. As shown in FIG. 4, in the ROM 16 of the IC chip 10, program codes of the common kernel 30, the contact OS 20 and the non-contact OS 21 are mapped on different physical address spaces, and the EEPROM 15 of the IC chip 10 stores the contact OS 20 The contact data area 150 used by the non-contact OS and the non-contact data area 151 used by the non-contact OS 21 are mapped on different physical address spaces.

  The RAM 14 of the IC chip 10 is provided with at least a contact work area 140 that is a dedicated area used by the contact OS 20 at the time of issuance, and a non-contact work area 141 that is a dedicated area used by the non-contact OS 21 at the time of issuance. Yes. In addition, the RAM 14 includes a transmission / reception buffer 143 that is an area for the contact communication module 310 and the non-contact communication module 311 to temporarily store commands received from the terminal device, and the common buffer 142 described above. Yes.

  The common buffer 142 provided in the RAM 14 is a buffer used when data (issued data and response data) is transferred between the contact delegation module 300 and the non-contact delegation module.

  For example, when the contact OS 20 delegates issue processing to the non-contact OS 21, the contact delegation module 300 stores at least issue data including an issue command for the non-contact OS 21 in the common buffer 142, and the issue data is contactless. Passed to the delegation module 301. The response data when the contactless OS 21 processes the issuance data stored in the common buffer 142 is stored in the common buffer 142 by the contactless delegation module 301 and transferred to the contact delegation module 300.

  From here, the issuing procedure of the dual card 1 is demonstrated in detail using FIG. FIG. 5 is a flowchart showing a procedure when the dual card 1 is issued by the contact I / F. The first step S1 of this procedure is a step in which the dual card 1 is activated by the contact I / F. In this step, the dual card 1 is activated by the terminal device according to the procedure of ISO / IEC7816, and enters a state of waiting for command reception from the terminal device.

  The next loop executed from L1 to L2 is a loop that is repeatedly executed until the issuing process of the dual card 1 is completed.

  The first step S2 of this loop is a step in which the dual card 1 operating with the contact I / F receives an issue command from the terminal device. In this step, the contact communication module 310 provided in the common kernel 30 of the dual card 1 receives an issue command from the terminal device, and the received issue command is stored in the transmission / reception buffer 143 of the RAM 14.

  The next step S3 is a step of confirming whether the contact command LIB 200 can process the issued command stored in the transmission / reception buffer 143. In this step, the process shifts from the common kernel 30 to the contact OS 20, and the contact command LIB 200 of the contact OS 20 can process the received issue command by referring to the command identifier of the issue command stored in the transmission / reception buffer 143 of the RAM 14. Check if it is a command.

  If the contact command LIB 200 can process the issued command stored in the transmission / reception buffer 143 in step S3, the process proceeds to step S4. If not, the process proceeds to step S10, and the process of the issued command is delegated to the non-contact OS 21. Issuance delegation process is executed.

  Step S4 that is executed when the contact command LIB 200 can process the issue command stored in the transmission / reception buffer 143 is a step in which the contact command LIB 200 processes the issue command stored in the transmission / reception buffer 143. In this step, the program for processing the issuance command of the contact command LIB 200 uses the contact work area 140 of the RAM 14 to perform processing such as writing initial data to the contact data area 150 of the EEPROM 15 or generating an initial file. The dual card 1 is issued by the contact OS 20.

  Step S5 executed after step S4 is a step in which the contact OS 20 stores the response data of the issued command in the transmission / reception buffer 143. In this step, the contact command LIB 200 stores response data of the processed issuance command in the transmission / reception buffer 143 and shifts the processing to the common kernel 30.

  Step S6, which is executed after step S5, is a step in which response data of the issued command processed by the contact command LIB 200 is transmitted. In this step, the contact communication module 310 of the common kernel 30 transmits the response data stored in the transmission / reception buffer 143 to the terminal device.

  From here, the issue delegation process executed in step S10 of FIG. 5 will be described in detail with reference to FIG. FIG. 6 is a flowchart showing a detailed procedure of the issue delegation process. The first step S11 of this procedure is a step in which the contact delegation module 300 stores issuance data in the common buffer 142. In this step, the contact delegation module 300 stores part or all of the issuance commands stored in the transmission / reception buffer 143 as issuance data in the common buffer 142. Note that the issue data stored in the common buffer 142 includes at least an issue command for the non-contact OS 21.

  In the next step S12, the contact delegation module 300 delegates the contact delegation module 301 to the processing of the issuance data stored in the common buffer 142. In this step, the contact delegation module 300 of the common kernel 30 calls the non-contact delegation module 301 of the common kernel 30 and delegates the processing of the issuance data stored in the common buffer 142 to the non-contact delegation module 301.

  The next step S13 is a step in which the contactless delegation module 301 calls the contactless command LIB 201 and processes the issuance data stored in the common buffer 142. In this step, a program for processing an issue command of the non-contact command processing LIB 201 uses a non-contact work area 141 of the RAM 14 to write data to the non-contact data area 151 of the EEPROM 15 and generate an initial file. The processing corresponding to the issue data stored in 142 is performed, and the dual card 1 is issued by the non-contact OS 21.

  The next step S <b> 14 is a step of storing response data in the common buffer 142 when the contactless delegation module 301 processes the issuance data stored in the common buffer 142. In this step, the contactless delegation module 301 receives this response data from the contactless command LIB 201 and stores the response data in the common buffer 142.

  In the next step S15, the contact delegation module 300 copies the response data stored in the common buffer 142 to the transmission / reception buffer 143. In this step, the process returns from the contactless delegation module 301 to the contact delegation module 300, and the contact delegation module 300 copies the response data of the common buffer 142 to the transmission / reception buffer 143.

  The next step S16 is a step in which the response data stored in the transmission / reception buffer 143 is transmitted to the terminal device. In this step, the contact communication module 200 transmits the response data stored in the transmission / reception buffer 143 to the terminal device. With this step, the issuance delegation process ends.

  The embodiment described so far is only one embodiment. In the embodiment described so far, as shown in FIG. 1, the IC card is a cash card size dual card 1, but the IC card is a SIM having a shape in which the vicinity of the IC chip of the IC card is cut into a strip shape. (Subscriber Identity Module).

  In addition, in the embodiments described so far, the communication I / F provided in the IC card is a contact I / F and a non-contact I / F, but the present invention depends on the communication I / F at all. It is not a thing. The contact I / F may be communication conforming to the ISO / IEC7816 standard or communication conforming to the USB standard.

The figure explaining a dual card. The block diagram of the IC chip mounted in a dual card. The software block diagram of a dual card. Dual card memory map. The flowchart which showed the procedure when issuing a dual card by contact I / F. The flowchart which showed the detailed procedure of issue delegation processing.

Explanation of symbols

1 Dual card 10 IC chip 14 RAM
142 Common buffer 143 Transmission / reception buffer 15 EEPROM
16 ROM
20 Contact OS
200 Contact command LIB
21 Non-contact OS
201 Non-contact command LIB
30 common kernel 300 contact delegation module 301 non-contact delegation module 310 contact communication module 311 non-contact delegation module

Claims (3)

In an IC card provided with a plurality of communication means and mounted with a plurality of operating systems (OS) executed by the respective communication means,
The IC card is provided in a volatile memory and has a function of storing issue data in an I / F area accessible from all OSs mounted on the IC card, and the issue data stored in the I / F area. A delegation module having a function of passing to the OS is provided for each installed OS,
When the main OS, which is the OS corresponding to the communication means on which the IC card is operating, cannot process the issued command received from the terminal device, the delegation module of the main OS enters the I / F area, Part or all of the issue command is stored as issue data, and the delegation module of another OS instructed by the main OS passes the issue data stored in the I / F area to the OS. The IC card is characterized in that the main OS delegates the issuing process to another OS.   2. The IC card according to claim 1, wherein the plurality of communication means provided in the IC card include at least contact-type means and non-contact-type means. In an IC card provided with a plurality of communication means and mounted with a plurality of operating systems (OS) executed by the respective communication means, a main OS which is an OS corresponding to the communication means in which the IC card is operating, An issue delegation method for delegating issue processing to another OS,
A step in which the main OS determines whether the issued command received from the terminal device can be processed;
When the main OS cannot process the issued data, the main OS provides part or all of the issued command as issued data in a volatile memory from all the OSs mounted on the IC card. Storing in an accessible I / F area;
Passing the issued data stored in the I / F area to an OS other than the main OS delegated by the main OS;
An OS delegated by the main OS processes the issuance data stored in the I / F area and stores response data of the issuance process in the I / F area;
The response data stored in the I / F area is transmitted to the terminal device by the communication means in which the IC card is operating;
The issuance delegation method characterized by comprising:

Images