WO2002003271A1

WO2002003271A1 - Ic card, method for backing up ic card, and restoring method

Info

Publication number: WO2002003271A1
Application number: PCT/JP2000/004447
Authority: WO
Inventors: Masatoshi Haraguchi
Original assignee: Hitachi, Ltd.
Priority date: 2000-07-04
Filing date: 2000-07-04
Publication date: 2002-01-10
Also published as: AU2000255731A1

Abstract

An IC card safe in security is backed up. Data is encrypted (005) using an encryption key (008) uniquely given to a card (001) and provided only to the inside of the card (001) to back up (003) the data. The data backed up is decoded in the same card and restored. The encryption key uniquely given to the card is encrypted using a common encryption key provided only in cards and common to the cards and backed up together with the data. The encryption key uniquely given to the card and backed up is decoded using the card common encryption key in another card, and the data backed up is decoded in the another card and restored.

Description

Specification

IC card, IC card backup and restoration method

The present invention relates to an IC card, and more particularly to a method for backing up and restoring the memory contents of an IC card. Background art

As a technique for restoring information in an IC card to another IC card, there is a technique described in Japanese Patent Application Laid-Open No. 9-179921. According to this technology, users have two types of IC cards, one for transaction information that holds electronic commerce information (for example, electronic money) and the other for backup, which records the history of payments. In the event of damage or loss, try to restore the electronic commerce information in the transaction IC card from the backup IC card history to another IC card.

In the above-mentioned conventional technology, there is a problem that the user needs to own the IC card as a pair, so that the burden on the user is too large from a practical point of view, and that if both cards are lost, they cannot be restored. There is also a problem that the information that can be restored is limited to the range of history that can be recorded on the backup IC card.

IC cards are being used in a wide range of social life fields such as finance, distribution, telecommunications, transportation, entertainment, and government due to the expansion of memory capacity and the improvement of CPU capabilities with the advancement of IC chip technology. In addition, to make it more convenient, it is necessary to apply multiple applications with one Ic card, that is, to install multiple applications. It is also necessary for users to be able to load and delete applications themselves. A single IC card is used for multiple purposes, and the more important information that is stored, the more convenient it becomes. On the other hand, the loss of the IC card due to damage, loss, etc. poses a major problem.

If you want to back up a card application that handles electronic money, points, and other values (data whose value itself has economic value), list In this case, there is a problem that the backup cannot be applied because the value returns to the backup point. Disclosure of the invention

A first object of the present invention is to encrypt information (program code, data, program control information, and the like) stored in the memory of an Ic card, pack it up in a device outside the card, and make the same when necessary. The purpose of this is to realize a secure backup in terms of security by decrypting and restoring the data in another card or another card. A second object of the present invention is to reduce the processing time and the storage medium capacity by enabling backup and restoration of only the changed part of the memory to be backed up. .

Further, a third object of the present invention is to provide a card application (AP) which handles values such as electronic money and points as a backup target, so that the AP initializes the value by itself before handling the gallery. Providing a means for optimizing the solution will solve the problem of values returning to the time of backup and expand the application range of the pack-up.

In order to achieve the first object, the present invention provides a method of encrypting and backing up using a card-specific encryption key that exists only in the card, and decrypting and restoring the backed up data in the same card. adopt. This method is highly secure because it does not require decryption outside the card.

When restoring to another card, the card-specific encryption key is encrypted using the same card common encryption key between cards that exist only in the card, and the card is backed up as part of the backup data. The unique encryption key is decrypted using the card common encryption key in a separate card, and the backup data is further decrypted in the separate card using the card unique encryption key. In this way, even when restoring to a separate drive, the method does not require decryption outside the card, so the safety is high.

In order to achieve the second object, the present invention includes means for determining whether or not there is a change in the memory content for each fixed length (page) unit. Realize page-only backup and restore. As a result, the processing time for backup and restoration can be reduced, and the storage medium capacity can be reduced.

In order to achieve the third object, according to the present invention, when the program in the IC card is configured separately for the operating system (OS) and the card application (AP), the function of backing up the data is defined as 0S function. Realize. As a result, it is possible to perform backup with only 0S without imposing a burden on a plurality of APs. Also, when restoring an AP that handles data that has a value such as electronic money or points, a means for 0S to notify the AP that the restoration has been performed, and a method for reading the value before the AP handles the value. A means for initializing to zero, for example, is provided.

The method of initializing the value in the IC card when executing this restoration is based on the idea that if the user loses the real wallet, the money inside will be lost, and in the case of restoring to the same card, the user himself before restoration It is based on the idea that the remaining value in the IC card can be used up once or transferred to another medium, so that the loss caused by initializing the value can be avoided.

That is, the IC card according to one embodiment of the present invention stores an encryption key, an encryption function for performing encryption processing and decryption processing, and an encryption function for encryption function using the encryption key in a memory of the IC force. A backup function for exporting backup data obtained by encrypting the encrypted information, and a restore function for decrypting the imported encrypted backup data by decryption processing of the encryption function using the encryption key and restoring the decrypted backup data in the memory. It is characterized by that.

The IC card according to one aspect of the present invention also includes: an encryption key unique to the IC card; an encryption key common to a plurality of Ic cards; an encryption function for performing encryption processing and decryption processing; Unique encryption that is encrypted by encryption processing of the encryption function using a common encryption key and backup data obtained by encrypting information stored in the memory of the Ic card by encryption processing using a key. A backup function for carrying out information including a key.

An IC card according to one embodiment of the present invention provides a decryption process using a first encryption key and an encryption key. A decryption function for decrypting a second encryption key from the received encrypted information using a first encryption key, and a second encryption key for decrypting the received encrypted information. A decryption function for decrypting the backup data in the decryption processing of the encryption function using the encryption key of 2 and restoring the data in memory.

The IC card according to one embodiment of the present invention further includes an encryption key unique to the IC card, an encryption key common to a plurality of IC cards, an encryption function for performing encryption processing and decryption processing, and an encryption key unique to the IC card. Unique to an IC card that has been encrypted with the encryption function using the same encryption key as the backup data obtained by encrypting the information stored in the memory of the IC card with the encryption function using the encryption key. A backup function for exporting information including an encryption key of the same type, and a function for decrypting an encryption key unique to an IC card from the imported encrypted information using a common encryption key in a decryption process of the encryption function. A decryption function of restoring the backup data decrypted in the decryption processing of the encryption function using the encryption key unique to the decrypted IC card to a memory.

The backup data may include identification information unique to each IC card for identifying the IC card.

The IC card according to one aspect of the present invention can include an operating system having a function of holding information indicating that restoration has been performed and notifying the information to a force application. Information indicating that the restoration has been performed can be held by, for example, a flag.

If the application handles data (value) whose value itself has economic value, it is preferable that the application initialize the value when it receives information indicating that the restoration has been executed.

The IC card according to one embodiment of the present invention also includes an encryption key unique to the IC card, an encryption key common to a plurality of IC cards, an encryption function for performing encryption processing and decryption processing, and a common encryption key. A key export function that exports a unique encryption key that was encrypted by the encryption function using the encryption function, and a decryption process that uses the common encryption key from the imported information.

A key import function of decrypting an encryption key unique to the Ic card. An IC card backup method according to one aspect of the present invention is directed to an IC card backup method for backing up the contents of an IC card memory to a device outside the IC card. It is characterized in that the contents of the memory are encrypted using an encryption key unique to the IC card that exists only in the IC card, and are then transferred to a device outside the IC card as backup data.

The method for restoring the memory contents of an IC card according to one aspect of the present invention is a method for restoring the memory contents of an IC card backed up to an external device to the memory of an IC card. It is characterized in that the encrypted backup data is decrypted using an encryption key unique to the IC card that exists only in the IC card and is restored in the memory.

The backup data may include identification information for identifying the IC card, and when restoring, it may be possible to check whether the identification information included in the backup data matches the identification information of the IC card to be restored.

According to one embodiment of the present invention, a method of backing up the memory content of a first IC card to an external device and restoring the backed up memory content to a memory of a second IC card exists only in the first IC card. The data obtained by encrypting the unique encryption key of the first IC card using the encryption key common to the first and second IC cards in the first IC card, and the memory content of the first IC card Transferring backup data including data encrypted in the first IC card using an encryption key unique to the first IC card from the first IC card to an external device; Loading the backup data from an external device by using a shared encryption key that exists only in the IC card, and from the loaded backup data to the first IC card in the second IC card. Specific Decrypting the encryption key, and decrypting the memory content of the first IC card in the second IC card from the imported backup data using the decrypted encryption key unique to the first IC card. Restoring the decrypted memory contents of the first IC card to the memory of the second IC card.

At this time, the identification information of the IC card from which the memory content of the first IC card is to be restored is obtained in advance and added to the backup data, and the identification information added to the backup data and the second IC card are used. The matching of the held identification information may be checked. According to one aspect of the present invention, a method of backing up the memory content of an Ic card to an external device and restoring the backed up memory content to a memory of an IC card is based on a method of dividing the memory to be backed up into memory division units. Page), and back up and restore only the changed pages.

At this time, the external device stores the backup sequence number and information on whether the backup is a whole backup or a partial backup of only the changed page as management information of the backup data, and uses this management information to perform a series of backup backups. Data can be restored collectively.

According to one embodiment of the present invention, a method of backing up the memory content of an IC card to an external device and restoring the backed up memory content to the memory of the IC card includes the steps of transferring a program in the IC card to an operating system and an application program. The backup function and the restore function are realized as the functions of the operating system. When the application program has the value of electronic money, points, etc., when the operating system executes backup and restore, the operating system notifies the application program of the execution of the restore and is notified of the execution of the restore. It is preferable that the application program initializes the value before using the value.

A method of storing a program in an IC card according to one embodiment of the present invention includes the steps of: when storing a program stored outside the IC card into the Ic card, recognizing that the program is read from outside the Ic card. It is characterized by receiving information indicating that from the program, and setting a specific value in a predetermined area in the IC card based on the information. According to this method, when the program stored from the outside of the IC card is an application program that handles values such as electronic money and points, the value read together with the program from the outside of the IC card is invalidated, and By setting the value to be set to a specific value, for example, an initial value such as zero, it is possible to prohibit the generation of an illegal value. According to one embodiment of the present invention, there is provided a method of storing a program on an Ic card, comprising: recognizing that, when a program stored outside the IC card is stored on the Ic card, the program is read from outside the IC card. Information indicating that fact may be received from the circuit, and a specific value may be set in a predetermined area in the IC card based on the information. Even with this method, when the program stored from the outside of the IC card is an application program that handles values such as electronic money and points, the value read with the program from outside the IC card is invalidated, and the value is stored in the IC card. By setting the value to be set as a specific value, for example, an initial value such as zero, it is possible to prohibit the generation of an illegal value.

A method for restoring an application program on an IC card according to one embodiment of the present invention is a method for restoring an application holding data items stored outside the IC card to the IC card when the application program is restored to the IC card. The application program receives information indicating that the application program is an application program read from outside the IC card from the operating system of the IC card, and the application program converts the data into a predetermined data item based on the information. It is characterized in that a specific value is set.

Further, the program according to one aspect of the present invention is a program stored in an IC card for performing processing, and means for obtaining information indicating that the program has been stored in the IC card, and a program in the IC card based on the information. A means for setting a specific value in a predetermined area of the data. To set a specific value in a predetermined area in the Ic card means to set a value such as an electronic money or a point to zero, for example. According to this method, it is possible to prohibit the generation of an illegal value in the IC card by an operation of externally storing the application program handling the value in the IC card.

ADVANTAGE OF THE INVENTION According to the present invention, it is possible to securely back up the memory contents of an IC card to a device outside the IC card by using an encryption function in terms of security, and to restore not only the own card but also another card. .

In addition, a method of storing data on an Ic card according to one embodiment of the present invention includes the steps of: When data stored outside the IC card is stored in the IC card, information indicating this fact is received from a program that recognizes that the data has been read from outside the IC card, and the information is stored in the information. The management information of the data is set in a predetermined area based on the data. In this method, an area for writing data, for example, value data such as electronic money, in an IC card memory and an area for storing the value data writing history information are set as separate areas, and the data is written. Management history and the like.

The method of storing data in an IC card according to one embodiment of the present invention is further characterized in that, when data stored outside the IC card is stored in the IC card, the data is read from outside the IC card. Receiving information indicating the fact from a circuit for recognizing the data, and setting management information of the data in a predetermined area based on the information. In this method as well, an area for writing data, for example, value data such as electronic money, in an IC card memory and an area for storing value data write history information are set as separate areas, and the data is stored in the IC card memory. It manages the writing history and the like.

According to one aspect of the present invention, a program stored in an IC card and performing processing includes: a unit for obtaining information indicating that data is stored in the IC card; and a program for storing information in a predetermined area in the IC card based on the information. It is characterized by realizing means for setting data management information. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is an overall configuration diagram showing an example of the function and information flow of an IC card according to the present invention and an external device for backing up its contents.

Fig. 2 is a functional block diagram of the key export and import functions.

FIG. 3 is a functional configuration diagram of the differential backup function and the restore function.

FIG. 4 is a data structure diagram of a changed memory management table.

Fig. 5 is a data structure diagram of stored data.

FIG. 6 is a functional configuration diagram of the card AP coordination function.

FIG. 7 is a data structure diagram of backup data. FIG. 8 is a data structure diagram of a record constituting the backup data. FIG. 9 is a data structure diagram of the restorer data for another card.

FIG. 10 is a diagram showing the data structure of the backup target memory.

FIG. 11 is a data structure diagram of an AP management table.

FIG. 12 is a flowchart of the entire execution procedure.

FIG. 13 is a flowchart of a card initialization command process.

FIG. 14 is a flowchart of the backup command processing.

FIG. 15 is a flowchart of backup data transfer command processing. FIG. 16 is a flowchart of the backup completion command processing.

FIG. 17 is a flowchart of the restore command process.

FIG. 18 is a flowchart of a restore data transfer command process.

FIG. 19 is a flowchart of a restore completion command process.

FIG. 20 is a flowchart of the value initialization processing of the card AP.

FIG. 21 is a schematic diagram showing an example of the relationship between an IC card and an IC card issuer. BEST MODE FOR CARRYING OUT THE INVENTION

The present invention will be described in more detail with reference to the accompanying drawings. In the following drawings, only functions necessary for the description of the present invention are shown, and functions not directly necessary for the description of the present invention are omitted.

The IC card is equipped with an IC chip, and the IC chip for this IC card is usually

It consists of CPU and three types of memory. The three types of memory are non-rewritable non-volatile memory ROM (read only memory) and rewritable non-volatile memory E E

PROM (electrically erasable and programmable read only memory) and rewritable volatile memory (RAM). The IC force exchanges information with external devices such as a portable terminal and a PC by a command and a command response via a device usually called an IC card reader / writer. The data passed to the card by the command is called command data, and the command response that the card passes as a command processing result includes response data and response code.

A method for transferring and retrieving information between an IC card and an IC card reader / writer There are contact type, non-contact type, and hybrid type that can exchange information whether it is contact type or non-contact type.The present invention is applicable to any of these types of IC cards. it can.

FIG. 1 is an overall configuration diagram showing an example of the flow of information and the functions of an external device such as an IC card for backing up the contents of an IC card according to the present invention. In the flow of information, the encrypted information is indicated by a broken line, and the unencrypted information is indicated by a solid line.

A backup function (003) that backs up the contents of the EEPR〇M (002) to an external device (040) such as a personal computer (PC) is stored in the IC card (001). The backup data is stored from the external device. It has a restorer function (004) for restoring and an encryption function (005) for encrypting and decrypting pack-up data. It also has a card-specific encryption key (008) that exists only in the card to encrypt and decrypt the backup data. The encryption key unique to the card may be generated in the card, or a means for securely receiving the key from an external device may be provided. However, by keeping the card-specific encryption key (008) only in the card, the security of the backup data can be further enhanced. The data backed up in this way can be secured by encrypting it in the card and providing a means that can be decrypted only in the card. That is, the IC card (001) according to the present invention holds the card-specific encryption key (008) in the card, and uses the encryption key (008) to encrypt information (006) and information. Equipped with an encryption function (005) that performs the decryption process (007), and the backup data (010) is extracted to the outside in a state of being encrypted with the encryption key (008) unique to the force, and is encrypted during restoration. The decrypted information is decrypted in the card using the card-specific encryption key (008) and restored. Note that the restore function (004) can be implemented at a higher speed by realizing it with a circuit instead of a program.

When restoring backup data to another card, decryption on another card is required. For this reason, a key unloading function (011) and a key importing function [012] are provided as means for passing the card-specific encryption key to another card (1 @ card 13). In addition, a storage function (041) is provided as a function of storing the backup data in a disk device (043) or the like on an external device, and an extraction function (042) is provided as a function of extracting the stored backup data. FIG. 2 shows a configuration of a key carry-out function (011) and a key carry-in function (012) for transferring the card-specific encryption key (008) shown in FIG. 1 to another card. In the IC card, the same common encryption key (009) is provided between cards in order to encrypt and pass the encryption key (008) unique to the card to another card. This common encryption key may be generated in the card, as in the case of the encryption key unique to the card, or a means for securely receiving the key from an external device may be provided. Also, by keeping the data only in the card, the security of the backup data can be further enhanced. The encryption key (008) unique to the card is encrypted with the common encryption key (009) at the time of backup and transferred to an external device as part of the backup data (010) for storage. At the time of restoration, the card-specific encryption key (008) is transferred by decrypting the card-specific encryption key transferred from the external device (040) and passed as pack-up data with the common encryption key (009). Further, by using the decrypted card-specific encryption key (008) to decrypt the backup data (010), restoration within another card is realized.

Figure 3 shows the configuration of the differential backup function and differential restore function that back up only the changed memory contents. The IC card (001) has a differential backup function (020) and a differential restore function (021) for backing up and restoring only the changed memory contents. In the differential backup, the changed memory management table (022) is provided in the EEPROM (002) at a location not to be backed up as a means of checking the memory that has been changed since the previous backup or restoration. By backing up only the memory contents changed by differential backup, processing time and storage medium capacity can be reduced.

FIG. 4 shows the data structure of the change memory management table. As shown in FIG. 4, the change memory management table (022) divides the EEPROM C002) into fixed-length (page) (090) units and holds a flag (091) that can determine whether there is a change for each page. You. The means for setting this flag is prepared by hardware or a program. After the card is initialized, backed up, and restored, the flag is reset. This differential backup is highly effective when used in combination with a full backup. In addition, if one full backup and a series of multiple differential backups are stored on the external device, Backup sequence number stored as ^f- data management information

Based on the (061) and the backup type (063), the external device (040) is provided with a means for sequentially extracting them and restoring them in the order in which the restoration can be executed efficiently.

FIG. 5 shows the data structure of backup data stored on an external device. When storing on an external device, a card number unique to the card (060), backup sequence number (061), backup date (062), backup type (063), etc. are generated or obtained from the card as management information of the backup data. And store it in correspondence with the pack update data. The backup sequence number (061) is a number assigned in sequence for each backup execution. The backup type (063) identifies a full backup and a differential backup.

FIG. 6 shows the configuration of a card AP coordination function (032) that provides value initialization means by AP. This figure shows an example where the program in the IC card (001) is configured separately for 0S (030) and AP (031), and this backup is realized as a function of 0S (030). .

As a way to avoid the inconvenience of executing the restore of an AP (031) that has a Pari-yu such as an electronic money manager, the Valuable may return to the backup point. An AP restore execution flag (086) is set in 0S, as shown in the table below, and the AP provides a means for notifying the AP of the flag status and a means for the AP to reset this flag. (032). An AP that has value such as electronic money must first check whether restoration has been performed before using the stored value, and take action such as initializing the value if restoration has been performed. After that, it is necessary to process the value. In addition, once the AP has initialized the value, it is necessary to request 0 S to reset the restore execution flag (086). By implementing the backup function as a 0S function, backup can be realized without imposing a burden on the AP. Furthermore, for APs that have value such as electronic money and points, the scope of the backup can be expanded by implementing a method that can initialize the value after executing restoration. FIG. 7 shows the data structure of the backup data transferred to the external device. The backup data (010) consists of a card-specific encryption key (008), backup control information (050), and a data part (053) that is the actual memory content to be backed up. The backup control information (050) has a card number (051) unique to the card that has been backed up, and a backup type (052) that identifies a full backup and a differential backup. The card number is used to check for a match when restoring to the own card. Work errors that are likely to occur due to this card number match check can be prevented. Only the card-specific encryption key (008) is encrypted with the card-common encryption key (009), and the rest is encrypted with the card-specific encryption key (006). The data part (053) is composed of a plurality of records (054).

FIG. 8 shows the data structure of the record (054) constituting the data part (053). Each record consists of the backed-up memory contents (056) and a field (055) indicating the location of the memory contents on the EEPROM. Each record may consist of a single page or multiple pages.

FIG. 9 shows the data structure of the restorer data when restoring data to another card. When restoring the backup data to another card, add the card number (070) of the card to be restored obtained in advance to the backup data (010) and transfer it to the card. In this way, when restoring, it is possible to check whether the passed card number matches the card to be actually restored. By checking the matching of the card numbers, it is possible to prevent work errors that are likely to occur.

Figure 10 shows the data structure of the EE PROM (002) to be backed up. This figure shows an example in which the program in the IC card is configured separately for the OS and the AP. In this case, the EEPROM is the system area (080) used by the OS and the AP area where the program code and data of the AP are stored. (081). The system area (080) consists of an area for 0S itself and an area for the AP management table (082) used by 0S to manage and execute the AP.

FIG. 11 shows the data structure of the AP management table. The AP management table (082) is provided with the position and size (085) of each AP on the EE PROM and a flag (086) indicating whether or not the AP has executed the restore for each AP. On EE PROM The AP location and size are used to determine if each AP has performed a restore.

FIG. 12 shows a flow chart of the overall execution procedure of backup and restore according to the present invention. Normally, an IC card is initialized by a card initialization function (105) before the card is issued. To initialize this card, the card has an initialization command processing (100). Also, there are three types of commands to be processed by the card to execute backup: a backup command (107), a backup data transfer command (108), and a backup completion command (109). The backup command is a command for requesting execution of a backup. The backup data transfer command is a command for dividing and transferring backup data. The backup completion command is a command for notifying the card that the backup processing on the external device has been completed normally. In addition, there are three types of commands to be processed by the card to execute the restore, a restore command (110), a restore data transfer command (111), and a restore completion command (112). The restore command is a command for requesting execution of a restore. The restore data transfer command is a command for dividing and transferring the backup data to be restored. The restore completion command is a command for notifying the card that the restoration processing on the external device has been completed normally.

Next, the operation of the initialization command processing will be described with reference to the flowchart of FIG. Upon receiving the card initialization command (106), the card generates a card-specific encryption key for backup and stores it in the system area of the EPROM (120). In addition, it generates a backup common encryption key for backup and stores it in the system area of EEPR 0 (121). Next, the original card initialization processing is executed (122), and thereafter, the changed memory management table is initialized (123).

Next, the operation of the backup command processing will be described with reference to the flowchart of FIG. When the card receives the backup command (107), it returns 0 as necessary.

Using the authentication function of S, the validity of the re-command is confirmed by the command authentication check of the backup command (130). Next, E E during backup processing

The backup processing in progress flag is set to avoid updating the PROM (131). Next, a pointer indicating the backup position of the EEPROM is initialized (132). Next, the card-specific encryption key and the backup control information, which are part of the backup data, are extracted into a buffer and encrypted with the force common encryption key and the card-specific encryption key, respectively (133, 134, 135, 136). The encrypted data is transmitted as command response data (137).

Next, the operation of the backup data transfer command processing will be described with reference to the flowchart of FIG. When the card receives the backup data transfer command (108), it determines whether or not the request is a differential backup request (140). If the request is not a differential backup request, the card buffers data in page units from the backup start pointer set in the backup command processing. (141). If the request is a differential backup request, the data of the page changed in page units is fetched from the backup start pointer into the buffer with reference to the change memory management table (022) (142). Next, the backup start pointer is updated to retrieve the next page (143). Next, the data extracted to the buffer is encrypted with an encryption key unique to the card (144). Next, the encrypted data is transmitted as command response data (146). In addition, when the backup process for all the target pages is completed, the fact is transmitted as a command response code along with the transmission of the encrypted data (147).

Next, the operation of the backup completion command processing will be described with reference to the flowchart of FIG. When the card receives the backup completion command (109), it initializes the change memory management table (022) (150) and resets the backup processing flag (151). The processing result is transmitted as a command response code (152).

Next, the operation of the restore command processing will be described with reference to the flowchart of FIG. Upon receiving the restore command (110), the card first checks the authentication of the command in the same manner as the backup command processing (160). Next, during the restore process

In order to avoid updating of the EEPROM, the in-restore flag is set (161). Next, it is determined whether or not a restore to the drive is requested (162). If a restore to the drive is requested, the backup control information passed as command data is decrypted with the card-specific encryption key. (163), obtain information necessary for the restoration process. The card number obtained from this control information and the card number of the card performing this restoration The validity of the restorer process is confirmed by checking the matching of the numbers (164).

If restoration to a card other than the card that backed up is requested, first check whether the card number of the card to be restored passed as command data matches the card number of the card performing the restoration. To confirm the validity of the restoration (165). Next, the encryption key unique to the force of the backed-up card passed as the restore data is decrypted with the card common encryption key (166). Furthermore, the decryption-specific encryption key of another card is set to be used in the restoration process (167). Next, the processing result is transmitted as a command response code (168).

Next, the operation of the restore data transfer command processing will be described with reference to the flowchart of FIG. When the card receives the restore data transfer command (111), the backup data read into the buffer as command data is used. If the card is to be restored to its own card, the card uses its own card-specific encryption key. If it is restored, decryption is performed with the given encryption key unique to the hand of another card (170). The decrypted data is written into the backup position added to the data in page units (171). Next, if the request is a differential restore request, the AP management table is referenced and the restorer execution flag of the AP to which the restored page belongs from the position and size of the AP is set (174). Next, the processing result is transmitted as a command response code (175). Next, the operation of the restore completion command processing will be described with reference to the flowchart of FIG. Upon receiving the restore completion command (112), the card sets the restore execution flags of all APs unless a differential restore request is made (181). Next, the change memory management table is initialized (182), and the restore processing flag is reset (183). The processing result is transmitted as a command response code (184). In the case of a differential restore request, the change memory management table is initialized (182), the restore processing flag is reset (183), and the processing result is transmitted as a command response code (184).

Next, the value initialization processing of the AP will be described with reference to the flowchart of FIG.

Upon receiving a command for the AP, the AP normally checks the validity of the re-command by performing a command authentication check using the authentication function of the AP (190). Next, it is checked whether or not restoration has been executed for the AP using the card AP link function provided by OS (191). If a restore has been performed, The value of the electronic money, points, etc. held by the AP is initialized (193), and the restorer execution flag for the AP is reset using the AP linking function (194). Thereafter, normal command processing is executed (195), and the processing result is transmitted (196). 0 Use the card AP link function provided by S to check whether or not restoration has been executed for the AP (191). If restoration has not been executed, execute normal command processing (195). ), And sends the processing result (196).

Although not described in FIG. 20, as another method of initializing the AP value, a command response code is used to notify the requester that the restoration is being executed, and the requester sends the AP a request. Another way is to reissue the command to set the value of Also, although not illustrated in the figure, the AP registers the value initialization routine at 0 S, and when the restore is executed, the AP is registered at the next time the AP is executed. There is also a method of executing an initialization routine to execute an initialization process.

FIG. 21 is a schematic diagram showing an example of a relationship between an IC card, an application stored therein, and an IC card issuer. The IC card (001) shown in this example has multiple applications related to electronic money (201), credit (202), identification card (203), medical service (204), member service (205), etc. One is stored. The IC card issuer provides a backup service of the memory contents of the IC card as one of the services. The card issuer's host computer (210) stores programs (211 and 213) for backing up the IC card and restoring it to the IC card, and a database (212) for backup. I have.

The backup of the memory contents of the IC card (001) is performed periodically or irregularly by the IC card owner by causing the card issuer's terminal to read the IC card owned by the card issuer, and performing the communication with the terminal of the application service provider. The card issuer's host computer (210) is connected via a communication network, and when the IC card holder uses the IC card, the backup data is transferred from the service provider's terminal to the card issuer's host computer (210). Can be executed. If the IC card owner loses his or her own IC card, he / she must follow the prescribed procedures Offer to the publisher. Then, the card issuer issues a backup database

A service for issuing a new IC card (214) using the backup data of the IC card stored in (212) is performed.

The backup method and the restore method of the IC card have been described in detail above. However, the present invention uses the functions of the 0S and the AP in the IC card described above or the circuit built in the IC card. When data is externally stored in the IC card, it is detected and extended so that data management information such as the storage date and the number of times of storage of the data is written in a predetermined area of the IC card. Can be. This method is used, for example, when an AP that handles electronic money is loaded on an IC card and the electronic money is stored from outside the IC card, the electronic money is stored in an area other than the writing area of the electronic money. It enables storage of writing history information, and can be used to manage the writing history of electronic money. Industrial applicability

As described above, according to the IC card and the IC card backup / restore method of the present invention, the IC card is encrypted and backed up using the card-specific encryption key that exists only in the card, and the backed up data has the same IC power. By decrypting and restoring only within one domain, a secure backup can be realized. Also, by encrypting the card-specific encryption key using the same common encryption key between cards that exist only in the force and passing it to another card, safe restoration for another card can be realized. .

Claims

The scope of the claims

1. An encryption key, an encryption function for performing encryption processing and decryption processing, and a backup data obtained by encrypting information stored in a memory of an IC force by the encryption processing of the encryption function using the encryption key. A backup function for carrying out the data, and a restore function for decrypting the carried-in encrypted backup data by the decryption processing of the encryption function using the encryption key and restoring the data in memory. card.

2. An encryption key unique to the IC card, an encryption key common to a plurality of IC cards, an encryption function for performing encryption processing and decryption processing, and encryption of the encryption function using the unique encryption key. Information including the backup data obtained by encrypting the information stored in the memory of the IC card in the encryption process and the unique encryption key encrypted by the encryption process using the common encryption key. IC function that is equipped with a backup function.

3. A first encryption key, an encryption function that performs a decryption process using the encryption key, and a second encryption process performed on the input encrypted information using the first encryption key in the decryption process of the encryption function. A decryption function for decrypting the backup data from the carried-in encrypted information using the second encryption key in the decryption processing of the encryption function and restoring the data in a memory. Characteristic IC card.

4. An encryption key unique to the IC card, an encryption key common to a plurality of IC cards, an encryption function for performing encryption processing and decryption processing, and an encryption function using the encryption key unique to the IC card. The backup data obtained by encrypting the information stored in the memory of the IC card in the encryption process and the encryption key unique to the IC card encrypted in the encryption process of the encryption function using the common encryption key. A backup function for carrying out information including information; a function for decrypting an encryption key unique to an IC card from the carried-in encrypted information using the common encryption key in a decryption process of the encryption function; and the decrypted IC card. And a restore function of restoring backup data decrypted in the decryption processing of the encryption function using a unique encryption key to the memory.

5. The IC card according to claim 1, wherein the backup data includes an IC An Ic card characterized by containing identification information for identifying a card.

6. The IC card according to claim 1, further comprising an operating system having a function of retaining information indicating that the restoration has been executed and notifying the card application of the information. card.

7. The IC card according to claim 6, wherein the application is an application that handles data (value) whose value itself has economic value, and the application has received information indicating that the restoration has been executed. A process for initializing the value.

8. An encryption key unique to the IC card, an encryption key common to a plurality of IC cards, an encryption function for performing encryption processing and decryption processing, and encryption of the encryption function using the common encryption key. A key unloading function for unloading the unique encryption key encrypted by the encryption process, and a decryption process of the encryption function using the common encryption key by using the shared encryption key to decrypt an encryption key unique to the IC card. An Ic card having a key import function.

9. In an IC force backup method for backing up the memory contents of an IC card to a device outside the IC card,

Wherein the contents of the memory are encrypted using an encryption key unique to the IC card, which is present only in the IC card, and are carried out as backup data to a device outside the IC card. How to pack up

10. In the method of restoring the memory content of the IC card, which restores the memory content of the IC card backed up to an external device to the IC card,

The IC card memory according to claim 1, wherein the encrypted pack update data received from the external device is decrypted using an encryption key unique to the IC card, which exists only in the IC card, and restored in the memory. Content restore method.

11. The method for restoring memory contents of an IC card according to claim 10, wherein the backup data includes identification information for identifying an IC card, and the identification information included in the backup data and the IC to be restored at the time of restoration. A method of restoring the memory contents of an IC card, which checks whether the identification information of the card matches.

12. The method of backing up the memory contents of the first IC card to an external device and restoring the backed up memory contents to the memory of the second IC card, Encrypting a unique encryption key of the first IC card, which exists only in the first IC card, using an encryption key common to the first and second IC cards in the first IC card The backup data including the encrypted data and the data obtained by encrypting the memory contents of the first IC card in the first IC card using an encryption key unique to the first IC card. Carrying out from the IC card to the external device;

Importing the backup data from the external device with the second IC card;

Decrypting an encryption key unique to the first IC card in the second IC card from the carried-in backup data using the common encryption key that exists only in the IC card;

Decrypting the contents of the memory of the first IC card in the second IC card using the decrypted encryption key unique to the first IC card from the carried-in backup data;

Restoring the decrypted memory contents of the first IC card to the memory of the second IC card.

13. The method according to claim 12, wherein the identification information of the IC card whose memory content of the first IC card is to be restored is acquired in advance, added to the backup data, and added to the backup data. A method for checking whether the identification information matches the identification information held by the second IC card.

14 4. In the method of backing up the memory contents of the IC card to an external device and restoring the backed up memory contents to the memory of the IC card,

A method that determines whether the contents of the memory to be backed up have been changed for each memory division (page), and backs up and restores only the changed pages.

15. The method according to claim 14, wherein the external device stores, as management information of the backup data, a backup sequence number and information on whether the backup is an entire backup or a partial backup of only a changed page. And a method of collectively restoring a series of backup data using this management information.

16 6. In the method of backing up the memory contents of the IC card to an external device and restoring the backed up memory contents to the memory of the IC card,

A method characterized in that a program in an IC card is configured separately for an operating system and an application program, and a backup function and a restore function are realized as functions of the operating system.

17. In the method according to claim 16, the application program has values such as electronic money and points, and when the operating system performs backup and restore, the operating system restores the application program to the application program. A method, wherein the execution is notified, and the application program notified of the execution of the restore initializes the pariyu before using the pariyu.

18. A method of storing a program on an IC card, wherein when storing a program stored on the outside of the IC card on the IC card, recognizes that the program has been read from outside the IC card. A method for storing a program in an IC card, comprising: receiving information indicating that from a program, and setting a specific value in a predetermined area in the IC card based on the information.

19. A method of storing a program on an IC card, wherein when storing a program stored outside the IC card on the IC card, the program is

(1) Receives information indicating the fact from a circuit that recognizes that the data has been read from outside the C card, and sets a specific value in a predetermined area in the IC card based on the information. How to store a program on an IC card.

20. A program which is stored in an IC card and performs processing, and means for obtaining information indicating that the program has been stored in the IC card, and a specific area in a predetermined area in the IC card based on the information. A program that implements means for setting a value.

21. A method of storing data in an IC card, wherein when storing data stored outside the IC card in the IC card, it is recognized that the data is read from outside the IC card. Receiving the information indicating that from the program to be executed, and setting the management information of the data in a predetermined area based on the information. A method for storing data on an IC card.

22. A method for storing data in an IC card, wherein when storing data stored outside the IC card in the IC card, it is recognized that the data has been read from outside the IC card. A method of receiving data indicating the fact from a circuit that performs the setting and setting management information of the data in a predetermined area based on the information, and storing the data in an IC card.

23. A program which is stored in an IC card and performs processing, means for obtaining information indicating that data is stored in the IC card, and the data of the data is stored in a predetermined area in the IC card based on the information. A program that features means for setting management information.