Electronic information storage medium, IC chip, IC card, data transfer determination method, and program

Abstract

To provide an electronic information storage medium, IC chip, IC card, data transfer determination method and program that can efficiently limit external transfer of issuance data for activating an application.SOLUTION: An IC chip 2 is configured to: manage the number of transferrable times to be subtracted every time issuance data for activating a service application is externally transferred; determine whether the issuance data is transferrable to a mobile terminal T on the basis of the number of transferrable times, when receiving a command indicative of an inquiry into transferability of issuance data from the mobile terminal T; transmit, to the mobile terminal T, a responce indicative of the issuance data being transferrable when being transferrable; and, when not being transferrable, transmit, to the mobile terminal T, a responce indicative of the issuance data not being transferrable.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to the technical field of a method for transferring issued data for activating an application from an IC card to an external device. [Background technology]

[0002] In recent years, a technology has been known that emulates on a mobile device (portable terminal) functions equivalent to those of an IC card on which an application for providing a user with a specific service is installed. For example, Patent Document 1 discloses a technology in which a mobile terminal directly obtains, from a contactless IC card, issuance data required for emulating a contactless IC card corresponding to a service application on a mobile terminal, and activates the service application. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 6977477 Summary of the Invention [Problem to be solved by the invention]

[0004] However, if the issuance data stored in the IC card could be transferred to an external device without restriction, there would be an increased risk that the issuance data would be used by someone other than the owner of the IC card.

[0005] Therefore, the present invention has been made in consideration of such problems and aims to provide an electronic information storage medium, an IC chip, an IC card, a data migration determination method, and a program that can efficiently restrict the migration of issued data to the outside for activating an application. [Means for solving the problem]

[0006] In order to solve the above problem, the invention described in claim 1 is an electronic information storage medium on which an application for providing a specified service to a user is installed, comprising: a storage means for storing issued data for activating the application; a management means for managing the number of times the issued data can be transferred, which is deducted each time the issued data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred when a command inquiring whether the issued data can be transferred from an external terminal is received; and a transmission means for transmitting a response to the external terminal indicating that the issued data can be transferred when the determination means determines that the issued data can be transferred.

[0007] The invention described in claim 2 is characterized in that, in the electronic information storage medium described in claim 1, a plurality of different applications are installed on the electronic information storage medium, the management means manages the number of times the issued data can be transferred to activate each of the applications in association with an identifier of each of the applications, a command indicating an inquiry as to whether the issued data can be transferred includes an identifier of one of the applications, and when the determination means receives the command indicating the inquiry as to whether the transfer can be made, it determines whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred associated with the identifier included in the command.

[0008] The invention described in claim 3 is characterized in that, in the electronic information storage medium described in claim 1, after the response is sent to the external terminal, the transmitting means sends a response including the issuance data to the external terminal when it receives a command indicating a request for the issuance data from the external terminal.

[0009] The invention described in claim 4 is an electronic information storage medium having an application installed thereon for providing a specified service to a user, comprising: a storage means for storing issued data for activating the application; a management means for managing the number of times the issued data can be transferred, which is deducted each time the issued data is transferred externally; and a transmission means for transmitting a response indicating the number of times the issued data can be transferred to the external terminal when a command inquiring whether the issued data can be transferred from the external terminal is received.

[0010] The invention described in claim 5 is an IC chip on which an application for providing a specified service to a user is installed, comprising: a storage means for storing issued data for activating the application; a management means for managing the number of times the issued data can be transferred, which is deducted each time the issued data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred when a command inquiring whether the issued data can be transferred from an external terminal is received; and a transmission means for transmitting a response to the external terminal indicating that the issued data can be transferred when the determination means determines that the issued data can be transferred.

[0011] The invention described in claim 6 is an IC card on which an application for providing a specified service to a user is installed, comprising: a storage means for storing issued data for activating the application; a management means for managing the number of times the issued data can be transferred, which is deducted each time the issued data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred when a command inquiring whether the issued data can be transferred from an external terminal is received; and a transmission means for transmitting a response to the external terminal indicating that the issued data can be transferred when the determination means determines that the issued data can be transferred.

[0012] The invention described in claim 7 is a data migration determination method executed by an electronic information storage medium on which an application for providing a specified service to a user is installed, comprising the steps of: storing issued data for activating the application in a storage means; managing the number of times the issued data can be transferred, which is subtracted each time the issued data is transferred externally; when a command indicating an inquiry as to whether the issued data can be transferred is received from an external terminal, determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred; and when it is determined that the issued data can be transferred, sending a response to the external terminal indicating that the issued data can be transferred.

[0013] The invention described in claim 8 is characterized in that a computer on which an application for providing a specified service to a user is installed executes the following steps: storing issuance data for activating the application in a storage means; managing the number of times the issued data can be transferred, which is subtracted each time the issued data is transferred to an external device; when a command is received from an external terminal inquiring whether the issued data can be transferred, determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred; and when it is determined that the issued data can be transferred, sending a response to the external terminal indicating that the issued data can be transferred. Effect of the Invention

[0014] According to the present invention, it is possible to efficiently restrict the transfer of issued data for activating an application to the outside. [Brief description of the drawings]

[0015] [Figure 1] FIG. 2 is a diagram showing an example of a schematic configuration of an IC card C. [Diagram 2]2 is a diagram illustrating an example of a hardware configuration of an IC chip 2. FIG. [Diagram 3] FIG. 13 is a diagram illustrating an example of a correspondence relationship between a service application and the number of times transfer is possible. [Figure 4] 13 is a flowchart showing an example of a process of the IC chip 2 when a command inquiring about the transferability of issued data is received from the mobile terminal T. [Diagram 5] 13 is a flowchart showing an example of a process of the IC chip 2 when a command indicating a request for issuance data is received from the mobile terminal T. [Figure 6] 13 is a sequence diagram showing an example of an operation performed when a mobile terminal T determines whether or not issued data can be migrated. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0016] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. Note that the embodiment described below is an embodiment in which the present invention is applied to an IC card on which an application (hereinafter, referred to as a "service app") for providing a specific service (e.g., a payment service) to a user is installed.

[0017] [1. Configuration and functions of IC card C] First, the configuration and functions of an IC card C according to this embodiment will be described with reference to FIG. 1. FIG. 1 is a diagram showing an example of a schematic configuration of an IC card C. As shown in FIG. 1, the IC card C includes an antenna 1, an IC chip 2, and the like. The antenna 1 is used for the IC chip 2 to perform contactless communication (for example, contactless communication conforming to ISO / IEC 14443) between the IC chip 2 and a mobile terminal T such as a smartphone. The antenna 1 includes an antenna coil, receives a carrier wave (electromagnetic wave) emitted from the mobile terminal T, and transmits a modulated signal output from the IC chip 2 as an electromagnetic wave. The IC card C and the IC chip 2 are examples of electronic information storage media. Examples of the IC card C include a credit card and an electronic money card. A service application is installed in the mobile terminal T (an example of an external terminal), and the mobile terminal T is capable of requesting issuance data for activating the service application from the IC card C.

[0018] FIG. 2 is a diagram showing an example of a hardware configuration of the IC chip 2. As shown in FIG. 2, the IC chip 2 includes an I / O circuit 21, a RAM (Random Access Memory) 22, an NVM (Nonvolatile Memory) 23, a ROM (Read Only Memory) 24, and a CPU (Central Processing Unit) 25 (an example of a computer). The I / O circuit 21 serves as an interface for performing contactless communication with a mobile terminal T via an antenna 1. The I / O circuit 21 is connected to the antenna 1 and includes a power (power supply) supply circuit and a modulation / demodulation circuit. The power supply circuit rectifies and smoothes an induced current related to power (induced electromotive force) induced by a carrier wave received by the antenna 1, and supplies power to each component (CPU 25, etc.) of the IC chip 2. The modulation / demodulation circuit demodulates data from the carrier wave received by the antenna 1 and outputs the data to the CPU 25. The modulation / demodulation circuit also modulates data from the CPU 25 and outputs the data to the antenna 1 as a modulated signal.

[0019] For example, a flash memory is applied to the NVM 23 (an example of a storage means). The NVM 23 may be an "Electrically Erasable Programmable Read-Only Memory". The NVM 23 or the ROM 24 stores an operating system, a plurality of different service apps, and the program of the present invention. A unique AID (application identifier) ​​is assigned to each of the service apps. In addition, in the record area of ​​the NVM 23, files (e.g., EF (Elementary File)) that store issued data (including personal information of a user) for activating (personalizing) a service app in association with the AID of the service app are written separately for each service app. Each file is assigned a unique identifier (e.g., SFI (Short File Identifier)).

[0020] Furthermore, the NVM 23 stores the number of times that issued data can be transferred in an updatable manner for each service application. Here, the number of times that issued data can be transferred is subtracted (for example, subtracted by 1 from the upper limit) every time the issued data is transferred to the outside (in other words, taken over). The number of times that issued data can be transferred can also be called the number of times that it can be taken over. FIG. 3 is a diagram showing an example of a correspondence relationship between a service application and the number of times that it can be transferred. In the example of FIG. 3, the number of times that issued data corresponding to service application A can be transferred is "10", the number of times that issued data corresponding to service application B can be transferred is "5", and the number of times that issued data corresponding to service application C can be transferred is "1". When the number of times that it can be transferred becomes "0" by subtracting the number of times that it can be transferred every time the issued data is transferred to the mobile terminal T, the transfer (taking over) to the mobile terminal T is not possible. This makes it possible to restrict the transfer of issued data to the mobile terminal T.

[0021] The CPU 25 functions as a management means, a determination means, a transmission means, etc. in the present invention by the program of the present invention. Specifically, the CPU 25 manages the number of times that the issued data can be transferred by using the NVM 23. For example, the CPU 25 manages the number of times that the issued data corresponding to each service application can be transferred by associating it with the AID of each service application.

[0022] For example, when the CPU 25 receives a command indicating an inquiry as to whether or not the issued data can be migrated from the mobile terminal T of the owner of the IC card C, the CPU 25 determines whether or not the issued data can be migrated to the mobile terminal T based on the number of times the issued data can be migrated (this is called "judgment as to whether or not the issued data can be migrated"). Here, the command indicating the inquiry as to whether or not the migration can be migrated may be configured by a command APDU (Application Protocol Data Unit). The command APDU includes a header portion including CLA, INS, P1, and P2, and a body portion including Data and the like, as specified in ISO / IEC 7816-3, for example. The inquiry as to whether or not the migration can be migrated may be indicated by a predetermined bit of P1 or P2, or data indicating the inquiry as to whether or not the migration can be migrated may be included in the body portion of the command APDU. In addition, the body portion of the command APDU may include the AID of a service application corresponding to the issued data that is the target of the inquiry as to whether or not the migration can be migrated.

[0023] Then, when the CPU 25 determines that the issued data can be transferred to the mobile terminal T (for example, the number of times that the transfer can be made is greater than "0"), the CPU 25 transmits a response indicating that the issued data can be transferred to the mobile terminal T. Here, the response indicating that the issued data can be transferred may be configured by a response APDU. The response APDU includes at least status words (SW1, SW2), for example, as specified in ISO / IEC 7816-3. Here, the fact that the issued data can be transferred may be indicated by a status word indicating normal termination. On the other hand, when the CPU 25 determines that the issued data cannot be transferred to the mobile terminal T (for example, the number of times that the transfer can be made is "0"), the CPU 25 transmits a response indicating that the issued data cannot be transferred to the mobile terminal T.

[0024] After a response indicating that the issued data can be transferred is transmitted to the mobile terminal T, when the CPU 25 receives a command indicating a request for issued data from the mobile terminal T, the CPU 25 reads the target issued data from the NVM 23 and transmits a response including the issued data to the mobile terminal T. Here, the command indicating the request for issued data may be, for example, a GET DATA command defined in ISO / IEC 7816-3. The body of the command indicating the request for issued data may include the AID of the service application corresponding to the issued data.

[0025] [2. Operation of IC card C] Next, the operation of the IC card C according to this embodiment will be described with reference to Figs. 4 and 5. Fig. 4 is a flowchart showing an example of the process of the IC chip 2 (CPU 25) when a command inquiring whether or not the issuance data can be transferred is received from the mobile terminal T. Fig. 5 is a flowchart showing an example of the process of the IC chip 2 when a command indicative of a request for issuance data is received from the mobile terminal T. Note that, as a prerequisite for the process shown in Fig. 4, it is assumed that the IC chip 2 has completed authentication of the mobile terminal T. For example, the IC chip 2 receives a signature (signature data) based on the private key of the mobile terminal T from the mobile terminal T, and authenticates the mobile terminal T by verifying the signature using a public key that forms a pair with the private key. Note that the public key is a public key whose validity has been certified by, for example, a certification authority.

[0026] The process shown in Fig. 4 is started when a command (inquiry command) inquiring whether or not the issued data can be transferred is received from the mobile terminal T via the antenna 1. When the process shown in Fig. 4 is started, the IC chip 2 acquires the AID of the service application from the received command (step S1). Next, the IC chip 2 acquires the number of times the issued data can be transferred, which is associated with the AID acquired in step S1, from the NVM 23 (step S2). Next, the IC chip 2 determines whether or not the number of times the issued data can be transferred acquired in step S2 is greater than "0" (step S3). That is, a determination is made as to whether or not the issued data can be transferred.

[0027] Then, when the IC chip 2 determines that the transferable number of times is not greater than "0" (step S3: NO), it transmits a response indicating that the issued data cannot be transferred to the mobile terminal T via the antenna 1 (step S4), and ends the process shown in Fig. 4. As a result, the mobile terminal T that has received the response indicating that the issued data cannot be transferred performs error processing (e.g., outputting an error message). On the other hand, when the IC chip 2 determines that the transferable number of times is greater than "0" (step S3: YES), it transmits a response indicating that the issued data can be transferred to the mobile terminal T via the antenna 1 (step S5), and ends the process shown in Fig. 4. As a result, the mobile terminal T that has received the response indicating that the issued data can be transferred transmits a command indicating a request for the issued data to the IC chip 2.

[0028] The process shown in FIG. 5 is started when a command indicating a request for issuance data is received from the mobile terminal T via the antenna 1. When the process shown in FIG. 5 is started, the IC chip 2 acquires the AID of the service application from the received command (step S11). Next, the IC chip 2 acquires the issuance data associated with the AID acquired in step S11 and the transferable number of times of the issuance data from the NVM 23 (step S12). Next, the IC chip 2 transmits a response including the issuance data acquired in step S12 to the mobile terminal T (step S13). Next, the IC chip 2 subtracts "1" from the transferable number of times acquired in step S12 (step S14). Next, the IC chip 2 updates (overwrites) the transferable number of times before subtraction written in the NVM 23 with the transferable number of times subtracted in step S14 (step S15), and ends the process shown in FIG. 5.

[0029] As described above, according to the above embodiment, the IC chip 2 manages the number of possible transfers, which is deducted each time issued data for activating a service app is transferred externally, and when it receives a command from mobile terminal T inquiring whether the issued data can be transferred, it determines whether the issued data can be transferred to mobile terminal T based on the number of possible transfers of the issued data, and if the issued data can be transferred, it sends a response to mobile terminal T indicating that the issued data can be transferred, whereas if the issued data cannot be transferred, it sends a response to mobile terminal T indicating that the issued data cannot be transferred, thereby efficiently restricting the transfer of the issued data to the outside.

[0030] (Modification) In the above embodiment, the IC chip 2 is configured to determine whether or not the issued data can be transferred. However, as a modified example, the determination of whether or not the transfer can be performed may be performed by the mobile terminal T. FIG. 6 is a sequence diagram showing an example of an operation in which the mobile terminal T determines whether or not the issued data can be transferred. In FIG. 6, when the IC chip 2 receives an inquiry command transmitted from the mobile terminal T (step S21) via the antenna 1, the IC chip 2 acquires the AID of the service application from the received command (step S22). Next, the IC chip 2 acquires the transferable number of times of the issued data associated with the AID acquired in step S22 from the NVM 23 (step S23). Next, the IC chip 2 transmits a response including the transferable number of times acquired in step S23 to the mobile terminal T via the antenna 1 (step S24).

[0031] On the other hand, when the control unit (acquisition means) of the mobile terminal T receives the response from the IC chip 2, it acquires the transferable number of issued data from the response (step S25). Next, the control unit (determination means) of the mobile terminal T determines whether the transferable number acquired in step S25 is greater than "0" (step S26). That is, a transferability determination of issued data is performed. If it is determined that the transferable number is not greater than "0" (step S26: NO), an error process (e.g., an error message output) is performed (step S27). On the other hand, if it is determined that the transferable number is greater than "0" (step S26: YES), a command (request command) indicating a request for the issued data is transmitted to the IC chip 2 (step S28). As a result, the IC chip 2 performs the process shown in FIG. 5.

[0032] In the above embodiment, the non-contact type IC card C has been described as an example, but the present invention can be applied to a contact type IC card. Also, in the above embodiment, the IC card C equipped with the IC chip 2 has been described as an example, but the IC chip 2 of the present invention may be equipped in a small IC card that can be attached to and detached from a communication device, or may be equipped on an embedded board as an eUICC (Embedded Universal Integrated Circuit Card) so that it cannot be easily removed or replaced from a communication device. [Explanation of symbols]

[0033] 1 Antenna 2. IC chip 21 I / O circuit 22 RAM 23 NVM 24 ROM 25 CPU C. IC card T-Mobile device

Claims

1. An electronic information storage medium on which an application for providing a predetermined service to a user is installed, a storage means for storing issuance data for activating the application; a management means for managing the number of times the issuance data can be transferred, the number being decremented each time the issuance data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on the number of times the issued data can be transferred when a command inquiring whether the issued data can be transferred from the external terminal is received; a transmission means for transmitting a response indicating that the issued data is transferable to the external terminal when the determination means determines that the issued data is transferable; An electronic information storage medium comprising:

2. a plurality of different applications are installed on the electronic information storage medium; The management means manages a transferable number of times of issuance data for activating each of the applications in association with an identifier of each of the applications; the command indicating the query as to whether or not the issued data can be migrated includes an identifier of any one of the applications; The electronic information storage medium described in claim 1, characterized in that when the determination means receives a command indicating an inquiry as to whether the transfer is possible, it determines whether the issued data can be transferred to the external terminal based on the number of times the transfer is possible corresponding to the identifier included in the command.

3. The electronic information storage medium according to claim 1, characterized in that after the response is transmitted to the external terminal, the transmitting means transmits a response including the issuance data to the external terminal when it receives a command indicating a request for the issuance data from the external terminal.

4. An electronic information storage medium having installed thereon an application for providing a predetermined service to a user, a storage means for storing issuance data for activating the application; a management means for managing the number of times the issuance data can be transferred, the number being decremented each time the issuance data is transferred to an external device; a transmitting means for transmitting a response indicating the number of times the issued data can be migrated to the external terminal when a command indicating an inquiry as to whether the issued data can be migrated is received from the external terminal; An electronic information storage medium comprising:

5. An IC chip in which an application for providing a user with a predetermined service is installed, a storage means for storing issuance data for activating the application; a management means for managing the number of times the issuance data can be transferred, the number being decremented each time the issuance data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on a transferable number of times of the issued data when a command inquiring whether the issued data can be transferred from the external terminal is received; a transmission means for transmitting a response indicating that the issued data is transferable to the external terminal when the determination means determines that the issued data is transferable; An IC chip comprising:

6. An IC card in which an application for providing a predetermined service to a user is installed, a storage means for storing issuance data for activating the application; a management means for managing the number of times the issuance data can be transferred, the number being decremented each time the issuance data is transferred to an external device; a determination means for determining whether the issued data can be transferred to the external terminal based on a transferable number of times of the issued data when a command inquiring whether the issued data can be transferred from the external terminal is received; a transmission means for transmitting a response indicating that the issued data is transferable to the external terminal when the determination means determines that the issued data is transferable; An IC card comprising:

7. 1. A data migration determination method executed by an electronic information storage medium on which an application for providing a user with a predetermined service is installed, comprising: storing in a storage means issuance data for activating the application; a step of managing the number of times the issuance data can be transferred, the number being reduced each time the issuance data is transferred to an outside; a step of determining whether the issued data can be transferred to the external terminal based on a transferable number of times of the issued data when a command indicating a transferability inquiry of the issued data is received from the external terminal; transmitting a response indicating that the issued data is transferable to the external terminal when it is determined that the issued data is transferable; A data migration determination method comprising:

8. A computer on which an application for providing a specific service to a user is installed, storing in a storage means issuance data for activating the application; a step of managing the number of times the issuance data can be transferred, the number being reduced each time the issuance data is transferred to an outside; a step of determining whether the issued data can be transferred to the external terminal based on a transferable number of times of the issued data when a command indicating a transferability inquiry of the issued data is received from the external terminal; transmitting a response indicating that the issued data is transferable to the external terminal when it is determined that the issued data is transferable; A program characterized by executing the above.

Images