IC chip, communication system, signal processing method, and program

Abstract

To appropriately prepare an IC chip corresponding to individual information for each destination even if not having a secure writing environment.SOLUTION: An IC chip includes a communication unit that performs communication with an external apparatus, a storage unit that stores a plurality pieces of individual information, and a signal processing unit that identifies the individual information which is valid among the plurality of pieces of individual information based on management information notified from the external apparatus, and performs signal processing based on the identified individual information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an IC chip, a communication system, a signal processing method, and a program. [Background technology]

[0002] Various IC chips have been developed by semiconductor manufacturers (for example, Patent Document 1). By writing a program into the IC chip, the IC chip is able to execute processing according to the program. In addition, individual information corresponding to the destination of the IC chip (customer, base, etc.), such as key data and certificate information, may be written into the IC chip. By writing individual information, when the IC chip is embedded in and used in another device at the destination, for example, and communicates with the other device, it becomes possible to execute processing related to encryption, decryption, and mutual authentication, thereby enabling secure communication. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 4573350 Summary of the Invention [Problem to be solved by the invention]

[0004] However, writing each piece of information to an IC chip by yourself is time-consuming. For example, if the individual pieces of information include key data or other confidential information, it is necessary to prepare a secure writing environment to prevent information leaks. Furthermore, if the individual pieces of information include large amounts of data such as certificate chains, writing them takes a long time.

[0005] One method is to request that a semiconductor manufacturer write individual information, but if, for example, after requesting that individual information for Company A be written into n IC chips, the number of IC chips to be delivered to Company A increases beyond n, an additional request must be made. Also, if the number of IC chips to be delivered to Company A decreases after the request, there is a risk of the company being left with inventory. This has led to the problem of it being difficult to prepare the right number of IC chips corresponding to the individual information for each destination depending on shipping conditions, etc.

[0006] The present invention has been made in consideration of the above circumstances, and aims to provide an IC chip, a communication system, a signal processing method, and a program that can prepare an IC chip corresponding to individual information according to the destination in the exact amount, even if a secure writing environment is not available. [Means for solving the problem]

[0007] The IC chip of the present invention includes a communication unit that communicates with an external device, a storage unit that stores a plurality of pieces of individual information, and a signal processing unit that identifies individual information to be valid from the plurality of pieces of individual information based on management information notified from the external device, and performs signal processing using the identified individual information. the storage unit has a storage area for storing the management information, and the signal processing unit stores the management information notified from an external device in the storage area, and when the external device requests signal processing using the individual information, identifies individual information to be valid from among the plurality of pieces of individual information by referring to the management information stored in the storage area, and performs signal processing using the identified individual information, and before storing the management information notified from the external device in the storage area, determines whether information already stored in the storage area is predetermined initial information, and if the initial information is not stored in the storage area, does not store the management information notified from the external device in the storage area. do. In addition, the IC chip of the present invention includes a communication unit that communicates with an external device, a memory unit that stores multiple pieces of individual information, and a signal processing unit that identifies individual information to be valid from the multiple pieces of individual information based on management information notified from the external device and performs signal processing using the identified individual information, wherein the memory unit has a memory area that stores the management information, and the signal processing unit stores the management information notified from the external device in the memory area, and when the external device requests signal processing using the individual information, identifies individual information to be valid from the multiple pieces of individual information by referring to the management information stored in the memory area and performs signal processing using the identified individual information, and before storing the management information notified from the external device in the memory area, determines whether the information already stored in the memory area is predetermined initial information, and if the initial information is not stored in the memory area, does not store the management information notified from the external device in the memory area.

[0008] A communication system of the present invention includes the IC chip described above and an external device that communicates with the IC chip, and the external device notifies the IC chip of the management information. The signal processing method of the present invention is a signal processing method performed by an IC chip that stores a plurality of pieces of individual information, in which a communication unit communicates with an external device, and a signal processing unit identifies individual information to be valid from the plurality of pieces of individual information based on management information notified from the external device, and performs signal processing using the identified individual information. a signal processing method including: a memory area for storing the management information; the signal processing unit stores the management information notified from an external device in the memory area; when the external device requests signal processing using the individual information, the signal processing unit identifies individual information to be valid from the plurality of pieces of individual information by referring to the management information stored in the memory area; performs signal processing using the identified individual information; and before storing the management information notified from the external device in the memory area, determines whether information already stored in the memory area is predetermined initial information; and if the initial information is stored in the memory area, stores the management information notified from the external device in the memory area. Further, the signal processing method of the present invention is a signal processing method performed by an IC chip that stores multiple pieces of individual information, wherein a communication unit communicates with an external device, a signal processing unit identifies individual information to be valid from the multiple pieces of individual information based on management information notified from the external device, performs signal processing using the identified individual information, and has a memory area for storing the management information, wherein the signal processing unit stores the management information notified from the external device in the memory area, and when the external device requests signal processing using the individual information, identifies individual information to be valid from the multiple pieces of individual information by referring to the management information stored in the memory area, performs signal processing using the identified individual information, and before storing the management information notified from the external device in the memory area, determines whether the information already stored in the memory area is predetermined initial information, and if the initial information is not stored in the memory area, does not store the management information notified from the external device in the memory area.

[0009] The program of the present invention is a program for operating a computer that is the IC chip described above, and is a program for causing the computer to function as each unit included in the IC chip. [Effects of the Invention]

[0010] According to the present invention, even if a secure writing environment is not provided, it is possible to prepare just the right number of IC chips corresponding to individual information according to the destination. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a block diagram showing an example of the configuration of a communication system 1 according to an embodiment. [Figure 2] FIG. 10 is a diagram illustrating an example of segment information 120 according to an embodiment. [Figure 3] FIG. 10 is a diagram illustrating an example of segment management information 121 according to an embodiment. [Figure 4] FIG. 10 is a diagram illustrating an example of segment management information 121 according to an embodiment. [Figure 5] 3 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. [Figure 6] FIG. 6 is a diagram showing an example of the configuration of a command used in FIG. 5. [Figure 7] 1 is a flowchart showing the flow of processing performed by the IC chip 10 according to the embodiment. [Figure 8] 3 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. [Figure 9] FIG. 9 is a diagram showing an example of the configuration of a command used in FIG. 8. [Figure 10] 3 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. [Figure 11] FIG. 11 is a diagram showing an example of the configuration of a command used in FIG. 10. DETAILED DESCRIPTION OF THE INVENTION

[0012] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0013] 1 is a block diagram showing an example of the configuration of a communication system 1 according to an embodiment. The communication system 1 includes an IC chip 10 and an external device 20. The IC chip 10 and the external device 20 are connected to each other so as to be able to communicate with each other.

[0014] The external device 20 is an electronic device (computer) external to the IC chip 10. The external device 20 is a reader / writer that writes and reads information to and from the IC chip 10. In this case, the external device 20 communicates with the IC chip 10 to write and read information. Alternatively, the external device 20 is an integrated circuit or the like embedded on a substrate on which the IC chip 10 is mounted. In this case, the external device 20 communicates with the IC chip 10, sends a command to the IC chip 10 to request that it perform signal processing, and receives the result of the signal processing performed by the IC chip 10 as a response to the command.

[0015] The IC chip 10 is an integrated circuit. The IC chip 10 may be an integrated circuit for signal processing such as a CPU (Central Processing Unit), or may be a large-scale integrated circuit such as a so-called SoC (System On Chip) in which communication, memory, and signal processing circuits are integrated into a single chip.

[0016] The IC chip 10 includes, for example, a communication unit 11, a storage unit 12, and a control unit 13. The communication unit 11 communicates with an external device 20. The storage unit 12 is a storage medium. Examples of storage media include a hard disk drive (HDD), flash memory, electrically erasable programmable read-only memory (EEPROM), random access read / write memory (RAM), read-only memory (ROM), or a combination thereof. The storage unit 22 stores programs for executing various processes of the IC chip 10 and temporary data used when performing the various processes.

[0017] The storage unit 12 stores, for example, a plurality of pieces of segment information 120 (segment 0 information 120-1 to segment N information 120-(N-1)) and segment management information 121, where N is any natural number. The storage unit 12 has a plurality of segment areas, each of which stores a different piece of segment information 120. For example, segment area 0 stores segment 0 information 120-1. Segment area 1 stores segment 1 information 120-2.

[0018] The segment information 120 is individual information (individual information) used for each destination. The destination here refers to the party to which the IC chip 10 is destined, such as a customer to whom the IC chip 10 is delivered, a factory that incorporates the IC chip 10 into a substrate, or a base such as a factory where inspection is performed. The segment information 120 is, for example, information indicating an encryption key used in encryption or decryption processing, such as key data. The segment information 120 is also authentication information used in authentication processing with a communication partner, such as a digital certificate or a digital certificate chain.

[0019] The segment management information 121 is information that indicates which of the multiple pieces of segment information 120 is valid for the destination. The segment management information 121 is, for example, information (segment number) that uniquely identifies the segment area in which the valid segment information 120 is stored. For example, when "segment 0 information 120-1" is valid, "segment number 0 (zero)" is stored in the segment management information 121 as information that uniquely identifies "segment area 0." When "segment 1 information 120-2" is valid, "segment number 1" is stored in the segment management information 121 as information that uniquely identifies "segment area 1."

[0020] In this manner, in this embodiment, the segment information 120 used by each of the multiple destinations is stored for each segment area. Then, information specifying the segment information 120 that is valid for the destination is stored in the segment management information 121.

[0021] As a result, in this embodiment, simply by storing information specifying the segment information 120 to be valid for the destination in the segment management information 121, the IC chip 10 can execute signal processing using the segment information 120 corresponding to the destination. This eliminates the need to individually write key data, certificate chains, and the like corresponding to the destination. This eliminates the need to independently prepare a secure writing environment. Furthermore, it does not take a long time to write information with a large data volume, such as a certificate chain. This also makes it possible to prepare just the right number of IC chips 10 according to the destination.

[0022] The control unit 13 is realized by causing a signal processing circuit such as a CPU core provided as hardware in the IC chip 10 to execute a program. The control unit 23 includes, for example, an acquisition unit 130, a signal processing unit 131, and a device control unit 132.

[0023] The acquisition unit 130 acquires the command notified from the external device 20 via the communication unit 11. The acquisition unit 130 outputs the acquired command to the signal processing unit 131.

[0024] The signal processing unit 131 performs processing based on the command notified from the external device 20 and outputs the processing result. The command-based processing performed by the signal processing unit 131 will be described in detail later.

[0025] The device control unit 132 performs overall control of the IC chip 10. For example, when the communication unit 11 receives a command from the external device 20, the device control unit 132 outputs the received command to the acquisition unit 130. Furthermore, the device control unit 132 acquires the results of processing based on the command performed by the signal processing unit 131, and transmits the acquired processing results to the external device 20 via the communication unit 11 as a response to the command.

[0026] FIG. 2 is a diagram showing an example of segment information 120 according to an embodiment. The segment information 120 is generated according to the number of segment areas. The segment information 120 is composed of information corresponding to each item, such as a segment number, a key data group, and a certificate chain. The segment number is a number that uniquely identifies the segment area in which the segment information 120 is stored. The key data group is a collection of cryptographic keys used for encryption and decryption, such as a private key, a public key, and a common key. The certificate chain is a series of electronic certificates, from a certificate certifying the IC chip 10 to a certificate authority certificate certifying the root certificate authority.

[0027] 3 and 4 are diagrams showing examples of segment management information 121 according to an embodiment. Fig. 3 shows an example in which initial values ​​are stored in the segment management information 121. Fig. 4 shows an example in which segment numbers according to destinations are stored in the segment management information 121.

[0028] In this embodiment, as the initial value of the segment number, a number without a corresponding segment area is stored in advance. In FIG. 3, an example in which "FFh" is stored as the initial value of the segment information 120 is shown.

[0029] As shown in FIG. 4, the segment number "K (where 0 ≤ K < N)" corresponding to the destination is stored and written in the segment information 120.

[0030] Here, the processing based on the command executed by the signal processing unit 131 will be described with reference to FIGS. 5 to 11.

[0031] FIG. 5 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. First, the external device 20 determines a segment number to be activated according to the destination of the IC chip 10 (step S1). The external device 20 transmits a command requesting to write the segment number to the IC chip 10 (step S2).

[0032] FIG. 6 is a diagram showing a configuration example of the command used in FIG. 5. The command is composed of, for example, a header part and a data part. The header part contains information indicating, for example, CLA (command class), INS (command code), P1 (parameter 1), P2 (parameter 2), Lc (data length), and the like. The data part contains information indicating the segment number to be activated.

[0033] Returning to FIG. 5, the IC chip 10 receives a command from the external device 20 (step S3). The IC chip 10 executes a writing process of writing the segment number to the segment management information 121 based on the received command (step S4). The flow of the writing process will be described in FIG. 7. The IC chip 10 transmits a command response to the external device 20 (step S5). The command response here contains information indicating whether the writing process has ended normally. The external device 20 receives the command response from the IC chip 10 (step S6).

[0034] Here, the flow of the write process shown in step S4 of Fig. 5 will be described with reference to Fig. 7. Fig. 7 is a flowchart showing the flow of the process performed by the IC chip 10 according to the embodiment.

[0035] First, the signal processing unit 131 of the IC chip 10 acquires information stored in the segment management information 121 (step S40). The signal processing unit 131 determines whether the information stored in the segment management information 121 is initial information (step S41). As shown in the example of Fig. 3, when the initial information of the segment management information 121 is the initial value (FFh), the signal processing unit 131 determines whether the initial value (FFh) is stored in the segment management information 121.

[0036] If the segment management information 121 stores initial information, the signal processing unit 131 acquires the number (segment number) notified by the command (step S42). The signal processing unit 131 acquires the segment number notified by the command by extracting the data stored in the data portion of the command. The signal processing unit 131 stores the acquired segment number in the segment management information 121 (step S43). In this case, the signal processing unit 131 outputs a command response indicating that the write process has ended normally.

[0037] On the other hand, if it is determined in step S41 that the initial information is not stored in the segment management information 121, that is, that information different from the initial information is stored, the signal processing unit 131 does not store the segment number notified by the command in the segment management information 121 (step S44). In this case, the signal processing unit 131 outputs a command response indicating that the write process did not end normally.

[0038] As described above, the signal processing unit 131 performs the write process when initial information is stored in the segment management information 121. In other words, the signal processing unit 131 does not perform the write process when information different from the initial information is stored in the segment management information 121, for example, when a segment number has already been stored. This prevents a different segment number from being set in an IC chip 10 that has already been set with a segment number corresponding to a destination. Therefore, access to the segment information 120 that has not been activated is prohibited, and signal processing using the segment information 120 that has not been activated can be prevented.

[0039] 8 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. Fig. 8 shows the flow of a read process for reading a certificate chain. This sequence is based on the premise that the segment number has already been stored in the segment management information 121.

[0040] First, the external device 20 transmits a command to the IC chip 10 requesting that the certificate chain be read (step S100).

[0041] 9 is a diagram showing an example of the configuration of a command used in FIG. 8. A command is composed of, for example, a header section, a data section, and a footer section. The header section includes information indicating, for example, CLA (instruction class), INS (instruction code), P1 (parameter 1), P2 (parameter 2), Lc (data length), etc. The data section includes information indicating an offset and a length. The offset is information indicating the address value at which the certificate chain to be read is stored, and is information indicating the relative difference between a reference address value (for example, the first address value of segment information 120) and the address value at which the certificate chain to be read is stored. The length is the data length of the certificate chain to be read. The footer section includes information indicating, for example, Le (the length of the response (command response)).

[0042] Returning to FIG. 8, the IC chip 10 receives a command from the external device 20 (step S101). The signal processing unit 131 of the IC chip 10 acquires the offset and length notified by the command (step S102). The signal processing unit 131 acquires the segment number stored in the segment management information 121 (step S103). The signal processing unit 131 calculates the start address of the segment information 120 corresponding to the acquired segment number (step S104). The signal processing unit 131 reads the certificate chain to be read using the calculated start address and the offset and length notified by the command (step S105). The signal processing unit 131 outputs the read target as a command response (step S106). The external device 20 receives the command response from the IC chip 10 (step S107).

[0043] 10 is a sequence diagram showing the flow of processing performed by the communication system 1 according to the embodiment. The flow of the generation processing for generating signature data is shown in FIG. 10. This sequence is based on the premise that the segment number has already been stored in the segment management information 121.

[0044] First, the external device 20 transmits a command to the IC chip 10 requesting the generation of signature data (step S200).

[0045] Fig. 11 is a diagram showing an example of the configuration of a command used in Fig. 10. The command is composed of, for example, a header section, a data section, and a footer section. The header section contains information indicating, for example, CLA (instruction class), INS (instruction code), P1 (parameter 1), P2 (parameter 2), Lc (data length), etc. The data section contains information indicating a random number. The random number is used in the process of generating signature data.

[0046] Returning to FIG. 10, the IC chip 10 receives a command from the external device 20 (step S201). The signal processing unit 131 of the IC chip 10 acquires the random number notified by the command (step S202). The signal processing unit 131 acquires the segment number stored in the segment management information 121 (step S203). The signal processing unit 131 calculates the start address of the segment information 120 corresponding to the acquired segment number (step S204). The signal processing unit 131 reads out key data from the segment information 120 (step S205). The signal processing unit 131 generates signature data using the read out key data and the random number notified by the command (step S206). The signal processing unit 131 outputs the generated signature data as a command response (step S207). The external device 20 receives the command response from the IC chip 10 (step S208).

[0047] As described above, the IC chip 10 of the embodiment includes the communication unit 11, the storage unit 12, and the signal processing unit 131. The communication unit 11 communicates with the external device 20. The storage unit 12 stores a plurality of pieces of segment information 120 (individual information). The signal processing unit 131 identifies the segment information 120 to be valid from the plurality of pieces of segment information 120 based on the segment number (management information) notified from the external device 20. The signal processing unit 131 performs signal processing using the identified segment information 120 (the segment information 120 to be valid).

[0048] As a result, the IC chip 10 of the embodiment can validate any one of the plurality of pre-written segment information 120 based on the segment number notified from the external device 20. Therefore, signal processing can be performed using the segment information 120 corresponding to the destination without having to write the segment information 120 corresponding to the destination individually to the IC chip 10. In other words, there is no need to prepare a secure writing environment on your own. Furthermore, it does not take a lot of time to write information with a large data volume, such as a certificate chain. This also makes it possible to prepare just the right number of IC chips 10 according to the destination.

[0049] Furthermore, in the IC chip 10 of the embodiment, the storage unit 12 has a plurality of segment areas, each of which stores different segment information 120 (individual information), and the segment number (management information) is information indicating which of the plurality of segment areas is to be validated. As a result, in the IC chip 10 of the embodiment, it is possible to specify a segment area to be validated and execute signal processing using the segment information 120 stored in that segment area, thereby achieving the same effects as those described above.

[0050] Furthermore, in the IC chip 10 of the embodiment, the segment information 120 (individual information) includes a key data group (an encryption key used for encryption or decryption processing). The signal processing unit 131 performs encryption or decryption processing using the key data group included in the segment information 120 (specified individual information) to be enabled. As a result, the IC chip 10 of the embodiment can execute encryption or decryption processing using the key data group to be enabled, and can perform encryption or decryption processing using an encryption key unique to each destination, enabling highly secure communication.

[0051] Furthermore, in the IC chip 10 of the embodiment, the segment information 120 (individual information) includes a certificate chain (authentication information used in authentication processing). The signal processing unit 131 performs authentication processing using the certificate chain included in the segment information 120 (specified individual information) to be validated. As a result, the IC chip 10 of the embodiment can execute authentication processing using the validated certificate chain, and can perform authentication processing using an electronic certificate according to the destination, enabling highly secure communication.

[0052] Furthermore, in the IC chip 10 of the embodiment, the storage unit 12 stores segment management information 121. That is, the storage unit 12 has a storage area for storing segment numbers (management information). The signal processing unit 131 stores the segment numbers notified from the external device 20 in the segment management information 121 of the storage unit 12. When the external device 20 requests signal processing using segment information 120, the signal processing unit 131 identifies the segment information 120 to be valid from among the multiple pieces of segment information 120 by referring to the segment numbers stored in the segment management information 121. The signal processing unit 131 performs signal processing using the identified segment information 120 (the segment information 120 to be valid). As a result, in the IC chip 10 of the embodiment, it is possible to perform signal processing using the segment information 120 according to the destination by referring to the segment management information 121.

[0053] Furthermore, in the IC chip 10 of the embodiment, the signal processing unit 131 determines whether the information already stored in the segment management information 121 is a predetermined initial value (initial information) before storing the segment number notified from the external device 20 in the segment management information 121. If the initial value is stored in the segment management information 121, the signal processing unit 131 stores the management information notified from the external device 20 in the segment management information 121. Furthermore, if the initial value is not stored in the segment management information 121, the signal processing unit 131 does not store the segment number notified from the external device 20 in the segment management information 121. As a result, in the IC chip 10 in the implementation area, it is not possible to set another segment number in the IC chip 10 that has already set a segment number corresponding to the destination, thereby prohibiting access to the segment information 120 that has not been activated and preventing signal processing using the segment information 120.

[0054] The communication system 1 of the embodiment includes an IC chip 10 and an external device 20. The external device 20 communicates with the IC chip 10. The external device 20 notifies the IC chip 10 of a segment number (management information). The segment number is information indicating which of the multiple pieces of segment information 120 is to be valid. This allows the communication system 1 of the embodiment to achieve the same effects as those described above.

[0055] All or part of the IC chip 10 in the above-described embodiment may be implemented by a computer. In this case, a program for implementing the functions may be recorded on a computer-readable recording medium, and the program may be loaded into a computer system and executed. Note that the term "computer system" as used herein includes hardware such as an operating system and peripheral devices. Furthermore, the term "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, as well as storage devices such as hard disks built into a computer system. Furthermore, the term "computer-readable recording medium" may also include devices that dynamically store programs for a short period of time, such as communication lines used when transmitting programs over a network such as the Internet or a telephone line, or devices that store programs for a fixed period of time, such as volatile memory within a computer system that serves as a server or client. The program may also be designed to implement some of the functions described above, or may be capable of implementing the functions in combination with a program already stored in the computer system, or may be implemented using a programmable logic device such as an FPGA.

[0056] Although an embodiment of the present invention has been described above in detail with reference to the drawings, the specific configuration is not limited to this embodiment, and includes designs within the scope of the gist of the present invention. [Explanation of symbols]

[0057] 1. Communication systems 10...IC chip 11. Communications Department 12...Storage section 120...Segment information 121...Segment management information 13...Control unit 130…Acquisition Department 131...Signal processing unit 132...Device control section 20...External device

Claims

1. a communication unit for communicating with an external device; a storage unit that stores a plurality of pieces of individual information; a signal processing unit that identifies valid individual information from the plurality of pieces of individual information based on management information notified from an external device, and performs signal processing using the identified individual information; Equipped with the storage unit has a storage area for storing the management information, The signal processing unit storing the management information notified from an external device in the storage area, and when signal processing using the individual information is requested by the external device, identifying individual information to be valid from among the plurality of pieces of individual information by referring to the management information stored in the storage area, and performing signal processing using the identified individual information; before storing the management information notified from the external device in the storage area, determining whether or not information already stored in the storage area is predetermined initial information, and if the initial information is stored in the storage area, storing the management information notified from the external device in the storage area; IC chip.

2. a communication unit for communicating with an external device; a storage unit that stores a plurality of pieces of individual information; a signal processing unit that identifies valid individual information from the plurality of pieces of individual information based on management information notified from an external device, and performs signal processing using the identified individual information; Equipped with the storage unit has a storage area for storing the management information, The signal processing unit storing the management information notified from an external device in the storage area, and when signal processing using the individual information is requested by the external device, identifying individual information to be valid from among the plurality of pieces of individual information by referring to the management information stored in the storage area, and performing signal processing using the identified individual information; before storing the management information notified from the external device in the storage area, determining whether or not the information already stored in the storage area is predetermined initial information, and if the initial information is not stored in the storage area, not storing the management information notified from the external device in the storage area; IC chip.

3. the storage unit has a plurality of segment areas, and stores different individual information in each of the plurality of segment areas; the management information is information indicating a segment area to be validated among the plurality of segment areas; 3. The IC chip according to claim 1 or 2.

4. The individual information includes an encryption key used for encryption or decryption processing, the signal processing unit performs encryption or decryption processing using the encryption key included in the specified individual information. The IC chip according to any one of claims 1 to 3.

5. The individual information includes authentication information used in authentication processing, the signal processing unit performs authentication processing using the authentication information included in the identified individual information. The IC chip according to any one of claims 1 to 4.

6. The IC chip according to any one of claims 1 to 5, an external device that communicates with the IC chip; Equipped with the external device notifies the IC chip of the management information; Communication system.

7. A signal processing method performed by an IC chip that stores a plurality of individual pieces of information, The communication unit communicates with an external device, a signal processing unit that identifies valid individual information from the plurality of pieces of individual information based on management information notified from an external device, and performs signal processing using the identified individual information; a storage area for storing the management information; The signal processing unit storing the management information notified from an external device in the storage area, and when signal processing using the individual information is requested by the external device, identifying individual information to be valid from among the plurality of pieces of individual information by referring to the management information stored in the storage area, and performing signal processing using the identified individual information; before storing the management information notified from the external device in the storage area, determining whether or not information already stored in the storage area is predetermined initial information, and if the initial information is stored in the storage area, storing the management information notified from the external device in the storage area; Signal processing methods.

8. A signal processing method performed by an IC chip that stores a plurality of individual pieces of information, The communication unit communicates with an external device, a signal processing unit that identifies valid individual information from the plurality of pieces of individual information based on management information notified from an external device, and performs signal processing using the identified individual information; a storage area for storing the management information; The signal processing unit storing the management information notified from an external device in the storage area, and when signal processing using the individual information is requested by the external device, identifying individual information to be valid from among the plurality of pieces of individual information by referring to the management information stored in the storage area, and performing signal processing using the identified individual information; before storing the management information notified from the external device in the storage area, determining whether or not the information already stored in the storage area is predetermined initial information, and if the initial information is not stored in the storage area, not storing the management information notified from the external device in the storage area; Signal processing methods.

9. A program that causes an IC chip that stores a plurality of pieces of individual information to operate as the IC chip described in any one of claims 1 to 5, and causes the IC chip to function as each of the parts that the IC chip has.

Images