JP4540454B2 - Application setting device, IC chip and program - Google Patents

Description

  The present invention relates to an application setting device or the like that includes an IC chip and a portable terminal on which the IC chip is mounted for downloading and setting an application or the like for using a service.

  In recent years, a system using a mobile terminal with an IC chip mounted for using services has been realized. In such a system, an application and data for using the service are downloaded and set to the IC chip and the mobile terminal, respectively, and the application in the mobile terminal uses the service using the application and data in the IC chip. Perform the process.

For example, there is a portable information processing apparatus that downloads an application for managing the usage history of an IC card function to a mobile phone and displays the usage history of the IC card function (Patent Document 1).
JP 2003-85466 A (4th, 5th page, FIG. 4)

  As described above, there are many services that require high security such as an electronic payment service and a service using personal information, which are used using a portable terminal with an IC chip. In this regard, the IC chip is structurally highly confidential and confidential and secures in setting applications, but the mobile terminal does not have high confidentiality like the IC chip. For this reason, for example, when an unauthorized application is set on the mobile terminal or when an application set on the mobile terminal is falsified, the application set on the IC chip may be used illegally.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an application setting device or the like that can safely set an application for a mobile terminal on which an IC chip is mounted.
Another object of the present invention is to provide an application setting device or the like that can easily detect falsification of an application set in a portable terminal on which an IC chip is mounted.

In order to achieve the above object, an application setting device according to the first aspect of the present invention provides:
An application setting device comprising an IC chip and a mobile terminal to which the IC chip is attached,
The IC chip is
Receiving means for receiving an application for a portable terminal and an application for an IC chip via the portable terminal;
Application storage means for storing in the memory the application for the IC chip received by the receiving means;
A hash value storage unit that obtains a hash value for the mobile terminal application received by the receiving unit, and stores the hash value in a memory in association with the identification code of the application;
Transmitting means for transmitting the application for the portable terminal received by the receiving means to the portable terminal;
In response to receiving the application usage request for the IC chip and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value and received. Means for matching the hash value;
A means for enabling use of an application for an IC chip indicated by the use request when the hash values that have been verified match;
The portable terminal is
Application receiving means for receiving and storing an application for a portable terminal transmitted by the transmitting means of the IC chip;
Obtaining a hash value of an application for a portable terminal to be executed, and a means for transmitting an application use request for an IC chip, an application identification code, and the hash value to the IC chip,
It is characterized by that.

The portable terminal may include means for receiving input of information related to customization of an application for the portable terminal and transmitting customization information based on the input information to the IC chip.
The IC chip may include means for receiving the customization information and storing it in a memory,
The receiving unit of the IC chip may further receive location information indicating a code change location corresponding to a customization item in the application for the mobile terminal,
The application storage means of the IC chip may further store the received location information in a memory,
The hash value storage unit of the IC chip customizes the received application for the mobile terminal based on the customization information and the location information stored in the memory, and the customized application for the mobile terminal A hash value may be obtained and stored in memory in association with the application identification code,
The transmission unit may transmit the customized application for the mobile terminal to the mobile terminal.

  The reception unit of the IC chip may receive at least one of the application for the portable terminal and the application for the IC chip with data divided based on the buffer size of the IC chip.

  The portable terminal receives the application for the portable terminal and the application for the IC chip from the computer that manages the application for the portable terminal and the application for the IC chip, and sets the buffer size of the IC chip. There may be further provided means for dividing and transmitting to the IC chip.

An IC chip according to the second aspect of the present invention is
An IC chip for an application setting device comprising: an IC chip; and a mobile terminal to which the IC chip is attached,
Receiving means for receiving an application for a portable terminal and an application for an IC chip via the portable terminal;
Means for storing an application for an IC chip received by the receiving means in a memory;
Means for obtaining a hash value for an application for a mobile terminal received by the receiving means, and storing the hash value in a memory in association with an identification code of the application;
Means for transmitting the mobile terminal application received by the receiving means to the mobile terminal;
In response to receiving the application usage request for the IC chip and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value and received. Means for matching the hash value;
A means for enabling use of an application for an IC chip indicated by the use request when the hash values matched are matched;
It is characterized by providing.

A program according to the third aspect of the present invention is:
A computer attached to a mobile device
Receiving means for receiving an application for a portable terminal and the application for the computer via the portable terminal;
Means for storing an application for the computer received by the receiving means in a memory;
Means for obtaining a hash value for an application for a mobile terminal received by the receiving means, and storing the hash value in association with an identification code of the application;
Means for transmitting an application for a portable terminal received by the receiving means to the portable terminal;
In response to receiving the application use request for the computer and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value is received. Means for matching the hash value,
Means for enabling use of the computer application indicated by the use request when the collated hash values match;
It is intended to function as.

  An application can be safely set for a portable terminal on which an IC chip is mounted.

Hereinafter, an application setting apparatus according to an embodiment of the present invention will be described with reference to the drawings.
A configuration example of an application download system including an application setting apparatus according to the present embodiment is shown in FIG. The application download system includes an application providing server 1, an application setting device 4 including an IC chip 2 and a mobile terminal 3 on which the IC chip 2 is mounted, and a service terminal 5. The application providing server 1 and the portable terminal 3 are connected via a network 10, and the network 10 includes, for example, the Internet, a dedicated line, a public line network, a mobile communication network, a wireless communication network, and the like.

  A configuration example of the application providing server 1 is shown in FIG. 2, and a configuration example of the IC chip 2 and the mobile terminal 3 constituting the application setting device 4 is shown in FIG. 3. FIG. 4 shows a functional block diagram of the application providing server 1, the IC chip 2, and the portable terminal 3.

The application providing server 1 is a server that provides an application for using a service, and includes a computer including a control unit 11, a storage unit 12, and a communication control unit 13.
The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like, and reads and executes an operation program or the like stored in advance in the storage unit 12 to execute an application. The division / combination unit 111, the application supply unit 112, and the like are logically realized.

  In response to an application download request from the mobile terminal 3, the application dividing / combining unit 111 performs mutual authentication, session key exchange (generation), etc. with the IC chip 2 via the mobile terminal 3. Then, the application and data for the IC chip 2 (hereinafter referred to as an IC chip application) and the application for the mobile terminal 3 (hereinafter referred to as the mobile terminal application) are each divided until there is no data to be divided. In application division, data of the buffer size is received from the IC chip 2, and the data size obtained by combining the divided IC chip application and the divided portable terminal application is within the buffer size of the IC chip 2. To. The divided IC chip application (IC chip AP) and portable terminal application (mobile terminal AP) are combined with identifiers (labels).

  The application supply unit 112 assigns a message authentication code (MAC) to the application (divided data) combined by the application dividing / combining unit 111 to generate IC chip command data for the IC chip 2, and the mobile terminal 3 Send to. An example of the format of the IC chip command data is shown in FIG. Note that the size of the divided data of the mobile terminal application is desirably a multiple of the block size of the hash calculation.

The storage unit 12 is constituted by, for example, a hard disk device or the like, and stores an operation program to be executed by the control unit 11 and various data necessary for processing. The storage unit 12 stores an IC chip application and a mobile terminal application in association with an application ID (APID), a service name, and the like. The storage unit 12 also has, for example, a portable terminal ID, an ID of the attached IC chip 2, a flag indicating whether an application has been set or not set, for each portable terminal 3 to which the IC chip 2 is attached. And information such as an IC chip ID, an authentication key, and an authentication state are stored for each IC chip 2.
The communication control unit 13 performs data communication with the mobile terminal 3 via the network 10.

The IC chip 2 includes, for example, a UIM (User Identity Module) card, a SIM (Subscriber Identity Module) card, and the like, and is used by being attached to the portable terminal 3. The IC chip 2 includes a CPU 21, a memory 22, and an input / output I / F (interface) 23.
The CPU 21 logically realizes the authentication unit 211, the data separation unit 212, the verification unit 213, and the like by executing the operation program stored in the memory 22.

  The authentication unit 211 performs message authentication and session key exchange (generation) with the application providing server 1 via the mobile terminal 3, and then a message authentication code assigned to the data received from the application providing server 1. (MAC) is verified.

  When the validity of the message authentication code is confirmed, the data separation unit 212 separates the combined application data from the application providing server 1 into divided data for the IC chip application and divided data for the portable terminal application. Then, the divided data of the IC chip application is stored in the memory 22 of the IC chip 2, and the hash value is calculated for the divided data of the portable terminal application, and the hash value is stored together with the application ID of the portable terminal application in the memory 22 And the mobile terminal application is transmitted to the mobile terminal 3. When calculating the hash value for the divided data of the mobile terminal application, if the hash value for the previously received divided data is stored in the memory 22, the hash value is also used as the initial value, and the received divided value is used. A hash value is calculated for the data, and the value stored in the memory 22 is updated. If the data separation unit 212 determines from the final flag included in the data that all the divided data of the IC chip application has been received, the data separation unit 212 combines them to form the IC chip application, and the memory 22 Remember and set to.

  When the verification unit 213 receives an application use request, a hash value, and an application ID from the mobile terminal 3, the verification unit 213 collates the received hash value with the hash value stored in the memory 22 corresponding to the received application ID. If they match, an OK signal is returned, and the use of the IC chip application is permitted by, for example, activating the IC chip application corresponding to the application ID.

The memory 22 includes a ROM, a RAM, and the like, and stores data such as an operation program to be executed by the CPU 21 and various data necessary for processing. In addition, the memory 22 includes the ID of the IC chip 2, information indicating the activation state of each IC chip application, the hash value of each mobile terminal application, mobile terminal specific information (screen size, etc.), and the buffer size of the IC chip 2. In addition, data such as the secret key and public key of the IC chip 2 and the public key of the application providing server 1 are stored.
The input / output I / F 23 controls data communication with the portable terminal 3 to which the IC chip 2 is attached.

The mobile terminal 3 includes, for example, a CPU 31, a memory 32, an input unit 33, a display unit 34, a communication unit 35, and an input / output I / F 36. In addition, the portable terminal 3 includes an IC chip mounting portion on which the IC chip 2 is mounted on the outer surface thereof.
The CPU 31 logically implements a download request unit 311, an application setting unit 312, an application execution unit 313, and the like by executing a program stored in the memory 32.

The download request unit 311 transmits an application download request to the application providing server 1, receives data transmitted from the application providing server 1 in response thereto, transmits the data to the IC chip 2, and receives from the IC chip 2. Data is transmitted to the application providing server 1.
The application setting unit 312 receives the divided data of the mobile terminal application from the IC chip 2 and stores it in the memory 32. When all the divided data are received, they are combined to form a mobile terminal application, which is stored and set in the memory 32.

  The application execution unit 313 calculates and obtains a hash value for the mobile terminal application stored in the memory 32 in order to execute the application when using the service, and the hash value and the mobile terminal application application The ID and the application use request are transmitted to the IC chip 2. When the OK signal is received, the mobile terminal application is activated, the IC chip application corresponding to the mobile terminal application stored in the IC chip 2 is accessed, and the process for using the service is performed. . The content of the service is arbitrary, and includes, for example, electronic payment such as credit payment, a service that provides information after personal authentication, and a service that uses the mobile terminal 3 as a commuter pass.

  The memory 32 includes a ROM, a RAM, and the like, and stores an operation program to be executed by the CPU 31, various data necessary for processing, and the like. The memory 32 stores data such as the mobile terminal ID of the mobile terminal 3, the application ID corresponding to each mobile terminal application, and mobile terminal specific information (screen size, etc.).

The input unit 33 is composed of an input device including a keyboard and a pointing device, for example, and notifies the CPU 31 of input data.
The display unit 34 includes a liquid crystal display or the like, and performs various screen displays.
The communication unit 35 performs data communication with the application providing server 1 via the network 10. The communication unit 35 performs data communication with the service terminal 5 by short-range wireless communication such as infrared communication.
The input / output I / F 36 controls data communication with the IC chip 2 mounted on the IC chip mounting portion of the mobile terminal 3.

  The service terminal 5 includes a computer including a control unit, a storage unit, a communication unit, an input unit, a display unit, and the like. The control unit executes an operation program stored in the storage unit, thereby performing infrared communication with the portable terminal 3. Data is transmitted and received by a short-range wireless communication method such as the above, and processing for providing a service to the user is performed. The service terminal 5 may be realized as a terminal that provides one service, or may be realized as a terminal that provides a plurality of services, for example. For example, in the case of a terminal that provides a plurality of services, the control unit stores a service providing program corresponding to the selected service in response to an input operation for selecting one service from the plurality of services. Read from the section and execute.

Next, the system operation of the application setting apparatus according to the embodiment of the present invention will be described.
First, an operation when an application for using a service is set in the IC chip 2 and the portable terminal 3 will be described with reference to FIG. As preprocessing, the application providing server 1 registers an IC chip application and a portable terminal application.

First, the CPU 31 of the mobile terminal 3 accepts an input such as a service setting request (step S1), and requests an IC chip ID or the like from the IC chip 2 mounted on the IC chip mounting unit in response thereto. The setting request including the IC chip ID and the service name is transmitted to the application providing server 1 (step S2).
In response to this, the application providing server 1 determines whether the requested service can be set based on the received data (step S3). Specifically, for example, it is determined whether an application corresponding to the requested service is registered in the storage unit 12 or the like.

When the determination result in step S3 indicates that setting is not possible (NG) (step S3: NO), the application providing server 1 notifies the mobile terminal 3 of an error and disconnects communication (step S4).
When the determination result in step S3 indicates that setting is possible (OK) (step S3: YES), the application providing server 1 transmits a request for authentication data to the IC chip 2 (step S5).
The CPU 21 of the IC chip 2 receives a request for authentication data from the application providing server 1 via the portable terminal 3, generates authentication data in response to this request, and sends it to the application providing server 1 via the portable terminal 3. Transmit (step S6). Specifically, for example, a random number is generated and generated as authentication data obtained by signing the generated random number with the secret key of the IC chip 2, and the generated random number, the public key of the IC chip 2, etc. are stored in the application providing server 1. You may send it.
The control unit 11 of the application providing server 1 receives the authentication data from the IC chip 2, and in response to this, verifies the authentication data (step S7). Specifically, for example, the signature of the received authentication data may be decrypted with the public key of the IC chip 2 to check whether the received random number is included.

And when the verification result in step S7 shows NG, the control part 11 of the application provision server 1 notifies an error to the portable terminal 3, and cut | disconnects communication (step S8).
If the verification result in step S7 indicates OK, the control unit 11 generates server authentication data and transmits it to the IC chip 2 (step S9). Specifically, for example, a random number is generated, data obtained by signing the generated random number with the secret key of the application providing server 1 is generated as server authentication data, and the generated random number, the public key of the application providing server 1 and the like are generated. It may be transmitted to the IC chip 2.

The CPU 21 of the IC chip 2 receives the server authentication data from the application providing server 1 via the portable terminal 3, and in response to this, verifies the server authentication data (step S10). Specifically, for example, the signature of the received server authentication data may be decrypted with the public key of the application providing server 1 to check whether the received random number is included.
And when the verification result in step S10 shows NG, CPU21 transmits an error notification to the application provision server 1 via the portable terminal 3, and cut | disconnects communication (step S11).
If the verification result in step S10 indicates OK, the CPU 21 generates a session key (step S12). In the generation of the session key, for example, a random number may be generated, and the generated random number, the random number used in generating the authentication data, and the random number included in the server authentication data may be used.

  Next, the CPU 21 of the IC chip 2 passes the buffer size of the IC chip and data obtained by encrypting the random number newly generated in step S12 with the public key of the application providing server 11 to the mobile terminal 3. The CPU 31 of the portable terminal 3 transmits an application request including data received from the IC chip 2 and information for specifying an application to be set such as an application ID to the application providing server 1 (step S13).

The control unit 11 of the application providing server 1 generates a session key in response to the application request (step S14). In the generation of the session key, for example, the encrypted random number received together with the application request is decrypted with the secret key of the application providing server 1, and the random number, the random number included in the authentication data, and the server authentication data are generated. The random number used may be used.
Next, the control unit 11 reads the portable terminal application and the IC chip application corresponding to the requested application from the storage unit 12 based on the application ID and the like. Then, each read application is divided based on the buffer size of the IC chip 2, and a label (identifier) is assigned to each of the divided data for the IC chip and the set of divided data for the portable terminal, and is combined. An authentication code (MAC) is assigned and sequentially transmitted to the IC chip 2 in divided units (step S15). The message authentication code may be a key derived from the session key. Further, a session key, MAC, or the like may be generated from a certain random number.

The CPU 21 of the IC chip 2 determines whether the MAC received from the application providing server 1 is correct (step S16). Specifically, for the received IC chip application and portable terminal application data, a MAC is generated in the same manner as the application providing server 1, and the generated MAC and the received MAC are collated, so that the received MAC Verify correctness.
If it is determined in step S16 that the MAC is not correct, the CPU 21 notifies the application providing server 1 of an error and disconnects communication (step S11).
If it is determined in step S16 that the MAC is correct, the CPU 21 separates the divided data for the mobile terminal application and the IC chip application and stores the divided data for the IC chip application in the memory 22 (step S17). . Further, a hash value is obtained for the divided data of the portable terminal application, stored (updated) in the memory 22 (step S18), and the divided data of the portable terminal application is transmitted to the portable terminal 3. The CPU 31 of the portable terminal 3 receives the divided data of the portable terminal application from the IC chip 2 and stores it in the memory 32 (step S19).

  Then, steps S15 to S19 described above are repeated until all the divided data is transmitted from the application providing server 1 to the IC chip 2. When all the divided data are transmitted, the CPU 21 of the IC chip 2 combines all the divided data stored in the memory 22 to form an IC chip application, and stores / sets it in the memory 22. . Further, the CPU 31 of the mobile terminal 3 combines all the divided data stored in the memory 32 to form an application for mobile terminal, and stores / sets it in the memory 32.

Next, the operation of each device when executing an application set in the mobile terminal 3 and the IC chip 2 in order to use a predetermined service will be described with reference to FIG.
First, the CPU 31 of the mobile terminal 3 calculates and obtains a hash value of the mobile terminal application data designated as an activation target in response to, for example, an input of a mobile terminal application activation request (step S21), and calculates the application. It transmits to IC chip 2 with ID (step S22). The activation request for the mobile terminal application may be input by the user, for example, or may be transmitted from the service terminal 5 to the mobile terminal 3.

The CPU 21 of the IC chip 2 reads out the hash value corresponding to the received application ID from the memory 22, and determines whether or not the read hash value matches the received hash value (step S23).
When the hash values do not match (step S23: NO), the CPU 21 transmits an error notification to the mobile terminal 3 (step S24), and in response to this, the mobile terminal 3 ends the process.
When the hash values match (step S23: YES), the CPU 21 transmits an OK signal to the mobile terminal 3 and activates the IC chip application corresponding to the mobile terminal application (step S25).
In response to the OK signal from the IC chip 2, the CPU 31 of the portable terminal 3 activates the portable terminal application (step S26) and accesses the IC chip application (step S27). Thereby, for example, communication with the service terminal 5 can be performed, and processing for using a predetermined service can be executed.

  As described above, according to the present invention, when a service is used by combining an application for a mobile terminal and an application for an IC chip, it is possible to safely set the application on the mobile terminal via the IC chip. . Further, when the mobile terminal application is activated, it is possible to easily detect falsification of the application set in the mobile terminal by checking the hash value presented from the mobile terminal on the IC chip side.

(First modification)
Various modifications and applications can be applied to the present invention.
For example, the mobile terminal application may be customized based on an input from the user, and the data of the customized application may be set in the mobile terminal 3.
The application providing server 1 according to the first modification stores, in the storage unit 12, location information indicating a change location of a program code corresponding to each customization item such as a font size and a screen size for the mobile terminal application. is doing. Further, when transmitting the divided data of the mobile terminal application and the IC chip application to the IC chip 2, the control unit 11 of the application providing server 1 also transmits location information corresponding to the mobile terminal application. The data format of the location information is arbitrary, and may be, for example, an XML format. An example of the location information is shown in FIG. The location information shown in FIG. 8 indicates that in the mobile terminal application, the change location corresponding to the screen size (GAMENSIZE) is 1 byte from the 3rd byte of the program code, and for the font size (FONTSIZE) This indicates that the change location is 2 bytes from the 8th byte of the program code.

  The CPU 31 of the portable terminal 3 receives an input of a PIN (personal identification number) and transmits it to the IC chip 2. In addition, the CPU 31 receives the PIN verification result, and when the verification result indicates OK, the CPU 31 accepts input of information relating to customization such as a customization item and its set value, and the customization information based on the input information is received from the IC chip. 2 to send. The customization information may be composed of, for example, the item name and setting value of the customization item that has been designated for input, and among the customizable items, the CPU 31 stores the memory 32 other than the customization item that has been designated for input. You may make it set the value currently set to. If the PIN verification result indicates NG, an error is displayed.

  The CPU 21 of the IC chip 2 receives the PIN input by the user from the portable terminal 3, collates it with the PIN stored in the memory 22, and transmits the collation result to the portable terminal 3. Further, the CPU 21 receives customization information from the mobile terminal 3 and stores it in the memory 22. Upon receiving the divided data and the location information of the application for the IC chip and the application for the portable terminal, the application for the portable terminal is customized based on the location information and the customization information, and the hash value is calculated for the divided data of the customized application. Then, the data is stored in the memory 22 together with the application ID, and the data of the customized mobile terminal application is transmitted to the mobile terminal 3.

  Next, the operation of the application setting apparatus when setting applications in the IC chip 2 and the portable terminal 3 in the first modification will be described with reference to FIG. The application setting process in this modified example has almost the same processing contents as the application setting process described with reference to FIG. 6, and only the differences will be described.

In step S15 ′, the application providing server 1 transmits the location data corresponding to the mobile terminal application together with the data of the mobile terminal application and the IC chip application. For example, IC chip command data including location data may be transmitted first, and then IC chip command data including application division data may be transmitted.
In the application setting process in the first modified example, the customization is performed in steps S17A and S17A in which it is determined whether or not the IC chip 2 customizes the application for portable terminal between steps S17 and S18. If it is determined to be performed, the IC chip 2 includes a step 17B for customizing the received portable terminal application based on the customization information stored in the memory 22 and the received location information.

  As a criterion for determining whether or not to perform customization in step S17A, for example, when customization information is set in the memory 22 of the IC chip 2, the received location information indicates the customization item indicated by the customization information. It may be determined whether the change location exists in the received divided data, and if it exists, it may be determined that customization is performed. If it is determined in step S17A that customization is not performed, step S18 is executed as it is. In the customization process in step S17B, for example, “10” is set as the value of “font size” in the customization information, and the location corresponding to “font size” is set as “2 bytes from the 8th byte” in the location information. If it is, the IC chip 2 determines whether the received divided data includes the 2 byte part from the 8th byte of the application code, and if so, 8 bytes of the application code are received for the received divided data. Update the 2-byte data with the code indicating “10”. After the customization in step S17B, the IC chip 2 calculates a hash value for the customized application and stores it in the memory 22 (step S18), and transmits the customized application data to the mobile terminal 3. Then, it is stored in the portable terminal 3 (step S19). The customization information may be interface information related to usage such as a license, usage right, and usage count in the IC chip 2 set separately.

  The system operation at the time of using the service is the same as the processing operation (see FIG. 7) in the present embodiment described above.

  As a result, the mobile terminal application customized by the user can be safely set in the mobile terminal, and tampering can be easily detected.

(Second modification)
In the above-described embodiment, the application providing server 1 transmits the application by dividing the application based on the buffer size of the IC chip 2. For example, application dividing processing based on the buffer size of the IC chip 2 is performed by the application. It may be performed by the mobile terminal 3 instead of the providing server 1.
In response to the reception of the application request from the mobile terminal 3, the control unit 11 of the application providing server 1 in the second modified example sets the size, application ID, and the like of the IC chip application to be downloaded and the mobile terminal application. After transmitting to the portable terminal 3, the data of the application for IC chip and the application for portable terminal are transmitted. In this modification, the application providing server 1 does not divide applications based on the buffer size of the IC chip 2.

  When receiving the PIN from the portable terminal 3, the CPU 21 of the IC chip 2 collates the received PIN with the PIN stored in advance in the memory 22 and transmits the collation result to the portable terminal 3. At this time, if the collation result is OK (PIN matches), the buffer size value of the IC chip 2 stored in the memory 22 is transmitted to the portable terminal 3 together with the collation result. When the CPU 21 receives all the divided data, the CPU 21 combines the divided data for the IC chip stored in the memory 22.

The CPU 31 of the portable terminal 3 performs processing for setting the buffer size value of the IC chip 2 in the memory 32. Specifically, the CPU 31 receives an input of a PIN (encryption number) from the user at a timing such as when the IC chip 2 is attached to the mobile terminal 3, transmits the input PIN to the IC chip 2, The collation result with the PIN stored in the IC chip 2 is received. When the received collation result indicates OK, the data of the buffer size of the IC chip 2 transmitted from the IC chip 2 together with the collation result is stored in the memory 32. If the received collation result indicates an error, the process for setting the buffer size of the IC chip 2 is terminated. When the IC chip 2 is removed from the portable terminal 3, the buffer size data stored in the memory 32 is cleared.
In addition, the CPU 31 receives the size of the mobile terminal application and the IC chip application, the application ID, and the like from the application providing server 1 and stores them in the memory 32. After checking the free capacity of the memory 32, the IC chip application And the mobile terminal application data are downloaded from the application providing server 1. Then, the CPU 31 divides the downloaded application data based on the buffer size of the IC chip 2 and transmits the divided data to the IC chip 2. Further, when the CPU 31 receives the divided data of the mobile terminal application from the IC chip 2, the CPU 31 stores the divided data in the memory 32. When the CPU 31 confirms that all the divided data is prepared, the CPU 31 combines them.

With reference to FIG. 10, the operation of the application setting apparatus when setting an application to the IC chip and the portable terminal in the second modification of the present embodiment will be described.
First, the CPU 31 of the portable terminal 3 receives an input such as a service setting request, and requests the IC chip 2 for a list of application IDs of applications that have already been registered, an available memory capacity, and the like (step S61). In response to this request, the CPU 21 of the IC chip 2 transmits a list of application IDs of already registered applications and data such as free space to the portable terminal 3 (step S62).
When the CPU 31 of the portable terminal 3 receives the data from the IC chip 2 and stores it in the memory 32, the CPU 31 transmits a setting request including a service name and the like to the application providing server 1 (step S63).
The control unit 11 of the application providing server 1 transmits data such as the application ID corresponding to the setting request, the size of the application for the IC chip, and the size of the application for the portable terminal to the portable terminal 3 (step S64).

The CPU 31 of the mobile terminal 3 checks the free capacity of the memory of the mobile terminal 3 and the IC chip 2 based on the received application size value, and lists the application IDs of registered applications for the received application ID. And checking whether or not applications overlap (step S65). When the free space is insufficient or when the application overlaps (step S65: YES), the CPU 31 displays an error and performs predetermined error processing such as sending an error notification to the application providing server 1. This is performed (step S66). If there is no shortage of free space and no application overlap occurs (step S65: NO), an OK signal is transmitted to the application providing server 1, and the control unit of the application providing server 1 is responded accordingly. 11 transmits the IC chip application and the portable terminal application to the portable terminal 3 (step S67).
The CPU 31 of the portable terminal 3 divides the received application on the basis of the buffer size of the IC chip 2 stored in the memory 32, generates IC chip command data (see FIG. 5), and sequentially supplies the IC chip 2 to the IC chip 2. Transmit (step S68).

  The CPU 21 of the IC chip 2 checks the format of the received IC chip command data, then separates the divided data for the IC chip application and the portable terminal application, and stores the divided data for the IC chip application in the memory 22. (Step S69). For example, with respect to the divided data of the mobile terminal application, necessary customization processing is performed, and a hash value is generated and stored (updated) (step S70). Specifically, when location information is received, it is necessary to verify whether or not the received divided data is customized after verifying the validity of the signature of the location information and confirming its validity. In some cases, customization processing is performed, and a hash value is calculated for the customized divided data. Further, when it is determined that the divided data does not need to be customized or when location information is not received, the hash value is calculated as it is without customization. Next, the CPU 21 transmits the divided data of the mobile terminal application to the mobile terminal 3 (step S71). The CPU 31 of the portable terminal 3 stores the received divided data of the portable terminal application in the memory 32 (step S72).

  Then, steps S68 to S72 are repeated until the mobile terminal 3 transmits all the divided data to the IC chip 2. Then, when the CPU 31 of the mobile terminal 3 transmits all the divided data and confirms that all the divided data for the mobile terminal application has been prepared (step S73: YES), the divided data are combined to form the mobile terminal. The application is formed, stored and set in the memory 32, and the download result is transmitted to the application providing server 1 (step S74). Further, when the CPU 21 of the IC chip 2 confirms that all the divided data are prepared, the divided data is combined to form an IC chip application, which is stored and set in the memory 22. The mobile terminal 3 performs predetermined error processing such as deleting the divided data stored in the memory 32 and notifying the server of an error when not all the divided data is prepared (step S73: NO). (Step S75).

(Third Modification)
Moreover, you may make it set the application for portable terminals with respect to another portable terminal via local I / F of a portable terminal.
The mobile terminal 3 in the third modification includes a mobile terminal A that can be connected to the application providing server 1 and a mobile terminal B that cannot be connected. The communication unit 35 of the mobile terminal B has, for example, only a local I / F such as infrared communication, and does not have an I / F for connecting to the network 10.

Next, processing when an application is set in the mobile terminal B via the mobile terminal A will be described with reference to FIG.
The mobile terminal B transmits a connection request to the mobile terminal A (step S41).
When the portable terminal A receives the connection request from the portable terminal B (step S42), the portable terminal A accepts the PIN input and passes it to the IC chip 2 (hereinafter, IC chip A) mounted on the portable terminal A. The identity of the user is confirmed by PIN verification (step S43). The IC chip A notifies the mobile terminal A of the error in the case of a verification error, generates a random number in the case of verification OK, and transmits it to the IC chip B attached to the mobile terminal B via the mobile terminal A. (Step S44).
When the mobile terminal B receives a random number from the mobile terminal A, it passes it to the IC chip B, accepts the PIN input, and passes it to the mobile terminal B. The IC chip B confirms the identity of the user by PIN verification (step S45). The IC chip B notifies the portable terminal B of the error in the case of a collation error, and in the case of collation OK, the random number received from the IC chip A is signed with the secret key of the IC chip B, and the public key of the IC chip B At the same time, it is transmitted to the IC chip A via the portable terminal B (step S46).

When the IC chip A decrypts the signature received from the IC chip B with the public key and confirms that the previously transmitted random number is included, the IC chip A notifies the portable terminal B of data indicating authentication OK (step S47). .
The portable terminal B transmits the IC chip ID read from the IC chip B, the buffer size, and the data specifying the setting request target service to the portable terminal A (step S48).
The portable terminal A transmits an application request specifying the IC chip B ID, buffer size, service name (application name), and the like to the application providing server 1 (step S49).

  The application providing server 1 reads the IC chip application and the mobile terminal application corresponding to the application request, generates IC chip command data (see FIG. 5) in the same manner as in the above-described embodiment, and sends it to the mobile terminal A. It transmits sequentially (step S50). The portable terminal A sequentially transmits the IC chip command data received from the application providing server 1 to the IC chip B of the portable terminal B (Step S51). The IC chip B of the portable terminal B separates the received data into divided data for the IC chip application and the portable terminal application in the same manner as the above-described embodiment, and the divided data for the IC chip is stored in the memory 22. After storing and calculating and storing the hash value for the divided data for the portable terminal, it is transmitted to the portable terminal B (step S52). The portable terminal B stores the divided data for the portable terminal received from the IC chip B (step S53).

  Then, the above-described steps S50 to S53 are repeated until all divided data are transmitted from the application providing server 1 to the IC chip 2. When all the divided data are transmitted, the IC chip B combines all the divided data stored in the memory 22 to form an IC chip application, and store / set it. Further, the portable terminal B combines all the divided data stored in the memory 32 to form a portable terminal application, and stores and sets it. Then, the setting result is transmitted to the application providing server 1 (step S54).

In the third modification, the mobile terminal A may divide application data based on the buffer size of the IC chip B and sequentially supply the application data to the IC chip B.
When the application for IC chip and the application for portable terminal have the same language system and the same logic, the data of one application may be divided and transmitted, and the divided data is sent to the IC chip 2 and the portable terminal. 3 may be set.
In the above description, an application, an application, and data are set for the IC chip. However, the present invention is also applicable when only data is set for the IC chip.
In the above description, the application setting is described. However, the application may be updated. In this case, the hash value stored in the IC chip is updated.
Further, when deleting the application of the mobile terminal, the hash value set in the IC chip may be invalidated together.

The system of the present invention can be realized using a normal computer system, not a dedicated system. For example, a program for executing the above operation is stored in a computer-readable recording medium (FD, CD-ROM, DVD, etc.) and distributed, and the program is installed in the computer to execute the above processing. The application providing server 1, the IC chip 2, the portable terminal 3, and the like may be configured. Alternatively, it may be stored in a disk device of a server device on the network 10 such as the Internet and downloaded to a computer, for example.
In addition, when the OS realizes the above functions by sharing the OS or jointly with the OS and the application, etc., only the part other than the OS may be stored and distributed in the medium, or may be downloaded to the computer. Good.

It is a figure which shows the structural example of the application download system which concerns on embodiment of this invention. It is a figure which shows the structural example of an application provision server. It is a figure which shows the structural example of IC chip and a portable terminal. It is a functional block diagram of an application providing server, an IC chip, and a mobile terminal. It is a figure which shows an example of a format of IC chip command data. It is a figure for demonstrating operation | movement of the application setting apparatus in the case of setting an application to an IC chip and a portable terminal. It is a figure for demonstrating operation | movement of each apparatus in the case of performing the application set to the portable terminal and IC chip in order to utilize a predetermined | prescribed service. It is a figure which shows an example of location information. In a 1st modification, it is a figure for demonstrating operation | movement of the application setting apparatus in the case of setting an application to an IC chip and a portable terminal. In a 2nd modification, it is a figure for demonstrating operation | movement of the application setting apparatus in the case of setting an application to an IC chip and a portable terminal. In a 3rd modification, it is a figure for demonstrating operation | movement of the application setting apparatus in the case of setting an application to an IC chip and a portable terminal.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Application provision server 2 IC chip 3 Mobile terminal 4 Application setting apparatus 10 Network 11 Control part 12 Storage part 11 Communication control part 21, 31 CPU
22, 32 Memory 23, 36 Input / output I / F
33 Input unit 34 Display unit 35 Communication unit 111 Application division / combination unit 112 Application supply unit 211 Authentication unit 212 Data separation unit 213 Verification unit 311 Download request unit 312 Application setting unit 313 Application execution unit

Claims (6)

An application setting device comprising an IC chip and a mobile terminal to which the IC chip is attached,
The IC chip is
Receiving means for receiving an application for a portable terminal and an application for an IC chip via the portable terminal;
Application storage means for storing in the memory the application for the IC chip received by the receiving means;
A hash value storage unit that obtains a hash value for the mobile terminal application received by the receiving unit, and stores the hash value in a memory in association with the identification code of the application;
Transmitting means for transmitting the application for the portable terminal received by the receiving means to the portable terminal;
In response to receiving the application usage request for the IC chip and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value and received. Means for matching the hash value;
A means for enabling use of an application for an IC chip indicated by the use request when the hash values that have been verified match;
The portable terminal is
Application receiving means for receiving and storing an application for a portable terminal transmitted by the transmitting means of the IC chip;
Obtaining a hash value of an application for a portable terminal to be executed, and a means for transmitting an application use request for an IC chip, an application identification code, and the hash value to the IC chip,
An application setting device. The mobile terminal includes means for receiving input of information related to customization of an application for a mobile terminal, and transmitting customization information based on the input information to the IC chip,
The IC chip comprises means for receiving the customization information and storing it in a memory,
The receiving means of the IC chip further receives location information indicating a code change location corresponding to a customization item in the application for the mobile terminal,
The application storage means of the IC chip further stores the received location information in a memory;
The hash value storage unit of the IC chip customizes the received application for the mobile terminal based on the customization information and the location information stored in the memory, and the customized application for the mobile terminal Find the hash value, associate the hash value with the application identification code, store it in memory,
The transmitting means transmits the customized application for the mobile terminal to the mobile terminal.
The application setting device according to claim 1. The receiving means of the IC chip receives the application for the portable terminal and the application for the IC chip with data divided based on the buffer size of the IC chip.
The application setting apparatus according to claim 1, wherein the application setting apparatus is an application setting apparatus. The portable terminal receives the application for the portable terminal and the application for the IC chip from the computer that manages the application for the portable terminal and the application for the IC chip, and sets the buffer size of the IC chip. Further comprising means for dividing and transmitting to the IC chip based on
The application setting device according to claim 3. An IC chip for an application setting device comprising: an IC chip; and a mobile terminal to which the IC chip is attached,
Receiving means for receiving an application for a portable terminal and an application for an IC chip via the portable terminal;
Means for storing an application for an IC chip received by the receiving means in a memory;
Means for obtaining a hash value for an application for a mobile terminal received by the receiving means, and storing the hash value in a memory in association with an identification code of the application;
Means for transmitting the mobile terminal application received by the receiving means to the mobile terminal;
In response to receiving the application usage request for the IC chip and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value and received. Means for matching the hash value;
A means for enabling use of an application for an IC chip indicated by the use request when the hash values matched are matched;
An IC chip comprising: A computer attached to a mobile device
Receiving means for receiving an application for a portable terminal and the application for the computer via the portable terminal;
Means for storing an application for the computer received by the receiving means in a memory;
Means for obtaining a hash value for an application for a mobile terminal received by the receiving means, and storing the hash value in association with an identification code of the application;
Means for transmitting an application for a portable terminal received by the receiving means to the portable terminal;
In response to receiving the application use request for the computer and the application identification code and hash value, the hash value associated with the received identification code is read from the memory, and the read hash value is received. Means for matching the hash value,
Means for enabling use of the computer application indicated by the use request when the collated hash values match;
Program to function as.

Images