JP4660976B2 - Communication method and communication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a communication method and system using a communication device incorporating an integrated circuit (IC), and a communication device and a processing device used therefor.
[0002]
[Prior art]
Currently, electronic commerce using an IC device such as an IC card is performed.
In electronic commerce using such an IC device (integrated circuit), a transaction apparatus (processing apparatus) installed in a store or the like communicates with an IC device in a contact type or a non-contact type, and for example, a network, a dedicated line, etc. Communicating with the IC service providing server device via
[0003]
[Problems to be solved by the invention]
However, in the above-described conventional electronic commerce, a transaction apparatus installed in a store or the like needs to have a communication function with an IC service providing server apparatus in addition to a communication function with an IC device. There is a problem that it becomes large-scale. In addition, in order to perform communication between a plurality of transaction apparatuses and the IC service providing server apparatus, a switching system is required, and there is a problem that the system configuration is complicated.
[0004]
The present invention has been made in view of the above-described problems, and in a system for performing electronic commerce using an IC, a communication method and system capable of simplifying the entire system configuration including a transaction apparatus (processing apparatus) and reducing the size of the system, An object is to provide a communication device and a processing device.
[0005]
  In order to solve the above-described problems of the conventional technology and achieve the above-described object, a communication method according to a first invention includes an integrated circuit, a first communication device having a communication circuit, and the integrated circuit. Data is exchanged between the integrated circuit via the communication circuit and the processing device used for the service related to the integrated circuit by exchanging data in a contact type or non-contact type, and the service related to the integrated circuit A communication method for performing communication using a second communication device to be used, wherein the communication circuit transmits a service use request to the second communication device, and the communication circuit is set in response to the service use request. Between the integrated circuit and the second communication deviceFirstPerform mutual authentication,When the integrated circuit and the second communication device authenticate each other by the first mutual authentication, the second communication device notifies the communication circuit of permission to use the service, and the communication circuit Transmits a relay request to the integrated circuit in response to the use permission notification, and the integrated circuit relays communication between the second communication device and the processing device in response to the relay request. When the second mutual authentication is performed between the second communication device and the processing device, and the second communication device and the processing device authenticate each other by the second mutual authentication, Via the integrated circuit and the communication deviceThe second communication device and the processing device communicate with each other to perform processing related to the service.
[0006]
  A communication system according to a second aspect of the present invention is used for services related to the integrated circuit by exchanging data between the integrated circuit and the first communication device having the communication circuit and the integrated circuit in a contact type or a non-contact type. And a second communication device used for services related to the integrated circuit that exchange data with the integrated circuit via the communication circuit, the communication circuit comprising: , Transmitting a service use request to the second communication device, and performing a first mutual authentication between the integrated circuit and the second communication device via the communication circuit in response to the service use request When the integrated circuit and the second communication device authenticate each other by the first mutual authentication, the second communication device notifies the communication circuit of permission to use the service, A communication circuit transmits a relay request to the integrated circuit in response to the use permission notification, and the integrated circuit performs communication between the second communication device and the processing device in response to the relay request. Relay, and performs second mutual authentication between the second communication device and the processing device, and the second communication device and the processing device authenticate each other's validity by the second mutual authentication. Then, the second communication device and the processing device communicate with each other via the integrated circuit and the communication device to perform processing related to the service.
[0007]
  According to a third aspect of the present invention, there is provided a communication method according to the first aspect of the present invention, in which data is exchanged between the integrated circuit and the first communication device having the communication circuit and the integrated circuit in a contact type or non-contact type and used for services related to the integrated circuit A communication method for communicating with a second communication device used for services related to the integrated circuit by exchanging data between the processing device and the integrated circuit via the communication circuit, When the first mutual authentication is performed between the integrated circuit and the processing device, and the integrated circuit and the processing device authenticate each other by the first mutual authentication, the integrated circuit and the processing device Communicate with each other to perform a first process related to the service, and after the first process ends, the integrated circuit relays communication between the communication circuit and the processing device, and The second When the second mutual authentication is performed with the communication device, and the processing device and the second communication device authenticate each other by the second mutual authentication, the mutual authentication is performed via the integrated circuit and the communication device. Then, the processing device and the second communication device communicate with each other to perform a second process related to the service.
[0008]
  According to a fourth aspect of the present invention, there is provided a communication system according to a fourth aspect of the present invention, wherein data is exchanged between the first communication device having an integrated circuit and a communication circuit and the integrated circuit in a contact type or a non-contact type and used for services related to the integrated circuit. And a second communication device used for services related to the integrated circuit by exchanging data with the integrated circuit via the communication circuit, the communication circuit comprising: When the first mutual authentication is performed with the processing device, and the integrated circuit and the processing device authenticate each other by the first mutual authentication, the integrated circuit and the processing device mutually The communication is performed to perform a first process relating to the service, and after the first process is completed, the integrated circuit relays communication between the communication circuit and the processing device, and the processing device and the second processing are performed. of When the second mutual authentication is performed with the communication device, and the processing device and the second communication device authenticate each other by the second mutual authentication, the mutual authentication is performed via the integrated circuit and the communication device. Then, the processing device and the second communication device communicate with each other to perform a second process related to the service.
[0020]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, a communication system according to an embodiment of the present invention will be described.
First embodiment
FIG. 1 is an overall configuration diagram of a communication system 1 according to the present embodiment.
As illustrated in FIG. 1, the communication system 1 includes, for example, a gateway 10, an IC_R / W device 15, an IC service providing device 12, an IC service providing server device 13, and a mobile phone device 14.
The mobile phone device 14 and the IC service providing server device 13 communicate via a wireless communication line 17 such as a mobile phone communication network, a gateway 10 and a network 18 such as the Internet.
In addition, the mobile phone device 14 and the IC_R / W device 15 perform wireless communication, for example.
[0021]
The IC_R / W device 15 and the IC service providing server device 13 communicate with each other via, for example, the mobile phone device 14, the wireless communication line 17, the gateway 10, and the network 18.
In addition, the mobile phone device 14 includes a mobile communication function unit 20 and an IC 21.
[0022]
An IC_R / W device 15 shown in FIG. 1 corresponds to the processing device of the present invention.
In addition, the mobile phone device 14 is the first communication device of the first, second, fourth, sixth, seventh, eighth, tenth, eleventh, twelfth, thirteenth, and fourteenth inventions, This corresponds to the communication devices of the third and ninth inventions and the other communication device of the fifth invention.
The IC service providing server device 13 is a second communication device according to the first, second, fourth, sixth, seventh, eighth, tenth, eleventh, twelfth, thirteenth, and fourteenth inventions. This corresponds to the other communication devices of the third and ninth inventions and the communication device of the fifth invention.
[0023]
First, an outline of an example of the operation of the communication system 1 shown in FIG. 1 will be described.
FIG. 2 is a diagram for explaining an outline of an operation example of the communication system 1 shown in FIG.
The user A visits the store 30 and selects a use service on the screen of the mobile phone device 14 ((1) shown in FIG. 2).
Next, the mobile communication function unit 20 of the mobile phone device 14 accesses the IC service providing server device 13 via the wireless communication line 17 and the network 18 ((2) shown in FIG. 2).
Next, the IC 21 and the IC service providing server device 13 communicate to confirm the authenticity ((3) shown in FIG. 2). The confirmation may be performed using, for example, predetermined password information.
Next, the user A brings the mobile phone device 14 close to the IC_R / W device 15 ((4) shown in FIG. 2).
Next, the IC_R / W device 15 and the IC service providing server device 13 communicate via the IC 21, the portable communication function unit 20, the wireless communication line 17, and the network 18, and processing related to services provided using the IC 21. ((5) shown in FIG. 2).
[0024]
As described above, according to the communication system 1, since the communication between the IC_R / W device 15 and the IC service providing server device 13 is performed via the mobile phone device 14, the IC_R / W device 15 includes the network 18 and the like. It is not necessary to have a function for connecting to the network.
[0025]
Hereinafter, each component of the communication system 1 shown in FIG. 1 will be described in detail.
[Gateway 10]
The gateway 10 is a device that relays communication between the wireless communication line 17 such as a mobile phone and the network 18.
[0026]
[IC service providing server device 13]
The IC service providing server device 13 communicates with the mobile communication function unit 20, the IC 21, and the IC_R / W device 15, and performs processing related to services provided using the IC 21.
[0027]
FIG. 3 is a functional block diagram of the IC service providing server device 13.
As illustrated in FIG. 3, the IC service providing server device 13 includes, for example, a SAM (Secure Application Module) 51, a memory 52, a control unit 53, and an I / F unit 54.
[0028]
FIG. 4 is a functional block diagram of the SAM 51 shown in FIG.
The SAM 51 is a tamper-resistant hardware or software module.
As shown in FIG. 4, the SAM 51 includes an authentication unit 61, an encryption / decryption unit 62, an IC control unit 63, and an IC related processing unit 64.
The authentication unit 61 performs mutual authentication with the IC 21 described later and mutual authentication with the IC_R / W device 15.
[0029]
For example, the encryption / decryption unit 62 encrypts data to be written to the memory 52 and application programs, and decrypts data and application programs read from the memory 52.
[0030]
For example, the IC control unit 63 performs communication control with the IC 21.
The IC related processing unit 64 performs processing related to a predetermined service in cooperation with the IC 21.
[0031]
The memory 52 is used as a virtual memory of the IC 21, and stores data and application programs related to services using the IC 21.
[0032]
The control unit 53 controls the overall processing of the IC service providing server device 13.
FIG. 5 is a functional block diagram of the control unit 53.
As shown in FIG. 5, the control unit 53 includes a portal unit 71, a user I / F unit 72, an AP (application program) execution unit 73, a SAM control unit 74, and a memory control unit 75.
For example, the portal unit 71 realizes a portal function in response to an access from the mobile phone device 14 and displays, for example, a menu screen of services that can be provided on the display unit of the mobile phone device 14.
The user I / F unit 72 controls the user I / F screen displayed on the display unit 34 of the mobile communication function unit 20.
The AP execution unit 73 executes the application program read from the memory 52.
The SAM control unit 74 controls processing using the SAM 51.
The memory control unit 75 manages data and application programs stored in the memory 52.
[0033]
[Mobile phone device 14]
As shown in FIG. 1, the mobile phone device 14 includes a mobile communication function unit 20 and an IC 21.
Here, the portable communication function unit 20 corresponds to the communication circuit of the present invention, and the IC 21 corresponds to the integrated circuit of the present invention.
<Mobile communication function unit 20>
FIG. 6 is a functional block diagram of the mobile communication function unit 20 shown in FIG.
As shown in FIG. 6, the mobile communication function unit 20 includes, for example, a voice input / output unit 31, an A / D / D / A conversion unit 32, a DSP 33, a display unit 34, an operation unit 35, an IC_I / F unit 36, a memory 37, a control unit 38, a baseband processing unit 39, and a radio unit 40.
[0034]
The voice input / output unit 31 generates a voice signal corresponding to the analog voice signal input from the A / D / D / A conversion unit 32 and an analog voice signal corresponding to the input voice to generate an A / D And a microphone that outputs to the D / D / A converter 32.
[0035]
The A / D / D / A converter 32 converts the digital audio signal input from the DSP 33 into an analog audio signal and outputs the analog audio signal to the audio input / output unit 31.
The A / D / D / A converter 32 converts the analog audio signal input from the audio input / output unit 31 into a digital audio signal and outputs the digital audio signal to the DSP 33.
[0036]
The DSP 33 performs band compression processing of a digital audio signal.
The display unit 34 is, for example, a liquid crystal display that displays an image corresponding to a display signal input from the control unit 38.
The operation unit 35 is an operation button or the like, and outputs an operation signal corresponding to the operation of the operation button by the user to the control unit 38.
The IC_I / F unit 36 is an interface such as UART (Universal Asynchronous Receiver Transmitter), IC2, USB, IEEE1394, which exchanges data with the IC 21 shown in FIG.
The memory 37 stores application programs and data necessary for processing in the control unit 38 and the baseband processing unit 39.
For example, the memory 37 may be fixed in a state where it cannot be attached to or detached from the portable communication function unit 20, or may be detachably attached to the portable communication function unit 20 such as a memory card.
[0037]
The control unit 38 controls the processing of the mobile communication function unit 20 in an integrated manner, and is controlled by the control unit 48 shown in FIG.
The baseband processing unit 39 performs baseband processing.
The radio unit 40 performs processing such as amplification of data (signal) exchanged via the antenna 17, detection, and generation of an IQ signal.
[0038]
<IC21>
The IC 21 is a tamper-resistant integrated circuit capable of monitoring and preventing tampering of processing and data in the IC 21 and data exchanged with the outside, and uses the IC_R / W device 15 and the IC service providing device 12. The processing related to various predetermined services provided in this way is performed.
FIG. 7 is a functional block diagram of the IC 21 shown in FIG.
As illustrated in FIG. 7, the IC 21 includes, for example, an I / F unit 45, a memory 46, an analog unit 47, and a control unit 48.
The I / F unit 45 is an interface that exchanges data with the IC_I / F unit 36 of the mobile communication function unit 20 shown in FIG. 6 by a wired method or a wireless method.
The memory 46 stores data and application programs necessary for the processing of the control unit 48. Note that the memory 46 may store application programs used for all or some of the various services provided using the IC 21.
The analog unit 47 performs analog processing such as amplifying data (signal) exchanged with the IC_R / W device 15 via the antenna 49 in a wireless manner.
[0039]
The control unit 48 controls the processing of the IC 21 as a whole.
The control unit 48 executes the allocation program read from the memory 46. As will be described later, there is an authenticity confirmation flag (authentication confirmation data of the present invention) in the allocation program, and the logical value of the authenticity confirmation flag is set by the IC service providing server device 13 as will be described later.
The control unit 48 is controlled by the control unit 38 of the portable communication function unit 20 shown in FIG. 6 and controls the control unit 38.
The baseband processing unit 39 performs baseband processing of signals exchanged with the radio unit 40.
As described above, according to the mobile communication function unit 20 and the IC 21, the I / F unit 45 and the IC_I / F unit 36 are provided, thereby enabling communication between each other.
[0040]
[IC_R / W device 15]
FIG. 8 is a functional block diagram of the IC_R / W device 15 shown in FIG.
As illustrated in FIG. 8, the IC_R / W device 15 includes an antenna 81, an analog unit 82, a baseband processing unit 83, a memory 84, and a control unit 85.
[0041]
The analog unit 82 performs analog processing such as amplifying data (signal) exchanged with the IC 21 via the antenna 81 in a wireless manner.
The baseband processing unit 83 performs baseband processing of signals exchanged with the analog unit 82.
The memory 84 stores data and application programs (application programs related to services provided using the IC 21) necessary for the processing of the control unit 85.
[0042]
The control unit 85 controls the processing of the IC_R / W device 15 in an integrated manner.
[0043]
The IC_R / W device 15 is installed in a service provider's store 30 or the like, exchanges data with the IC 21 built in the mobile phone device 14 by a contact method or a non-contact method, and is performed using the IC 21. Perform processing related to the service. In this embodiment, a case where data is exchanged between the IC_R / W device 15 and the IC 21 by a non-contact method (wireless method) is illustrated.
As will be described later, the IC_R / W device 15 performs processing related to services provided using the IC 21 while communicating with the IC service providing server device 13 via the mobile phone device 14.
As the service of the present embodiment, for example, there is a service accompanied by confidential processing such as personal (personal) authentication, electronic money, electronic commerce, and ticket issuance.
[0044]
Hereinafter, an operation example of the communication system 1 illustrated in FIG. 1 will be described.
Hereinafter, communication between the mobile communication function unit 20 and the IC service providing server device 13 is performed via the wireless communication line 17, the gateway 10, and the network 18 shown in FIG. 6 is performed via the IC_I / F unit 36 shown in FIG. 6 and the I / F unit 45 shown in FIG. 7, and communication between the IC 21 and the IC_R / W device 15 is performed using the antenna 49 and the IC 49 shown in FIG. This is done via the antenna 81 shown in FIG.
[0045]
[First operation example]
Hereinafter, after performing mutual authentication between the IC 21 and the IC service providing server device 13, mutual authentication is performed between the IC service providing server device 13 and the IC_R / W device 15, and then the IC service providing server device. An example of the operation of the communication system 1 in the case where processing related to services is performed in cooperation while performing communication between the IC 13 and the IC_R / W device 15 will be described.
The first operation example corresponds to the first to seventh inventions.
[0046]
FIG. 9 is a flowchart for explaining the operation example.
Hereinafter, each step shown in FIG. 9 will be described.
Step ST1:
The user A operates the operation unit 35 of the mobile communication function unit 20 of the mobile phone device 14 shown in FIG. 6, and is provided using the IC 21 to be used on the screen of the display unit 34 according to the operation. Select a service.
[0047]
Step ST2:
The mobile communication function unit 20 accesses the IC service providing server device 13 and transmits the identification information of the service selected in step ST1 to the IC service providing server device 13.
[0048]
Step ST3:
When receiving the access from the mobile communication function unit 20 in step ST <b> 2, the IC service providing server device 13 transmits an authentication request to the mobile communication function unit 20.
[0049]
Step ST4:
The mobile communication function unit 20 transmits an authentication request to the IC 21 in response to the authentication request received in step ST3.
[0050]
Step ST5:
When the mobile communication function unit 20 receives the authentication request in step ST4, the mobile communication function unit 20 performs mutual authentication with the IC service providing server device 13 via the mobile communication function unit 20.
[0051]
Step ST6:
When the IC service providing server device 13 determines that the service can be used by the user A based on the identification information received in step ST2, and the mutual validity is authenticated by the mutual authentication in step ST5, the IC service The providing server device 13 performs a service availability display on the display unit 34 of the mobile communication function unit 20.
[0052]
Step ST7:
A relay request is transmitted from the portable communication function unit 20 to the IC 21.
[0053]
Step ST8:
The user A positions the mobile phone device 14 at a position where the mobile phone device 14 and the IC_R / W device 15 can perform wireless communication.
[0054]
Step ST9:
In response to the relay request received in step ST7, the IC 21 relays communication between the IC_R / W device 15 and the portable communication function unit 20, and with the IC service providing server device 13 via the portable communication function unit 20 and the IC 21. Mutual authentication is performed with the IC_R / W device 15.
[0055]
Step ST10:
When the mutual validity is authenticated by the mutual authentication in step ST9, the IC 21 relays communication between the IC_R / W device 15 and the portable communication function unit 20, and the IC is connected via the portable communication function unit 20 and the IC 21. The service providing server device 13 and the IC_R / W device 15 cooperate with each other to perform processing related to the service provided using the IC 21.
[0056]
Step ST11:
When the process of step ST10 is completed, the IC service providing server device 13 displays the usage history of the service on the display unit 34 of the mobile communication function unit 20.
[0057]
[Second operation example]
Thereafter, after mutual authentication is performed between the IC 21 and the IC_R / W device 15, processing related to the service is performed in cooperation, and then the mutual authentication is performed between the IC service providing server device 13 and the IC_R / W device 15. An example of the operation of the communication system 1 in the case where the processes related to the service are performed in cooperation with each other after being performed will be described.
The second operation example is an embodiment corresponding to the seventh to tenth inventions.
FIG. 10 is a flowchart for explaining the operation example.
[0058]
Step ST21:
User A places mobile phone device 14 at a position where IC 21 and IC_R / W device 15 can communicate wirelessly.
[0059]
Step ST22:
The IC 21 and the IC_R / W device 15 perform mutual authentication.
[0060]
Step ST23:
When the mutual authenticity is authenticated by the mutual authentication in step ST22, the IC 21 of the mobile phone device 14 and the IC_R / W device 15 communicate and cooperate to perform processing related to the service provided using the IC 21.
In this case, the control unit 48 of the IC 21 executes the application program read from the memory 46.
[0061]
Step ST24:
The IC_R / W device 11 transmits an access request to the IC 21.
[0062]
Step ST25:
The IC 21 transmits an access request to the mobile communication function unit 20 in response to the access request received in step ST24.
[0063]
Step ST26:
The mobile communication function unit 20 transmits an access request to the IC service providing server device 13 in response to the access request received in step ST25.
[0064]
Step ST27:
The mobile communication function unit 20 transmits a relay request to the IC 21.
[0065]
Step ST28:
In response to the relay request in step ST27, the IC 21 relays communication between the IC_R / W device 11 and the portable communication function unit 20, and the IC service providing server device 13 and the IC_R / W via the portable communication function unit 20 and the IC 21. Mutual authentication is performed with the device 15.
[0066]
Step ST29:
When mutual validity is authenticated by the mutual authentication in step ST28, the IC service providing server device 13 and the IC_R / W device 15 cooperate with each other via the portable communication function unit 20 and the IC 21, and are provided using the IC 21. Processing related to the service to be performed.
[0067]
Step ST30:
When the process of step ST29 is completed, the IC service providing server device 13 displays the usage history of the service on the display unit 34 of the mobile communication function unit 20.
[0068]
Step ST31:
The IC_R / W device 15 displays the process end on the display unit.
[0069]
[Third operation example]
Thereafter, after performing mutual authentication between the IC 21 and the IC service providing server device 13, the IC service providing server device 13 sets the authenticity confirmation flag of the allocation program of the IC 21, and then the IC_R / W device 15 performs the authenticity. An operation example of the communication system 1 in the case where processing related to a service is performed after verifying the confirmation flag will be described.
The operation example corresponds to the eleventh and twelfth inventions.
FIG. 11 is a flowchart for explaining the operation example.
[0070]
Step ST41:
A browser operating on the mobile communication function unit 20 accesses the IC service providing server device 13.
[0071]
Step ST42:
An authentication request is transmitted from the IC service providing server device 13 to the mobile communication function unit 20.
[0072]
Step ST43:
In response to the authentication request in step ST42, the authentication request is transmitted from the portable communication function unit 20 to the IC 21.
[0073]
Step ST44:
In response to the authentication request received in step ST43, the IC 21 and the IC service providing server device 13 perform mutual authentication.
[0074]
Step ST45:
When mutual validity is authenticated by the mutual authentication in step ST44, the IC service providing server device 13 accesses the IC 21, and sets the authenticity confirmation flag of the allocation program executed by the IC 21 (first logical value “1”). ”).
[0075]
Step ST46:
User A places mobile phone device 14 at a position where IC 21 and IC_R / W device 15 can communicate wirelessly.
[0076]
Step ST47:
The IC_R / W device 15 verifies whether or not the authenticity confirmation flag of the allocation program executed by the IC 21 is set.
[0077]
Step ST48:
When the IC_R / W device 15 confirms that the authenticity confirmation flag is set in step ST47, the IC_R / W device 15 reads the allocation program from the memory 84 and performs processing related to the service provided using the IC 21.
[0078]
Step ST49:
The IC_R / W device 11 and the IC service providing server device 13 perform mutual authentication.
[0079]
Step ST50:
When the mutual validity is authenticated by the mutual authentication in step ST49, the IC_R / W device 15 notifies the IC service providing server device 13 of the contents of the process related to the service in step ST48.
[0080]
[Fourth operation example]
Hereinafter, after performing mutual authentication between the IC 21 and the IC_R / W device 15, the IC service providing server device 13 and the IC_R / W device 15 perform mutual authentication, and subsequently, the IC service providing server device 13 and the IC_R. An operation example of the communication system 1 in the case where the processing related to the service provided by using the IC 21 is performed in cooperation with the / W device 15 will be described.
The operation example corresponds to the thirteenth and fourteenth inventions.
[0081]
FIG. 12 is a flowchart for explaining the operation example.
Step ST61:
The user A operates the operation unit 35 of the mobile communication function unit 20 of the mobile phone device 14 shown in FIG. 6, and is provided using the IC 21 to be used on the screen of the display unit 34 according to the operation. Select a service.
[0082]
Step ST62:
The mobile communication function unit 20 notifies the IC_R / W device 11 of the service selected in step ST61.
[0083]
Step ST63:
User A places mobile phone device 14 at a position where IC 21 and IC_R / W device 15 can communicate wirelessly.
[0084]
Step ST64:
The IC 21 and the IC_R / W device 15 perform mutual authentication.
[0085]
Step ST65:
When mutual validity is authenticated by the mutual authentication in step ST64, the IC 21 notifies the IC_R / W device 15 of the service notified in step ST62.
[0086]
Step ST66:
An access request is transmitted from the IC_R / W device 15 to the IC 21.
[0087]
Step ST67:
The IC 21 transmits an access request to the mobile communication function unit 20 in response to the access request in step ST66.
[0088]
Step ST68:
The mobile communication function unit 20 transmits an access request to the IC service providing server device 13 in response to the access request received in step ST25.
[0089]
Step ST69:
The mobile communication function unit 20 transmits a relay request to the IC 21.
[0090]
Step ST70:
In response to the relay request in step ST69, the IC 21 relays communication between the IC_R / W device 11 and the portable communication function unit 20, and the IC service providing server device 13 and the IC_R / W via the portable communication function unit 20 and the IC 21. Mutual authentication is performed with the device 15.
[0091]
Step ST71:
When mutual validity is authenticated by the mutual authentication in step ST28, the IC service providing server device 13 and the IC_R / W device 15 cooperate with each other via the portable communication function unit 20 and the IC 21, and are provided using the IC 21. The process related to the service notified in step ST65 is performed.
[0092]
Step ST72:
When the process of step ST71 is completed, the IC service providing server device 13 displays the usage history of the service on the display unit 34 of the mobile communication function unit 20.
[0093]
Step ST73:
The IC_R / W device 15 displays the process end on the display unit.
[0094]
[Fifth operation example]
Further, for example, as illustrated in FIG. 13, the communication system 1 selects a service on the screen of the mobile communication function unit 20 and performs mutual authentication between the IC service providing server device 13 and the IC_R / W device 15. After that, they may communicate to perform processing related to the selected service.
In the operation example, communication between the IC 21 and the IC_R / W device 15 is performed using a local communication method such as IrDA, Bluetooth, or wireless LAN.
[0095]
FIG. 13 is a flowchart for explaining the operation example.
Step ST81:
The user A operates the operation unit 35 of the mobile communication function unit 20 of the mobile phone device 14 shown in FIG. 6, and is provided using the IC 21 to be used on the screen of the display unit 34 according to the operation. Select a service.
[0096]
Step ST82:
The mobile communication function unit 20 notifies the IC_R / W device 11 of the service selected in step ST81.
[0097]
Step ST83:
User A places mobile phone device 14 at a position where IC 21 and IC_R / W device 15 can communicate wirelessly.
[0098]
Step ST84:
IC 21 relays communication between IC_R / W device 11 and portable communication function unit 20, and mutual authentication between IC service providing server device 13 and IC_R / W device 15 via portable communication function unit 20 and IC 21. Is done.
[0099]
Step ST85:
When mutual validity is authenticated by the mutual authentication in step ST28, the IC service providing server device 13 and the IC_R / W device 15 cooperate with each other via the portable communication function unit 20 and the IC 21, and are provided using the IC 21. The processing related to the service notified in step ST82 is performed.
[0100]
As described above, according to the communication system 1, even if the IC_R / W device 15 is not connected to the network 18, the IC service providing server device 13 and the IC_R / W device 15 can be connected via the mobile phone device 14. Communication between them becomes possible.
Therefore, if the IC_R / W device 15 has a communication function with the mobile phone device 14, it is not necessary to have a communication function with the IC service providing server device 13 individually. Therefore, the configuration of the IC service providing server device 13 can be simplified. Further, a switching system for performing communication between the IC service providing server device 13 and the IC_R / W device 15 becomes unnecessary.
[0101]
Further, according to the communication system 1, the IC_R / W device 15 communicates with the IC service providing server device 13 using the line established between the mobile phone device 14 and the IC service providing server device 13. Thus, it is possible to construct a system in which the administrator of the IC_R / W device 15 does not bear a communication fee.
[0102]
Further, according to the communication system 1, before the mobile phone device 14 communicates with the IC_R / W device 15, the mobile phone device 14 communicates with the IC service providing server device 13, so that the mobile phone device 14 and the IC_R It becomes possible to store the personal information of user A used for communication with the / W device 15 in the IC service providing server device 13. Therefore, the personal information stored in the mobile phone device 14 can be reduced or eliminated, and the storage capacity of the memory built in the mobile phone device 14 can be reduced.
[0103]
In addition, according to the communication system 1, the mobile phone device 14 performs mutual authentication with both the IC service providing server device 13 and the IC_R / W device 15, so that so-called spoofing can be effectively prevented.
[0104]
The effects of the communication system 1 described above are realized by the configuration and operation of the IC 21 built in the mobile phone device 14 described above.
Further, according to the IC 21 built in the mobile phone device 14, as shown in FIG. 7, in addition to the antenna 49 that communicates with the IC_R / W device 15, the I / F unit that communicates with the mobile communication function unit 20. By providing 45, it becomes possible to mutually control the other party between the mobile communication function unit 20 and the IC 21. Therefore, for example, under certain conditions, the mobile communication function unit 20 can invalidate the function of the IC 21, or the IC 21 can invalidate the function of the mobile communication function unit 20. Control can be realized.
[0105]
The present invention is not limited to the embodiment described above.
In the above-described embodiment, the case where the IC 21 is built in the mobile phone device 14 is exemplified. However, a fixed telephone connected by wire, a personal digital assistant (Personal Digital Assistant), a clock, a computer, etc. The present invention can also be applied to the case where the IC 21 is built in a device having a function that can be connected to a network by either a wired or wireless method.
Further, the IC 21 may be incorporated in the communication device in either a detachable or non-detachable form, and an IC card incorporating the IC 21 or an external storage medium such as a memory card may be used as a cellular phone device or portable information. You may comprise so that attachment or detachment to a terminal, a computer, etc. is possible.
[0106]
【The invention's effect】
As described above, according to the present invention, it is possible to simplify the configuration of the entire system including a processing device in a system that performs transactions such as electronic commerce using an integrated circuit (IC), and a communication method that can be reduced in size. A system, a communication device, and a processing device can be provided.
[Brief description of the drawings]
FIG. 1 is an overall configuration diagram of a communication system according to an embodiment of the present invention.
FIG. 2 is a diagram for explaining an outline of an operation example of the communication system shown in FIG. 1;
FIG. 3 is a functional block diagram of the IC service providing server apparatus shown in FIG. 1;
FIG. 4 is a functional block diagram of the SAM shown in FIG. 3;
FIG. 5 is a functional block diagram of the control unit shown in FIG. 3;
6 is a functional block diagram of a mobile communication function unit of the mobile phone device shown in FIG. 1. FIG.
FIG. 7 is a functional block diagram of the IC of the mobile phone device shown in FIG. 1;
FIG. 8 is a functional block diagram of the IC_R / W device shown in FIG. 1;
FIG. 9 is a diagram for explaining a first operation example of the communication system shown in FIG. 1;
FIG. 10 is a diagram for explaining a second operation example of the communication system shown in FIG. 1;
FIG. 11 is a diagram for explaining a third operation example of the communication system shown in FIG. 1;
12 is a diagram for explaining a fourth operation example of the communication system shown in FIG. 1; FIG.
FIG. 13 is a diagram for explaining a fifth operation example of the communication system depicted in FIG. 1;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Communication system, 10 ... Gateway, 13 ... IC service provision server apparatus, 14 ... Mobile telephone apparatus, 15 ... IC_R / W apparatus, 17 ... Wireless communication line, 18 ... Network, 20 ... Mobile communication function part, 21 ... IC , 31 ... voice input / output unit, 32 ... A / D / D / A conversion unit, 33 ... DSP, 34 ... display unit, 35 ... operation unit, 36 ... IC_I / F unit, 37 ... memory, 38 ... control unit, 39 ... Baseband processing unit, 40 ... Radio unit, 41 ... Antenna, 45 ... I / F unit, 46 ... Memory, 47 ... Analog unit, 48 ... Control unit, 49 ... Antenna, 51 ... SAM, 52 ... Memory, 53 ... Control part 54 ... I / F part 61 ... Authentication part 62 ... Encryption / decryption part 63 ... IC control part 64 ... IC related processing part

Claims (5)

A first communication device having an integrated circuit and a communication circuit; a processing device that exchanges data with the integrated circuit in a contact or non-contact manner and is used for services related to the integrated circuit; and the communication circuit A communication method for performing data communication with the integrated circuit via the second communication device used for services related to the integrated circuit,
The communication circuit transmits a service use request to the second communication device;
In response to the service use request, a first mutual authentication is performed between the integrated circuit and the second communication device via the communication circuit,
When the integrated circuit and the second communication device authenticate each other by the first mutual authentication, the second communication device notifies the communication circuit of permission to use the service,
The communication circuit transmits a relay request to the integrated circuit in response to the use permission notification,
The integrated circuit relays communication between the second communication device and the processing device in response to the relay request;
When the second mutual authentication is performed between the second communication device and the processing device, and the second communication device and the processing device authenticate each other by the second mutual authentication, A communication method in which the second communication device and the processing device communicate with each other via the integrated circuit and the communication device to perform processing related to the service. A first communication device having an integrated circuit and a communication circuit; a processing device that exchanges data with the integrated circuit in a contact or non-contact manner and is used for services related to the integrated circuit; and the communication circuit A communication system having a second communication device that exchanges data with the integrated circuit via the integrated circuit and is used for services related to the integrated circuit,
The communication circuit transmits a service use request to the second communication device;
In response to the service use request, a first mutual authentication is performed between the integrated circuit and the second communication device via the communication circuit,
When the integrated circuit and the second communication device authenticate each other by the first mutual authentication, the second communication device notifies the communication circuit of permission to use the service,
The communication circuit transmits a relay request to the integrated circuit in response to the use permission notification,
The integrated circuit relays communication between the second communication device and the processing device in response to the relay request;
When the second mutual authentication is performed between the second communication device and the processing device, and the second communication device and the processing device authenticate each other by the second mutual authentication, A communication system in which the second communication device and the processing device communicate with each other via the integrated circuit and the communication device to perform processing related to the service. A first communication device having an integrated circuit and a communication circuit; a processing device that exchanges data with the integrated circuit in a contact or non-contact manner and is used for services related to the integrated circuit; and the communication circuit A communication method for communicating with the second communication device used for services related to the integrated circuit by transferring data to and from the integrated circuit,
Performing a first mutual authentication between the integrated circuit and the processing device;
When the integrated circuit and the processing device authenticate each other by the first mutual authentication, the integrated circuit and the processing device communicate with each other to perform a first process related to the service,
After completion of the first processing, the integrated circuit relays communication between the communication circuit and the processing device,
When the second mutual authentication is performed between the processing device and the second communication device, and the processing device and the second communication device authenticate each other by the second mutual authentication, A communication method in which the processing device and the second communication device communicate with each other via an integrated circuit and the communication device to perform a second process related to the service . A first communication device having an integrated circuit and a communication circuit; a processing device that exchanges data with the integrated circuit in a contact or non-contact manner and is used for services related to the integrated circuit; and the communication circuit A communication system having a second communication device that exchanges data with the integrated circuit via the integrated circuit and is used for services related to the integrated circuit,
Performing a first mutual authentication between the integrated circuit and the processing device;
When the integrated circuit and the processing device authenticate each other by the first mutual authentication, the integrated circuit and the processing device communicate with each other to perform a first process related to the service,
After completion of the first processing, the integrated circuit relays communication between the communication circuit and the processing device,
When the second mutual authentication is performed between the processing device and the second communication device, and the processing device and the second communication device authenticate each other by the second mutual authentication, A communication system in which the processing device and the second communication device communicate with each other via the integrated circuit and the communication device to perform a second process related to the service . After the processing device ends the first processing, the processing device accesses the second communication device via the integrated circuit and the communication device, and in response to the access, the processing device and the second processing device. The communication system according to claim 4 , wherein a communication device starts the second mutual authentication.

Images