JP6260237B2 - Information processing system, information processing apparatus, portable storage medium, information processing method, and program - Google Patents

Description

  The present invention relates to an information processing system, an information processing apparatus, a portable storage medium, an information processing method, and a program.

IC (Integrated Circuit) cards for various uses such as credit cards, cash cards, prepaid cards and the like are prevalent.
When issuing an IC card, for example, it is issued in a plurality of stages (see, for example, Patent Document 1).
As an example, when the IC card can be operated by issuing in two stages, the primary issue and the secondary issue, the primary issue includes initializing the storage area and programs according to the purpose. The process which memorize | stores the information which should be memorize | stored in common with respect to the several card | curd | In the secondary issue, a process for storing unique information for each card such as a card number or personal information of a user is performed.

JP-A-2-12581

For example, in the case where IC card issuance processing is performed step by step as described above, the location of a factory or the like where the issuance processing is performed differs for each stage of the issuance processing for the purpose of security maintenance. Is called.
In the issuing process, an encryption key as a common key corresponding to the common key encryption method may be used between the IC card and the information processing apparatus that executes the IC card issuing process. In such a case, a different encryption key is used for each stage of the issuing process for the purpose of security maintenance.
In this way, when different encryption keys are used for each issue process, the encryption key used in one issue process stage is strictly enforced at the factory that performs the corresponding issue process so that it never leaks outside. Managed. Therefore, the encryption key used for the issuance process at one factory is not owned by the factory that performs the issuance process at different stages, even when the same IC card is issued.

For example, when an IC card issuance process is performed at a certain stage, the encryption key used in the previous issuance process stage and stored in the IC card is stored in the IC card that should be the object of the current issuance process. Sometimes you want to see if it ’s the right thing to do.
In order to determine the validity of the encryption key stored in the IC card as described above, for example, the same encryption key stored in the IC card may be obtained and the authentication process for the IC card may be executed.

However, as described above, since the encryption key used in the issuing process is managed so as not to leak from the factory where the issuing process is performed, it cannot be obtained by other factories. Therefore, as described above, the validity of the encryption key used in the previous issuance process stage cannot be determined in the issuance process in the subsequent stage.
There are cases where the IC card issuance process itself can be performed regardless of whether the encryption key used in the previous issuance process stage is valid. For this reason, when the validity of the encryption key used in the previous issuance processing stage cannot be determined, there is a possibility that an inconvenience may occur that the issuance processing is performed on a different type of IC card.

  In view of the above circumstances, the present invention can verify the validity of the encryption key stored in the portable storage medium even if the encryption key used between the portable storage medium and the information processing apparatus is not held at the previous issue stage. The purpose is to enable correct judgment.

  In order to solve the above-described problem, one embodiment of the present invention is an information processing system including a portable storage medium and an information processing apparatus that communicates with the portable storage medium. The information processing apparatus includes: An external verification data acquisition unit that acquires external verification data provided from the outside as verification data uniquely corresponding to one encryption key, and the information processing apparatus or the portable storage medium, which are managed by the portable storage medium The portable storage medium based on a result of comparison between the verification data and the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium and the external verification data acquired by the external verification data acquisition unit Is an information processing system including a correct / incorrect determination unit that determines whether or not an encryption key stored in the computer is valid.

  The present invention is the information processing system described above, wherein the external verification data acquisition unit receives the external verification from the verification data management device through communication with an external verification data management device that stores the external verification data. Data may be acquired.

  The present invention is the above information processing system, wherein the correctness determination unit is provided in the information processing apparatus, and the internal verification data acquired from the portable storage medium and the external verification data acquired by the external verification data acquisition unit Whether or not the encryption key is valid may be determined based on the result of comparison with the verification data.

  The present invention is the above information processing system, wherein the correctness determination unit is provided in the portable storage medium, and is acquired by the internal verification data managed by the portable storage medium and the external verification data acquisition unit. It may be determined whether or not the encryption key is valid based on a result of comparison with the external verification data received from the information processing apparatus.

  The present invention is the above information processing system, wherein the external verification data acquisition unit acquires a plurality of external verification data corresponding to a plurality of encryption keys, and the correctness determination unit includes the internal verification data and the If there is external verification data that matches the internal verification data among the plurality of external verification data acquired by the external verification data acquisition unit as a result of comparison with a plurality of external verification data, the portable storage medium stores The encryption key to be determined is valid, and information specifying the encryption key determined to be valid is output, and the internal verification data among the plurality of external verification data acquired by the external verification data acquisition unit If there is no matching external verification data, it may be determined that the encryption key stored in the portable storage medium is not valid.

  The present invention includes a portable storage medium compatible communication unit that performs communication with a portable storage medium, an external verification data acquisition unit that acquires external verification data provided from the outside as verification data uniquely corresponding to one encryption key, As a result of comparing the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquired by the external verification data acquisition unit And an authenticity determination unit that determines whether or not the encryption key stored in the portable storage medium is valid.

  The present invention relates to a communication unit that performs communication with an information processing apparatus, internal verification data that uniquely corresponds to an encryption key stored by itself and is managed by itself as verification data that uniquely corresponds to one encryption key, A correct / incorrect determination unit that determines whether or not the encryption key stored by the information processing apparatus is valid based on a result of comparison with external verification data that is verification data acquired from the outside and received from the information processing apparatus Is a portable storage medium.

  The present invention relates to an information processing method in an information processing system including a portable storage medium and an information processing apparatus that communicates with the portable storage medium, and in the information processing apparatus, verification that uniquely corresponds to one encryption key An external verification data acquisition step for acquiring external verification data provided externally as data, and the verification data managed by the portable storage medium in the information processing apparatus or the portable storage medium, and stored in the portable storage medium Whether or not the encryption key stored in the portable storage medium is valid based on the comparison result between the internal verification data uniquely corresponding to the encryption key to be performed and the external verification data acquired in the external verification data acquisition step It is an information processing method provided with the right / wrong judgment step which judges.

  The present invention includes a portable storage medium compatible communication step for executing communication with a portable storage medium, an external verification data acquisition step for acquiring external verification data provided from the outside as verification data uniquely corresponding to one encryption key, As a result of comparing the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquired by the external verification data acquisition unit And a correct / incorrect determination step for determining whether or not the encryption key stored in the portable storage medium is valid.

  The present invention provides a communication step for performing communication with an information processing apparatus, internal verification data that uniquely corresponds to an encryption key stored by itself and that is managed by itself as verification data that uniquely corresponds to one encryption key, Correct / incorrect determination step for determining whether or not the encryption key stored by the information processing apparatus is valid based on a result of comparison with external verification data which is verification data acquired from outside and received from the information processing apparatus An information processing method comprising:

  The present invention relates to a portable storage medium compatible communication step for executing communication with a portable storage medium, and external verification data acquisition for acquiring external verification data provided externally as verification data uniquely corresponding to one encryption key. Comparing the verification data managed by the portable storage medium and the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium and the external verification data acquired by the external verification data acquisition unit And a correct / incorrect determination step for determining whether or not the encryption key stored in the portable storage medium is valid based on the result.

  The present invention relates to a computer, a communication step for executing communication with an information processing device, and a verification key uniquely corresponding to one encryption key, and uniquely corresponding to the encryption key stored by itself and managed by the computer. Whether or not the encryption key stored by itself is valid based on the result of comparing internal verification data with external verification data that is verification data acquired from the information processing device and received from the information processing device This is a program for executing a correct / incorrect determination step.

  As described above, according to the present invention, the encryption key stored in the portable storage medium can be stored even if the encryption key used between the portable storage medium and the information processing apparatus is not held at the previous issue stage. The effect that correctness can be correctly determined is obtained.

It is a figure which shows typically the flow of the operation | work regarding issue of the IC card in this embodiment. It is a flowchart which shows the example of a process sequence in case the IC card corresponding | compatible information processing apparatus and IC card in the stage of a primary issuance perform the authentication process by external authentication. It is a flowchart which shows the example of a process sequence in case the information processing apparatus and IC card corresponding to IC card in the stage of a primary issue perform the authentication process by internal authentication. It is a figure which shows the structural example of the IC card in 1st Embodiment, and an IC card corresponding | compatible information processing apparatus. It is a flowchart which shows the example of a process sequence performed in order to determine the validity of the primary issue key memorize | stored in the IC card and IC card corresponding information processing apparatus in 1st Embodiment. It is a figure which shows the structural example of the IC card and IC card corresponding | compatible information processing apparatus in 2nd Embodiment. It is a flowchart which shows the example of a process sequence performed in order to determine the validity of the primary issue key memorize | stored in the IC card and IC card corresponding information processing apparatus in 2nd Embodiment. It is a figure which shows the structural example of the IC card in 3rd Embodiment. It is a flowchart which shows the example of a process sequence which the IC card in 3rd Embodiment performs in order to determine the validity of the primary issue key memorize | stored in the IC card. It is a figure which shows the structural example of the IC card and IC card corresponding information processing apparatus in 4th Embodiment. It is a flowchart which shows the example of a process sequence performed in order to determine the validity of the primary issue key memorize | stored in the IC card and IC card corresponding | compatible information processing apparatus in 4th Embodiment. It is a flowchart which shows the example of a process sequence performed in order to determine the validity of the primary issue key memorize | stored in the IC card and IC card corresponding | compatible information processing apparatus in 5th Embodiment. It is a figure which shows the structural example of the transmission data which the primary verification key specific information for every some external verification data and each external verification data which an external verification data management apparatus transmits in 5th Embodiment transmits. It is a flowchart which shows the example of a process sequence performed in order to determine the validity of the primary issue key memorize | stored in the IC card and IC card corresponding | compatible information processing apparatus in 6th Embodiment.

<First Embodiment>
[Flow of IC card issuance work]
FIG. 1 schematically shows a work flow relating to the issuance of an IC (Integrated Circuit) card 100 in the present embodiment. An IC card is a portable storage medium in a card format that includes an integrated circuit and executes information recording and information processing according to communication with the outside.
In the following description, the IC card 100 according to the present embodiment will be described as an example in which the IC card 100 can be operated through two-stage issuance, that is, primary issuance and secondary issuance following the primary issuance.

  In the present embodiment, primary issuance is performed at the first factory 1, and secondary issuance is performed at the second factory 2. As described above, the primary issue and the secondary issue are not performed at the same place but at different places for security preservation or the like.

The primary issue to the IC card 100 is performed by the IC card compatible information processing apparatus 10 provided in the first factory 1 executing communication with the IC card 100.
In the drawing, only one IC card is shown in the first factory 1, but in the first factory 1, for example, primary issuance is performed for a large number of IC cards 100.

  When the primary issue is performed as described above, the IC card compatible information processing apparatus 10 and the IC card 100 according to the present embodiment execute communication using a common key cryptosystem. For this purpose, the IC card compatible information processing apparatus 10 and the IC card 100 each store a primary issue key K which is a common encryption key. The IC card compatible information processing apparatus 10 executes a process for primary issuance targeting the IC card 100 by executing communication with encryption and decryption using the primary issue key K with the IC card 100.

  In the first factory 1, an external verification data management device 20 is provided. The external verification data management device 20 stores external verification data β. The external verification data β is used by the IC card compatible information processing apparatus 200 in the second factory 2 to determine the validity of the primary issue key K stored in the IC card 100.

  The IC card 100 for which primary issue has been completed in the first factory 1 is transported to the second factory 2, for example. Here, the IC card 100 transported to the second factory 2 is stored as it is with the primary issue key K used for the primary issue.

In the second factory 2, secondary issue is performed on the IC card 100 transported from the first factory 1. The secondary issue is performed when the IC card compatible information processing device 200 provided in the second factory 2 executes communication with the IC card 100.
The IC card-compatible information processing apparatuses 10 and 200 are also called reader / writers.

[General authentication process]
In the primary issuance stage, the IC card compatible information processing apparatus 10 and the IC card 100 in the first factory 1 can execute an authentication process using the primary issuance key K stored in each other. Examples of the authentication process include external authentication (External Authenticate) and internal authentication (Internal Authenticate).

The flowchart of FIG. 2 shows an example of a processing procedure when the IC card compatible information processing apparatus 10 and the IC card 100 execute an authentication process by external authentication.
In external authentication, the IC card compatible information processing apparatus 10 transmits a random number request to the IC card 100 (step S101).
The IC card compatible information processing apparatus 10 receives the internal random number Rin transmitted from the IC card 100 in response to the random number request transmitted in step S101 (step S102).
The IC card compatible information processing apparatus 10 generates a ciphertext by encrypting the internal random number Rin received in step S102 with the primary issue key K stored in the IC card (step S103).
The IC card compatible information processing apparatus 10 transmits the ciphertext generated in step S103 to the IC card 100 (step S104).

  The IC card 100 receives the response (normal response or error response) transmitted from the IC card 100 in response to the ciphertext transmitted in step S104 (step S105). If a normal response is received in step S105, authentication is established, and if an error response is received, authentication is not established.

In FIG. 2, the IC card 100 receives the random number request transmitted from the IC card compatible information processing apparatus 10 in step S101 (step S201).
The IC card 100 generates a random number in response to receiving the random number request in step S201 (step S202). The random number generated by the IC card 100 in this way is referred to herein as an internal random number Rin.
The IC card 100 transmits the internal random number Rin generated in step S202 to the IC card compatible information processing apparatus 10 (step S203).

Next, the IC card 100 receives the ciphertext transmitted by the IC card compatible information processing apparatus 10 in step S104 (step S204).
The ciphertext received in step S204 is obtained by the IC card compatible information processing apparatus 10 having been encrypted with the primary issue key K in step S103.
Therefore, the IC card 100 restores the random number by decrypting the ciphertext received in step S204 with the primary issue key K stored by itself. Since the random number obtained by decryption is obtained based on the ciphertext generated by the IC card compatible information processing apparatus 10, it is referred to as an external random number Rex here.

The IC card 100 compares the internal random number Rin generated in step S202 with the external random number Rex acquired in step S205 (step S206).
The IC card 100 determines whether or not the internal random number Rin matches the external random number Rex as a comparison result in step S206 (step S207).
When the internal random number Rin matches the external random number Rex (step S207—YES), the IC card 100 and the IC card compatible information processing apparatus 10 use the same primary issue key K. Therefore, in this case, the IC card 100 determines that authentication has been established, and transmits a response (normal response) indicating normality to the IC card compatible information processing apparatus 10 in response to the determination of authentication establishment (step S208). ).
On the other hand, if the internal random number Rin and the external random number Rex do not match (NO in step S207), the IC card 100 and the IC card compatible information processing apparatus 10 use different primary issue keys. In this case, the IC card 100 determines that the authentication is not established, and transmits a response (error response) indicating an error to the IC card compatible information processing apparatus 10 in response to the determination that the authentication is not established (step S209). .

The flowchart of FIG. 3 shows an example of a processing procedure when the IC card compatible information processing apparatus 10 and the IC card 100 execute an authentication process by external authentication.
First, the IC card compatible information processing apparatus 10 generates a random number (step S301). In FIG. 3, the random number generated by the IC card compatible information processing apparatus 10 is referred to as an external random number Rex. The IC card compatible information processing apparatus 10 transmits the external random number Rex generated in step S301 to the IC card 100 ( Step S302).

Next, the IC card compatible information processing apparatus 10 receives the ciphertext transmitted by the IC card 100 in response to the transmission of the external random number Rex in step S302 (step S303).
The IC card-compatible information processing device 10 decrypts the ciphertext received in step S303 with the primary issuance key K stored by itself and restores the random number (step S304). The random number obtained based on the ciphertext generated on the IC card 100 side is referred to as an internal random number Rin here.

The IC card compatible information processing apparatus 10 compares the external random number Rex generated in step S301 with the internal random number Rin acquired in step S304 (step S305).
The IC card compatible information processing apparatus 10 determines whether or not the internal random number Rin and the external random number Rex match as a comparison result in step S305 (step S306).

If the internal random number Rin matches the external random number Rex (YES in step S306), the IC card compatible information processing apparatus 10 and the IC card 100 use the same primary issue key K. Therefore, in this case, the IC card compatible information processing apparatus 10 determines that the primary issue key K stored in the IC card is valid (step S307). That is, in this case, authentication is established.
On the other hand, when the internal random number Rin and the external random number Rex do not match (NO in step S306), the IC card compatible information processing apparatus 10 and the IC card 100 use different primary issue keys. In this case, it is determined that the primary issue key K stored in the IC card compatible information processing apparatus 10 is invalid (step S308). That is, in this case, authentication is not established.

In FIG. 3, the IC card 100 receives the external random number Rex transmitted from the IC card compatible information processing apparatus 10 in step S302 (step S401).
Next, the IC card 100 encrypts the external random number Rex received in step S401 with the primary issue key K stored by itself, and generates a ciphertext (step S402). The IC card 100 transmits the generated ciphertext to the IC card compatible information processing apparatus 10 (step S403).

  Thus, at the primary issue stage, the IC card compatible information processing apparatus 10 and the IC card 100 both store the primary issue key K, which is an encryption key for primary issue. By sharing the primary issue key K in this way, the IC card compatible information processing apparatus 10 and the IC card 100 can appropriately execute the authentication process. Even in the secondary issue stage, the IC card compatible information processing apparatus 10 and the IC card 100 can share the same encryption key by the common key encryption method corresponding to the secondary issue, whereby the authentication process can be executed in the same manner.

For example, the primary issuance key differs depending on the type of IC card for security purposes. Furthermore, even if the type of the IC card is the same, if the version of the IC card differs depending on the time or the like, the primary issue key is also different depending on the version.
On the other hand, for example, various types and versions of IC cards 100 are transported to the second factory 2 and managed as inventory.
In such a situation, in the second factory 2, when the secondary issue of the IC card of the primary issue type using the primary issue key K1 is to be performed, the inventory of the secondary issue target In some cases, it is necessary to check whether the IC card has been issued with the primary issue key K1 and there is no mistake. In such a case, for example, it may be confirmed whether or not the primary issue key stored in the IC card 100 is the primary issue key K1.

However, when the IC card 100 after completion of the primary issue is transported to the second factory 2, the primary issue key is stored in the IC card 100, but the IC card compatible information processing apparatus 200 in the second factory 2 Does not store the primary issue key. For this reason, for example, the validity of the primary issue key cannot be confirmed by the authentication process of FIG. 2 or FIG.
For example, if the primary issuance key is obtained from the first factory 1 and stored in the IC card compatible information processing apparatus 200 of the second factory 2, the validity of the primary issuance key can be confirmed by the authentication process of FIG. 2 or FIG. . However, as described above, the primary issuance key is strictly managed in the first factory 1 so as not to leak from the first factory 1. For this reason, the second factory 2 side cannot obtain the primary issue key. Therefore, the second factory 2 determines the validity of the primary issue key stored in the IC card 100 using the primary issue key. It is not possible.

  Therefore, the present embodiment is configured so that the validity of the primary issue key stored in the IC card 100 can be correctly determined without having the primary issue key in the secondary issue. Hereinafter, this point will be described.

[Configuration example of IC card compatible information processing device]
FIG. 4 shows a configuration example of the IC card compatible information processing apparatus 200 and the IC card 100 which are information processing systems that perform secondary issuance at the second factory 2. First, the configuration of the IC card compatible information processing apparatus 200 will be described with reference to FIG.

The IC card compatible information processing apparatus 200 shown in the figure includes an IC card compatible communication unit 201, a control unit 202, a data interface 203, and a display unit 204.
The IC card compatible communication unit 201 performs communication with the IC card 100. In the present embodiment, the communication between the IC card compatible information processing apparatus 200 and the IC card 100 may be contact type (wired) or non-contact type (wireless).
Further, the communication protocol between the IC card compatible information processing apparatus 200 and the IC card 100 is not particularly limited. As an example, the contact type may include a communication protocol based on ISO7816. As the non-contact type, a communication protocol based on ISO14443 can be cited.

The control unit 202 executes various controls for realizing the function as the IC card compatible information processing apparatus 200.
The data interface 203 executes communication between the IC card compatible information processing apparatus 200 and an external information processing apparatus according to a predetermined data interface standard.
The display unit 204 performs a predetermined display according to the control of the control unit 202.

  The control unit 202 shown in the figure corresponds to each function of the command transmission unit 221, the external verification data acquisition unit 222, and the correctness determination unit 223 in response to the determination (verification) of the validity of the primary issue key stored in the IC card 100. A part. These functional units are realized, for example, when a CPU (Central Processing Unit) in the control unit 202 executes a program.

  The command transmission unit 221 transmits a validity determination command to the IC card 100. The validity determination command in the first embodiment is a command for instructing the IC card 100 to perform processing according to the determination of the validity of the primary issue key stored in the IC card 100.

The external verification data acquisition unit 222 acquires external verification data. The external verification data is verification data provided from outside the IC card compatible information processing apparatus 200. The verification data is information used by the correctness determination unit 223 for determining the validity of the primary issue key stored in the IC card 100, and uniquely corresponds to the primary issue key.
As a specific example, the external verification data in the first embodiment is obtained, for example, as a hash value of the primary issue key K managed by the first factory 1 or a CRC (Cyclic Redundancy Check) value of the primary issue key K. The hash value and CRC value obtained in this way uniquely correspond to the primary issue key K. In addition, the operations for obtaining these hash values and CRC values are irreversible. In other words, the primary issue key K of the generation source cannot be restored and estimated from the hash value or CRC value. Thus, the verification data in the present embodiment is data that uniquely corresponds to the primary issue key, but cannot identify the primary issue key from the verification data.

In the first embodiment, the external verification data β managed by the external verification data management device 20 in the first factory 1 is stored in, for example, a storage medium, and the storage medium storing the external verification data β is transported to the second factory. To do.
In the second factory 2, for example, the transported storage medium is connected to the data interface 203 of the IC card compatible information processing apparatus 200. The external verification data acquisition unit 222 can read the external verification data β from the storage medium connected to the data interface 203 and acquire the read external verification data β.
Thus, the external verification data β is delivered from the first factory 1. However, as described above, the external verification data β uniquely corresponds to the primary issue key, but the primary issue key cannot be specified or estimated from the external verification data β. Therefore, even if the external verification data β is provided outside the first factory 1, the primary issuance key is not leaked outside the first factory 1 and does not cause a problem.
In the first embodiment, the external verification data acquisition unit 222 stores the acquired external verification data.

  The correctness determination unit 223 compares the internal verification data with the external verification data acquired by the external verification data acquisition unit 222. The internal verification data is verification data managed by the IC card 100, and is internal verification data uniquely corresponding to a primary issue key (an example of an encryption key) stored in the IC card. In the present embodiment, the IC card 100 manages the internal verification data by storing the internal verification data.

In the first factory 1, internal verification data is generated using the primary issuance key K in the course of the primary issuance process, and the generated internal verification data is stored in the IC card 100.
For example, the internal verification data is generated by the same generation method as the external verification data. For example, if the external verification data is obtained as a hash value by a hash operation using a predetermined hash function, the internal verification data is also obtained as a hash value by a hash operation using a hash function. Accordingly, when the internal verification data and the external verification data are generated using the same primary issue key, they match with the same value.
Note that the calculation for generating the internal verification data in the first factory may be performed by either the IC card compatible information processing apparatus 10 or the IC card 100.

The correctness determination unit 223 determines whether or not the primary issue key stored in the IC card 100 is valid based on the comparison result between the internal verification data and the external verification data.
Specifically, the correctness determination unit 223 determines that the primary issue key stored in the IC card 100 is valid when a comparison result is obtained that the internal verification data matches the external verification data. .
On the other hand, the correctness determination unit 223 determines that the primary issue key stored in the IC card 100 is not valid when a comparison result is obtained that the internal verification data and the external verification data do not match.

The correctness determination unit 223 can output the determination result by transmitting the determination result to the external information processing apparatus or the like via the data interface 203, for example.
Moreover, the correctness determination part 223 can output so that a determination result may be displayed on the display part 204 by a predetermined aspect.

[Configuration example of IC card]
Next, a configuration example of the IC card 100 in the first embodiment will be described with reference to the same FIG.
The IC card 100 shown in the figure includes a communication unit 101, a control unit 102, a primary issue key storage unit 103, and an internal verification data storage unit 104.

The communication unit 101 performs communication with the IC card compatible information processing apparatus 200. The communication unit 101 performs communication according to the same communication protocol that the IC card compatible communication unit 201 in the IC card compatible information processing apparatus 200 supports.
The control unit 102 executes various controls for realizing functions as the IC card 100.

The primary issue key storage unit 103 stores a primary issue key used for communication with the IC card compatible information processing apparatus 10 when the primary issue is performed on the IC card 100.
The internal verification data storage unit 104 stores internal verification data uniquely corresponding to the primary issue key stored in the primary issue key storage unit 103. That is, the internal verification data stored in the internal verification data storage unit 104 is, for example, a hash operation or a CRC value obtained using the primary issue key stored in the primary issue key storage unit 103.

[Example of processing procedure]
Subsequently, with reference to the flowchart of FIG. 5, the IC card compatible information processing apparatus 200 and the IC card 100 in the first embodiment execute in order to determine the validity of the primary issue key stored in the IC card 100. A processing procedure example will be described.

  When determining the validity of the primary issuance key stored in the IC card 100, the command transmission unit 221 of the IC card compatible information processing apparatus 200 transmits a validity determination command from the IC card compatible communication unit 201 to the IC card 100 ( Step S501).

Next, the correctness determination unit 223 of the IC card compatible information processing apparatus 200 receives the internal verification data α transmitted by the IC card 100 in response to the validity determination command transmitted in step S501 (step S502).
Further, the correctness determination unit 223 reads the external verification data β acquired from the outside by the external verification data acquisition unit 222 from the external verification data acquisition unit 222 (step S503).
Then, the correctness determination unit 223 compares the internal verification data α received in step S502 with the external verification data β read in step S503 (step S504).

The correctness determination unit 223 determines whether the internal verification data α and the external verification data β match as the comparison result in step S504 (step S505).
When the internal verification data α and the external verification data β match (step S505—YES), the correctness determination unit 223 determines that the primary issue key stored in the IC card 100 is valid (step S506).
On the other hand, when the internal verification data α and the external verification data β do not match (step S505—NO), the correctness determination unit 223 determines that the primary issue key stored in the IC card 100 is not valid. (Step S507).

  Although omitted in FIG. 5, the correctness determination unit 223 externally sends a determination result as to whether or not the primary issue key stored in the IC card 100 is valid via the data interface 203 as described above. Can be transmitted, or displayed on the display unit 204 for output.

Next, the processing procedure of the IC card 100 will be described with reference to FIG. The control unit 102 in the IC card 100 receives the validity determination command transmitted from the IC card compatible information processing apparatus 200 in step S501 via the communication unit 101 (step S601).
In response to receiving the validity determination command in step S601, the control unit 102 reads the internal verification data α stored in the internal verification data storage unit 104 (step S602). The control unit 102 transmits the read internal verification data α to the IC card compatible information processing apparatus 200 via the communication unit 101 (step S603).

  By executing such processing, in the first embodiment, the validity of the primary issue key stored in the IC card 100 is judged at the secondary issue stage even if the primary issue key is not owned. it can.

Second Embodiment
[Configuration example of IC card compatible information processing device]
Next, the second embodiment will be described. FIG. 6 shows a configuration example of the IC card compatible information processing apparatus 200 and the IC card 100 corresponding to the second embodiment. In FIG. 6, the same parts as those in FIG.
The IC card compatible information processing apparatus 200 shown in FIG. 6 further includes an external device compatible communication unit 205 in addition to the configuration of the IC card compatible information processing apparatus 200 shown in FIG.
As shown in FIG. 1, the external device corresponding communication unit 205 executes communication with the external verification data management device 20 provided in the first factory 1 as shown in FIG. 1. The external device compatible communication unit 205 may be configured to be able to communicate with the external verification data management device 20 via, for example, a network or a dedicated line.

  In addition, the external verification data acquisition unit 222 of the second embodiment communicates with the external verification data management device 20 via the external device compatible communication unit 205 via the external verification data management device 20. To get. The external verification data acquisition unit 222 stores data acquired from the external verification data management device 20.

  Note that the configuration example of the IC card 100 of the second embodiment in FIG. 6 is the same as that of FIG. 4 in the first embodiment.

[Example of processing procedure]
Next, referring to the flowchart of FIG. 7, the IC card compatible information processing apparatus 200 and the IC card 100 in the second embodiment execute in order to determine the validity of the primary issue key stored in the IC card 100. A processing procedure example will be described.
In FIG. 7, the same steps as those shown in FIG.

When the IC card compatible information processing apparatus 200 transmits a validity determination command to the IC card 100 in step S501 and receives the internal verification data α from the IC card 100 in step S502, the IC card compatible information processing apparatus 200 executes the following processing.
That is, the external verification data acquisition unit 222 in the IC card compatible information processing device 200 transmits an external verification data request for requesting external verification data to the external verification data management device 20 via the external device compatible communication unit 205 ( Step S503-1).
Next, the external verification data acquisition unit 222 receives the external verification data β transmitted from the external verification data management device 20 in response to the external verification data request transmitted in step S503-1, via the external device corresponding communication unit 205. Receive (step S503-2). The external verification data acquisition unit 222 stores the received external verification data β.
The subsequent processing in steps S504 to S507 in the IC card compatible information processing apparatus 200 is the same as that in FIG.
Note that the process for acquiring the external verification data β in steps S503-1 and S503-2 may be executed prior to the process for acquiring the internal verification data α in steps S501 and S502, for example.

  Also, the external verification data management apparatus 20 receives the external verification data request transmitted in step S503-1 (step S701). In response to the reception of the external verification data request in step S701, the external verification data management apparatus 20 transmits the external verification data β stored therein to the IC card compatible information processing apparatus 200 (step S702).

Through the processing as described above, the card-compatible information processing apparatus 200 according to the second embodiment makes an external verification data request through communication with the external verification data management apparatus 20 when determining the validity of the primary issue key stored in the IC card 100. Can be acquired.
In this way, by acquiring the external verification data by communication with the outside, the storage medium storing the external verification data β is transported to the second factory, and the storage medium is connected to the IC card compatible information processing apparatus 200. Human work such as storing the external verification data β can be omitted.

<Third Embodiment>
[Configuration example of IC card]
Subsequently, the third embodiment will be described. In the third embodiment, instead of storing the internal verification data, the IC card 100 is configured to generate the internal verification data using the primary issue key stored by itself. That is, the IC card 100 according to the third embodiment generates internal verification data as management of internal verification data.
Note that the configuration of the IC card-compatible information processing device 200 in the third embodiment may be the same as the configuration shown in FIG. 4 in the first embodiment or FIG. 6 in the second embodiment.

FIG. 8 shows a configuration example of the IC card 100 in the third embodiment. In FIG. 8, the same parts as those in FIG.
The IC card 100 according to the third embodiment shown in the figure includes an internal verification data generation unit 121 as a functional unit in the control unit 102.
The internal verification data generation unit 121 generates internal verification data α using the primary issue key stored in the primary issue key storage unit 103. Specifically, as described above, the internal verification data generation unit 121 can generate internal verification data by performing a hash calculation or a calculation for obtaining a CRC value for the primary issue key. In this case, the calculation when the internal verification data generation unit 121 generates the internal verification data is the same as the calculation when the external verification data is generated from the primary issue key.

  Further, in accordance with the provision of the internal verification data generation unit 121 as described above, the internal verification data storage unit 104 is omitted from the IC card 100 of the third embodiment.

[Example of processing procedure]
With reference to the flowchart of FIG. 9, an example of a processing procedure executed by the IC card 100 according to the third embodiment when determining the validity of the primary issue key will be described. Further, the processing procedure of the IC card compatible information processing apparatus 200 in the third embodiment may be the same as that in FIG. 5 or FIG. 7 corresponding to the first embodiment or the second embodiment, for example.

The internal verification data generation unit 121 in the IC card 100 executes the following processing in response to the reception of the validity determination request command transmitted from the IC card compatible information processing apparatus 200 in step S601.
That is, the internal verification data generation unit 121 reads the primary issue key stored in the primary issue key storage unit 103 (step S602-1). The internal verification data generation unit 121 generates internal verification data α by a predetermined calculation using the primary issue key read out in step S602-1 (step S602-2).
The internal verification data generation unit 121 transmits the internal verification data α generated in step S602-2 to the IC card compatible information processing apparatus 200 via the communication unit 101 (step S603).

With the configuration described above, even if the IC card 100 does not store internal verification data, the IC card 100 generates the internal verification data α that uniquely corresponds to the primary issue key stored by itself, and passes it to the IC card compatible information processing apparatus 200. be able to.
As described above, in the third embodiment, since the IC card 100 does not need to include the internal verification data storage unit 104 illustrated in FIGS. 4 and 6, the amount of data to be stored in the IC card 100 is reduced. It becomes possible.
On the other hand, in the configuration in which the internal verification data is stored as in the IC card 100 of the first embodiment or the second embodiment, it is not necessary to execute an operation for generating the internal verification data. It is possible to reduce the load and shorten the processing time.

<Fourth embodiment>
[Configuration of IC card compatible information processing device]
Subsequently, a fourth embodiment will be described. In the previous first to third embodiments, the validity determination for the primary issue key stored in the IC card 100 is executed on the IC card compatible information processing apparatus 200 side. On the other hand, in the fourth embodiment, the IC card 100 is configured to execute the validity determination for the primary issue key stored in the IC card 100.

FIG. 10 shows a configuration example of the IC card 100 and the IC card compatible information processing apparatus 200 in the fourth embodiment. In FIG. 10, the same parts as those in FIG.
In the IC card compatible information processing apparatus 200 of the fourth embodiment shown in FIG. 10, the correctness determination unit 223 is omitted from the IC card compatible information processing apparatus 200 previously shown in FIG. Further, the control unit 202 of the IC card compatible information processing apparatus 200 of FIG. 10 includes a determination result response processing unit 224.

The IC card 100 in the fourth embodiment determines the validity of the primary issuance key stored in the IC card 100 and notifies the IC card information processing apparatus 200 of the determination result. Therefore, the determination result correspondence processing unit 224 in the IC card compatible information processing apparatus 200 executes processing corresponding to the determination result regarding the validity determination notified from the IC card 100.
As an example, the determination result correspondence processing unit 224 can transmit the determination result notified from the IC card 100 to an external information processing apparatus or the like via the data interface 203. Moreover, the determination result corresponding | compatible process part 224 can display the notified determination result on the display part 204 by a predetermined | prescribed aspect.

Further, the command transmission unit 221 in the IC card compatible information processing apparatus 200 according to the fourth embodiment is configured to transmit a validity determination command including the external verification data β to the IC card 100.
For example, the command transmission unit 221 inputs the external verification data β acquired by the external verification data acquisition unit 222, and stores the input external verification data β in the operand of the validity determination command. By such processing, the command transmission unit 221 can generate a validity determination command including the external verification data β.

  Although illustration is omitted, in the fourth embodiment as well, the external verification data acquisition unit 222 can acquire external verification data from an external device or an external storage medium via the data interface 203 as in the first embodiment. Various configurations may be adopted.

[Configuration example of IC card]
Next, a configuration example of the IC card 100 according to the fourth embodiment will be described with reference to the same FIG. The IC card 100 shown in FIG. 10 includes a correct / incorrect determination unit 122 in the control unit 102.
The correctness determination unit 122 determines whether the primary issue key stored in the primary issue key storage unit 103 is valid. At this time, the correctness determination unit 122 determines the validity based on the result of comparing the external verification data β received from the IC card compatible information processing apparatus 200 and the internal verification data α stored in the internal verification data storage unit 104. Do.
Although illustration is omitted, also in the fourth embodiment, as in the third embodiment, the internal verification data storage unit 104 is omitted, and the internal verification data generation unit 121 in the control unit 102 generates the internal verification data α. You may comprise.

[Example of processing procedure]
With reference to the flowchart of FIG. 11, an example of a processing procedure executed by the IC card compatible information processing apparatus 200 and the IC card 100 in the fourth embodiment to determine the validity of the primary issue key stored in the IC card 100. Will be described.
The external verification data acquisition unit 222 in the IC card compatible information processing device 200 transmits an external verification data request to the external verification data management device 20 via the external device compatible communication unit 205 (step S511). Further, the external verification data acquisition unit 222 receives the external verification data β transmitted from the external verification data management device 20 in response to the external verification data request transmitted in step S511 via the external device corresponding communication unit 205 ( Step S512).
Here, steps S511 and S512 are the same as the processes of steps S503-1 and S503-2 in FIG. 7, respectively.
Also, the processing in steps S701 and S702 executed by the external verification data management apparatus 20 in FIG. 11 is the same as the processing in steps S701 and S702 in FIG.

  Next, the command transmission unit 221 in the IC card compatible information processing device 200 generates a validity determination command including the external verification data β received in step S512, and transmits the generated validity determination command (step S513). .

  The determination result corresponding processing unit 224 in the IC card compatible information processing apparatus 200 receives the response transmitted by the IC card 100 in response to the validity determination command transmitted in step S513 via the IC card compatible communication unit 201 ( Step S514). The response received in step S514 indicates the determination result about the validity of the primary issue key stored in the IC card 100.

The determination result response processing unit 224 executes processing corresponding to the determination result indicated by the received response (determination result response processing) (step S515).
The determination result response processing executed by the determination result response processing unit 224 is, for example, outputting the determination result to the outside via the data interface 203 or displaying the determination result on the display unit 204 as described above.

Further, in the IC card 100, the correctness determination unit 122 of the control unit 102 receives the legitimacy determination command transmitted from the IC card compatible information processing apparatus 200 in step S513 via the communication unit 101 (step S611).
As described above, the validity determination command received in step S611 includes the external verification data β. That is, the correctness determination unit 223 acquires the external verification data β by receiving the validity determination command in step S611.

  Further, the correctness determination unit 122 reads the internal verification data α stored in the internal verification data generation unit 121 in response to receiving the validity determination command in step S611 (step S612).

Then, the correctness determination unit 122 compares the internal verification data α read in step S612 with the external verification data β acquired in response to reception of the validity determination command in step S611 (step S613).
The correctness determination unit 122 determines whether or not the internal verification data α and the external verification data β match based on the comparison result in step S613 (step S614).

When the internal verification data α and the external verification data β match (step S614—YES), the correctness determination unit 122 determines that the primary issue key stored in the IC card 100 is valid. In addition, a response indicating the determination result of validity is transmitted to the IC card compatible information processing apparatus 200 via the communication unit 101 (step S615).
On the other hand, when the internal verification data α and the external verification data β do not match (step S614—NO), the correctness determination unit 122 determines that the primary issue key stored in the IC card 100 is not valid. In addition, a response indicating a determination result that is not valid is transmitted to the IC card compatible information processing apparatus 200 via the communication unit 101 (step S616).

  Through the above-described processing, in the fourth embodiment, it is possible to determine the validity of the primary issue key stored in the IC card 100 on the IC card 100 side.

<Fifth Embodiment>
[Overview]
Subsequently, a fifth embodiment will be described. The configurations of the IC card 100 and the IC card compatible information processing apparatus 200 in the fifth embodiment may be the same as those in FIG. 4 or FIG.
In addition, in the fifth embodiment, the IC card compatible information processing apparatus 200 acquires a plurality of external verification data β1 to βn, and compares the internal verification data α with the acquired external verification data β1 to βn.

Then, the IC card-compatible information processing device 200 executes the validity determination based on the result of comparing the internal verification data α and the external verification data β1 to βn as follows.
That is, when there is an external verification data β1 to βn that matches the internal verification data α, the IC card compatible information processing apparatus 200 determines that the primary issue key stored in the IC card 100 is valid. In addition, information specifying the primary issue key determined to be valid is output. In this case, the information indicating the primary issue key determined to be valid indicates any one of the primary issue keys corresponding to the plurality of external verification data β1 to βn.
On the other hand, if none of the external verification data β1 to βn matches the internal verification data α, the IC card-compatible information processing device 200 determines that the primary issue key stored in the IC card 100 is not valid. .

As described above, there are a plurality of primary issuance keys depending on the type of IC card 100 and the version of the same type. For this reason, in the second factory 2, there are cases where a plurality of types of IC cards 100, different versions of the IC cards 100, and the like are managed as inventory. Under such circumstances, for example, when the validity is determined as a result of comparing one external verification data and the internal verification data, if the determination result is not valid, other external verification data It is necessary to execute the same validity judgment sequence again using.
Therefore, for example, as in the fifth embodiment, if the validity is determined using a plurality of external verification data corresponding to each IC card 100 that is inventory-managed at the second factory 2 from the beginning, 1 A valid primary issuance key can be specified by the validity determination sequence of the first time.

[Example of processing procedure]
The flowchart in FIG. 12 illustrates an example of a processing procedure executed by the IC card 100 and the IC card-compatible information processing apparatus 200 according to the fifth embodiment to determine the validity of the primary issue key stored in the IC card 100. .
Note that the processing shown in FIG. 6 is performed from the external verification data management device 20 via the communication with the external verification data management device 20 by the IC card compatible information processing device 200, as in the second embodiment shown in FIG. It is executed corresponding to the case of adopting a configuration for acquiring external verification data.
Also, in FIG. 12, steps that are the same as those in FIG.

  In FIG. 12, the processing of steps S501, S502, and S503-1 executed by the IC card compatible information processing apparatus 200 to acquire the internal verification data α is the same as that in FIG. Also, the processing of steps S601 to S603 executed by the IC card 100 in FIG. 12 is the same as that in FIG.

In the fifth embodiment, the external verification data management apparatus 20 performs the following processing in response to receiving the external verification data request transmitted by the IC card compatible information processing apparatus 200 in step S503-1 (step S701). Execute.
That is, the external verification data management device 20 in this case stores a plurality (n pieces) of external verification data β1 to βn, and the external verification data management device 20 stores the external verification data β1 to βn as IC card correspondence information. It transmits with respect to the processing apparatus 200 (step S702A).

  The external verification data acquisition unit 222 in the IC card compatible information processing apparatus 200 receives the external verification data β1 to βn transmitted in step S702A via the external device compatible communication unit 205 (step S503-2A).

  In addition, the correctness determination unit 223 in the IC card compatible information processing apparatus 200 substitutes 1 as an initial value for a variable i corresponding to the number assigned to the external verification data β1 to βn (step S503-3).

  The correctness determination unit 223 compares the internal verification data α received in step S502 with the i-th external verification data βi in the external verification data β1 to βn received in step S503-2A (step S504). The correctness determination unit 223 determines whether or not the internal verification data α and the external verification data βi match based on the comparison result in step S504 (step S505).

When it is determined that the internal verification data α and the external verification data βi do not match (step S505-NO), the correctness determination unit 223 increments the variable i (step S507-1), and the variable i It is determined whether it is larger than n corresponding to the number of external verification data (step S507-2).
When the variable i is n or less (step S507-2 (NO)), the correctness determination unit 223 returns the process to step S504, thereby shifting to the correctness determination using the next external verification data βi.

  On the other hand, when the variable i is larger than n (step S507-2 (YES)), none of the external verification data β1 to βn matches the internal verification data α. In this case, the correctness determination unit 223 determines that the primary issuance key stored in the IC card 100 is not valid (step S507-3).

When the internal verification data α and the external verification data βi match (step S505—YES), the correctness determination unit 223 determines that the primary issue key stored in the IC card is valid (step S506). 1).
In addition, the correctness determination unit 223 determines that it is valid in step S506-1, and outputs information (primary issue key specifying information) for specifying the primary issue key stored in the IC card (step S506-2). ). The information specifying the primary issue key is not the primary issue key itself but an identifier uniquely associated with the primary issue key. Alternatively, the information specifying the primary issue key is an IC that stores the corresponding primary issue key, such as information indicating the type and version of the IC card 100 that has been primary issued using the corresponding primary issue key. Information for identifying the card 100 may be used.

In outputting the primary issue key specifying information for the primary issue key stored in the IC card 100 in step S506-2, the following series of processes may be executed.
First, when the external verification data management apparatus 20 transmits the external verification data β1 to βn, transmission data in which corresponding primary issue key specifying information is added to each of the external verification data β1 to βn is generated. FIG. 13 shows an example of the structure of the transmission data transmitted in step S506-2.
In this way, by transmitting the external verification data β1 to βn to which the primary issue key identification information is added, the correctness determination unit 223 receives the external verification data β1 to βn and receives the external verification data β1 to βn for each external verification data β1 to βn. Corresponding primary issue key identification information can be acquired.
In step S506-2, the correctness determination unit 223 may output the primary issue key specifying information corresponding to the external verification data βi determined to match the internal verification data α in the last step S505.

<Sixth Embodiment>
[Overview]
Subsequently, a sixth embodiment will be described. The IC card 100 and the IC card compatible information processing apparatus 200 corresponding to the sixth embodiment may be the same as those of the fourth embodiment shown in FIG. That is, the sixth embodiment is configured to determine whether the primary issue key stored in the IC card 100 is correct or not on the IC card 100 side.
In addition, in the sixth embodiment, as in the fifth embodiment, the IC card 100 is configured to make a correct / incorrect determination based on a result of comparing a plurality of external verification data β1 to βn and the internal verification data α. The

[Example of processing procedure]
The flowchart in FIG. 14 illustrates an example of a processing procedure executed by the IC card 100 and the IC card-compatible information processing apparatus 200 in the sixth embodiment for determining the validity of the primary issue key stored in the IC card 100. . In FIG. 14, steps that are the same as those in FIGS. 11 and 12 are denoted by the same reference numerals.

The external verification data acquisition unit 222 in the IC card compatible information processing apparatus 200 transmits an external verification data request to the external verification data management apparatus 20 (step S511).
As in the fifth embodiment, the external verification data management apparatus 20 in the sixth embodiment stores a plurality of external verification data β1 to βn. In response to the reception of the external verification data request (step S701), the external verification data management apparatus 20 transmits the external verification data β1 to βn to the IC card compatible information processing apparatus 200 (step S702A).
The external verification data acquisition unit 222 in the IC card compatible information processing apparatus 200 receives the external verification data β1 to βn transmitted in step S702A via the IC card compatible communication unit 201 (step S512A).

Here, as in the fifth embodiment, primary issue key identification information is added to each of the external verification data β1 to βn transmitted by the external verification data management device 20, as illustrated in FIG.
Thereby, the external verification data acquisition unit 222 acquires the primary issue key specifying information for each of the external verification data β1 to βn together with the reception of the external verification data β1 to βn in step S512A.

  The command transmission unit 221 in the IC card compatible information processing apparatus 200 transmits a validity determination command including the external verification data β1 to βn received in step S512A to the IC card 100 (step S513A). In the case of the process shown in the figure, depending on step S512A, primary issue key specifying information for each external verification data β1 to βn is acquired together with the external verification data β1 to βn. However, the command transmission unit 221 only needs to include the external verification data β1 to βn in the validity determination command, and may not include the primary issue key specifying information corresponding to each of the external verification data β1 to βn.

The determination result correspondence processing unit 224 in the IC card compatible information processing apparatus 200 receives a response transmitted from the IC card 100 in response to the transmission of the validity determination command in step S513A (step S514).
The determination result response processing unit 224 executes processing corresponding to the determination result regarding the correctness determination indicated by the response received in step S514 (step S515).

  Further, the correctness determination unit 122 in the IC card 100 receives the validity determination command transmitted from the IC card compatible information processing apparatus 200 in step S513A via the communication unit 101 (step S611). In response to the reception in step S611, the correctness determination unit 122 reads the internal verification data α from the internal verification data storage unit 104 (step S612).

  In addition, the correctness determination unit 223 substitutes 1 that is an initial value for the variable i corresponding to the numbers assigned to the external verification data β1 to βn (step S612-1).

  The correctness determination unit 223 compares the internal verification data α read in step S612 with the i-th external verification data βi in the external verification data β1 to βn acquired together with the reception of the validity determination command in step S611 ( Step S613A). The correctness determination unit 223 determines whether or not the internal verification data α and the external verification data βi match based on the comparison result in step S613A (step S614).

When it is determined that the internal verification data α and the external verification data βi do not match (step S614 (NO)), the correctness determination unit 223 increments the variable i (step S616-1), and then determines the variable i. Is greater than n corresponding to the number of external verification data (step S616-2).
When the variable i is n or less (step S616-2 (NO)), the correctness determination unit 223 returns to the process of step S613A to shift to the correctness determination using the next external verification data βi.
On the other hand, when the variable i is larger than n (step S616-2 (YES)), none of the external verification data β1 to βn matches the internal verification data α. In this case, the correctness determination unit 223 determines that the primary issue key stored in the IC card 100 is not valid. In addition, the correctness determination unit 223 transmits a response indicating the determination result that the primary issue key stored in the IC card 100 is not valid to the IC card compatible information processing apparatus 200 via the communication unit 101 (step S616). 3).

  When the internal verification data α and the external verification data βi match (YES in step S614), the correctness determination unit 223 determines that the primary issue key stored in the IC card is valid. In addition, the correctness determination unit 223 sends a response indicating a determination result of validity together with information indicating the external verification data βi determined to match the internal verification data α in step S614 to the IC card compatible information processing apparatus. 200 is transmitted (step S615A). In this case, the information specifying the primary issue key stored in the IC card 100 is information indicating the external verification data βi included in the response transmitted in step S615A.

If the determination result corresponding processing unit 224 in the IC card compatible information processing apparatus 200 indicates a determination result that the response received in step S514 is valid, the processing in step S515 is as follows, for example: Processing can be executed.
That is, the determination result correspondence processing unit 224 includes the primary issue key corresponding to the external verification data βi among the primary issue key identification information of the external verification data β1 to βn acquired together with the reception of the external verification data β1 to βn in step S512A. Select specific information.
The determination result correspondence processing unit 224 can output information indicating that the primary issuance key stored in the IC card 100 is valid together with the selected primary issuance key specifying information to the outside via the data interface 203. Alternatively, the determination result correspondence processing unit 224 can cause the display unit 204 to display that the primary issuance key stored in the IC card 100 is valid. At the same time, the determination result correspondence processing unit 224 determines which primary issue key is used by the IC card 100 for the primary issue based on the primary issue key identification information. Can be displayed on the display unit 204.
With such a configuration, validity determination can be performed on the IC card 100 side using a plurality of external verification data β1 to βn.

  In the above embodiment, a case where two-stage issuance by primary issuance and secondary issuance is given as an example, but the configuration of this embodiment is also applicable when three or more issuances are performed. Applicable. In addition, when three or more stages of issuance are performed, it is not always necessary to target the encryption key used in the immediately preceding stage issuance. For example, in the third issuance stage, the encryption key used in the primary issuance You may perform validity determination as object.

  Note that a program for realizing the functions of the IC card 100 and the IC card compatible information processing apparatus 200 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by a computer system. The processing of the IC card 100 and the IC card-compatible information processing apparatus 200 may be performed by executing. Here, “loading and executing a program recorded on a recording medium into a computer system” includes installing the program in the computer system. The “computer system” here includes an OS and hardware such as peripheral devices. Further, the “computer system” may include a plurality of computer devices connected via a network including a communication line such as the Internet, WAN, LAN, and dedicated line. The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. As described above, the recording medium storing the program may be a non-transitory recording medium such as a CD-ROM. The recording medium also includes a recording medium provided inside or outside that is accessible from the distribution server in order to distribute the program. The code of the program stored in the recording medium of the distribution server may be different from the code of the program that can be executed by the terminal device. That is, the format stored in the distribution server is not limited as long as it can be downloaded from the distribution server and installed in a form that can be executed by the terminal device. Note that the program may be divided into a plurality of parts, downloaded at different timings, and combined in the terminal device, or the distribution server that distributes each of the divided programs may be different. Furthermore, the “computer-readable recording medium” holds a program for a certain period of time, such as a volatile memory (RAM) inside a computer system that becomes a server or a client when the program is transmitted via a network. Including things. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 20 External verification data management apparatus 100 IC card 101 Communication part 102 Control part 103 Primary issue key memory | storage part 104 Internal verification data storage part 121 Internal verification data generation part 200 IC card corresponding | compatible information processing apparatus 201 IC card corresponding | compatible communication part 202 Control part 203 Data interface 204 Display unit 221 Command transmission unit 222 External verification data acquisition unit 223 Correct / incorrect determination unit

Claims (12)

An information processing system comprising: a portable storage medium; and an information processing apparatus that executes a process for issuing the portable storage medium by communicating with the portable storage medium ,
External verification data provided from the outside as verification data that is provided in the information processing apparatus and uniquely corresponds to one encryption key used for issuing the portable storage medium in a stage prior to issue by the information processing apparatus An external verification data acquisition unit for acquiring
Internal verification data that is provided in the information processing apparatus or the portable storage medium and that is managed by the portable storage medium and uniquely corresponds to an encryption key stored in the portable storage medium, and acquisition of the external verification data An information processing system comprising: a correct / incorrect determination unit that determines whether an encryption key stored in the portable storage medium is valid based on a result of comparison with external verification data acquired by the unit. The external verification data acquisition unit
The information processing system according to claim 1, wherein the external verification data is acquired from the verification data management device through communication with an external verification data management device that stores the external verification data. The correctness determination unit
Whether the encryption key is valid based on the result of comparing the internal verification data acquired from the portable storage medium provided in the information processing device and the external verification data acquired by the external verification data acquisition unit The information processing system according to claim 1 or 2. The correctness determination unit
Based on the result of comparing the internal verification data provided in the portable storage medium and managed by the portable storage medium and the external verification data acquired by the external verification data acquisition unit and received from the information processing device, The information processing system according to claim 1, wherein it is determined whether or not the encryption key is valid. The external verification data acquisition unit
Obtain multiple external verification data corresponding to multiple encryption keys,
The correctness determination unit
As a result of comparing the internal verification data and the plurality of external verification data, if there is external verification data that matches the internal verification data among the plurality of external verification data acquired by the external verification data acquisition unit, It is determined that the encryption key stored in the portable storage medium is valid, outputs information specifying the encryption key determined to be valid, and a plurality of external verification data acquired by the external verification data acquisition unit The information processing system according to any one of claims 1 to 4, wherein if there is no external verification data that matches the internal verification data, the encryption key stored in the portable storage medium is determined to be invalid. An information processing apparatus that executes processing for issuance for a portable storage medium,
A portable storage medium corresponding communication unit for performing communication with the portable storage medium,
External verification data acquisition unit for acquiring external verification data provided from the outside as verification data uniquely corresponding to one encryption key used for issuing the portable storage medium in a stage prior to issue by the information processing apparatus When,
As a result of comparing the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquired by the external verification data acquisition unit An information processing apparatus comprising: a correct / incorrect determination unit that determines whether or not the encryption key stored in the portable storage medium is valid. A communication unit that executes communication with an information processing device that executes processing for issuing a portable storage medium ;
As verification data uniquely corresponding to one encryption key used for issuing the portable storage medium at a stage prior to issue by the information processing apparatus, the verification key uniquely corresponds to the encryption key stored by itself and is managed by the self Whether or not the encryption key stored by itself is valid based on the result of comparing internal verification data with external verification data that is verification data acquired from the information processing device and received from the information processing device A portable storage medium comprising: a correct / incorrect determination unit for determining An information processing method in an information processing system comprising: a portable storage medium; and an information processing apparatus that executes a process for issuing the portable storage medium by communicating with the portable storage medium ,
In the information processing apparatus, external verification data provided from the outside is acquired as verification data uniquely corresponding to one encryption key used for issuing the portable storage medium in a stage prior to issue by the information processing apparatus An external verification data acquisition step,
In the information processing apparatus or the portable storage medium, the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquisition step include An information processing method comprising: a correct / incorrect determination step for determining whether or not an encryption key stored in the portable storage medium is valid based on a result of comparison with acquired external verification data. An information processing method in an information processing apparatus that executes processing for issuance for a portable storage medium,
A portable storage medium corresponding communication step of performing communication with the portable storage medium,
External verification data acquisition step of acquiring external verification data provided externally as verification data uniquely corresponding to one encryption key used for issuing the portable storage medium in a stage prior to issue by the information processing apparatus When,
As a result of comparing the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquired by the external verification data acquisition step An information processing method comprising: a correct / incorrect determination step for determining whether or not the encryption key stored in the portable storage medium is valid. A communication step for executing communication with an information processing apparatus for executing a process for issuing a portable storage medium ;
As verification data uniquely corresponding to one encryption key used for issuing the portable storage medium at a stage prior to issue by the information processing apparatus, the verification key uniquely corresponds to the encryption key stored by itself and is managed by the self Whether or not the encryption key stored by itself is valid based on the result of comparing internal verification data with external verification data that is verification data acquired from the information processing device and received from the information processing device An information processing method comprising: a correct / incorrect determination step for determining In a computer as an information processing device that executes processing for issuance for a portable storage medium ,
A portable storage medium corresponding communication step of performing communication with the portable storage medium,
External verification data acquisition step of acquiring external verification data provided externally as verification data uniquely corresponding to one encryption key used for issuing the portable storage medium in a stage prior to issue by the information processing apparatus When,
As a result of comparing the verification data managed by the portable storage medium, the internal verification data uniquely corresponding to the encryption key stored in the portable storage medium, and the external verification data acquired by the external verification data acquisition step And a correct / incorrect determination step for determining whether or not the encryption key stored in the portable storage medium is valid. On the computer,
A communication step for executing communication with an information processing apparatus for executing a process for issuing a portable storage medium ;
As verification data uniquely corresponding to one encryption key used for issuing the portable storage medium at a stage prior to issue by the information processing apparatus, the verification key uniquely corresponds to the encryption key stored by itself and is managed by the self Whether or not the encryption key stored by itself is valid based on the result of comparing internal verification data with external verification data that is verification data acquired from the information processing device and received from the information processing device A program for executing a correct / incorrect step for determining whether or not.

Images