JP6340916B2 - Data output method, data read method, storage medium device, and data read device - Google Patents

Description

  The present invention relates to a data output method, a data read method, a storage medium device, and a data read device.

  The IC card stores data in units of files. In addition, data stored in the IC card may include data that should be read only by a specific user. In such a case, it is only necessary to set an access right to the data and restrict access so that only the user having the access right can read the data from the IC card.

  In the IC card, the access right is set for each file. Therefore, a file having a certain access right can be read in file units by a user having the access right. On the other hand, a user who does not have an access right cannot read the file itself for a file to which the same access right is set.

JP 2013-254240 A

  Depending on the use of data stored in the IC card, it may be possible to combine a plurality of different types of data into one file. However, even for data that can be included in one file, there are cases where it is desired to set different access rights between these data.

As described above, the data access right in the IC card is set in units of files. For this reason, when different access rights are set between data as described above, a plurality of files are prepared for each different access right, and the corresponding access is made to each of these files. The data to which the right is set is stored.
That is, even if a plurality of data can be included in one file for use, for example, if the access right is different, a file is generated for each access right. In addition, access right data corresponding to each generated file is stored.

As described above, when data that is desired to be collected in one file is distributed to a plurality of files, the number of files required to store the same breakdown data in the IC card increases to a plurality. .
As the number of files increases, file management information such as a file header and a file system stored in the IC card for file management also increases according to the number of files. As the number of file management information increases in this way, the storage capacity required to store the same data in the IC card also increases, and the use efficiency of the storage area of the IC card decreases.

  The present invention has been made in view of such circumstances, and when reading a file including a plurality of data having different access rights from a storage medium device, only accessible data can be appropriately read according to the access rights. The purpose is to do so.

  One embodiment of the present invention for solving the above-described problem is a data output method in a storage medium device including a storage medium, in which a data reading unit performs encryption in response to reception of a data read command transmitted from the data reading device. Reading unit data requested by the received data read command and encryption state information associated with the unit data from the storage medium storing unit data associated with the encryption state information indicating the state; The data transmission method includes a step in which the data transmission unit transmits the unit data and the encryption state information read by the data reading unit to the data reading device.

  The present invention is the above data output method, wherein the cipher state indicated by the cipher state information may be any one of a ciphertext state and an unencrypted plaintext state. .

  The present invention is the above-described data output method, wherein the ciphertext state is different from the state of the original ciphertext when received from the external communication device and the encryption of the original ciphertext It may be at least one of a re-ciphertext state obtained by re-encrypting by processing.

  The present invention is the above data output method, wherein the unit data may be data stored in a unit data storage area in a file.

  The present invention is the data output method described above, wherein the encryption state information may be stored at a predetermined position in a unit data storage area in which the unit data is stored.

  The present invention is the data output method described above, wherein the encryption state information may be included in management information stored in the storage medium for management of a file storing the unit data.

  The present invention relates to a data reading method in a data reading device for reading data from a storage medium device including a storage medium that stores unit data associated with encryption state information indicating an encryption state, and includes a data read command transmission unit Transmitting a data read command requesting reading of unit data to the storage medium device, and a decoding unit corresponding to the unit data and the unit data read from the storage medium in response to the data read command In response to receiving the attached encryption state information from the storage medium device, the unit data is decrypted when having access right to the unit data of the encryption state indicated by the received encryption state information, Including a step of not decrypting the unit data when the user does not have an access right to the unit data. A reading method.

  The present invention relates to a data output method in a storage medium device including a storage medium, wherein a data reading unit associates encryption state information indicating an encryption state in response to reception of a data read command transmitted from the data reading device. Reading out the unit data requested by the received data read command and the encryption state information associated with the unit data from the storage medium storing the received unit data, and the decrypting unit by the data reading unit The unit data is decrypted and output when it has an access right to the unit data in the encryption state indicated by the read encryption state information, and when it does not have the access right to the unit data, the unit data And outputting the unit data output from the decoding unit to the data reading device A data output method and a step.

  The present invention is the above data output method, wherein the cipher state indicated by the cipher state information may be any one of a ciphertext state and an unencrypted plaintext state. .

  The present invention is the above-described data output method, wherein the ciphertext state is different from the state of the original ciphertext when received from the external communication device and the encryption of the original ciphertext It may be at least one of a re-ciphertext state obtained by re-encrypting by processing.

  The present invention is the above-described data output method, wherein the decryption unit is a ciphertext state unit in which the cipher state indicated by the cipher state information read by the data read unit is a ciphertext state. In the case of having the right to access data, the unit data read by the data reading unit is decrypted and output by the first decryption algorithm, and the encryption state indicated by the encryption state information read by the data reading unit Is a plaintext state, the unit data read by the data reading unit is output without being decrypted, and the encryption state indicated by the encryption state information read by the data reading unit is the re-ciphertext. If it is in the state and has the right to access the unit data in the re-ciphertext state, the unit data read by the data reading unit is Rhythm may be output by decoding by different second decryption algorithm to the.

  The present invention is the above data output method, wherein the unit data may be data stored in a unit data storage area in a file.

  The present invention is the data output method described above, wherein the encryption state information may be stored at a predetermined position in a unit data storage area in which the unit data is stored.

  The present invention is the data output method described above, wherein the encryption state information may be included in management information stored in the storage medium for management of a file storing the unit data.

  The present invention includes a storage medium that stores unit data associated with encryption state information indicating an encryption state, a communication unit that communicates with a data reading device, and a data reading command transmitted from the data reading device. A data reading unit for reading out the unit data requested by the received data read command and the encryption state information associated with the unit data from the storage medium, and the data reading And a data transmission unit that transmits the unit data read by the unit and the encryption state information from the communication unit to the data reading device.

  The present invention provides a communication unit that communicates with a storage medium device including a storage medium that stores unit data associated with encryption state information indicating an encryption state, and a data read command that requests reading of unit data. A data read command transmitting unit for transmitting to the device, unit data read from the storage medium as a response to the data read command, and encryption state information associated with the unit data from the storage medium device; Accordingly, the unit data is decrypted when having access right to the unit data in the encryption state indicated by the received encryption state information, and when the unit data is not having access right to the unit data, the unit is decrypted. A data reading device including a decoding unit that does not decode data.

  The present invention relates to a storage medium that stores unit data associated with encryption state information indicating an encryption state, a communication unit that communicates with a data reading device, and a data reading command transmitted from the data reading device includes the communication unit. A data reading unit for reading out the unit data requested by the received data read command and the encryption state information associated with the unit data from the storage medium, and the data reading The unit data is decrypted and output when the right to access the unit data in the encryption state indicated by the encryption state information read by the unit is obtained, and when the right to access the unit data is not included A decoding unit that outputs the unit data without decoding, and a data transmission unit that transmits the unit data output from the decoding unit to the data reading device. Is a media devices.

  As described above, according to the present invention, when a file including a plurality of data having different access rights is read from the storage medium device, only accessible data can be appropriately read according to the access right. The effect is obtained.

It is a figure which shows the example of memory mapping about the storage area of the storage medium with which the IC card in 1st Embodiment is provided. It is a figure which shows the example of the content of the record data stored in the file memorize | stored in a storage medium. It is a figure which shows the example of 1 aspect in the case of storing the record data of FIG. 2 in a file. It is a figure which shows the data mapping example of the file in 1st Embodiment. It is a figure which shows the structural example of the file generation command in 1st Embodiment. It is a figure which shows the example of the content of the encryption status information contained in the data part of a file generation command. It is a figure explaining the example of a write-in procedure of the initial value to the file in 1st Embodiment. It is a figure which shows the example of a mode of the data writing to the record when the extended encryption state is applied in the file of 1st Embodiment. It is a figure which shows the structural example of the reader / writer and IC card in 1st Embodiment. It is a flowchart which shows the example of a process sequence which the reader / writer and IC card in 1st Embodiment perform corresponding to reading of data. It is a figure which shows the structural example of the reader / writer and IC card in 2nd Embodiment. It is a flowchart which shows the example of a process sequence which the reader / writer and IC card in 2nd Embodiment perform corresponding to authentication. It is a flowchart which shows the example of a process sequence which the reader / writer and IC card in 2nd Embodiment perform corresponding to reading of record data. It is a figure explaining the file by a TLV structure. It is a figure which shows the example of a mode of the data writing to the record in the file by the TLV structure of 3rd Embodiment.

<First Embodiment>
[Data Structure in IC Card Storage Medium]
Hereinafter, an IC card (an example of a storage medium device) and a reader / writer (an example of a data reading device) as embodiments of the present invention will be described with reference to the drawings.
The IC card of this embodiment includes a storage medium inside and is configured to be able to communicate with an external communication device such as a reader / writer. By enabling communication with the reader / writer, when an instruction to read data is issued from the reader / writer, the IC card reads the data from the storage medium and outputs the read data to the reader / writer.

In the present embodiment, data is written to and read from the storage medium of the IC card so as to be managed in units of files.
The file written to the storage medium of the IC card is a DF (Dedicated File) or an EF (Elementary File).
DF is a file for grouping subordinate EFs and DFs.
The EF is a file for storing data. EF is classified into two types, ie, IEF (Internal Elementary File) and WEF (Work Elementary File).
The IEF is a file in which key data for security is stored. The IEF is a file that cannot be output from the IC card to the outside for security, and is used only inside the IC card.
WEF is a file that can be output from an IC card to the outside. The WEF stores, for example, general data such as information on points given to the user.

With reference to FIGS. 1 to 3, the basic data structure stored in the user data area AR3 of the storage medium of the IC card and the background to the present embodiment will be described.
FIG. 1 shows a mapping example of the storage area of the storage medium 203 provided in the IC card of this embodiment. As shown in the figure, the storage area of the storage medium 203 includes a file management area AR1, a system area AR2, and a user data area AR3.

  The file management area AR1 is an area in which file management information for managing data stored in the system area AR2 and the user data area AR3 in units of files is stored. As an example, file management information corresponding to a FAT (File Allocation Table) file system may be stored in the file management area AR1 in the present embodiment.

The system area AR2 is an area for storing system information including an OS (Operating System) and various setting information.
The user data area AR3 is an area in which user data used by the application is stored. The file data is stored in the user data area AR3.
Note that the storage area of the storage medium 203 may include areas other than the file management area AR1, the system area AR2, and the user data area AR3.

FIG. 2 shows an example of the structure of a file FL that is an EF. As shown in the figure, the file FL has a structure including a file header and a data area.
The file header stores predetermined parameters related to the file.
Data as a file is stored in the data area. In the present embodiment, the file stored in the data area has a record structure in which records of fixed length (an example of unit data storage areas) are arranged. In such a record structure, data (an example of unit data) is stored for each record. Data stored in a record (record data) has contents according to a predetermined definition, as exemplified below.

Here, the IC card that stores the file FL shown in the figure is a credit card, and a case where a name, an address, and a card number are included in the information that the IC card should store as a credit card is taken as an example.
The figure shows an example in which name data is stored in record # 1, address data is stored in record # 2, and a card number is stored in record # 3.
Thus, one file is formed by one or more records, and each record stores data of a type according to a predetermined definition. That is, by writing data in record units, a plurality of different types of data can be stored together in one file.

However, there are cases where the access right differs among the data for each type written in the file as described above, for security reasons, for example. Here, as a specific example, a mode in which access rights are different as illustrated in FIG.
That is, among the name, address, and card number data stored in the records # 1 to # 3 in the figure, the name data and the card number data are also printed on the card surface of the IC card, for example. Therefore, it is data that does not require confidentiality. Therefore, no access right is set for the name data and the card number data (no access right).
On the other hand, the address stored in the record # 2 is one piece of personal information, and is not printed on the card surface of the IC card 200 that is a credit card. Therefore, address data is data that requires confidentiality as personal information. Thus, for the address data, an access right that can be accessed only by a user having a predetermined access right is set (with access right).

  The access right for data stored in the storage medium 203 of the IC card is specified to be specified in file units. For this reason, as described above, when different access rights are set for each data of name, card number, and address depending on whether there is no access right or access right, the data in the file as shown in FIG. Write.

In FIG. 3, two files, file FL1 and file FL2, are shown. Of the files FL1 and FL2, the file FL1 has no particular access right and can be accessed by any user.
As described above, in the file FL1 in which the access right is not set, among the name, address, and card number data, the name and card number data for which the access right is not set are recorded in the record # 1 and the record # 2, respectively. Has been written.

  In addition, the file FL2 is an access right that can be accessed only by a user having a predetermined access right, and cannot be accessed unless authentication by the user having the access right is established. In addition, for the file FL2, the access right corresponding to the user who is permitted to access the address data is set, and the address data is written to the record # 1 among the name, address, and card number data. It is.

  By storing the file FL1 and the file FL2 thus created in the storage medium 203, users who can access address data can be restricted. That is, all users can read out the data of name and card number. On the other hand, the address data can be read by a user who has the access right, but can not be read by a user who does not have the access right.

As illustrated in FIG. 2, in an IC card that is a credit card, the name, address, and card number data may be stored together in one file, for example, if there is no difference in access right settings. It is.
However, as shown as files FL1 and FL2 in FIG. 3, for example, when the access right setting is different between the name and card number data and the address data, the data with access right and the data with no access right Multiple files are required for each data.

  As the number of files increases as shown in FIG. 3, management information about the files such as file headers and file system directory information (directory entries) created corresponding to each file also increases. For this reason, the capacity required to store the same breakdown data becomes larger than the case where the data is combined into one file as shown in FIG. 2, and for example, the storage capacity of the storage medium 203 is efficient. Use will be hindered.

[Data structure in file of this embodiment]
Therefore, in this embodiment, file data is written in the storage medium 203 of the IC card with the structure shown in FIG. In the explanation of the figure, in the same way as explained in FIG. 2, among the name, address and card number data, no access right is set for the name and card number data, and the address data is accessed. Take the case where right is set as an example.

Each record in the data area of the file FL shown in FIG. 4 has a structure in which encryption state information is written in the first byte and data (record data) is written in the second and subsequent bytes.
The encryption state information indicates the encryption state of the record data stored in the same record # 1. The cipher state here is one of a plain text state where encryption is not performed and a cipher text (original cipher text) which is encrypted and transmitted from the issuing device.
The cipher state information in this case indicates that the state is plaintext by a value of 00h, and indicates that the state is ciphertext by a value of 01h.

Specifically, the name data to be stored in the record # 1 is record data in which no access right is set. In accordance with such setting of the access right, in the record # 1, encryption state information having a value of 00h is stored in the first byte, and in the second and subsequent bytes, name data in plain text is stored.
The address data to be stored in the record # 2 is record data in which access right is set. According to the setting of the access right, in the record # 2, the encryption status information having a value of 01h is stored in the first byte, and the address data in the original ciphertext is stored in the second and subsequent bytes. The
The name data to be stored in the record # 3 is record data in which no access right is set. In accordance with such setting of the access right, in the record # 3, the encryption status information having a value of 00h is stored in the first byte, and the name data in plain text is stored in the second and subsequent bytes.
In the figure, the case where the encryption state information is 1 byte (8 bits) is taken as an example, but the size of the encryption state information is not particularly limited.

  The file data (encryption state information, record data) written by the structure shown in FIG. 4 is written as follows by, for example, an issuing device that issues an IC card. The issuing device generates a file prior to writing data to the file to the IC card 200. That is, the issuing device executes control for creating a file storage area in the user data area AR3 in the storage medium 203 of the IC card 200.

The issuing device transmits a file generation command to the IC card 200 in order to instruct the IC card 200 to create a file storage area corresponding to one file. FIG. 5 shows a structure example of the file generation command.
The file generation command shown in the figure has a structure in which a command header CH, a first parameter P1, a second parameter P2, a data length Lc, and a data part Data are arranged.
The command header CH indicates the type of the command. In the case of a file generation command, a predetermined value indicating a file generation command is stored in the command header CH.
The area defined by the first parameter P1 and the second parameter P2 stores a predetermined parameter corresponding to the type of command indicated by the command header CH.
The data length Lc indicates the data length (size) of the data part Data.
The data part Data in the file generation command includes file type information, size information, file identifier, initial value information, and encryption state information.

The file type information is information indicating whether the file type corresponding to the file storage area to be created is, for example, DF, IEF, or WEF. That is, when the file type information indicates DF, the file generation command instructs creation of a DF file storage area. When the file type information indicates IEF, the file generation command instructs creation of a file storage area of IEF. If the file type information indicates WEF, the file generation command instructs creation of a WEF file storage area.
The size information is information indicating the size of the file storage area to be created.
The file identifier indicates an EF file identifier to be stored in the file storage area to be created.
The initial value information is information indicating an initial value to be written when the file storage area is created.

  The encryption state information is information associated with each record included in the file stored in the file storage area to be created. One encryption state information indicates the encryption state of the record data stored in the associated record.

FIG. 6 shows an example of the contents of the encryption state information included in the data part Data of the file generation command. The encryption state information shown in the figure corresponds to the contents of the file FL shown in FIG.
As shown in the figure, the encryption state information included in the data part Data of the file generation command is associated with each record number.
The encryption state information associated with the record # 1 is 00h indicating the plaintext state. The cipher state information associated with the record # 2 is 01h indicating the original ciphertext. The encryption state information associated with the record # 3 is 00h indicating the plaintext state.

As described above, the encryption state information included in the data part Data of the file generation command indicates the encryption state of the data to be stored in the corresponding record.
In other words, the encryption status information of 00h included in the data part Data of the file generation command indicates that the record data in the original ciphertext state as it was when the issuing device encrypted and transmitted should be stored in the corresponding record. To do.
Also, the 01h encryption state information included in the data portion Data of the file generation command indicates that plaintext state data should be stored in the corresponding record.

  The file generation command transmitted from the issuing device is received by the IC card. When the file generation command is received, the IC card according to the present embodiment secures an area according to the size indicated by the size information acquired from the data part Data from the user data area AR3. Then, the IC card updates the file management information (for example, FAT) so that the secured area is managed as the file area indicated by the file type information acquired from the data part Data. Note that the data as the file management information is different from the file data, and therefore does not have to have a structure stored in the record.

  Further, the IC card executes a process of writing an initial value to the file header and the data area in the newly registered file area as described above. The file header and the initial value to be written in the data area are specified by the initial value information stored in the data part Data of the file generation command. The data area is formed by connecting fixed-length record units. For this purpose, initial value information corresponding to the data area is provided for each record.

Hereinafter, an example of a procedure for writing an initial value to the file FL by the IC card of the present embodiment will be described with reference to FIG.
First, the IC card writes the initial value indicated by the initial value information specifying the initial value of the file header into the file header in the file FL.
Next, the IC card writes an initial value to record # 1 in the data area of file FL. In writing the initial value to the record # 1, first, 00h that is the value of the encryption state information corresponding to the record # 1 is written in the first byte of the area of the record # 1. Next, the IC card writes the initial value indicated by the initial value information of record # 1 after the second byte of record # 1.
Further, the IC card writes 01h, which is the value of the encryption state information corresponding to the record # 2, in the first byte in the area of the record # 2 in the data area, and the initial value of the record # 2 after the second byte. Write the initial value indicated by the value information.
Further, the IC card writes 00h, which is the value of the encryption state information corresponding to the record # 3, in the first byte in the area of the record # 3 in the data area, and the initial value of the record # 3 after the second byte. Write the initial value indicated by the information.
Thereafter, in the same manner, the IC card writes the value of the encryption status information associated with the record in the first 1 byte in each area after record # 3, and the corresponding record number after the second byte. The initial value indicated by the initial value information is written.

  By performing the file generation in this way, the encryption state information and the initial value of the record data are written in each record in the data area in the area of the file FL secured on the user data area AR3 of the storage medium 203. . As described above, when the initial value is written, the encryption state information is written in the record, thereby associating the record with the encryption state information.

  After the file is generated as described above, the issuing device writes data corresponding to the application to the file header in the file storage area created in the IC card and each record in the data area.

When writing file data to the IC card, the issuing device transmits a data write command storing record data as write data to the IC card.
The issuing device of the present embodiment transmits a data write command corresponding to the record unit to the IC card. The file header may be handled as one record.
The data write command stores data to be stored in the record as write data. In the issuing device of the present embodiment, all the write data stored in the data write command is encrypted with a predetermined key and is in a ciphertext state.
Thus, by encrypting all the write data transmitted from the issuing device to the IC card, for example, security against data interception at the time of data writing can be enhanced.

  Here, for each of the records # 1, # 2, and # 3, a procedure example for writing the name data in plain text, the address data in original cipher text, and the card number data in plain text as in FIG. This will be described with reference to FIG.

The issuing device first transmits a data write command in the order of file header, record # 1, record # 2, record # 3,.
When the IC card receives the data write command of the file header, the IC card acquires the data of the file header from the received data write command. The IC card writes the file header data in the file header, for example, in plain text. Therefore, the IC card in this case only has to decrypt the plaintext file header obtained from the data write command and write the plaintext data in the file header area.

On the other hand, regarding the data area of the file, which data should be stored in the plaintext state or the ciphertext state for each record differs depending on the file.
Therefore, the IC card writes record data to the record as follows.

First, in response to receiving the data write command corresponding to the record # 1, the IC card recognizes what the value of the encryption state information written in the first byte of the record # 1 is. In this case, the value of the encryption state information written in the first byte of the record # 1 is 00h, indicating that it is in a plaintext state.
Therefore, the IC card in this case decrypts the name data acquired from the data write command corresponding to the record # 1 into plain text. Then, the IC card writes the name data in plain text with the second byte in record # 1 as the start position.
By writing in this way, as shown in FIG. 4, the record # 1 is in a state in which the name data in plain text is stored after the encryption state information of 00h in the first byte.

Next, in response to receiving the data write command corresponding to the record # 2, the IC card has the value of the encryption state information written in the first byte of the record # 2 being 01h, and the original encryption Recognize that it indicates the state of the sentence.
Therefore, the IC card in this case does not decode the address data acquired from the data write command corresponding to the record # 2. Then, the IC card writes the address data in the same original ciphertext as that transmitted from the issuing device, with the second byte in record # 2 as the start position.
By performing the writing in this way, as illustrated in FIG. 4, the record # 2 has a state in which the address data in the original ciphertext is stored following the encryption state information of 01h in the first byte. Become.

Next, in response to receiving the data write command corresponding to the record # 3, the IC card has the value of the encryption state information written in the first byte of the record # 3 being 00h, and the plaintext Recognize that it indicates a condition.
Therefore, the IC card in this case decrypts the data of the card number acquired from the data write command corresponding to the record # 3 to obtain plain text. Then, the IC card writes the card number data in plain text with the second byte in record # 3 as the start position.
By performing the writing in this way, as illustrated in FIG. 7, the record # 3 is in a state in which the card number data in plain text is stored following the encryption state information of 00h in the first byte. .

Thereafter, the IC card similarly receives the data write command corresponding to the record, and the encryption state indicated by the encryption state information written at the head of the record corresponding to the received data write command Recognize Then, if the recognized encryption state is a plaintext state, the IC card decrypts the write data received in the original ciphertext state to make a plaintext, and then follows the encryption state information in the corresponding record. Write the write data.
On the other hand, if the recognized encryption state is the state of the original ciphertext, the IC card does not decrypt the write data received in the state of the original ciphertext and converts it into the encryption state information in the corresponding record. Continue writing.
In this way, each record in the file FL stores encryption state information and data based on the encryption state indicated by the encryption state information.

The operation of data output by the IC card of this embodiment in which file data is written in the storage medium 203 as described above will be described by taking the case of the file shown in FIG. 4 as an example.
In this case, the reader / writer transmits a data read command for requesting reading of record data stored in the record of the file FL shown in FIG. 4, for example, in ascending order of record numbers.
As described above, in response to the reception of the data read command sequentially transmitted from the reader / writer, the IC card sequentially reads and reads the record data stored in each record from the record # 1 in the data area of the file FL. Send record data to reader / writer.
Here, the IC card according to the present embodiment transmits the record data read as described above to the reader / writer in the same encryption state as that stored in the record.

Therefore, in the case of the file FL shown in FIG. 4, the IC card reads the plaintext name data stored in the record # 1 and transmits it to the reader / writer in the plaintext state.
Next, the IC card reads the address data in the original ciphertext state stored in the record # 2, and transmits it to the reader / writer in the original ciphertext state.
Next, the IC card reads the data of the card number in the plain text state stored in the record # 3 and transmits it to the reader / writer in the plain text state.
Thereafter, the IC card similarly transmits the data read from the record to the reader / writer in the same encryption state as that stored in the record for the remaining records.

By transmitting the record data as described above, the reader / writer receives the plaintext name and card number data and the address data in the original ciphertext according to the record number order. Here, in the case of a reader / writer of a user who does not have access rights to address data, acquisition of record data received as follows is performed.
First, among the name, address, and card number data, the name and card number data are in plain text when received. Therefore, the reader / writer in this case can normally acquire the name and card number data without performing any decryption.

On the other hand, the received address data is in the original ciphertext state. However, the reader / writer of the user who does not have access right to the address data does not have a valid key that can decrypt the received address data in the original ciphertext state. Therefore, the reader / writer in this case cannot decode the address data. In this case, since the address data remains in the original ciphertext and has no significance, it cannot be normally acquired.
As described above, the reader / writer of the user who does not have the access right to the address data can normally obtain the record data without the access right as the read result of the file FL, but the record data with the access right is obtained. Can't get it successfully.

On the other hand, in the case of a reader / writer of a user who has access rights to address data, first, the name and card number data are decrypted in the same manner as the reader / writer of the user who has access rights to address data. It can be acquired normally.
In addition, the reader / writer of the user who has access rights to the address data has a key that can decrypt the address data in the original ciphertext. Specifically, the reader / writer has a key that can decrypt the original ciphertext data indicated by the encryption state information with a value of 00h. The reader / writer can recognize that the received data can be decrypted with the key that the reader / writer can have with respect to the received data by indicating 01h. Therefore, the reader / writer can decrypt the address data using the key of the reader / writer into plain text. That is, the reader / writer in this case can normally acquire the address data as well as the name and card number data.

  As described above, in the present embodiment, only the data that can be accessed according to the access right of each reader / writer is appropriately acquired even though the reader / writer reads data for the same single file. It has become.

  As can be understood from the above description, the storage medium 203 of the IC card in the present embodiment has a data structure in which record data of different types having different access rights are stored together for one file. In addition, encryption status information indicating the encryption status corresponding to the access right is associated with each record data, and the reader / writer decrypts the data for which the reader / writer has access right based on the encryption status information received together with the data. Can be obtained successfully.

With this configuration, in this embodiment, for example, as shown in FIG. 3, there is no need to store data with different access rights in different files, and data with different access rights are stored together in one file. It becomes possible.
As a result, in this embodiment, only one file is required to store a plurality of data with different access rights. Along with this, management information about files such as a file header and directory information in the file system is also 1 One thing will be good. As a result, according to the present embodiment, the use size of the user data area AR3 can be reduced compared to the case of FIG. 3, and the use efficiency of the storage area of the storage medium 203 is improved.

Next, with reference to FIG. 8, an example of extension of encryption state information in this embodiment will be described. First, the contents of data stored in the record # 1, the record # 2, and the record # 3 in the file FL shown in the figure are the same as those in FIG.
That is, in the record # 1, encryption state information with a value of 00h indicating a plaintext state is stored in the first byte, and name data in plaintext is stored in the second and subsequent bytes.
In record # 2, encryption state information with a value of 01h indicating the state of the original ciphertext is stored in the first byte, and address data in the original ciphertext is stored in the second and subsequent bytes.
In record # 3, encryption state information with a value of 00h indicating a plaintext state is stored in the first byte, and card number data in plaintext is stored in the second and subsequent bytes.

In addition, in record # 4, encryption status information with a value of 02h is stored in the first byte, and telephone number data in re-ciphertext is stored in the second and subsequent bytes.
02h as encryption state information indicates a re-ciphertext state as the encryption state. The re-ciphertext is a ciphertext obtained by re-encrypting the writing data as the original ciphertext received from the issuing device by an encryption process different from that when the original ciphertext is encrypted. In the present embodiment, the encryption process different from when the original ciphertext is encrypted is, for example, encryption with a key different from that when the original ciphertext is encrypted.
Similarly to the encryption state information of 00h and 01h, the encryption state information with a value of 02h is written at the top of the record # 4 based on the encryption state information included in the file generation command at the time of file generation. It is a thing.

The IC card of this embodiment executes data writing for the file header and records # 1 to # 3 as in FIG.
When the IC card receives a data write command for record # 4 shown in the figure, it writes data as follows.
The IC card recognizes that the re-ciphertext should be written to the record # 4 by referring to the encryption state information of 02h written in the first byte of the record # 4.
Therefore, the IC card once decrypts the written data of the telephone number in the original ciphertext obtained from the received data write command into plaintext. In addition, the IC card re-encrypts the written data in plain text using a key different from that used when the original cipher text was encrypted to obtain a cipher text. The ciphertext obtained in this way is a re-ciphertext.
The IC card writes the telephone number write data generated as the re-ciphertext as described above, starting from the second byte of record # 4.

In this way, by expanding the encryption state information, the record of the file can store the record data based on the recipher text in addition to the record data based on the original cipher text and the record data based on the plain text.
As shown in FIG. 8, when the original ciphertext and the re-ciphertext are used together as the ciphertext, different access rights can be associated with the original ciphertext and the re-ciphertext.
As a modification of FIG. 8, the encryption state of the record data stored in the record of the file may be configured to use two plaintext and re-ciphertext without using the original ciphertext. Good.

[Configuration example of data reading system]
Next, a configuration example of the data reading system in the first embodiment will be described with reference to FIG. As shown in the figure, the data reading system of this embodiment is configured by connecting a reader / writer 100 (an example of a data reading device) and an IC card 200 via communication.

  The reader / writer 100 reads data from the IC card 200. The reader / writer 100 reads data in units of files. When reading data in units of files, the reader / writer 100 further reads out record data sequentially in units of records stored in the file.

A reader / writer 100 shown in the figure includes a communication unit 101 and a control unit 102.
The communication unit 101 performs communication with the IC card 200. Communication with the IC card 200 by the communication unit 101 may be a contact type or a non-contact type.

The control unit 102 executes various controls in the reader / writer 100. The function as the control unit 102 is realized by, for example, a CPU (Central Processing Unit) included in the reader / writer 100 executing a program.
The control unit 102 according to the present embodiment includes a data read command transmission unit 121 and a decryption unit 122 as functional units corresponding to reading data from the IC card 200.

  The data read command transmission unit 121 transmits a data read command requesting reading of record data to the IC card 200.

  When receiving the data read command transmitted as described above, the IC card 200 reads the encryption state information and record data stored in the record designated by the data read command from the storage medium 203 and transmits them to the reader / writer 100. The transmitted encryption state information and record data are received by the communication unit 101 of the reader / writer 100.

  In response to receiving from the IC card 200 the record data read from the storage medium 203 as a response to the data read command and the encryption state information associated with the record data, the decryption unit 122 performs the following processing. Run. That is, the decryption unit 122 decrypts the record data when it has an access right to the encrypted record data indicated by the received encryption state information, and records the record data when it does not have the access right to the record data. Do not decrypt data.

The IC card 200 shown in the figure includes a communication unit 201, a control unit 202, and a storage medium 203.
The communication unit 201 performs communication with the reader / writer 100.
The control unit 202 executes various controls in the IC card 200. The function as the control unit 202 is realized, for example, when the CPU included in the IC card 200 executes a program stored in the storage medium 203.
The control unit 202 in the present embodiment includes a data reading unit 221 and a data transmission unit 222 as functional units corresponding to data reading from the storage medium 203 according to the data reading command received from the reader / writer 100.

  The data reading unit 221 executes the following processing in response to the reception of the data read command transmitted from the reader / writer 100. That is, the data reading unit 221 reads from the storage medium 203 record data requested by the received data read command and encryption state information associated with the record data.

  The data transmission unit 222 transmits the record data and the encryption state information read by the data reading unit 221 to the reader / writer 100.

The storage medium 203 stores various information used by the control unit 202. As described above, the storage medium 203 of the present embodiment stores the file having the structure shown in FIGS. 4 and 8 in the user data area AR3 after the area shown in FIG. 1 is set. Can do.
Note that the hardware supported by the storage medium 203 may be, for example, an EEPROM (Electrically Erasable Programmable Read-Only Memory) or a flash memory.

[Example of processing procedure]
With reference to the flowchart of FIG. 10, an example of a processing procedure executed by the reader / writer 100 and the IC card 200 in the present embodiment regarding data reading will be described. In the figure, a process for reading data stored in one record in the data area of the file to be read after a single file to be read is specified is shown.

Further, in the processing shown in the figure, as shown in FIG. 8, the plaintext state by 00h, the original ciphertext state by 01h, and the re-ciphertext state by 02h are defined as the encryption state of the record data. Take the case as an example.
In addition, the reader / writer 100 that executes the processing shown in FIG. That is, the reader / writer 100 has an access right to the record data in the original ciphertext state corresponding to the cipher state information having the value 01h, but the reciphertext state record corresponding to the cipher state information having the value 02h. Corresponds to users who do not have access to data.

  Further, for example, the process shown in the figure may be an authentication process as to whether or not the reader / writer 100 is a legitimate reader / writer 100 capable of reading data from the IC card 200 prior to reading of the file. Then, when authentication by the authentication process is established and the IC card 200 recognizes that the reader / writer 100 has a legitimate authority, the process shown in FIG.

  The data read command transmission unit 121 in the reader / writer 100 transmits a data read command for requesting data reading by designating one record from the communication unit 101 to the IC card 200 (step S101).

In response to the transmission of the data read command in step S101, the IC card 200 transmits the encryption state information and the record data stored in the record specified by the transmitted data read command.
The communication unit 101 receives the encryption state information and the record data transmitted from the IC card 200 as described above (step S102).

Next, the decryption unit 122 refers to the encryption state information received in Step S102 (Step S103), and determines the value of the encryption state information (Step S104).
When the value of the encryption state is 00h (step S104: 00h), the received record data is in a plaintext state. Accordingly, the decoding unit 122 in this case acquires the received record data as it is as read data without performing any particular decoding on the received record data (step S105).

If the value of the encryption state information is 01h (step S104: 01h), the received record data is in the original ciphertext state. As described above, the reader / writer 100 in this case has an access right to the original ciphertext. For example, the storage medium 203 stores a key corresponding to the original ciphertext. The decryption unit 122 determines that access is possible when the value of the encryption state information is 01h.
Therefore, the decryption unit 122 in this case decrypts the received record data with the key corresponding to the original ciphertext that it has, and acquires the record data obtained by decryption as read data (step S106).

On the other hand, when the value of the encryption state information is a value other than 00h and 01h (step S104: other), the received record data is a ciphertext in a format other than the original ciphertext. Specifically, the record data in this case is a re-ciphertext indicated by the encryption state information having a value of 02h. In this case, the re-ciphertext is a ciphertext different from the original ciphertext. The re-ciphertext is decrypted using a key different from the original ciphertext.
However, the reader / writer 100 in this case does not have an access right to the record data of the re-ciphertext, and therefore the storage medium 203 does not store a key that can decrypt the re-ciphertext. For this reason, the decryption unit 122 determines that it is a decryption error because the received record data as the re-ciphertext cannot be decrypted normally (step S107). In this case, normal read data cannot be obtained.
If the user corresponding to the reader / writer 100 has access to the re-ciphertext record data, the decryption unit 122 uses the key that can decrypt the re-ciphertext in step S107. Can be decrypted.

In the IC card 200, the communication unit 201 receives the data read command transmitted from the reader / writer 100 in step S101 (step S201).
In response to the reception of the data read command, the data read unit 221 reads the encryption state information and the record data stored in the record of the file designated by the received data read command from the storage medium 203 (step S202).

  Next, the data transmission unit 222 causes the communication unit 201 to transmit the encryption state information and the record data read from the storage medium 203 in step S202 to the reader / writer 100 (step S203).

  As described above, when the reader / writer 100 and the IC card 200 execute processing, appropriate record data corresponding to the access right held by the reader / writer 100 is targeted for a file in which data having different access rights are mixedly stored. Is read out. That is, the reader / writer 100 can acquire the record data having the access right in the plain text state, but the record data not having the access right is left in the cipher text so that it cannot be acquired in the plain text state. Access is appropriately restricted.

Second Embodiment
[Configuration example of data reading system]
Next, the second embodiment will be described. In the second embodiment, when the record data requested by the data read command is a ciphertext, the IC card 200 decrypts the ciphertext if the authentication of the record data to be read is established. Then, the data is transmitted to the reader / writer 100. On the other hand, if the authentication of the record data to be read is not established, the IC card 200 is configured to transmit to the reader / writer 100 in the ciphertext state without performing decryption.
With this configuration, the reader / writer 100 can acquire record data having an access right in a file in a plain text state, but record data having no access right is acquired in a cipher text state. That is, an appropriate access restriction is realized so that only record data having an access right in the file is normally read.

FIG. 11 shows a configuration example of the reader / writer 100 and the IC card 200 in the present embodiment. In this figure, the same parts as those in FIG.
The control unit 102 in the reader / writer 100 of this embodiment includes a data read command transmission unit 121, an authentication processing unit 123, and a data acquisition unit 124.
Similarly to FIG. 9, the data read command transmission unit 121 transmits a data read command for requesting data reading in units of records to the IC card 200 when reading file data from the IC card 200.
The authentication processing unit 123 performs authentication processing with the IC card 200. The authentication process executed by the authentication processing unit 123 is executed in order to determine whether or not the IC card 200 has an access right to the record data in a specific encryption state stored in the file.
The data acquisition unit 124 acquires the record data transmitted from the IC card 200 in response to the transmission of the data read command via the communication unit 101.

In addition, in the IC card shown in the figure, the control unit 202 includes a data reading unit 221, a data transmission unit 222, an authentication processing unit 223, and a decryption unit 224.
The authentication processing unit 223 executes authentication processing with the reader / writer 100. Specifically, the authentication processing unit 223 executes an authentication process for determining whether or not the user corresponding to the reader / writer 100 has an access right to the record data using a ciphertext in a specific encryption state.

  After the authentication by the authentication processing unit 223, the data reading unit 221 performs encryption state information and record data stored in the record of the file designated by the data read command received from the reader / writer 100, as in the case of FIG. And read.

When the decryption unit 224 has an access right to the record data in the encryption state indicated by the encryption state information read by the data read unit 221, the decryption unit 224 decrypts and outputs the record data, and grants the access right to the record data. If not, record data is output without being decoded.
The data transmission unit 222 causes the communication unit 201 to transmit the record data output from the decoding unit 224 to the reader / writer 100.

[Example of processing procedure]
The authentication processing unit 123 in the reader / writer 100 of this embodiment and the authentication processing unit 223 in the IC card 200 correspond to the access right to the record data of the file at a predetermined timing before reading the file from the IC card 200. Execute the authentication process.

The flowchart of FIG. 12 shows an example of a processing procedure executed by the reader / writer 100 and the IC card 200 of this embodiment.
The authentication processing unit 123 in the reader / writer 100 transmits an authentication command for requesting an authentication process corresponding to the access right to the record data to the IC card 200 (step S301). The authentication processing unit 123 includes an authentication key in the authentication command transmitted in step S301.

In response to the transmission of the authentication command transmitted in step S301, the IC card 200 executes an authentication process, and transmits an authentication response indicating whether or not authentication is established as a result of the authentication process to the reader / writer 100. .
The communication unit 101 of the reader / writer 100 receives the authentication response transmitted from the reader / writer 100 as described above (step S302).
The authentication processing unit 123 recognizes the authentication result of the authentication process executed on the IC card 200 side based on the authentication response received in step S302 (step S303). Specifically, the authentication processing unit 123 can recognize whether authentication has been established in step S303.

In the IC card 200, the communication unit 201 receives the authentication command transmitted from the reader / writer 100 in step S301 (step S401).
The authentication processing unit 223 executes authentication processing in response to the reception of the authentication command in step S401 (step S402). In this case, the authentication processing unit 223 determines whether or not the authentication key included in the received authentication command belongs to a legitimate user corresponding to the access right set in the record data in a specific encryption state. judge. If the authentication key is that of a valid user, the authentication is established. If the authentication key is not that of a valid user, the authentication is not established.

The authentication processing unit 223 determines whether or not authentication is established as a result of the authentication processing in step S402 (step S403).
When the authentication is established (step S403: YES), 1 indicating that the authentication is established is set as the value of the authentication flag corresponding to the access right possessed by the authenticated user (step S404). The authentication flag may be stored in a predetermined area in the storage medium 203.
On the other hand, when the authentication is not established (step S403: NO), the authentication processing unit 223 sets 0 indicating that the authentication is not established for the value of the authentication flag (step S405).

After setting the value of 1 or 0 to the authentication flag by the processing in step S404 or step S405, the authentication processing unit 223 transmits an authentication response indicating the authentication result determined in step S403 to the reader / writer 100. (Step S406).
In step S406, if it is determined in step S403 that the authentication has been established, the authentication processing unit 223 transmits an authentication response indicating that the authentication has been established. On the other hand, when it is determined that the authentication is not established, the authentication processing unit 223 transmits an authentication response indicating that the authentication is not established.
In this way, in response to the authentication command from the reader / writer 100, the IC card 200 performs an authentication process corresponding to the access right to the record data.

Note that the authentication process shown in FIG. 12 may be executed once before reading the record data stored in the file, or is executed every time the record data is read. It may be a thing.
After the authentication process shown in FIG. 12 is executed, the reader / writer 100 reads record data from the IC card as follows.

The flowchart of FIG. 13 shows an example of a processing procedure executed by the reader / writer 100 and the IC card 200 in response to reading of record data.
In the reader / writer 100, the data read command transmission unit 121 transmits a data read command for requesting data read by designating a record (step S501).
In response to the data read command transmitted in step S501, the IC card 200 transmits the read data read from the storage medium 203 to the reader / writer 100.
In the reader / writer 100, the data acquisition unit 124 receives the read data transmitted from the IC card 200 via the communication unit 101 (step S502).

Next, processing of the IC card 200 will be described. In the IC card 200, the data reading unit 221 receives the data reading command transmitted from the reader / writer 100 in step S501 via the communication unit 201 (step S601).
In response to receiving the data read command in step S601, the data read unit 221 reads from the storage medium 203 the encryption state information and the record data stored in the record of the file specified by the received data read command ( Step S602).

Next, the decryption unit 224 refers to the encryption state information read out in step S602 (step S603), and determines whether or not the value of the referenced encryption state information is 00h (step S604).
When the value of the encryption state information is 00h (step S604: 00h), the record data read in step S602 is in plain text. Therefore, the decoding unit 224 in this case outputs the read data as it is without performing any decoding on the record data read in step S602 (step S605). Depending on step S607 in this case, read data in a plain text state is output.

On the other hand, when the value of the encryption state information is a value other than 00h (step S604: other than 00h), the value of the encryption state information is 01h or 02h in correspondence with the definition example of the encryption state information in FIG. The record data read in step S602 is an original ciphertext or a re-ciphertext.
For example, as shown in FIG. 8, when an original ciphertext and a re-ciphertext are defined as ciphertext, a plurality of patterns of authentication are established as follows depending on the authentication processing shown in FIG.
One is a pattern in which authentication is established for a user who has an access right for both the original ciphertext and the re-ciphertext. The other is a pattern in which authentication is established for a user who has an access right to the original ciphertext but does not have an access right to the re-ciphertext. The other is a pattern in which authentication is established for a user who does not have access to the original ciphertext but has access to the re-ciphertext.

Therefore, the decryption unit 224 in this case determines whether or not the user who has been authenticated by the authentication process of FIG. 12 has the access right for the record data read in step S602 (step S602). S606).
If the user does not have the access right (step S606: NO), the decryption unit 224 outputs the read record data as it is without performing decryption on the record data read in step S602 (step S605). In step S605 in this case, read data based on the state of the ciphertext (original ciphertext or re-ciphertext) is acquired.

On the other hand, if the user has an access right (step S606: YES), the decryption unit 224 decrypts the record data read in step S602 with the key corresponding to the encryption state, and the decrypted record data Output as read data (step S607).
Specifically, when the record data is in the original ciphertext, the decryption unit 224 decrypts the record data using a decryption algorithm (an example of a first decryption algorithm) using a key that can decrypt the original ciphertext. In addition, when the record data is in the re-ciphertext state, the decryption unit 224 uses a decryption algorithm (a second decryption algorithm of the second decryption algorithm) that is different from the key that can decrypt the original ciphertext. The record data is decrypted according to an example). Then, the decoding unit 224 outputs the record data decoded as described above as read data.

  The data transmission unit 222 causes the communication unit 201 to transmit the read data output in step S605 or step S607 to the reader / writer 100 (step S608).

According to the above processing, when the data stored in the record designated by the data read command is in the plaintext state, the read data in plaintext is transmitted from the IC card 200 to the reader / writer 100.
Also, if the data stored in the record specified by the data read command is in a ciphertext state, the plaintext decrypted on the IC card 200 side if the authenticated user has access rights. Read data according to the state is transmitted to the reader / writer 100.
On the other hand, if the authenticated user does not have the access right, read data based on the state of the ciphertext that is not decrypted and remains in the ciphertext is transmitted to the reader / writer 100.

  Therefore, the reader / writer 100 can acquire record data for which access right is not set and record data for which the user has access right as read data in a plain text state. On the other hand, the reader / writer 100 acquires the record data that the user does not have access right as read data in the ciphertext state. The reader / writer 100 cannot decrypt the read data acquired in the ciphertext state because it does not have a decryptable key. If it cannot be decoded, it cannot be processed as significant read data, and in this case, a read error occurs.

  As described above, also in this embodiment, the reader / writer 100 appropriately restricts access so that only record data that can be accessed with the access right of the corresponding user can be normally read.

  As a process of the IC card 200 in FIG. 13, if it is determined in step S606 that the access right is not granted, a data read command is used instead of sending read data in an encrypted state. An error response may be transmitted to the reader / writer 100.

<Third Embodiment>
Subsequently, the third embodiment will be described. In the first embodiment and the second embodiment, the case where the data area of the file is formed by a fixed-length record is taken as an example.
The data area in the file may have a variable length record structure called a TLV structure in addition to the fixed length record structure. The third embodiment has a configuration corresponding to the case where the data area in the file has a TLV structure.

The TLV structure will be described with reference to FIG. As shown in the figure, one record in the TLV structure has a structure in which a Tag area, a Length area, and a Value area are arranged in order from the top.
In the Tag area, an identifier (tag) for identifying a record is stored.
Information indicating the data length (size) of the subsequent Value area is stored in the Length area.
In the Value area, data (record data) having a data length indicated by the Length area is stored.
In the data area of the file FL, records having the above TLV structure are stored so as to be packed from the top as shown in FIG. In this way, a file having a TLV structure is formed.

FIG. 15 shows an example of data mapping when data similar to that in FIG. 8 is written to a file having a TLV structure.
That is, in the data area of the file FL shown in the figure, the encryption state information having a value of 00h is written in the first byte in the value area of the first record under the TLV structure, and the subsequent second byte. After that, name data in plain text is written.
Also, in the value area of the second record, encryption state information having a value of 01h is written in the first byte, and address data in the original ciphertext is written in the second and subsequent bytes.
Also, in the Value area of the third record, the encryption status information having a value of 00h is written in the first byte, and the card number data in plain text is written in the second and subsequent bytes.
Also, in the value area of the fourth record, the encryption status information having a value of 02h is written in the first byte, and the telephone number data by re-ciphertext is written in the second and subsequent bytes.

As described above, even when the data area of the file has the TLV structure, the data reading process is performed in the same manner as the process of FIG. 10 in the first embodiment or the process of FIG. 13 in the second embodiment. Good.
Therefore, even when the data area of the file has a TLV structure, it is possible to store record data to which different access rights are set in one file, and the capacity of the storage medium 203 can be used efficiently. In addition, access restriction is appropriately performed so that only record data having an access right is normally read from the IC card 200.

In the embodiments described so far, the encryption state information is stored in a record in which corresponding record data is stored. On the other hand, the encryption state information corresponding to each record data may be included in management information for managing a file in which the corresponding record data is stored.
Specifically, the encryption state information may be written in the file header in a state where the correspondence relationship with the record is indicated. Alternatively, the encryption state information may be written in a state in which management information such as directory information for managing a file in the file system indicates a correspondence relationship with a record.

  A program for realizing the functions of the reader / writer 100 or the IC card 200 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed. Processing as the above-described reader / writer 100 or IC card 200 may be performed. Here, “loading and executing a program recorded on a recording medium into a computer system” includes installing the program in the computer system. The “computer system” here includes an OS and hardware such as peripheral devices. Further, the “computer system” may include a plurality of computer devices connected via a network including a communication line such as the Internet, WAN, LAN, and dedicated line. The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. As described above, the recording medium storing the program may be a non-transitory recording medium such as a CD-ROM. The recording medium also includes a recording medium provided inside or outside that is accessible from the distribution server in order to distribute the program. The code of the program stored in the recording medium of the distribution server may be different from the code of the program that can be executed by the terminal device. That is, the format stored in the distribution server is not limited as long as it can be downloaded from the distribution server and installed in a form that can be executed by the terminal device. Note that the program may be divided into a plurality of parts, downloaded at different timings, and combined in the terminal device, or the distribution server that distributes each of the divided programs may be different. Furthermore, a “computer-readable recording medium” holds a program for a certain period of time, such as a volatile memory (RAM) inside a computer system that becomes a server or client when the program is transmitted via a network. Including things. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 100 Reader / writer, 101 Communication part, 102 Control part, 121 Data read command transmission part, 122 Decryption part, 123 Authentication processing part, 124 Data acquisition part, 200 IC card, 201 Communication part, 202 Control part, 203 Storage medium, 221 Data reading unit 222 Data transmitting unit 223 Authentication processing unit 223 Authentication processing unit 224 Decoding unit

Claims (17)

A data output method in a storage medium device comprising a storage medium,
The data reading unit sequentially transmits corresponding to each unit data in one file from the data reading device corresponding to the predetermined access right, and the access set in response to reception of the data read command requesting reading of the unit data from the storage medium in which data of types encryption status information indicating the encryption state in accordance with a Rutotomoni predetermined definitions associated in accordance with the rights to store the file to store the unit data to be stored, the received data read command Reading the unit data requested by and the cryptographic state information associated with the unit data;
A data output method comprising: a data transmission unit transmitting unit data and encryption state information read by the data reading unit to the data reading device. The data output method according to claim 1, wherein the encryption state indicated by the encryption state information is one of a ciphertext state and an unencrypted plaintext state. The state of the ciphertext is the state of the original ciphertext when received from an external communication device, and the state of the re-ciphertext obtained by re-encrypting by an encryption process different from when the original ciphertext is encrypted The data output method according to claim 2, which is at least one of the following. The data output method according to any one of claims 1 to 3, wherein the unit data is data stored in a unit data storage area in a file. The data output method according to claim 4, wherein the encryption state information is stored at a predetermined position in a unit data storage area in which the unit data is stored. The data output method according to any one of claims 1 to 4, wherein the encryption state information is included in management information stored in the storage medium for management of a file storing the unit data. Storage medium device including a storage medium for storing a file that stores unit data set data type encryption status information indicating the encryption status in accordance with the access rights according to Rutotomoni predetermined definition associated is stored A data reading method in a data reading device corresponding to a predetermined access right for reading data from:
A step in which a data read command transmitting unit sequentially transmits a data read command for requesting reading of unit data to the storage medium device in correspondence with each unit data in one file ;
The decryption unit is received in response to receiving from the storage medium device the unit data read from the storage medium as a response to the data read command and the encryption state information associated with the unit data A step of decrypting the unit data when having an access right to the unit data in the encryption state indicated by the encryption state information, and a step not performing decryption of the unit data when not having an access right to the unit data A data reading method including and. A data output method in a storage medium device comprising a storage medium,
The data reading unit sequentially transmits corresponding to each unit data in one file from the data reading device corresponding to the predetermined access right, and the access set in response to reception of the data read command requesting reading of the unit data from the storage medium in which data of types encryption status information indicating the encryption state in accordance with a Rutotomoni predetermined definitions associated in accordance with the rights to store the file to store the unit data to be stored, the received data read command Reading the unit data requested by and the cryptographic state information associated with the unit data;
When the decryption unit has an access right to the unit data in the encryption state indicated by the encryption state information read by the data reading unit, the unit data is decrypted and output, and the access right to the unit data is given. If not, outputting the unit data without decoding;
A data transmission method comprising: a data transmission unit transmitting the unit data output from the decoding unit to the data reading device. The data output method according to claim 8, wherein the cipher state indicated by the cipher state information is one of a ciphertext state and an unencrypted plaintext state. The state of the ciphertext is the state of the original ciphertext when received from an external communication device, and the state of the re-ciphertext obtained by re-encrypting by an encryption process different from when the original ciphertext is encrypted The data output method according to claim 9, wherein the data output method is at least one of the following. The decoding unit
When the cipher state indicated by the cipher state information read by the data reading unit is a ciphertext state and has an access right to the unit data in the ciphertext state, the data is read by the data reading unit. The decoded unit data is decoded by the first decoding algorithm and output,
When the encryption state indicated by the encryption state information read by the data reading unit is a plaintext state, the unit data read by the data reading unit is output without being decrypted,
When the cipher state indicated by the cipher state information read by the data reading unit is a re-ciphertext state and has access rights to the unit data in the re-ciphertext state, the data reading unit The data output method according to claim 10, wherein the read unit data is decoded and output by a second decoding algorithm different from the first decoding algorithm. The data output method according to any one of claims 8 to 11, wherein the unit data is data stored in a unit data storage area in a file. The data output method according to claim 12, wherein the encryption state information is stored at a predetermined position in a unit data storage area in which the unit data is stored. The data output method according to any one of claims 8 to 12, wherein the encryption state information is included in management information stored in the storage medium for management of a file storing the unit data. A storage medium for storing unit data associated with encryption state information indicating an encryption state;
A communication unit for communicating with a data reading device corresponding to a predetermined access right ;
Encryption state information indicating an encryption state corresponding to a set access right in response to reception of a data read command sequentially transmitted corresponding to each unit data in one file from the data reading device and requesting reading of unit data from the storage medium for storing a file that stores unit data type of the data is stored in accordance with the association is Rutotomoni predetermined definition, the unit data requested by the received data read command, the unit data A data reading unit for reading the associated encryption state information;
A storage medium device comprising: a data transmission unit that transmits unit data and encryption state information read by the data reading unit from the communication unit to the data reading device. Storage medium device including a storage medium for storing a file that stores unit data set data type encryption status information indicating the encryption status in accordance with the access rights according to Rutotomoni predetermined definition associated is stored A communication unit that communicates with
A data read command transmitting unit for sequentially transmitting a data read command for requesting reading of unit data to the storage medium device in correspondence with each unit data in one file ;
In response to receiving from the storage medium device unit data read from the storage medium as a response to the data read command and encryption state information associated with the unit data, the received encryption state information is A decrypting unit that decrypts the unit data when having access right to the unit data in the encryption state shown, and does not decrypt the unit data when not having access right to the unit data. Data reading device. A storage medium for storing unit data associated with encryption state information indicating an encryption state;
A communication unit for communicating with a data reading device corresponding to a predetermined access right ;
The data reading device sequentially transmits corresponding to each unit data in one file , and responds to the set access right in response to the data reading command for requesting reading of the unit data being received by the communication unit. from the storage medium in which the type of data to store a file for storing the unit data stored encryption state information indicating the encryption status obeyed Rutotomoni predetermined definitions associated, the data read command received request A data reading unit that reads unit data to be read and encryption state information associated with the unit data;
When the right to access the unit data in the encryption state indicated by the encryption state information read by the data reading unit is decrypted and output, and the right to access the unit data is not present Includes a decoding unit that outputs the unit data without decoding,
A storage medium device comprising: a data transmission unit configured to transmit unit data output from the decoding unit to the data reading device.

Images