JP7423966B2 - Electronic information storage medium, program, and profile update status notification method - Google Patents

Description

The present invention relates to a technical field such as an IC module capable of storing a profile used for processing related to a predetermined function.

2. Description of the Related Art In recent years, with the spread of IoT (Internet of Things), IoT devices incorporating an IC module with a communication function to connect to the Internet have become known. Normally, in conventional mobile devices such as smartphones, when changing (switching) communication carriers or changing contract details even within the same carrier (for example, from 3G to LTE), it is necessary to replace the UIM card. It was taken care of. However, in the case of a mobile device with a built-in IC module, it is difficult to replace the IC module. A board to which an IC module is attached usually also includes other modules, and the cost associated with replacing the board becomes large. Furthermore, there are some devices in which the board on which the IC module is attached cannot be replaced, and in this case, the device itself must be replaced. An eUICC (Embedded Universal Integrated Circuit Card) has been commercialized as an IC module to solve this situation. eUICC is a built-in UIM module that can switch profiles required for services provided by communication carriers, for example. By switching profiles, it is possible to change communication carriers and contract details without replacing the module. It is possible. Such a profile includes a service table indicating functions provided by the UICC, such as that disclosed in Patent Document 1, for example.

Patent No. 5149516

By the way, in the case of a built-in UIM module, for example, when the communication carrier or contract details are changed, the profile is updated (new registration, partial addition, modification, deletion, etc.) in the market. When updating a profile, it is assumed that commands are sent and received wirelessly, so depending on the communication situation, the process may be interrupted during the update, or some commands may not arrive, making it difficult to update the profile. It may be in an unsatisfactory condition. Additionally, the required keys and files differ depending on the functions provided by the UIM module, so for example, when enabling a function that was previously disabled, additional files and files may be required. Keys may need to be issued. However, when changing communication carriers or contract details, it may not be possible to know the contents of the profile in advance, resulting in an insufficient update of the profile. In this way, if, for example, authentication processing is executed without knowing the update status of the profile, an error may occur and the communication function may become unusable.

Therefore, the present invention has been made in view of the above points, and provides an electronic information storage medium that can efficiently manage the update state of a profile and reduce the possibility that a predetermined function becomes unusable. The purpose is to provide a program, a profile update status notification method, and a server.

In order to solve the above problem, the invention according to claim 1 provides an electronic information storage medium capable of storing profiles used for processing related to each of a plurality of predetermined functions, wherein the profile is updated from an external device. a first receiving means for receiving a command; a first determining means for determining whether or not configuration data of the profile is insufficient in response to the update command; storage means for storing status information indicating that the update of the profile has been completed or is being updated; a first response means for transmitting a response to the update command to the external device; a second receiving means for receiving a function command for executing a process related to a function; a checking means for checking the state information according to the function command; and a check result by the checking means, the state information being updated. a second determination means for determining whether there is a shortage of profile configuration data required to execute the first function indicated by the function command; If it is determined that there is a shortage, the external device executes a process according to the function command, and if the second determination means determines that there is a shortage, the external device sends a response to the function command indicating an error. and a second response means for transmitting to .

According to a second aspect of the invention, in the electronic information storage medium according to the first aspect, when the first determining means determines that there is a shortage, the first responding means is configured to update the profile. The method is characterized in that the response indicating the response is transmitted to the external device.

The invention according to claim 3 is the electronic information storage medium according to claim 2, further comprising: a third receiving means for receiving a confirmation command for the missing configuration data from the external device; an acquisition means for acquiring identification information of the missing configuration data, and a third response means for transmitting a response to the confirmation command indicating the identification information acquired by the acquisition means to the external device; It is characterized by further comprising:

The invention according to claim 4 provides the electronic information storage medium according to claim 1 , in which when the first determining means determines that the configuration data is insufficient, identification information of the missing configuration data is stored. The apparatus further includes an acquisition means for acquiring, and the first response means transmits the response indicating the identification information acquired by the acquisition means to the external device.

The invention according to claim 5 is the electronic information storage medium according to claim 3 or 4, further comprising: a fourth receiving means for receiving a generation command for the configuration data identified by the identification information from the external device; The method further includes a generating means for generating the missing configuration data in response to a generation command.

According to a sixth aspect of the invention, in the electronic information storage medium according to any one of claims 1 to 5 , when the check result by the checking means indicates that the status information indicates update completion, the function command is The present invention is characterized by further comprising: processing means for executing processing according to the above.

According to a seventh aspect of the invention, in the electronic information storage medium according to the first aspect, the external device is a terminal capable of communicating with a server via a network, and the update command is a terminal that can communicate with a server via a network. is generated and transmitted to the terminal, and then transmitted from the terminal to the electronic information storage medium and received by the first receiving means, and the first response means fifth receiving means for transmitting the response indicating that there is a proactive command to be transmitted from a medium to the terminal and receiving a request command for the proactive command generated by the terminal; and the state information is updated. The present invention is characterized by further comprising a fourth response means for transmitting the proactive command indicating that there has been a change in the configuration of the profile to the terminal as a response to the request command when indicating completion.

The invention according to claim 8 is the electronic information storage medium according to claim 1, wherein the external device is a terminal capable of communicating with a server, and the update command is generated by the server. After being transmitted to the terminal, the information is received by the first receiving means by being transmitted from the terminal to the electronic information storage medium, and the first response means is configured to receive the information transmitted from the electronic information storage medium. fifth receiving means for transmitting the response indicating that there is a proactive command to be received to the terminal and receiving a request command for the proactive command generated by the terminal; and when the status information indicates that it is being updated; The apparatus further comprises a fifth response means for transmitting the proactive command indicating that the profile is being updated to the terminal as a response to the request command.

The invention according to claim 9 provides a computer included in an electronic information storage medium capable of storing profiles used for processing of each of a plurality of predetermined functions, to a first computer that receives a profile update command from an external device. a receiving unit, a first determining unit that determines whether configuration data of the profile is insufficient in response to the update command, and completion or updating of the profile based on a determination result by the first determining unit; storage means for storing state information indicating the update command; first response means for transmitting a response to the update command to the external device; and execution of processing related to any one of the plurality of functions from the external device. a second receiving means for receiving a function command for updating; a checking means for checking the state information in response to the function command; a second determining means for determining whether or not profile configuration data required to execute the first function indicated by the function command is insufficient; and when it is determined by the second determining means that the data is not insufficient; a second response that executes a process according to the functional command, and transmits a response to the functional command indicating an error to the external device if the second determining means determines that the functional command is insufficient; It is characterized by functioning as a means .

The invention according to claim 10 is a profile update status notification method executed by a computer included in an electronic information storage medium capable of storing profiles used for processing of each of a plurality of predetermined functions, the method comprising: a step of receiving a profile update command from a device; a first determination step of determining whether configuration data of the profile is insufficient in response to the update command; and a first determination step based on the determination result in the first determination step. storing status information indicating that the update of the profile is completed or in progress in a storage means; transmitting a response to the update command to the external device; and transmitting one of the functions from the external device to the external device. a step of receiving a function command for executing a process related to the function; a check step of checking the state information according to the function command; and a check result in the check step indicating that the state information is being updated. a second determination step of determining whether or not profile configuration data required to execute the first function indicated by the function command is insufficient; If it is determined that the function command is insufficient, execute a process according to the function command, and if it is determined that the second determination step is insufficient, send a response to the function command indicating an error to the external device. It is characterized by including the step of transmitting .

According to the present invention, it is possible to efficiently manage the update state of a profile and reduce the possibility that a predetermined function becomes unavailable.

1 is a diagram showing an example of a schematic configuration of a communication system S. FIG. 1 is a diagram showing an example of a schematic configuration of a server 1. FIG. FIG. 3 is a diagram showing an example of a file group. 2 is a diagram showing an example of a schematic configuration of a terminal 2 and an IC module 3. FIG. It is a figure showing an example of a service table. 5 is a flowchart illustrating an example of main processing when a command is received by the IC module 3. FIG. 3 is a diagram showing a transition of a profile update state in the IC module 3. FIG. FIG. 3 is a sequence diagram showing the operation of the communication system S in the first embodiment. 3 is a sequence diagram showing the operation of the communication system S in Example 2. FIG. 3 is a sequence diagram showing the operation of the communication system S in Example 3. FIG. FIG. 7 is a sequence diagram showing the operation of the communication system S in Example 4. FIG. 12 is a sequence diagram showing the operation of the communication system S in Example 5. FIG. FIG. 7 is a sequence diagram showing the operation of the communication system S in the sixth embodiment. FIG. 7 is a sequence diagram showing the operation of the communication system S in Example 7. 12 is a flowchart illustrating an example of main processing when a command is received by the IC module 3 in Example 8. FIG. 7 is a sequence diagram showing the operation of the communication system S in Example 8.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiments described below are embodiments in which the present invention is applied to a communication system.

[1. Overview of communication system configuration]
First, with reference to FIG. 1, a general configuration of a communication system S according to the present embodiment will be described. FIG. 1 is a diagram showing an example of a schematic configuration of a communication system S. As shown in FIG. As shown in FIG. 1, the communication system S includes a server 1, a terminal 2 (an example of an external device), and an IC module 3. Here, in the communication system S, the server 1 is provided, for example, for each vendor that provides a service, and in this embodiment, one of the servers 1 will be explained as an example. The terminal 2 is a mobile device that receives various services (for example, communication services). The IC module 3 is an example of the electronic information storage medium of the present invention, and is integrated into the terminal 2. In the example of FIG. 1, one terminal 2 and one IC module 3 are shown, but in reality, one terminal 2 and one IC module 3 exist for each user. The server 1 and the terminal 2 are each connected to a network NW constituted by a wireless communication network (mobile communication network), etc., and are capable of communicating with each other via the network NW. Specifically, the server 1 and the terminal 2 communicate based on the network NW according to, for example, TCP (Transmission Control Protocol)/IP (Internet protocol) and TLS (Transport Layer Security) protocols. Note that the network NW and the terminal 2 constitute communication equipment.

On the other hand, the terminal 2 and the IC module 3 can communicate with each other via a predetermined interface. Specifically, the terminal 2 and the IC module 3 communicate based on a predetermined interface, for example, according to an APDU (Application Protocol Data Unit) protocol. Examples of the predetermined interface include SPI (Serial Peripheral Interface), I ² C (Inter-Integrated Circuit), and ISO7816 interface. SPI and ^I2C are serial communication interfaces, and in particular, SPI uses a full-duplex serial communication protocol that communicates in both directions simultaneously. On the other hand, the ISO7816 interface is a communication interface defined by ISO7816-2 (a communication interface using eight terminals C1 to C8), and is a TPDU (Transmission Protocol Data Unit) protocol (for example, T=0 or T= 1) is used. Note that the APDU protocol is a protocol for transmitting and receiving APDUs defined in ISO7816-3. Furthermore, the terminal 2 has a function of mediating communication between the server 1 and the IC module 3, and performs protocol conversion during this mediation. Thereby, the IC module 3 can communicate with the server 1 via the network NW and the terminal 2. Although not shown, the IC module 3 is capable of communicating with communication devices other than the server 1 via the network NW and the terminal 2.

[2. Configuration and functions of server 1]
Next, with reference to FIG. 2, the configuration and functions of the server 1 according to this embodiment will be described. FIG. 2 is a diagram showing an example of a schematic configuration of the server 1. As shown in FIG. As shown in FIG. 2, the server 1 includes a communication section 11, a storage section 12, a control section 13, and the like. The communication unit 11 is a communication device for connecting to the network NW. The storage unit 12 stores a server program and one or more published profiles. A profile is a collection of specific files (e.g., program files) and specific data (e.g., key data and configuration data) that are necessary to execute various functions (processing related to functions) to provide a service (in other words, Then, the file set). Such specific files and specific data are also respectively referred to as profile configuration data. For example, the profile includes common (required) configuration data for each vendor and configuration data that is optionally selected for each vendor (or each user). Furthermore, the configuration data of the profile basically differs depending on the service. For example, since communication methods and authentication methods differ for each of 3G, LTE, and 5G wireless communication services, the configuration data required to execute various functions for providing these services differs. In addition, the profile may also include Privilege indicating the functions supported by the application defined in GlobalPlatform and specific data required for the specifications of the functions. For example, Privilege has the functionality of a management application (Security Domain) that can load and install applications, Privilege is implicitly selected on the basic logical channel as the default application at reset, and all installed applications and There are Privilege, which deletes load files. Note that the profile is given its identification information, and the configuration data included in the profile is given its identification information.

In addition, there are files and data that are not directly related to the service but are necessary for the use of the above specific files (in other words, they are linked as a combination), and these are grouped together as one file group. In some cases. FIG. 3 is a diagram showing an example of a file group. Group 1 shown in FIG. 3(A) consists of a specific file of EF_AA, files of EF_BB and EF_DD, and data of KEY_1 (key data), and group 2 shown in FIG. 3(B) consists of EF_CC specific file. It consists of a specific file and an EF_FF file. Note that files and data necessary for using a specific file are positioned as constituent data of the same profile together with the specific file.

Furthermore, the storage unit 12 stores association information indicating the correspondence between the terminal 2 and the IC module 3 and their users. In this association information, for example, address information for accessing the terminal 2 via the network NW, identification information (ID) of the IC module 3, and user information of the user are associated with each other. Here, the user information includes, for example, information on services used by the user, status information on profiles required to provide the services, and the like. The profile status information includes, for example, a status variable indicating that the profile is being updated or has been updated, and is provided with profile identification information. Note that the profile status information may be stored separately for each function.

The control unit 13 includes, for example, a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), etc., and issues profiles and Execute processing related to updates (new registration, partial addition, change, deletion, etc.). Note that the control section 13 functions as a first transmitting section and a second transmitting section in the present invention. For example, when it becomes necessary to update the profile due to a request from a user to change the communication carrier or contract details regarding the service, the control unit 13 specifies the terminal 2 and IC module 3 used by the user ( (for example, by address information and identification information), and transmits a profile update command necessary for providing the target service to the IC module 3 via the network NW and the terminal 2.

Here, examples of update commands include a specific file generation command, a service table update command, and the like. The specific file generation command is a command for generating a specific file that constitutes a profile required to provide a target service. The specific file generation command includes, for example, identification information of the specific file and information necessary to generate the specific file (eg, file format, file size, security conditions, etc.). The service table update command is a command that turns on the service table corresponding to the target service (that is, makes the service valid (active)). The service table is a table (list) in which at least one of a specific file and specific data required to provide a service is registered for each service. The service table update command includes, for example, identification information of a profile required to provide the target service.

When a response indicating that the profile is being updated is received from the IC module 3 via the terminal 2 and the network NW in response to the update command, the control unit 13 updates the missing configuration data in the profile. A confirmation command is sent to the IC module 3 via the network NW and the terminal 2. Then, when a response indicating the identification information of the missing configuration data is received from the IC module 3 via the terminal 2 and the network NW in response to the confirmation command, the control unit 13 uses the identification information to A missing data generation command for the identified configuration data is sent to the IC module 3 via the network NW and the terminal 2. This generation command includes identification information of the missing configuration data and information necessary to generate the configuration data (for example, in the case of a file, file format, file size, security conditions, etc.). Note that in response to the update command, a response indicating identification information of missing configuration data may be received from the IC module 3 via the terminal 2 and the network NW. In this case as well, the control unit 13 transmits a missing data generation command for the configuration data identified by the identification information to the IC module 3 via the network NW and the terminal 2.

[3. Configuration and functions of terminal 2 and IC module 3]
Next, the configuration and functions of the terminal 2 and the IC module 3 will be explained with reference to FIG. 4. FIG. 4 is a diagram showing an example of a schematic configuration of the terminal 2 and the IC module 3. As shown in FIG. Note that the IC module 3 is mounted, for example, as an eUICC, on a built-in base so that it cannot be easily removed or replaced from the terminal 2 (that is, it is integrated into the terminal 2). As shown in FIG. 4, the terminal 2 includes an I/F section 21, a wireless communication section 22, a storage section 23, a control section 24, and the like. The I/F unit 21 serves as an interface with the IC module 3. This interface may be an SPI, I ² C, or ISO7816 interface, as described above.

The wireless communication unit 22 is a communication module for connecting to the network NW, and includes a modem that detects a base station of the wireless communication network. As a result, the wireless communication unit 22 modulates the data specified by the control unit 24, transmits the radio wave (carrier wave) to the base station via the antenna, and also transmits the radio wave from the base station via the antenna. By receiving and demodulating the data, the data is extracted and transmitted to the control unit 24. The storage unit 23 is composed of, for example, a nonvolatile memory, and stores predetermined programs and data. The storage unit 23 also stores the IP address and port number of the server 1 or the URL (Uniform Resource Locator) of the server 1 as data.

The control unit 24 is composed of, for example, a CPU, a RAM, a ROM, etc., and has the function of mediating communication between the server 1 and the IC module 3. As described above, the control unit 24 performs protocol conversion during this mediation. conduct. For example, when the control unit 24 receives a command (for example, an update command, etc.) from the server 1, the control unit 24 replaces the header of the command (for example, a TLS record header, a TCP header, and an IP header) with an APDU header. It is transmitted to the IC module 3 via the section 21. Here, the APDU header is composed of CLA (command class), INS (instruction code), P1 and P2 (instruction parameters). When the control unit 24 receives the response from the IC module 3 via the I/F unit 21 , the control unit 24 adds a header (for example, a TLS record header, a TCP header, and an IP header) to the response and transmits it to the server 1 . Note that, among the various functions executed by the IC module 3, the control unit 24 may take on a part of the authentication function, for example.

The IC module 3 includes an I/F section 31, a RAM 32, a ROM 33, an NVM (Nonvolatile Memory) 34 (an example of a storage means), a CPU 35 (an example of a computer), and the like. The I/F section 31 serves as an interface with the terminal 2 (that is, the control section 24). The NVM 34 is, for example, a nonvolatile memory such as a flash memory. Note that the NVM 34 may be an "Electrically Erasable Programmable Read-Only Memory." The ROM 33 or NVM 34 stores an operating system and application programs (including the program of the present invention) for using services. Here, the application program is a program for realizing the functions of an application instance (referred to as an "application"). An application is a module in which an application program or the like is expanded into memory and installed in an executable state. Applications preferably include applications defined in GlobalPlatform. Further, the NVM 34 stores profiles necessary for executing various functions for providing services, status information of the profiles, service tables, information indicating file groups, and the like. Here, the profile is given its identification information, and the configuration data included in the profile is given its identification information. The profile status information includes, for example, a status variable indicating that the profile is being updated or has been updated, and is provided with profile identification information. Note that the profile status information may be stored separately for each function.

FIG. 5 is a diagram showing an example of a service table. In the example of FIG. 5, at least one of a specific file and specific data required to provide the service, and the ON/OFF status of the service table are associated with each of the identification information of services A to D. are registered separately for each service. For example, in the service table corresponding to Service C, identification information (ID) of Service C, specific files of EF_XX and EF_ZZ, specific data of KEY_1, and OFF are registered. Further, the information indicating the file group includes identification information of each file and data that constitute the file group, and is given with the identification information of the file group.

When the CPU 35 receives a command from the terminal 2 (control unit 24) via the I/F unit 31, it performs processing according to the type of the received command. In this process, the CPU 35 functions as the first to fifth receiving means, determination means, acquisition means, generation means, checking means, processing means, and first to fifth response means in the present invention. FIG. 6 is a flowchart showing an example of main processing when the IC module 3 receives a command. In FIG. 6, upon receiving a command (command APDU), the CPU 35 determines whether the received command is a profile update command (determined from the APDU header) (step S1). When the CPU 35 determines that the received command is a profile update command (step S1: YES), the CPU 35 executes update processing for the target profile (processing corresponding to the update command) (step S2), and It is determined whether the configuration data of the profile is insufficient to complete the process (step S3). In other words, in response to the update command, it is confirmed whether all the configuration data is available in order to complete the update of the profile.

For example, if the update command is a specific file generation command, if a specific file is generated and there are not enough files or data necessary to use the generated specific file (this determination can be made, for example, based on the information indicating the file group). (based on), it is determined that the configuration data for the profile is missing. In the first place, if there are not enough files or data necessary to generate a specific file (this determination is based on, for example, information obtained from an update command), it is determined that the configuration data of the profile is insufficient. On the other hand, if the update command is a service table update command, the service table corresponding to the target service is turned on (that is, the OFF state registered in the service table is changed to the ON state), and in order to provide the service. If the necessary files or data are insufficient (this determination is based on, for example, information indicating the service table and file groups), it is determined that the configuration data of the profile is insufficient. In addition, in the determination in step S3, not only the lack of configuration data may be checked, but also the validity of the values in the configuration data may be checked, and even if the values are not valid, it is determined that the configuration data of the profile is insufficient. It may be determined that

If the CPU 35 determines that the configuration data of the profile is not insufficient (step S3: NO), the CPU 35 stores a state variable (profile state information) indicating completion of update of the target profile in the NVM 34 (step S4). , proceed to step S6. Note that a state variable stored in advance for the target profile may indicate "update completed," but in this case, the state variable does not change. On the other hand, if the CPU 35 determines that the configuration data of the profile is insufficient (step S3: YES), the CPU 35 stores a state variable (profile state information) indicating that the target profile is being updated in the NVM 34 (step S5). , proceed to step S7. That is, in the process of step S4 or step S5, status information indicating that the profile update is completed or is being updated is stored based on the determination result of step S3. FIG. 7 is a diagram showing the transition of the profile update state in the IC module 3. As shown in FIG. In this way, the IC module 3 can efficiently manage the updated status of the profile, and therefore can notify the updated status to the server 1 and the terminal 2.

In step S6, the CPU 35 generates a normal (that is, does not indicate an error) response (for example, a response according to the determination result, preferably a response indicating update completion) as a response to the update command, Send the generated response to terminal 2. Thereby, the IC module 3 can notify the server 1 that the target profile has been updated. On the other hand, in step S7, the CPU 35 generates a normal response (for example, a response according to the determination result, preferably a response indicating that the update is in progress) as a response to the update command, and transmits the generated response to the terminal 2. Send to. Thereby, the IC module 3 can notify the server 1 that the target profile has not been updated (in other words, the update of the profile is insufficient). When a confirmation command for missing configuration data in the target profile is received from the server 1 via the terminal 2 in response to such a notification (that is, a response indicating that updating is in progress), the CPU 35 executes the confirmation command. In response to this, the identification information of the missing configuration data is acquired from the NVM 34, and a response indicating the acquired identification information (for example, including a missing data list indicating the identification information of the missing configuration data) is sent to the terminal. 2 (not shown). Thereby, the CPU 35 receives the missing data generation command for the configuration data identified by the identification information from the server 1 via the terminal 2, and generates the missing configuration data in accordance with the missing data generation command. be able to. Note that in step S7, the CPU 35 acquires the identification information of the missing configuration data determined in step S3 from the NVM 34, generates a response indicating the acquired identification information, and sends the generated response to the terminal 2. You can also send it.

On the other hand, in step S1, if the CPU 35 determines that the received command is not a profile update command (step S1: NO), in other words, the received command executes a process related to a function for providing a service. If the function command is for executing the function command, the CPU 35 refers to the NVM 34 in response to the function command, and obtains the status information of the profile required to execute the function (processing related to the function) indicated by the received function command. Check (step S8). Note that when the status information of the profile is stored separately for each function, the CPU 35 only needs to check the status information corresponding to the function indicated by the function command. The process can be skipped and proceed to step S12.

Then, as a result of the check in step S8, if the status information indicates update completion (step S8: update completion), the CPU 35 executes processing (for example, authentication processing) according to the function command (step S9). Here, examples of functional commands include authentication commands and update commands. Then, the CPU 35 generates a normal response (for example, a response indicating normal termination) as a response to the function command (step S10), and transmits the generated response to the terminal 2. On the other hand, if the check result in step S8 indicates that the status information is being updated (step S8: updating), the CPU 35 updates the profile configuration data (the corresponding function It is determined whether or not there is a shortage of configuration data (configuration data related to the above) (step S11). Then, when the CPU 35 determines that the configuration data of the profile is not insufficient (step S11: NO), the process proceeds to step S9, and similarly to the above, executes the process according to the function command.

On the other hand, if the CPU 35 determines that the profile configuration data is insufficient (step S11: YES), it generates a response indicating an error as a response to the function command (step S12), and sends the generated response to the terminal 2. Send. Note that if the status information of the profile indicates that it is being updated in step S8 (step S8: updating), the process may be configured to proceed to step S12 without making the determination in step S11. When a confirmation command for the missing configuration data in the target profile is received from the server 1 via the terminal 2 in response to a response indicating an error, the CPU 35, in response to the confirmation command, The identification information of the missing configuration data is acquired from the NVM 34, and a response indicating the acquired identification information is transmitted to the terminal 2 (not shown). Thereby, the CPU 35 receives the missing data generation command for the configuration data identified by the identification information from the server 1 via the terminal 2, and generates the missing configuration data in accordance with the missing data generation command. be able to. Note that in step S12, the CPU 35 acquires the identification information of the missing configuration data determined in step S11 from the NVM 34, generates a response indicating the acquired identification information, and sends the generated response to the terminal 2. You can also send it.

[3. Operation of communication system S]
Next, the operation of the communication system S will be explained separately in Examples 1 to 6. Note that the following operations are operations when a communication session is established between the server 1 and the terminal 2.

(Example 1)
First, with reference to FIG. 8, the operation of the communication system S in the first embodiment will be described. FIG. 8 is a sequence diagram showing the operation of the communication system S in the first embodiment. Embodiment 1 is an example in which the IC module 3 executes a profile update process in response to an update command, and determines that the configuration data of the profile is not insufficient. In FIG. 8, the server 1 transmits a target profile update command (command addressed to the IC module 3) to the terminal 2 (step S101). Note that the update command includes identification information of the IC module 3 as a destination. When the terminal 2 receives the update command from the server 1, it performs protocol conversion and transmits the update command to the IC module 3 (step S102).

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. (Step S4). Then, the IC module 3 transmits an SW (status word) 9000 indicating normal completion (an example of a response indicating update completion) to the terminal 2 as a response to the update command (response addressed to the server 1) (step S103). When the terminal 2 receives the SW9000 from the IC module 3, it performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S104). This normal termination allows the server 1 to recognize that the update status of the target profile is update complete.

Note that after a predetermined period of time has elapsed since receiving the response indicating normal termination, the server 1 sends a confirmation command (command addressed to the IC module 3) for missing configuration data in the target profile as shown in FIG. It may also be transmitted to the IC module 3 via the terminal 2, as shown in steps S105 and S106. In this case, the IC module 3 determines whether or not the configuration data of the profile is insufficient in accordance with the received confirmation command. Then, if the configuration data of the profile is not insufficient, the IC module 3 sends SW9000 indicating normal termination as a response to the confirmation command (response addressed to the server 1), as shown in steps S107 and S108 in FIG. , and send it to terminal 2. As a result, a response indicating normal termination is transmitted from the terminal 2 to the server 1. On the other hand, if the configuration data of the profile is missing, the IC module 3 transmits a response indicating the identification information of the missing configuration data to the server 1 via the terminal 2 as a response to the confirmation command. (not shown).

(Example 2)
Next, with reference to FIG. 9, the operation of the communication system S in the second embodiment will be described. FIG. 9 is a sequence diagram showing the operation of the communication system S in the second embodiment. Embodiment 2, like Embodiment 1, is an example in which the IC module 3 executes a profile update process in response to an update command and determines that the configuration data of the profile is not insufficient. This embodiment differs from the first embodiment in that a proactive command (hereinafter referred to as an "IC command") sent from the module 3 to the terminal 2 is used. Note that the processing in step S111 and step S112 shown in FIG. 9 is similar to the processing in step S101 and step S102 shown in FIG.

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. (Step S4). Then, the IC module 3 sends SW91XX (an example of a response indicating update completion) to the terminal 2 as a response to the update command (a response addressed to the server 1), which indicates that there is an IC command to be sent from the IC module 3. (Step S113). Here, "XX" indicates the command length. Upon receiving the SW91XX from the IC module 3, the terminal 2 performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S114). Thereby, the server 1 can recognize that the update status of the target profile is update complete. Next, the terminal 2 transmits an IC command request command (command addressed to the IC module 3) to the IC module 3 in response to the SW91XX (step S115).

When the IC module 3 receives an IC command request command from the terminal 2, if the status information of the target profile indicates update completion, the IC module 3 sends a response to the request command (response addressed to the terminal 2) according to the request command. ), an IC command indicating that there has been a change in the profile configuration is transmitted to the terminal 2 (step S116). This IC command is a response addressed to the terminal 2 since the IC command request command was issued by the terminal 2. Thereby, the IC module 3 can notify the terminal 2 that there has been a change in the configuration of the target profile or the valid service. Therefore, it is possible to prevent the settings of the IC module 3 from becoming inconsistent with the settings of the communication module of the terminal 2, and prevent the authentication process from being executed correctly and the communication function becoming unusable. Can be done. For example, if the IC module 3 is set to provide full 5G service, but the communication module of terminal 2 is set to only support some functions, the IC module Although it is assumed that an authentication error may occur due to a conflict in the processing between the third party and the communication module, this can be prevented by the above-mentioned notification.

Note that the above IC command may include a request to reset the IC module 3. This allows the terminal 2 to reconfirm the configuration of the profile. In other words, when the IC module 3 is activated (for example, when power is supplied or reset), the terminal 2 checks what kind of function the IC module 3 has and performs the function according to the function of the IC module 3. However, even if the profile configuration changes from the time of activation (initial state) due to profile update processing, the profile configuration and service content in the IC module 3 will be changed again. can be confirmed by terminal 2.

Upon receiving the IC command from the IC module 3, the terminal 2 transmits a response transmission command to the IC module 3 (step S117). Upon receiving the response transmission command, the IC module 3 transmits SW9000 indicating normal termination to the terminal 2 (step S118). Note that, as shown within the broken line 51 in FIG. 9, the terminal 2 is configured to check the file configuration and service content of the IC module 3 by sending a file read command to the IC module 3 in response to the IC command. You may.

(Example 3)
Next, with reference to FIG. 10, the operation of the communication system S in the third embodiment will be described. FIG. 10 is a sequence diagram showing the operation of the communication system S in the third embodiment. The third embodiment is an example in which the IC module 3 executes a profile update process in response to an update command, and determines that the configuration data of the profile is insufficient. Note that the processing in step S121 and step S122 shown in FIG. 10 is similar to the processing in step S101 and step S102 shown in FIG. 8.

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. 6, and in this process, through steps S1 to S3, a state variable indicating that the target profile is being updated is stored in the NVM (Step S5). Then, the IC module 3 transmits SW6200 indicating a warning (an example of a response indicating that updating is in progress) to the terminal 2 as a response to the update command (step S123). Alternatively, in step S123, the IC module 3 acquires the identification information of the missing configuration data in the target profile from the NVM 34, and sends the SW 6200 indicating the warning along with the missing data list indicating the obtained identification information to the update command. It may also be transmitted to the terminal 2 as a response to the request. For example, the response is 1122 3344 6200 (1122 is the file ID of EF_AA, 3344 is the file ID of EF_BB), or 83 02 1122 85 02 5566 6200 in TLV format (83 is the file ID Tag, 85 is the ID tag of the key data).

Upon receiving the SW6200 from the IC module 3, the terminal 2 performs protocol conversion and transmits a response indicating a warning to the server 1 (step S124). Thereby, the server 1 can recognize that the update status of the target profile is being updated. Alternatively, upon receiving the missing data list and SW6200 from the IC module 3, the terminal 2 performs protocol conversion and transmits a response indicating a warning and including the missing data list to the server 1 (step S124). This allows the server 1 to recognize the missing configuration data in the target profile.

When the server 1 receives the response indicating the warning from the terminal 2, it transmits a command to confirm the missing configuration data in the target profile to the terminal 2 (step S125). Upon receiving the confirmation command from the server 1, the terminal 2 performs protocol conversion and transmits the confirmation command to the IC module 3 (step S126). Upon receiving the confirmation command from the terminal 2, the IC module 3 acquires the identification information of the missing configuration data in the target profile from the NVM 34 in response to the confirmation command, and collects the missing data indicating the obtained identification information. Along with the list, SW9000 indicating normal termination is transmitted to the terminal 2 as a response to the confirmation command (step S127). Upon receiving the missing data list and SW9000 from the IC module 3, the terminal 2 performs protocol conversion and transmits a response indicating normal termination and including the missing data list to the server 1 (step S128). Note that if the server 1 receives a response from the terminal 2 that indicates a warning and includes the missing data list, the processes in steps S125 to S128 are not performed.

Next, when the server 1 receives a response from the terminal 2 indicating normal termination and including the missing data list, the server 1 issues a missing data generation command (addressed to the IC module 3) of the configuration data identified by the identification information shown in the missing data list. command) to the terminal 2 (step S129). When the terminal 2 receives the missing data generation command from the server 1, it performs protocol conversion and transmits the missing data generation command to the IC module 3 (step S130). When the IC module 3 receives the missing data generation command from the terminal 2, it generates the missing configuration data and supplements it in the target profile in accordance with the missing data generation command. Then, the IC module 3 transmits SW9000 indicating normal termination to the terminal 2 as a response to the missing data generation command (response addressed to the server 1) (step S131). When the terminal 2 receives the SW9000 from the IC module 3, it performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S132). Due to this normal termination, the server 1 can recognize that the update status of the target profile has become updated.

(Example 4)
Next, with reference to FIG. 11, the operation of the communication system S in the fourth embodiment will be described. FIG. 11 is a sequence diagram showing the operation of the communication system S in the fourth embodiment. Embodiment 4, like Embodiment 3, is an example in which the IC module 3 executes a profile update process in response to an update command and determines that the configuration data of the profile is insufficient. This embodiment differs from the third embodiment in that an IC command sent from the module 3 to the server 1 is used. Note that the processing in step S141 and step S142 shown in FIG. 11 is similar to the processing in step S101 and step S102 shown in FIG. 8.

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. 6, and in this process, through steps S1 to S3, a state variable indicating that the target profile is being updated is stored in the NVM (Step S5). Then, the IC module 3 transmits SW91XX to the terminal 2 as a response to the update command (response addressed to the server 1), indicating that there is an IC command to be transmitted from the IC module 3 (step S143). When the terminal 2 receives the SW91XX from the IC module 3, it performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S144). At this point, the server 1 recognizes that the update status of the target profile is not in progress but as update complete. Next, the terminal 2 transmits an IC command request command to the IC module 3 in response to the SW91XX (step S145).

When the IC module 3 receives an IC command request command from the terminal 2, if the status information of the target profile indicates that it is being updated, the IC module 3 sends a response to the request command (response addressed to the terminal 2) according to the request command. ), an IC command indicating that the profile is being updated is transmitted to the terminal 2 (step S146). This IC command is a response addressed to the terminal 2 because the IC command request command was issued by the terminal 2, but the IC command includes information indicating that it is addressed to the server 1. Alternatively, in step S146, the IC module 3 acquires the identification information of the missing configuration data in the target profile from the NVM 34, and sends an IC command indicating that the profile is being updated together with a missing data list indicating the obtained identification information. may be sent to the terminal 2 as a response to the update command.

When the terminal 2 receives the IC command from the IC module 3, the terminal 2 performs protocol conversion and transmits the IC command to the server 1 because it includes information indicating that the command is addressed to the server 1 (step S147). Thereby, the server 1 can recognize that the update status of the target profile is being updated. Alternatively, upon receiving the missing data list and IC command from the IC module 3, the terminal 2 performs protocol conversion and transmits the missing data list and IC command to the server 1 (step S147). This allows the server 1 to recognize the missing configuration data in the target profile.

When the server 1 receives the IC command from the terminal 2, it transmits a response to the IC command (a response addressed to the IC module 3) to the terminal 2 (step S148). Upon receiving the response from the server 1, the terminal 2 performs protocol conversion and transmits a response transmission command to the IC module 3 (step S149). Upon receiving the response transmission command, the IC module 3 transmits SW9000 indicating normal termination to the terminal 2 (step S150).

Next, in response to the IC command, the server 1 transmits a command to confirm the missing configuration data in the target profile to the terminal 2 (step S151). Note that the processing from step S152 to step S154 shown in FIG. 11 is similar to the processing from step S126 to step S128 shown in FIG. On the other hand, in response to the missing data list and the IC command, the server 1 transmits a missing data generation command for the configuration data identified by the identification information shown in the missing data list to the terminal 2 (step S155). Note that the processing from step S156 to step S158 shown in FIG. 11 is similar to the processing from step S130 to step S132 shown in FIG. However, even if the server 1 receives the IC command, if the server 1 side is still issuing the profile, there is no need to send the confirmation command or the missing data generation command. In this case, these commands need only be sent when the server 1 has completed issuing the profile.

(Example 5)
Next, with reference to FIG. 12, the operation of the communication system S in the fifth embodiment will be described. FIG. 12 is a sequence diagram showing the operation of the communication system S in the fifth embodiment. Embodiment 5, like Embodiments 3 and 4, is an example in which the IC module 3 executes a profile update process in response to an update command and determines that the configuration data of the profile is insufficient. However, this embodiment differs from the third and fourth embodiments in that a response indicating an error that occurs in processing according to a function command is used. Note that the processing in step S161 and step S162 shown in FIG. 12 is similar to the processing in step S101 and step S102 shown in FIG.

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. 6, and in this process, through steps S1 to S3, a state variable indicating that the target profile is being updated is stored in the NVM (Step S5). Then, the IC module 3 transmits SW9000 indicating normal termination to the terminal 2 as a response to the update command (step S163). When the terminal 2 receives the SW9000 from the IC module 3, it performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S164). At this point, the server 1 recognizes that the update status of the target profile is not in progress but as update completed.

Thereafter, the terminal 2 transmits a function command (command addressed to the IC module 3) to the IC module 3 for executing a process related to a function that uses the specific file (step S165). Note that the function command may be transmitted from the server 1 in some cases. When the IC module 3 receives the function command from the terminal 2, it executes the process shown in FIG. 6, and in this process, an error occurs through the processes of step S1, step S8, and step S11. Then, the IC module 3 transmits SW6985 indicating an error (an error indicating a lack of a necessary file) to the terminal 2 as a response to the function command (a response addressed to the terminal 2) (step S166).

Next, the terminal 2 transmits a polling command (command addressed to the IC module 3) to the IC module 3 (step S167). The polling command is a command for periodically inquiring whether there is an IC command to be transmitted from the IC module 3 (that is, a command for causing SW91XX to be returned). Note that the terminal 2 may send the SW91XX back by sending a normal file read command instead of a polling command. Alternatively, upon receiving SW6985 indicating an error, the terminal 2 may transmit a response indicating an error (an example of a response indicating that updating is in progress) to the server 1.

When the IC module 3 receives the polling command from the terminal 2, it transmits SW91XX (an example of a response indicating that an update is in progress) indicating that there is an IC command to be transmitted from the IC module 3 to the terminal 2 (step S168). Upon receiving the SW91XX from the IC module 3, the terminal 2 transmits an IC command request command to the IC module 3 in accordance with the SW91XX (step S169).

Upon receiving the IC command request command from the terminal 2, the IC module 3 sends an IC command indicating that the profile is being updated to the terminal 2 as a response to the request command (response addressed to the terminal 2). (Step S170). This IC command includes information indicating that it is addressed to the server 1. Alternatively, in step S170, the IC module 3 acquires the identification information of the missing configuration data in the target profile from the NVM 34, and sends an IC command indicating that the profile is being updated together with the missing data list indicating the obtained identification information. may be sent to the terminal 2 as a response to the update command. Note that the processing in steps S171 to S182 shown in FIG. 12 is similar to the processing in steps S147 to S158 shown in FIG.

(Example 6)
Next, with reference to FIG. 13, the operation of the communication system S in the sixth embodiment will be described. FIG. 13 is a sequence diagram showing the operation of the communication system S in the sixth embodiment. Embodiment 6, like Embodiments 3 to 5, is an example in which the IC module 3 executes a profile update process in response to an update command and determines that the configuration data of the profile is insufficient. However, this embodiment differs from the third to fifth embodiments in that the confirmation command is sent when the server 1 completes issuing the profile. Note that the processing from step S191 to step S194 shown in FIG. 13 is similar to the processing from step S161 to step S164 shown in FIG.

After that, when the issuance of the profile is completed, the server 1 transmits a confirmation command (command addressed to the IC module 3) for the missing configuration data in the profile to the terminal 2 (step S195). Upon receiving the confirmation command from the server 1, the terminal 2 performs protocol conversion and transmits the confirmation command to the IC module 3 (step S196).

Upon receiving the confirmation command from the terminal 2, the IC module 3 determines whether or not the configuration data of the profile is insufficient in accordance with the confirmation command. When the configuration data of the profile is insufficient, the IC module 3 acquires the identification information of the missing configuration data from the NVM 34 and indicates normal completion along with the missing data list indicating the acquired identification information. SW9000 is sent to terminal 2 as a response to the confirmation command (response addressed to server 1) (step S197). Note that the processing in steps S198 to S202 shown in FIG. 13 is similar to the processing in steps S154 to S158 shown in FIG.

(Example 7)
Next, with reference to FIG. 14, the operation of the communication system S in the seventh embodiment will be described. FIG. 14 is a sequence diagram showing the operation of the communication system S in the seventh embodiment. Embodiment 7, like Embodiments 3 to 6, is an example in which the IC module 3 executes a profile update process in response to an update command and determines that the configuration data of the profile is insufficient. However, this embodiment differs from Embodiments 3 to 6 in that Privilege 3 is newly assigned to application App 1 defined in GlobalPlatform by the update command. Note that the status information (Life Cycle Status) of the application App1's profile before updating is "PERSONALIZED" (synonymous with profile update completion), and Privilege1, Privilege2, and Privilege4 are assigned as the functions of the application App1. Assume that the profile of application App1 already includes Key1-1, Key1-2, Key1-3, and Key2 used in the function of Privilege1 as specific data. However, it is assumed that the profile of application App1 does not include Key3, which is required to execute the function of Privilege3.

In FIG. 14, the server 1 transmits a target profile update command (an update command for granting Privilege3 to the application App1) to the terminal 2 (step S211). Upon receiving the update command from the server 1, the terminal 2 performs protocol conversion and transmits the update command to the IC module 3 (step S212).

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. A state variable (Life Cycle States = SELECTABLE) indicating that the profile of the application App1 is being updated is stored in the NVM 34 (Step S5). Then, the IC module 3 transmits SW63C1 indicating a warning (an example of a response indicating that updating is in progress) to the terminal 2 as a response to the update command (step S213). SW63C1 indicates that one piece of data (Key3) is missing. When the terminal 2 receives the SW63C1 from the IC module 3, it performs protocol conversion and transmits a response indicating a warning to the server 1 (step S214).

When the server 1 receives the response indicating the warning from the terminal 2, it transmits a command to confirm the missing configuration data in the target profile to the terminal 2 (step S215). Upon receiving the confirmation command from the server 1, the terminal 2 performs protocol conversion and transmits the confirmation command to the IC module 3 (step S216). Upon receiving the confirmation command from the terminal 2, the IC module 3 acquires the identification information of the missing configuration data (Key 3) in the target profile from the NVM 34 in response to the confirmation command, and uses the acquired identification information. SW9000 indicating normal termination is sent to the terminal 2 as a response to the confirmation command together with the missing data list shown in FIG. Upon receiving the missing data list and SW9000 from the IC module 3, the terminal 2 performs protocol conversion and sends a response indicating normal termination and including the missing data list to the server 1 (step S218). Note that if the server 1 knows that Key3 is required for Privilege3, the processes in steps S215 to S218 are not performed.

Next, upon receiving the response from the terminal 2, the server 1 transmits a missing data generation command for the configuration data (Key 3) identified by the identification information shown in the missing data list to the terminal 2 (step S219). Upon receiving the missing data generation command from the server 1, the terminal 2 performs protocol conversion and transmits the missing data generation command to the IC module 3 (step S220). When the IC module 3 receives the missing data generation command from the terminal 2, it generates the missing configuration data (Key 3) according to the missing data generation command and fills it into the target profile. Then, the IC module 3 transmits SW9000 indicating normal termination to the terminal 2 as a response to the missing data generation command (step S221). When the terminal 2 receives the SW9000 from the IC module 3, it performs protocol conversion and transmits a response indicating normal termination to the server 1 (step S222).

(Example 8)
Next, the operation of the communication system S in the eighth embodiment will be described with reference to FIGS. 15 and 16. FIG. 15 is a flowchart showing an example of main processing when a command is received by the IC module 3 in the eighth embodiment. FIG. 16 is a sequence diagram showing the operation of the communication system S in the eighth embodiment. Embodiment 8, like Embodiment 7, is an example of newly assigning Privilege3 to application App1 defined in GlobalPlatform using an update command, but differs from Embodiment 7 in that the profile update process ends with an error. is different. Note that in FIG. 15, the same processes as those in FIG. 6 are denoted by the same reference numerals, and redundant explanation will be omitted. Furthermore, the processes in step S231 and step S232 shown in FIG. 16 are similar to the processes in step S211 and step S212 shown in FIG.

When the IC module 3 receives the update command from the terminal 2, it executes the process shown in FIG. 21). Then, as a result of the check in step S21, if the status information indicates update completion (step S21: update complete), the IC module 3 proceeds to step S22, whereas if the status information indicates update is in progress (step S21: update), the IC module 3 proceeds to step S22. middle), proceed to step S23. In step S22, the IC module 3 determines whether configuration data is insufficient due to the update of the target profile. When the IC module 3 determines that the configuration data is not insufficient due to the update of the target profile (step S22: NO), the process proceeds to step S23, whereas when it is determined that the configuration data is insufficient due to the update (step S22: YES). , proceed to step S25. In step S23, the IC module 3 executes update processing for the target profile. Next, the IC module 3 generates a normal response as a response to the update command (step S24), and transmits the generated response to the terminal 2. On the other hand, in step S25, the IC module 3 generates a response indicating an error as a response to the update command, and transmits the generated response to the terminal 2.

The example in FIG. 16 shows a case where it is determined that the configuration data is insufficient in step S22, so the status information (Life Cycle Status) of the profile of the application App1 remains “PERSONALIZED” (updated). Privilege3 is not granted. In FIG. 16, the IC module 3 transmits SW6A88 indicating an error to the terminal 2 as a response to the update command (step S233). SW6A88 indicates that reference data is insufficient. Upon receiving SW6A88 from the IC module 3, the terminal 2 performs protocol conversion and transmits a response indicating an error to the server 1 (step S234). Note that the processing from step S235 to step S242 shown in FIG. 16 is similar to the processing from step S215 to step S222 shown in FIG. In the example of FIG. 16, when the server 1 receives the response in step S242, Privilege3 has not been granted to the application App1 yet, so the update command is sent to the terminal 2 again (steps S243 and S244). , Privilege3 will be granted to application App1.

As described above, according to the above embodiment, it is determined in response to a profile update command whether or not the configuration data of the profile is insufficient, and based on the determination result, the update of the profile is completed or updated. Since the configuration is configured to store status information indicating the update command and return a response to the update command, it is possible to efficiently manage the update status of the profile and reduce the possibility that a predetermined function becomes unusable.

For example, although the IC module 3 supported only some functions of next-generation services such as 5G, it is conceivable that the communication environment will be completed and the IC module 3 will provide full services. In this case, the next generation service provided by the IC module 3 can be switched to provide some or all of the functions in the service table above, but the files and key data required to switch the function must also be issued. Even if a full service is provided and only some functions are supported, some profiles have already generated the files and key data required for the full service, while others have not. It is assumed that Even in such a case, according to the embodiment described above, the server 1 can grasp the profile contents in the IC module 3, so that it is possible to prevent the profile from being insufficiently updated.

In the above embodiment, the IC module 3 built into the terminal 2 has been described as an example of the electronic information storage medium of the present invention. May be applied.

1 Server 2 Terminal 3 IC module 11 Communication section 12 Storage section 13 Control section 21 I/F section 22 Wireless communication section 23 Storage section 24 Control section 31 I/F section 32 RAM
33 ROM
34 NVM
35 CPUs
S Communication system

Claims (10)

An electronic information storage medium capable of storing profiles used for processing related to each of a plurality of predetermined functions,
first receiving means for receiving a profile update command from an external device;
a first determining means for determining whether configuration data of the profile is insufficient in response to the update command;
storage means for storing status information indicating whether the update of the profile is completed or in progress based on a determination result by the first determination means;
a first response means for transmitting a response to the update command to the external device;
a second receiving means for receiving a function command for executing a process related to any one of the plurality of functions from the external device;
checking means for checking the status information in response to the function command;
a second step for determining whether or not configuration data of a profile necessary for executing the first function indicated by the function command is insufficient when the check result by the check means indicates that the status information is being updated; Judgment means;
If the second determination means determines that there is no shortage, execute a process according to the function command, and if the second determination means determines that there is a shortage, indicate an error. a second response means for transmitting a response to the functional command to the external device;
An electronic information storage medium comprising: 2. When the first determining means determines that the profile is insufficient, the first responding means transmits the response indicating that the profile is being updated to the external device. electronic information storage media. third receiving means for receiving a confirmation command for the missing configuration data from the external device;
Acquisition means for acquiring identification information of the missing configuration data in response to the confirmation command;
a third response means for transmitting a response to the confirmation command indicating the identification information acquired by the acquisition means to the external device;
The electronic information storage medium according to claim 2, further comprising:. Further comprising an acquisition means for acquiring identification information of the missing configuration data when it is determined by the first determination means that the configuration data is insufficient,
2. The electronic information storage medium according to claim 1, wherein the first response means transmits the response indicating the identification information acquired by the acquisition means to the external device. fourth receiving means for receiving a generation command for the configuration data identified by the identification information from the external device;
generation means for generating the missing configuration data in response to the generation command;
The electronic information storage medium according to claim 3 or 4, further comprising: processing means for executing processing according to the function command when the check result by the checking means indicates that the status information indicates update completion;
The electronic information storage medium according to any one of claims 1 to 5, further comprising:. The external device is a terminal capable of communicating with the server via a network,
The update command is generated by the server, transmitted to the terminal, and then transmitted from the terminal to the electronic information storage medium and received by the first receiving means,
The first response means transmits the response indicating that there is a proactive command to be transmitted from the electronic information storage medium to the terminal,
fifth receiving means for receiving the proactive command request command generated by the terminal;
When the status information indicates update completion, as a response to the request command,
fourth response means for transmitting the proactive command indicating that there has been a change in the configuration of the profile to the terminal;
The electronic information storage medium according to claim 1, further comprising: The external device is a terminal capable of communicating with a server,
The update command is generated by the server, transmitted to the terminal, and then transmitted from the terminal to the electronic information storage medium and received by the first receiving means,
The first response means transmits the response indicating that there is a proactive command to be transmitted from the electronic information storage medium to the terminal,
fifth receiving means for receiving the proactive command request command generated by the terminal;
fifth response means for transmitting the proactive command indicating that the profile is being updated to the terminal as a response to the request command when the status information indicates that the profile is being updated;
The electronic information storage medium according to claim 1, further comprising: A computer included in an electronic information storage medium capable of storing profiles used for processing each of a plurality of predetermined functions,
first receiving means for receiving a profile update command from an external device;
a first determining means for determining whether configuration data of the profile is insufficient in response to the update command;
storage means for storing status information indicating whether the update of the profile is completed or in progress based on a determination result by the first determination means;
a first response means for transmitting a response to the update command to the external device;
a second receiving means for receiving a function command for executing a process related to any one of the plurality of functions from the external device;
checking means for checking the status information in response to the function command;
a second step for determining whether or not configuration data of a profile necessary for executing the first function indicated by the function command is insufficient when the check result by the check means indicates that the status information is being updated; Judgment means;
If the second determination means determines that there is no shortage, execute a process according to the function command, and if the second determination means determines that there is a shortage, indicate an error. A program that functions as a second response means for transmitting a response to the function command to the external device . A profile update status notification method executed by a computer included in an electronic information storage medium capable of storing profiles used for processing related to each of a plurality of predetermined functions, the method comprising:
receiving a profile update command from an external device;
a first determination step of determining whether configuration data of the profile is insufficient in response to the update command;
storing in a storage means status information indicating that the profile has been updated or is being updated based on the determination result in the first determination step;
transmitting a response to the update command to the external device;
receiving from the external device a function command for executing a process related to any one of the plurality of functions;
a checking step of checking the state information in response to the function command;
If the check result in the checking step indicates that the status information is being updated, a second step of determining whether or not configuration data of a profile necessary for executing the first function indicated by the function command is insufficient. a determination step;
If it is determined that there is no shortage in the second determination step, a process according to the function command is executed, and if it is determined that there is a shortage in the second determination step, an error is indicated. , transmitting a response to the function command to the external device;
A profile update status notification method comprising:

Images