NON-CONTACT IC CARD

Abstract: A memory (1) in a non contact type IC card (100) includes a data protection region (B2) storing data requiring security and an region (B1) storing other data. A main control circuit (2) generates data to be stored and designates a location for data storage in the region (B1) or the data protection region (B2) according to a content of the data. An address non selecting circuit (4) selects whether the generated data is to be written into the location in the data protection region (B2) designated by the main control circuit (2) according to a state of a state setting circuit (3).

Description: Technical Field The present invention relates to a non contact type IC card, and more particularly to a non contact type IC card allowing the protection of data stored in the card and the prevention of data falsification. Background Art A non contact type IC card performing data communication with an interrogator installed outside has been used conventionally. The examples include a ticket for ski lift, a seasonal ticket for the transportation and a prepaid card. Fig. 7 is a block diagram schematically showing a basic structure of a conventional non contact type IC card 900. Conventional non contact type IC card 900 shown herein, which is an IC card performing data communication in a signal superposing manner, supplies power and transmits/receives information using a signal(s) having one or more frequencies received from the interrogator not shown. Conventional non contact type IC card 900 as shown in Fig. 7 is an example of non contact type IC cards utilizing a single frequency and includes a tuning circuit 20, a rectifying circuit 21, an amplifying/demodulating circuit 22, a modulating/amplifying circuit 23 and an SP/PS conversion circuit 24. Tuning circuit 20 includes a coil L functioning as an antenna and a capacitor C0. Rectifying circuit 21 rectifies a signal received at tuning circuit 20, thereby generates and supplies the power to each part of non contact type IC card 900. Amplifying/demodulating circuit 22 amplifies and demodulates data Q from an interrogator received at tuning circuit 20. A signal output from amplifying/demodulating circuit 22 is SP-converted by SP/PS conversion circuit 24 and then is output to a main control circuit 2 described below. With reference to Fig. 7, conventional non contact type IC card 900 further includes main control circuit 2 and a memory 1. Main control circuit 2 processes a signal output from SP/PS conversion circuit 24. Main control circuit 2 generates data DA to be stored in memory 1 described below and designates a location (address) of memory 1 to which data DA is to be written. Memory 1 includes normal data storage region B1 and data protection region B2. Memory 1 receives data DA via a data line L2 as well as an address signal AD via an address line L1 indicating an address (a location to which data is to be written) to which data DA is to be written. Here, data stored in data protection region B2 particularly requires security in order to guarantee a normal data communication and whose rewriting is inhibited. An example of such data is an ID number of an ID card holding the personal information. In addition, main control circuit 2 reads data from designated region B1 or data protection region B2 of memory 1 according to the contents of data Q received from the interrogator and generates a response data A based on the read data. Response data A is PS-converted at SP/PS conversion circuit 24, processed at modulating/amplifying circuit 23 and then transmitted to the interrogator via coil L forming the antenna. In conventional non contact type IC card 900, however, the rewriting (falsification) of stored data in memory 1 can be easily performed from a device other than the interrogator once the protocol of the data communication with the interrogator is decoded, therefore the security cannot be guaranteed. From DE 42 05 567 A1 a non contact type IC card according to the preamble of claims 1 to 3 is known. Hence an object of the present invention is to provide a non contact type IC card allowing the prevention of rewriting of a storage region in which data requiring security is stored and to provide a highly reliable non contact type IC card through the control of rewriting of the storage region in which data requiring security is stored. The problem is solved by a non contact type IC card according to claims 1,2 or 3. A further development of the invention is described in the dependent claim. Therefore a main advantage of the present invention lies in the prevention of falsification of storage contents through the control of rewriting of data stored in a storage portion storing data requiring security. Brief Description of the Drawings Fig. 1 shows a structure of a main portion of a non contact type IC card 100 according to a first embodiment of the present invention. Fig. 2 shows a structure of a main portion of a non contact type IC card 200 according to a second embodiment of the present invention. Fig. 3 shows a structure of a main portion of a non contact type IC card 300 according to a third embodiment of the present invention. Fig. 4 shows a structure of a main portion of a non contact type IC card 400 according to a fourth embodiment of the present invention. Fig. 5 shows a structure of a main portion of a non contact type IC card 500 according to a fifth embodiment of the present invention. Fig. 6 shows a structure of a main portion of a non contact type IC card 600 according to a sixth embodiment of the present invention. Fig. 7 is a diagram schematically showing a structure of a conventional non contact type IC card 900. Best Modes for Carrying Out the Invention First Embodiment The first embodiment of the present invention allows the prevention of rewriting of data previously stored in a data protection region by controlling an address to which data is to be written, at data writing for the data protection region of a memory in a non contact type IC card. Fig. 1 shows a structure of a main portion of a non contact type IC card 100 according to the first embodiment of the present invention. Components similar to those in conventional non contact type IC card 900 shown in Fig. 7 are denoted by the same reference numbers and same reference characters and the description thereof will not be repeated. Here, data transmission of the non contact type IC card adopting the present invention may be either in a signal superposing method or in a signal separating method. Non contact type IC card 100 shown in Fig. 1 differs from conventional non contact type IC card 900 in that card 100 includes a state setting circuit 3 and an address non selecting circuit 4 controlling a write address designated at data writing for data protection region B2 of memory 1. With reference to Fig. 1, the structure of non contact type IC card 100 according to the first embodiment of the present invention will be described. Address non selecting circuit 4 receives a write enable signal RE supplied from main control circuit 2 and an address signal AD from an address line L1 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on a data line L2 is to be written, and write enable signal RE designates a data writing operation to data protection region B2. Address non selecting circuit 4 being controlled by state setting circuit 3 described below outputs an address selecting signal AC according to address signal AD. State setting circuit 3 controls address non selecting circuit 4 described above. Address selecting signal AC output from address non selecting circuit 4 changes its state based on a state (active state/inactive state) of state setting circuit 3. Specifically, when state setting circuit 3 is in an active state, an output address selecting signal AC selects a location designated by address AD as a location to which data is to be written, whereas when state setting circuit 3 is in an inactive state, an output address selecting signal AC inhibits the writing to the location designated by address signal AD (non select state). Data DT will be written into a location in data protection region B2 corresponding to and based on address selecting signal AC output from address non selecting circuit 4. Next, an operation of non contact type IC card 100 according to the first embodiment of the present invention will be described. First, when state setting circuit 3 is in an active state, address non selecting circuit 4 having received write enable signal RE and address signal AD outputs address selecting signal AC selecting a location designated by the address signal AD. In this case data DT will be written into the corresponding location in data protection region B2. On the other hand, when stage setting circuit 3 is in an inactive state, address non selecting circuit 4 having received write enable signal RE and address signal AD outputs address selecting signal AC turning the location designated by the address signal AD to a non select state. In this case data DT is not written into data protection region B2. One example of such state setting circuit 3 uses a fuse. For example, when a fuse is used, any numbers of data can be written into data protection region B2 before the fuse blow, however, after the fuse blow, data in data protection region B2 can not be rewritten. The methods of blowing the fuse includes high voltage application, laser cutting, induction heating or the like. In other words, by controlling the state of state setting circuit 3, non contact type IC card 100 can inhibit the access to data protection region B2 for data rewriting after the data requiring security is stored in data protection region B2 (for simplicity this state is referred to as protection data storage state). Thus in non contact type IC card 100, as the address selection for the data protection region can be controlled at the data writing operation, the falsification of data previously stored in the data protection region can be prevented. Second Embodiment Similar to the first embodiment of the present invention, the non contact type IC card according to the second embodiment of the present invention allows the prevention of rewriting of data stored in the data protection region by controlling an address to which the data is to be written at the time of data writing to the data protection region in the memory. Fig. 2 shows a structure of a main portion of a non contact type IC card 200 according to the second embodiment of the present invention and components similar to those in non contact type IC card 100 shown in Fig. 1 are denoted by the same reference numbers and same reference characters and the description thereof will not be repeated. Non contact type IC card 200 shown in Fig. 2 is different from conventional non contact type IC card 900 in that it includes a command detection circuit 5 and an address non selecting circuit 6 controlling a designated address to which data is to be written at the time of data writing to the data protection region of the memory, and controls these circuits by a command output from a main control circuit 12. With reference to Fig. 2, the structure of non contact type IC card 200 according to the second embodiment of the present invention will now be described. Address non selecting circuit 6 receives an address signal AD via an address line L1 as an input. Here, address signal AD indicates a location in data protection region B2 to which data DT on a data line L2 is to be written. Address non selecting circuit 6 controlled by command detection circuit 5 described below outputs address selecting signal AC according to the address signal AD. Command detection circuit 5 receives an address control command COM output from main control circuit 12 and controls address non selecting circuit 6. Here, address control command COM is a command permitting or inhibiting a data writing operation to data protection region B2 based on the address signal AD. Address selecting signal AC output from address non selecting circuit 6 changes its state according to a state of command detection circuit 5. Specifically, when command detection circuit 5 detects a writing permitted state of a data protection region B2, an address selecting signal AC selecting a location designated by address AD as a location to which data is to be written is output. On the other hand, if data protection region B2 is detected to be in a writing inhibited state, address selecting signal AC turning a location designated by address signal AD to a non select state is output. Based on the address selecting signal AC supplied from address non selecting circuit 6, data DT is written into a corresponding location in data protection region B2. Next an operation of non contact type IC card 200 according to the second embodiment of the present invention will be described. When an address control command COM permitting the data writing is supplied from main control circuit 12, and is detected by command detection circuit 5, address non selecting circuit 6 outputs an address selecting signal AC selecting a location designated by the address signal AD. In this case data DT is written into a corresponding location in data protection region B2. On the other hand, when an address control command COM inhibiting the data writing is supplied from main control circuit 12, and is detected by command detection circuit 5, address non selecting circuit 6 outputs an address selecting signal AC turning the location designated by the address signal AD to a non select state. In this case data DT is not written into data protection region B2. Thus, non contact type IC card 200 allows the adjustment of storage of data requiring security in data protection region B2 (turning data protection region B2 to the protection data storage state) and inhibiting the access to data protection region B2 for the data rewriting, through the control of command detection circuit 5 based on a command output from main control circuit 12. As non contact type IC card 200 allows the control of selection of address of the data protection region at the data writing operation, the falsification of data previously stored in the data protection region can be prevented. Third Embodiment The third embodiment of the present invention allows the prevention of rewriting of data once stored in the data protection region in the non contact type IC card through the access control for the data protection region according to the frequency for data communication. Fig. 3 shows a structure of a main portion of a non contact type IC card 300 according to the third embodiment of the present invention, wherein components similar to those in non contact type IC card 100 shown in Fig. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated. Non contact type IC card 300 shown in Fig. 3 is different from conventional non contact type IC card 900 in that it includes a frequency detection circuit 7 and an address non selecting circuit 8. With reference to Fig. 3, the structure of non contact type IC card 300 according to the third embodiment of the present invention will now be described. Frequency detection circuit 7 detects a frequency of a radio wave received by tuning circuit 20 and includes a band pass filter and a switching circuit inside not shown. When a carrier frequency of a received radio wave is a predetermined frequency F1, frequency detection circuit 7 detects the reception of an intended radio wave. Address non selecting circuit 8 receives address signal AD via address line L1 and a write enable signal RE from main control circuit 2 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on data line L2 is to be written. Address non selecting circuit 8 controlled by frequency detection circuit 7 outputs address selecting signal AC according to address signal AD. More specifically, when frequency detection circuit 7 detects the reception of an intended radio wave (with predetermined frequency F1), an address selecting signal AC selecting a location designated by address signal AD as a location to which data is to be written is output, and otherwise (when received radio wave has a frequency other than the predetermined frequency F1), an address selecting signal AC turning the location designated by the address signal AD to a non select state is output. Based on the address selecting signal AC, data DT is written into the corresponding location in data protection region B2. With reference to Fig. 3, an operation of non contact type IC card 300 will be described specifically. As described above, when a radio wave with a carrier frequency F1 is received, address non selecting circuit 8 outputs an address selecting signal AC selecting a location designated by address signal AD. In this case data DT is written into the corresponding location in data protection region B2. On the other hand, when a radio wave with a carrier frequency being an original frequency F0 different from F1 is received, address non selecting circuit 8 outputs an address selecting signal AC turning the location designated by address signal AD to a non select state. In this case data DT is not written into data protection region B2. In other words, non contact type IC card 300 allows the adjustment of the storage of data requiring security in data protection region B2 (turning data protection region B2 to the protection data storage state) and inhibiting the access to data protection region B2 for the data rewriting, through the use of different frequencies. Thus, as a non contact type IC card 300 allows the access control for the data protection region according to the frequency of radio wave for the data communication, the falsification of data previously stored in the data protection region can be prevented. Fourth Embodiment The fourth embodiment of the present invention allows the prevention of data falsification, which is the object of the present invention, in the non contact type IC card by controlling the data to be written at the data writing to the data protection region in the memory. Fig. 4 shows a structure of a main portion of a non contact type IC card 400 according to the fourth embodiment of the present invention, wherein components similar to those in non contact type IC card 100 shown in Fig. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated. Non contact type IC card 400 shown in Fig. 4 is different from conventional non contact type IC card 900 in that it includes an input data fixing circuit 9 controlling data to be written into data protection region B2 of memory 1. With reference to Fig. 4, the structure of non contact type IC card 400 according to the fourth embodiment of the present invention will be described. Input data fixing circuit 9 fixes a state of each location in data protection region B2 of memory 1. Input data fixing circuit 9 receives data DT1 via a data line L2 as an input, converts data DT1 and outputs data DT2. Data DT2 is data to be written into data protection region B2. A value of data DT2 output from input data fixing circuit 9 is determined based on an initial state of data protection region B2. When states of all bits in data protection region B2 are "1", for example, data DT2 always takes a value of the reverse polarity, in this case "0". Hence, when main control circuit 2 outputs data DT1 corresponding to the value "1", the data writing to data protection region B2 will not be performed. With reference to Fig. 4, an operation of non contact type IC card 400 will be described specifically. Assume that an initial state of each bit in data protection region B2 in memory 1 is set to "1" (the state of bit to "1111"). In this case, input data fixing circuit 9 receiving data DT1 outputs only the data DT2 of "0" for each bit. First, data requiring security will be written into data protection region B2 (protection data storage state). Here, assume that the protection data storage state is "1100". As described above, data DT2 output from input data fixing circuit 9 takes the value "0". Therefore, the bit once takes the state "0" cannot be returned to the state "1". As a result, thereafter, the state of data protection region B2 ("1100") cannot be rewritten to "1101", for example. Thus, data protection region B2 of non contact type IC card 400 functions as an OTP ROM (a non volatile memory allowing only one rewriting) and once data is stored in the data protection region, trial of the data rewriting is highly likely to result in a failure of an intended data setting. Thus, as described above, as non contact type IC card 400 allows the control of data to be written into the data protection region at the data writing operation, the rewriting of data once stored in the data protection region can be prevented. Fifth Embodiment The fifth embodiment of the present invention allows the prevention of data falsification, which is the object of the present invention, in the non contact type IC card, by controlling an address to which data is to be written at the data writing operation to the data protection region of the memory. Fig. 5 shows a structure of a main portion of a non contact type IC card 500 according to the fifth embodiment of the present invention, wherein components similar to those in non contact type IC card 100 shown in Fig. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated. Non contact type IC card 500 shown in Fig. 5, is different from conventional non contact type IC card 900 in that it includes a state setting circuit 10 and an address non selecting circuit 11 controlling a designated address to which data is to be written at the writing to data protection region B2 of memory 1. With reference to Fig. 5, the structure of non contact type IC card 500 according to the fifth embodiment of the present invention will be described. Address non selecting circuit 11 receives a write enable signal RE output from main control circuit 2 and address signal AD via address line L1 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on data line L2 is to be written. Address non selecting circuit 11 controlled by state setting circuit 10 described below, outputs address selecting signal AC according to address signal AD. State setting circuit 10 controls address non selecting circuit 11 described above. Address selecting signal AC output from address non selecting circuit 11 changes its state according to a state (active state/inactive state) of state setting circuit 10. More specifically, when state setting circuit 10 is in an active state, address selecting signal AC selecting a location designated by address signal AD as a location to which data is to be written is output, and when state setting circuit 10 is in an inactive state, address selecting signal AC selecting a location other than the location designated by address signal AD (or selecting neither of the location) is output. Based on the address selecting signal AC output from address non selecting circuit 11, data DT is written into the corresponding location in data protection region B2. Next, an operation of non contact type IC card 500 according to the fifth embodiment of the present invention will be described. First, when state setting circuit 10 is in an active state, address non selecting circuit 11 having received write enable signal RE and address signal AD outputs an address selecting signal AC selecting a location designated by address signal AD. In this case, data DT is written into the corresponding location in data protection region B2. On the other hand, when state setting circuit 10 is in an inactive state, address non selecting circuit 11 having received write enable signal RE and address signal AD outputs an address selecting signal AC selecting a location other than the location designated by address signal AD (or selecting neither of the locations). In this case, data DT is not written into the intended location of data protection region B2. As described above, an example of such state setting circuit 10 includes a fuse. Thus even if the rewriting operation occurs, non contact type IC card 500 can inhibit the rewriting of the intended data, after the data requiring security is stored in data protection region B2 (protection data storage state), by controlling the state of state setting circuit 10. Thus, as non contact type IC card 500 allows the control of address selection in the data protection region at the data writing operation, rewriting and use of the data previously stored in the data protection region can be prevented. Sixth Embodiment According to the sixth embodiment of the present invention, a non contact type IC card includes an OTP ROM (an non volatile memory allowing only one rewriting) as a storage medium corresponding to the data protection region. Fig. 6 shows a structure of a main portion of a non contact type IC card 600 according to the sixth embodiment of the present invention, wherein components similar to those in non contact type IC card 100 shown in Fig. 1 are denoted by the same reference characters and the description thereof will not be repeated. Non contact type IC card 600 shown in Fig. 6 is different from conventional non contact type IC card 900 in that it includes a memory 15 and a memory 16 instead of memory 1. With reference to Fig. 6, the structure of non contact type IC card 600 according to the sixth embodiment of the present invention will be described. Memory 15 is a storage medium storing rewritable data whereas memory 16 is a storage medium storing data requiring the security. Specifically, memory 15 includes a non volatile memory allowing rewriting as required such as an EEPROM and a flash memory, whereas memory 16 includes a memory allowing only one rewriting such as an EPROM. Next, an operation of non contact type IC card 600 according to the sixth embodiment of the present invention will be described. For simplicity, in the description, memory 16 is assumed to be an EPROM. Data to be held that is output from main control circuit 2 is stored in memory 15 or memory 16. In this case, as memory 16 is an EPROM, once electric charge is stored in a memory cell not shown, the electric charge cannot be discharged until it is exposed to ultraviolet light. Therefore, assuming that the state of a memory cell with electric charge stored is called state 1 and the discharged state of the memory cell is called state 0, after the encapsulation of IC card 600, in memory 16, a memory cell in the state 0 can be charged to be the state 1, however, a memory cell in the state 1 cannot be rewritten to be the state 0. Therefore, it is highly unlikely that the trial of rewriting of data once stored in memory 16 achieves the intended data rewriting. Thus, with the use of an OTPROM as a medium for storing data to be protected, non contact type IC card 600 allows the suppression of data falsification to an extremely low level. As can be seen from the foregoing, according to the present invention, the rewriting of storage region in which data requiring the security is stored can be prevented through the control of data rewriting. In addition, according to the present invention, as the rewriting can be controlled with respect to the storage region in which data requiring the security is stored, the reliability of the non contact type IC card can be dramatically improved.

Claims: A non contact type IC card performing a data communication based on an externally applied radio wave signal, comprising: receiving means (20) receiving said radio wave signal; a rectifying circuit (21) connected to said receiving means (20); first storing means (B2) storing data requiring security; second storing means (B1) storing data other than said data to be stored in said first storing means (B2); control means (2) generating said data based on the radio wave signal received at said receiving means (20) and controlling for writing said data into a location in one of said first storing means (B2) and said second storing means (B1) according to a content of said generated data; and selection means (8) selecting whether said data is to be written into said location in said first storing means (B2) designated by said control means (2) characterized by detection means (7) detecting a frequency of the radio wave signal received by said receiving means (20), wherein said selection means (8) selects whether said data is to be written into said location based on a result of the detection by said detection means (7); and wherein when said receiving means (20) receives said radio wave signal and the frequency of said radio wave signal is detected to be a first frequency by said detection means (7), said data is written into said location in said first storing means (B2) designated by said control means (2), whereas when the frequency of said radio wave signal is detected to be a second frequency other than said first frequency by said detection means (7), said data is not written into said location in said first storing means (B2) designated by said control means (2). A non contact type IC card responsive to externally applied data for performing data communication, comprising: first storing means (B2) storing data requiring security; second storing means (B1) storing data other than said data to be stored in said first storing means (B2); and control means (2) controlling for writing said data into a location in one of said first storing means (B2) and said second storing means (B1) according to a content of said data; characterized by data fixing means (9) receiving said data to be written into said location in said first storing means (B2) designated by said control means (2) and supplying a particular data; wherein only said particular data supplied from said data fixing means (9) is written into said location in said first storing means (B2) designated by said control means (2), and wherein a value of said particular data supplied from said data fixing means (9) is a value determined by an initial state of said first storing means (B2) and wherein writing to said first storing means (B2) is inhibited once said particular data have been written to said first storing means. A non contact type IC card responsive to externally applied data for performing data communication, comprising: first storing means (B2) storing data requiring security; second storing means (B1) storing data other than said data to be stored in said first storing means (B2); control means (2) controlling for writing said data into a location in one of said first storing means (B2) and said second storing means (B1) according to a content of said data; selection means (11) selecting whether said data is to be written into said location in said first storing means (B2) designated by said control means (2); and state setting means (10) controlling the selection by said selection means (4); characterized in that said data is written into said location in said first storing means (B2) designated by said control means (2) when said state setting means (10) is in a first state, whereas, said data is written into a location other than said location in said first storing means (B2) designated by said control means (2) when said state setting means (10) is in a second state other than the first state. The non contact type IC card according to claim 3, wherein said state setting means (3, 10) includes a fuse, said fuse is in an electrically conductive state in said first state and said fuse is in an electrically non conductive state in said second state.

Inventors: CHIMURA SHIGEMI, HIKITA JUNICHI, IKEFUJI YOSHIHIRO, TAGUCHI HARUO, CHIMURA, SHIGEMI, HIKITA, JUNICHI, IKEFUJI, YOSHIHIRO, TAGUCHI, HARUO, HIKITA, Junichi, Rohm Co., Ltd
Applicants: ROHM CO LTD, ROHM CO., LTD.
Application year: 1998
Main classification: G06K19
IPC codes: G06K19, G06F21, G07F7, G06F12, G06K17