Source: https://patents.google.com/patent/CN1820260B/en
Timestamp: 2020-05-30 18:36:11
Document Index: 195082868

Matched Legal Cases: ['art\n1002', 'art\n1003', 'art\n1130', 'art\n1140', 'art 1002', 'art 1001', 'art 1001', 'art 1001', 'art 1001', 'art 1001', 'art 1002', 'art 1001', 'art 1102', 'art 1103', 'art 1102', 'art 1102', 'art 1103', 'art 1102', 'art 1001', 'art 1002', 'art 15']

CN1820260B - Information management device and information management method - Google Patents
Information management device and information management method Download PDF
CN1820260B
CN1820260B CN 200580000692 CN200580000692A CN1820260B CN 1820260 B CN1820260 B CN 1820260B CN 200580000692 CN200580000692 CN 200580000692 CN 200580000692 A CN200580000692 A CN 200580000692A CN 1820260 B CN1820260 B CN 1820260B
CN 200580000692
CN1820260A (en
栗田太郎
2004-06-14 Priority to JP2004175524 priority Critical
2004-06-14 Priority to JP175524/2004 priority
2005-06-09 Application filed by 索尼株式会社 filed Critical 索尼株式会社
2005-06-09 Priority to PCT/JP2005/010599 priority patent/WO2005121976A1/en
2006-08-16 Publication of CN1820260A publication Critical patent/CN1820260A/en
2010-09-29 Publication of CN1820260B publication Critical patent/CN1820260B/en
By performing copying or backup of value information electronically stored in a memory area, it is possible to smoothly perform movement of value information between terminals. An archive file containing a terminal ID of a movement destination is created from data in an IC card and stored in a predetermined storage place so as to safely perform backup of value information. Moreover, the archive file can be spread only by a device specified by the terminal ID. Moreover, access to a file and a directory in the IC card is managed by a counter. After the archive file is archived in the storage place, the counter value of the original file is erased.
Information management apparatus and approaches to IM
The present invention relates to a kind of information management apparatus and approaches to IM, be used for managing visit the information of the big relatively memory area of the capacity of being stored in.Specifically, the present invention relates to a kind of information management apparatus and approaches to IM, be used for the electronic value information stores at memory area, and the security information communication that is used to pay by mails etc.
Or rather, the present invention relates to a kind of information management apparatus and approaches to IM, be used for managing at the memory area various files of distribution and to the information that is used for service operations.Specifically, the present invention relates to a kind of information management apparatus and approaches to IM, be used for the value information that is stored in memory area in the electronics mode is copied or backs up, and between terminal, transmit value information reposefully.
Because simple to operate, therefore, be that contactless near field communication system (the contactless proximity communication sysytem) beginning of representative is universal day by day with the IC-card.Usually, in order to use IC-card, the user inserts card reader/write device with IC-card.Card reader/write device always carries out poll to IC-card, therefore, when card reader/write device detects exterior I C card, begins to carry out traffic operation therebetween.For example, utilize the IC-card of having stored password, other personal authentication's information and value information such as electronic bill, can carry out authentication processing to attendant and passenger at the inlet in ATM (Automatic Teller Machine), concert place and the ground such as ticketing spot at station.
Recently, along with micro production (micro-fabrication) development of technology, the IC-card of the big relatively storer of capacity has appearred having.Utilization has the IC-card of mass storage, file system is provided in storage space and stores a plurality of application programs simultaneously in file system, allows single IC-card is used for multiple use.For example, storage as the electronic money that is used to pay by mails and being used to enters a plurality of application programs of electronic entrance ticket that specific music can the place etc. on an IC-card, makes such IC-card can be used in various uses.The pay scheme of (E-Payment) of the electronic data that the fund that " electronic money " used herein and " electronic bill " refer to a kind of basis to be provided according to the user is issued perhaps, refers to such electronic data itself.
Except wireless/contactless interface, IC-card and card reader/write device (card reader/write device equipment) can be equipped with and be used for the wireline interface that is connected with external unit, and, can be merged in corresponding apparatus, as mobile phone, PDA (personal digital assistant), CE (consumer electronics) equipment and personal computer etc.Such configuration provides one or two function in IC-card function and the card reader/write device function can for these equipment.In this case, can be with the IC-card technology as how with two-way near field communication interface (versatile bidirectionalproximity communication interface).
For example, when constituting near field communication system, on man-to-man basis, utilize the contactless communication of IC-card by equipment such as computing machine and information home electronicss.In addition, equipment can relative thing device with non-equipment such as non-contact ic cartoon letters.In this case, it also is possible being used for carrying out the application that one-to-many communicates by letter between an equipment and a plurality of cards.
In addition, utilize IC-card can on the information processing terminal, comprise and the extraneous various application of carrying out the electronic value information communication, as paying by mails.For example, user interfaces such as keyboard that utilization provides on the information processing terminal and display can provide the user instruction that is used for IC-card by the information processing terminal.In addition, when IC-card is connected to mobile phone, can communicate the content that is stored in the IC-card by telephone network.In addition, can connect by the Internet from mobile phone, be to use defrayment with IC-card.
The file system that is used for the service provider can be distributed in the internal memory of IC-card, so that in this file system, information (for example, User Recognition/authentication information, other value information and user's history (record)) to the service operations that is used for being undertaken by the service provider manages.This can realize based on contactless short-range communication, and has replaced traditional prepaid card and be used for the useful service of the service card in each shop.
Traditionally, for each service provider independently issues IC-card, and use IC-card by the user.Therefore, the user is necessary for him or she and wishes that the respective services used prepares IC-card and must carry these cards.On the contrary, according to IC-card with the big relatively storage space of capacity, can be in the internal memory of single IC-card, assurance is enough to store the capacity (for example, with reference to non-patent literature 1) about the information of multinomial service.
For the memory area in the IC-card, IC-card publisher manages its whole memory area in the original state of IC-card, the service providers different with IC-card publisher are cut apart the file system that makes new advances from memory area, and give the application program operating that is used to realize every service with this document system assignment.File system is cut apart the virtual IC-card distribution of expression.Repeat the operation of file memory Region Segmentation and produced such structure, wherein, in the memory area of IC-card, have a plurality of file system.This can provide a plurality of application programs,, uses the multiple application program of an IC-card that is.
Various types of value informations as electronic money and electronic bill etc., can be stored on IC-card or the IC chip safely.When considering the user at one's leisure, need the data that keep on the IC-card be backed up.Example comprises the situation of having stored the mobile phone type of value information in IC chip and the IC chip of having incorporated into of changing, and, block or incorporate into the situation that the equipment of IC-card breaks down.
When the data in the IC-card are copied or back up, must prevent that data are replicated.Under the situation of cash transfer, cash must be moved to another wallet from a wallet, but cash does not increase.On the contrary, although have the value that equates with cash as value informations such as electronic money or electronic bills,, the essence of value information is numerical data.Therefore, might be in the IC-card of the IC-card of data sending terminal and receiving end with the original value information reproduction, thus make these two ends can both use value information.
When the data in the IC-card are copied or back up, must be with data transmission to a correct side.In this case, when IC-card was used to multiple application, when promptly by a plurality of service providers IC-card being managed, it is complicated that program becomes.
For example, can be along with the process of changing the mobile phone type, the value information in the transmission IC chip.But, owing to the possibility of losing value information that communication failure or mechanical disorder causes and value information are arranged during the transmission by the bootlegging or the possibility of distorting, so the responsibility of telephone operator is very big.
On the other hand, the method for transmitting every value information in the IC chip by the service provider of correspondence also is possible.Though this method is being effectively aspect the responsibility separation,, when changing the mobile phone type, the user need pass through a plurality of programs.
(on April 20th, 2004 published " Musen-IC-tagu no subete-Goma-tsubu-chip de Bijinesu gaKawaru ", pp 106 to 107, RFID TechnologyEditing Department, NIkkei Business Publications, Inc.)
Fundamental purpose of the present invention provides a kind of high-level information management equipment and approaches to IM, allows various file allocation in memory area and allow the information that is used for service operations is managed.
Another object of the present invention provides a kind of high-level information management equipment and approaches to IM, allows the value information that is stored in the memory area in the electronics mode is copied or backs up, and allow to transmit reposefully value information between terminal.
Consider above-mentioned purpose, proposed the present invention, the invention provides a kind of information management apparatus, comprising:
Communications portion is used for by wireless or Wired transmission path transmission/reception data;
Data processing section is used for being handled by the data of communications portion transmission/reception;
Storage space is wherein arranged the file by the data processing division divisional processing; And
The history file apparatus for establishing, the file that is used at least one to back up is set up history file, history file wants the identifying information of decompressed destination to be attached on the history file, makes described history file can be sent to described identifying information designated destination terminal.
Here alleged " information management apparatus " is a kind of like this equipment, wherein, Contact Type Ic Card or the function IC-card similar to contact/contactless IC card that wireless communication section has a terminal with the contactless IC card of having introduced the IC chip with data transmission/receiving function and data processing section, have from the teeth outwards been introduced information communication terminal equipment, as mobile phone, PHS (personal handyphone system) or PDA (personal digital assistant) etc.IC chip with contactless IC-card function can be implemented with a chip of integrated RF analog front circuit and logical circuit (agreement control, RF demodulation, instruction process, Cipher Processing and memory management), perhaps, can implement with two or more chips that RF analog front circuit and logical circuit are separated.Hereinafter, as a concentrated term, these can be abbreviated as " IC-card ".
Have data processing section and the memory area that comprises data storage memory such as EEPROM according to information management apparatus of the present invention, and, data communication function had.For mobile phone, can dispose separable exterior storage medium, as have the IC-card of build-in IC chip.In addition, SIM (subscriber identify module, the subscriber identification module) function that has write down the user profile of being issued by mobile telephone company can be included in the IC-card.Information management apparatus can carry out the data communication by communication network such as the Internet, perhaps, and can be with wired or wireless mode and the direct communication of exterior terminal equipment.
The present invention relates to the service that provides such, it has utilized the anti-tamper and authentication function of IC-card and requirement to relate to the security that value information is communicated by letter.Storer in the IC-card generally is divided into a plurality of districts, and provides different encryption keys to each district, so that visit is controlled.Here alleged " district " is corresponding to by cutting apart storage space file system or catalogue in file system or the unique file that obtains.
When considering the user at one's leisure, need to back up the data that remain in the IC-card, specifically, the problem that is used for the IC-card of multiple application is that it is complicated that back-up processing becomes.
On the contrary, in the present invention, owing to set up the history file of the Termination ID that comprises transmission destination according to the data in the IC-card, and this history file is stored in predetermined memory location, therefore can back up value information safely.In addition, have only with the Termination ID appointed equipment and history file could be decompressed.
Used and utilized counter to manage scheme the visit of file in the IC-card and catalogue.In addition, after history file is archived in the storage space, the Counter Value of source document is wiped,, can be realized file transfer thus to prevent visit.
Also comprise the file chaining specified device according to information management apparatus of the present invention, be used to specify the link between the file that to open simultaneously.The file chaining specified device has been specified the file of having set up history file and has been described linking between the access management information file of the access management information of this document.When the file of having set up history file was accessed, access management apparatus was simultaneously with the Access Management Access File Open, according to the access management information management that conducts interviews, and upgraded the content of access management information.The access management information file description be used to set up history file file, as the Counter Value of access management information, and when the access management information file was opened, access management apparatus successively decreased Counter Value.
According to a further aspect in the invention, provide a kind of approaches to IM, comprising: communication steps is used for by wireless or Wired transmission path transmission/reception data; Data processing step is used for handling in the data of described communication steps transmission/reception; The step of file layout in storage space that in described data processing step, handle; And history file establishment step, the file that is used at least one to back up is set up history file, described history file wants the identifying information of decompressed destination to be attached on the described history file, makes described history file can be sent to described identifying information designated destination terminal.
According to the present invention, a kind of high-level information management equipment and approaches to IM can be provided, allow various file allocation in memory area and allow the information that is used for service operations is managed.
According to the present invention, a kind of high-level information management equipment and approaches to IM can be provided, allow the value information that is stored in the memory area in the electronics mode is copied or backs up, and allow between terminal, to transmit reposefully value information.
According to the more detailed description based on the following embodiment that describes according to the present invention and accompanying drawing, other purposes of the present invention, characteristic and advantage will become clearer.
Fig. 1 schematically shows the configuration of application non-contact ic cartoon letters of the present invention system.
Fig. 2 schematically shows the configured in one piece of the service provider system that uses the electronic money, electronic bill and other value information that utilize the IC-card realization.
Fig. 3 shows the state of memory area, and wherein, original cards publisher only manages his or his file system.
Fig. 4 show the card issuer can allow with he/her white space of file system, promptly the storer in certain zone borrows (releases) to the Regional Admin.
Fig. 5 shows such state, and wherein, another service provider is cut apart by the memory area in the district that the card issuer is allowed, and has set up new file system.
Fig. 6 shows such state, and wherein, in the zone that the card issuer allows, the public domain keeper utilizes public domain system code SC0, and storer is cut apart.
Fig. 7 shows the structure that has a plurality of file system in the memory area in IC-card.
Fig. 8 schematically shows the example of the data structure in file system.
Fig. 9 shows the basic configuration of file system.
Figure 10 shows district's (areas) classification is arranged in state in the storage space in the IC-card.
Figure 11 schematically shows the functional configuration of the firmware in the IC-card.
Figure 12 shows the scheme that is used for the file and the catalogue file of IC-card.
Figure 13 schematically shows the basic configuration of the file system of having specified the link between the file.
Figure 14 schematically shows with the file in the catalogue and counter file chaining or with the configuration of the file system of catalogue and counter file chaining.
Figure 15 schematically shows the hardware configuration according to the IC-card part of one embodiment of the invention.
Figure 16 shows the process flow diagram that is used for being provided with in file system the handling procedure of the linking relationship between the file.
Figure 17 shows to be used for visiting the process flow diagram that has at the handling procedure of the file of the file chaining of file system appointment relation.
1... card reader/write device
2...IC card
3... controller
111... publisher's communication facilities
112... network operator's communication facilities
113... fabricator's communication facilities
114... storage area is cut apart/device registration
115... operating file device registration
116...IC card
117... network
121... card issuer
122... card memory area territory network operator
123... device manufacturers
124... card memory area territory user
1001... antenna part
1002... simulation part
1003... digitial controller
1004... storer
1005... external interface
1006... carrier detector
1100... portable terminal
1110... programming controller
1120... display part
1130... user input part
1140... power-supply controller of electric
Embodiments of the present invention is described in detail hereinafter with reference to accompanying drawing.
A. use the contactless data communication system of IC-card
Fig. 1 schematically shows the configuration that can use non-contact ic cartoon letters of the present invention system.
This contactless card system comprises card reader/write device 1, IC-card 2 and controller 3.In order to electromagnetic contactless mode, between card reader/write device 1 and IC-card 2, transmit and receive data.That is, card reader/write device 1 sends predetermined instruction to IC-card 2, and IC-card 2 carries out and the corresponding processing of instruction that receives.Then, IC-card 2 sends and result corresponding response data to card reader/write device 1.
Card reader/write device 1 is connected to controller 3 by the predetermined interface interface of compatibility such as RS-485A standard (for example, with).By control signal being provided for card reader/write device 1, controller 3 makes card reader/write device 1 carry out predetermined process.
The operation of B.IC card
For example, the system 100 that illustrates comprises: by publisher's communication facilities 111 of IC-card publisher 121 uses; Network operator's communication facilities 112 by card memory area territory network operator 122 uses; Fabricator's communication facilities 113 by device manufacturers 123 uses; And the storage area splitting equipment 114 and the operating file device registration 115 that use by card memory area territory user 124.
When IC-card publisher 121 during, will be registered in the IC-card 116 with the service file associated data that provide by card memory area territory user 124 according to predetermined condition to card holder 126 distribution IC-cards 116.Utilize single IC-card 116, card holder 126 can receive these two the service from IC-card publisher 121 and card memory area territory user 124.
As shown in Figure 2, in system 100, publisher's communication facilities 111, network operator's communication facilities 112, fabricator's communication facilities 113, storage area splitting equipment 114 and operating file device registration 115 are connected by network 117.
IC-card publisher 121 is distribution IC-card 116 and the people that its service is provided by IC-card 116.
When the request that receives from IC-card publisher 121, card memory area territory network operator 122 provides such service, be included in by the storage area in the storage area (semiconductor memory) in the IC-card of IC-card publisher 121 distribution, the obsolete storage area of IC-card publisher lends card memory area territory user 124.
When the request that receives from card memory area territory network operator 122, device manufacturers 123 is made storage area splitting equipments 114, and it is offered card memory area territory user 124.
By sending request to card memory area territory network operator 122, card memory area territory user 124 utilizes the storage area of IC-card 116 that his service is provided.Card memory area territory user 124 is corresponding to by cutting apart memory area the service provider who sets up new file system and service is provided by the file system of using him.
Card holder 126 receives from the IC-card 116 of IC-card publisher 121 distribution and the people of the service that is provided by IC-card publisher 121 is provided, that is, and and the final user.After distribution IC-card 116, when card holder 126 wishes the service that is provided by card memory area territory user 124 is provided, he or she uses storage area splitting equipment 114 and operating file device registration 115, will with card memory area territory user 124 service file associated data storage to IC-card 116.After this, service that card holder 126 just can receiving card storage area user 124.
When utilizing single IC-card 116 that the service of IC-card publisher 121 and card memory area territory user's 124 service is provided, system 100 has such configuration, make uncommitted people be difficult to data diddling write or override in the storage area of having stored with IC-card publisher 121 and card memory area territory user's 124 service file associated data.
Although Fig. 2 shows the situation that has an IC-card publisher 121, a card memory area territory user 124 and a card holder 126,, can there be a plurality of publishers, a plurality of user and a plurality of holder.
According to the definition of IC-card 116, IC-card 116 can be a card type data communication equipment (DCE), and perhaps, IC-card 116 may be implemented as the mobile phone (or other portable terminal and CE device) with built-in semi-conductor chip of having incorporated so-called " IC-card function " into.Having incorporated the IC chip of contactless IC-card function into can implement with a chip, integrated RF analog front circuit and logical circuit (agreement control, RF modulating/demodulating, instruction process, Cipher Processing and memory management) in this chip, perhaps, implement with RF analog front circuit and the separated two or more chips of logical circuit.
Figure 15 schematically shows the hardware configuration according to the IC-card part of one embodiment of the invention.As shown in the figure, the IC-card part is made of the simulation part 1002 that is connected to antenna part 1001, digitial controller 1003, storer 1004 and external interface 1005, and is built in the portable terminal 1100.This IC-card part can be implemented with a slice SIC (semiconductor integrated circuit), perhaps, by dividing RF analog front circuit part and logical circuit part, implements with two chip semiconductor integrated circuit.
Antenna part 1001 proceeds to/from the contactless data transmission/reception of card reader/write device equipment (not shown).1002 pairs of parts of simulation send to antenna part 1001/ and handle from the simulating signal that antenna part 1001 receives.The example of handling comprises detection, modulating/demodulating and Clock Extraction.Antenna part 1001 and simulation part 1002 have constituted the contactless interface between IC-card part and the card reader/write device equipment.
The processing of 1003 pairs of transmission/reception data of digitial controller and the internal operation of IC-card carry out central authorities' control.Digitial controller 1003 is connected to addressable memory 1004 in this locality, and can utilize storer 1004 storage to be used for the application of electronic money, electronic bill etc. thus, so as to pack into the program code carried out by digitial controller 1003 and the term of execution storage operational data.
External interface 1005 is functional modules, by external interface 1005, according to the different interface protocol of agreement of the contactless interface that is used for linking with the card reader (not shown), digital module controller 1003 is connected with portable terminal 1100 equipment such as grade.By external interface 1005, can will write the data transmission of storer 1004 to portable terminal 1100.
In this case, when with card reader/when write device equipment communicates, data from card reader/write device equipment reception, after not changing, changing or after being converted into the different pieces of information pack arrangement, be sent to portable terminal 1100 by external interface 1005 according to suitable transformation rule.On the contrary, by the data of external interface 1005 from portable terminal 1100 receptions, after not changing, changing or after being converted into the different pieces of information pack arrangement, be sent to card reader/write device equipment by contactless interface according to suitable transformation rule.
In the present embodiment, IC-card partly is designed to be built in portable terminal 1100 so that use, and wireline interface such as UART (Universal Asynchronous ReceiverTransmitter, UART Universal Asynchronous Receiver Transmitter) are used as external interface 1005.But, the interface specification of external interface 1005 is not specifically limited, therefore, external interface 1005 can be wireline interface or wave point, as bluetooth communication interface or IEEE802.11 interface.
Can be by the radiowave drive IC card portion that sends and pass through antenna part 1001 receptions from card reader/write device.Certainly, IC-card partly can be configured to it partly or entirely in response to the electric energy operation that provides from portable terminal 1100.
Portable terminal 1100 and mobile phone, PDA, the personal computer information processing terminals such as (PC) are corresponding.Portable terminal 1100 comprises programming controller 1101, display part 1102 and user input part 1103.
For example, programming controller 1101 is made of microprocessor, RAM and ROM (wherein any one is not shown among Figure 15).Microprocessor as the workspace, is carried out various processing services with RAM according to the program code that is stored among the ROM.Except basic functions such as function of cellular phone, the service of processing also comprises the processing of the IC-card part that is used for portable terminal 1100.Certainly, programming controller 1101 can be equipped with external memory such as hard disk and other peripheral hardware.
Programming controller 1101 can be by external interface 1005 visit IC-card parts.
Can implement display part 1102 with for example LCD.Display part 1102 can show the result of the processing of being carried out by programming controller 1101 on screen, so that with the result notification user.
For example, user input part 1103 refers to that by keyboard and logical (jog dial) constitutes, and perhaps, is made of the touch-screen on the display screen that places display part 1102, and, but be used for instruction and/or data are input to the rewrite information storage medium 1100 of portable terminal by the user.
The power drive that programming controller 1101 in the portable terminal 1100 is provided by primary power that does not illustrate such as battery.
When the user of the portable terminal 1100 with incorporating IC card part makes portable terminal 1110 near card readers/write device equipment, begin to carry out the radio communication between IC-card part and the card reader/write device equipment, and, by antenna part 1001 with as the simulation part 1002 of wave point, in numerical portion 1002 and card reader/write device exchanged between equipment data.
Utilize the anti-tamper and authentication function of IC-card, the service that comprises value information communication that requires security can be provided.In addition, in the present invention, the file system that will be used for each service provider is distributed in the single memory zone, and single IC-card is shared by a plurality of service providers and is used to provide multiple service.
For the memory area in the IC-card, in the starting stage, IC-card publisher manages whole memory areas.When the service provider beyond the IC-card publisher is cut apart the file system that makes new advances from memory area, need the authentication of cutting apart power and IC-card publisher of memory area.
In case memory area is cut apart, then the visit of file system is needed the service provider rather than the original I C card issuer's of file system authentication.Therefore, fire wall is played on the border between the file system, and, preferably can stop unwarranted visit from another file system.So just can guarantee using every viability, as IC-card by service provider itself issue availability.Repeat the cutting operation of memory area is produced such structure, wherein, a plurality of file system are present in the memory area in the IC-card.File system is cut apart and is meaned virtual IC-card distribution.
Below with reference to Fig. 3 to 6, the operation that the memory area in the IC-card is carried out is described.
Fig. 3 shows the state of memory area, and wherein, original cards publisher only manages his or her file system.The system code SC1 that is used for original cards publisher by the issue of system code management organization.When external device (ED) or program conducted interviews to card issuer's file system, SC1 was used as cognizance code (that is the independent variable of request instruction).
Fig. 4 show the card issuer can allow with he/white space in her file system, promptly the storer in certain zone borrows (releases) to the Regional Admin.In this stage, also do not need the file system in the memory area is cut apart.As long as card issuer's file system has white space, he or she just can be leased to storer a plurality of regional managers.For example, under the situation of the configuration of file system being discerned with 4 system codes, memory area can be divided into 16 districts (can be cut apart 15 times at most) at most.
Fig. 5 shows such state, and wherein, another service provider is cut apart by the memory area in the zone that the card issuer is allowed, and has set up new file system.It is SC2 that system code management organization gives the system code of this new file system.When external device (ED) or program conducted interviews to the file system by memory areas domain administrator (service provider) operation, system code SC2 was used as cognizance code (that is the independent variable of request instruction).
Fig. 6 shows such state, and wherein, by utilizing public domain system code SC0, the public domain keeper is cut apart the storer in the zone of card issuer's permission.When external device (ED) or program conducted interviews to the file system as public domain keeper's operating area, system code SC0 was used as cognizance code (that is the independent variable of request instruction).
Repeat memory area to IC-card and carry out cutting operation such structure is provided, wherein, have a plurality of file system, as shown in Figure 7.Original cards publisher or can utilize his file system to be provided for the district and the service of his own professional expansion by the service provider that original cards publisher allows to have obtained his file system.
Below will the operation in the file system be described.In any file system, realized identical operations substantially.
File system comprises and is used to realize with the one or more file system of electronic value information with extraneous application of communicating by letter, as the situation that is used to pay by mails.The memory area of distributing to an application will be called as " service memory zone ".Be used to utilize an application, the processing operation that promptly is used to visit corresponding service memory zone will be called as " service ".The example of service comprises read access, the write access to storer and gives/be worth from value information such as electronic money increase value/minimizing.
Limit use to using in order whether to have access right according to the user, promptly begin service, with password, promptly PIN distributes to this application, so that carrying out viability, carries out the PIN checking and handles.In addition, for the access services memory area,, suitably carry out coded communication according to the safety grades of application program.
In the present embodiment, will with " catalogue " similarly hierarchy introduce in each file system in the memory area that is arranged in the IC-card.Then, can be with in one " district " being distributed in the graded region that each application in the memory area is registered in hope.
For example, will be used in a plurality of application of a series of transaction or the service memory zone that application closely related to one another is registered in same zone (and, further, district closely related to one another is registered in the identical primary area).Utilize such scheme, in an orderly way application in the memory area and district are arranged, and classify effectively and organize for the user uses each.
For the access right of step control, not only can use, and can PIN be set for each district for each to file system.For example, scheme can be such, when having imported the PIN that is used for the correspondence district, handles and mutual authentication processing by checking, provides the access right to all application (and subarea) in this district.Therefore, the PIN that only will be used for corresponding district imports once, just can access the access right of all application of using in a series of transaction.Therefore, access control becomes effectively, and, improved the availability of equipment.
In addition, scheme can be such, promptly allows the multiple access power for a service memory zone, and, be each access right, be each service content of in the service memory zone, carrying out password is set.For example, with " read and write " service different PIN is set for " reading " service of in identical coverage, carrying out.In addition, for being electronic money or other value information " the increase amount of money " and " the minimizing amount of money ", different PIN is set.Scheme can also be such, makes for reading from memory area, does not need the input of PIN, still, and for writing the input that then needs PIN.
Fig. 8 schematically shows the example of the data structure in file system.In an example shown, hierarchy that will be similar to " catalogue " is introduced in the storage space of file system.That is, can be registered in the service memory zone in the desirable graded region being distributed in each application in the memory area.For example, can be with application closely related to one another, as the application that is used for a series of transaction is registered in identical district (and, further, district closely related to one another can be registered in the identical primary area).
The application (being the service memory zone) and the district that are distributed in the file system have the password definition piece.Therefore, can PIN be set for each application or district.Can provide access right for each application and each district for file system.
In addition, when the quantity to the access right in service memory zone is not for the moment, can PIN be set for each service content.For example, for " reading " service of carrying out in identical service memory zone is provided with different PIN with " read and write " service, and, for " the minimizing amount of money " different PIN being set for electronic money or other value information " the increase amount of money ".
Verification portion is verified (with respect to being arranged on the district that is assigned to each application or catalogue or the password in service memory zone) to the PIN that sends by the protocol interface that is used for utilizing IC-card to carry out wireless data communications etc.Then, verification portion allows the corresponding memory area of visit.By protocol interface, can carry out read and write to the memory area that allows visit.
Fig. 9 shows the basic configuration of file system.As describing with reference to Fig. 8, will introduce file system with " catalogue " similar hierarchy, make the service memory zone of distributing to application can be registered in the graded region of hope.In example shown in Figure 9, with a service memory regional registration in district 0000 by district's 0000 definition block definition.
Shown service memory zone comprises one or more user's pieces.Each user's piece is the guaranteed minimum data unit of accessing operation.In the service memory zone, a service by the definition of service 0108 definition block can be provided, promptly serve 108.
Except restriction that each district and each application are conducted interviews, can also password be set for every type service, so that to each service restriction that conducts interviews.Password setting information about the service that will be subjected to restrict access is defined as password specific service (i.e. " cryptographic service ").In example shown in Figure 9, be used to serve 0108 password and be defined as cryptographic service 0128 definition block.The content of cryptographic service is stored in the cryptographic service data block.
When enabling when being used to serve 0108 cryptographic service, thereby before service 0108 beginning is carried out read or write to its user's piece, need utilize cryptographic service 0128 to carry out password authentification.Specifically, when read/write (read/write) instruction of use encrypting, before authentication mutually, to being used to serve 0108 password, promptly PIN verifies earlier.
In addition, the service memory zone of distributing to application can be registered in the graded region of hope, and, can carry out classification to the district and arrange (that is, district closely related to one another can be registered in the identical primary area).In this case, for being provided with PIN, each district can make this district become a restrict access unit.Figure 10 shows and is arranged in state in the storage space in the IC-card with distinguishing level.In the example that illustrates, in district 0000, registered another district 1000 by district's 1000 definition blocks definition by district's 0000 definition block definition.
In example shown in Figure 10, in district 1000, two service memory zones have been registered.Can in a service memory zone, provide by the service 1108 of service 1108 definition blocks definition and the service 110B that defines by service 110B definition block.The a plurality of different services that will define in a service memory zone so, here are called " overlapping service ".PIN according to input is provided at different services in the identical service area.In other service memory zones, can provide service 110C by the definition of service 110C definition block.
Start the service that is arranged in each service memory zone, thereby allow its user's piece is carried out read or write.Certainly, Fig. 9 is described as reference, can be every service definition cryptographic service.In this case, when enabling the cryptographic service that is used to serve, utilizing cryptographic service just to allow this service to begin after having carried out PIN checking.
When hope is a plurality of services when public PIN is set, set up the district that comprises these services, and, the public code service can be provided in this district.
In example shown in Figure 10, be used to distinguish 1000 password and be defined as cryptographic service 1020 definition blocks.The content of cryptographic service is stored in the cryptographic service data block.
When enabling when being used to distinguish 1000 cryptographic service (below be described),, be enabled in every service in the district 1000, thereby can carry out read or write its user's piece utilizing after cryptographic service 1020 carried out password authentification.
Figure 11 schematically shows the functional configuration of the firmware in the IC-card, in IC-card, provides a plurality of file system in portion's storer within it.
The interface control section to by the communicating by letter of non-contact ic card and card reader/write device, with the communicating by letter of card reader/write device, by wireline interface communication and carry out agreement control with communicating by letter of another I/O interface etc.
For example, instruction control part is handled the instruction that receives from the external world by the interface control section, sends instruction and instruction is checked to the external world.
Security control partly realizes being used for the authentication processing and the safe handling of each file system of reference-to storage zone or memory area, as, be used for using in the catalogue of file system or the PIN checking of service.
For example, as mentioned above, the file system control unit branch carries out file system management, as memory area being divided into file system (and cancellation cut apart), and, the bibliographic structure of each file system is managed.
The schema management part manages the pattern of All Files system and respective files system.Here alleged pattern comprises state, as suspending or restarting to use file system.
In addition, IC-card comprises the firmware that is used for carrying out at IC-card start-up control, ROM management, parameter management, non-volatile memory management, patch control (patch control) and hardware controls etc.
D. archiving files
The data that IC-card is held need backup.Figure 12 shows the scheme that is used for the file and the catalogue file of IC-card.
As mentioned above, the storage space in the IC-card has the hierarchy similar to bibliographic structure.History file is set up partly to have set up and is used for being the file of backup appointment or the history file of catalogue file.Form to history file is not particularly limited.Stipulated to be used for Termination ID, thereby history file has been stored in the memory storage the terminal that history file decompresses being discerned.With regard to having realized the data in the IC-card are backed up like this.
Memory storage has tamper-resistance properties, so that prevent to reveal without permission the history file of storage.Memory storage is sent to terminal with the Termination ID appointment with history file.
Designated terminal decompresses to history file, with recovery source document and catalogue, thereby recovers to use them.Utilize such scheme, the data in the IC-card can be sent to correct destination.
On the other hand, used such scheme, wherein, utilized counter to manage visit file in the IC-card and catalogue.In addition, after history file is implemented in the memory location, the Counter Value of source document is wiped,, prevented that thus the data of transmitting are replicated to prevent visit.
In the present embodiment, in storer or catalogue, provide as the counter file that is used for the number of times of visiting each file is managed.The counter file description maximal value of number of times of each file in reference-to storage or the catalogue.
In addition, used the file chaining designator, thereby the linking relationship between two or more files can be set.Two or more files for the appointment of file chaining designator have applied such restriction, unless they opened simultaneously, unless promptly their otherwise can not be with any one File Open in these files simultaneously through authentication.To set up the file and the counter file chaining of history file, and, come designated links by the file chaining specified file.
Figure 13 schematically shows the basic configuration of the file system of having specified the link between the file.In the example that illustrates, be used to specify the file chaining designator that authenticates two or more files simultaneously be configured to have with file system in the file layout of other document similarity.But, can be according to other formal definition file chaining designator.
In the example that illustrates, file 1 to 3 and counter file are arranged in the file system.For file 1 to 3, be provided with IC-card publisher and be the common symmetric key of all IC-cards.For the counter file is provided with separate keys.
In the example that illustrates, arranged the file chaining specified file.This file is the special file that is used to specify the combination of files that can be authenticated simultaneously.The file chaining specified file is set, so that IC-card publisher is with authenticating for the common symmetric key of all IC-cards, as the situation of other file.
The file chaining specified file defined linking between the file 2 that will file and the counter file, promptly defined the file 2 that must open simultaneously with the counter file.
Below hypothesis obtains opening the needed authenticate key of this document by utilizing function f to be calculated as the cipher key combinations of a file appointment.
File 1 is not by any file chaining designator definition.Therefore, only be utilized as the symmetric key K that file 1 is provided with S1Authenticate mutually, just allow this document is opened.It below is authenticate key in this case.
Authenticate key K AUTH1=f (the authenticate key K that is used for file 1 S1)
The symmetric key that can not be utilized as file 2 settings carries out the mutual authentication of file 2.According to setting, must authenticate mutually simultaneously with the counter file to the file chaining specified file.Owing to used the symmetric key K that will be used for file 2 S2With the separate keys K that is used for the counter file PThe result of combination, therefore the mutual authenticate key that uses in this case is a separate keys.
Authenticate key K AUTH2=(the symmetric key K that is used for file 2 S2With the separate keys K that is used for the counter file P)
When using authenticate key K AUTH2When file 2 was conducted interviews, the counter file was opened simultaneously, and the value of counter is successively decreased.When the value of counter is 0xffff, can open the counter file at any time.On the contrary, when the value of counter is 0, can not open the counter file, therefore, can not will open file 2 with designated links.
Figure 16 shows the handling procedure that is used for being provided with in file system the linking relationship between the file in a flowchart.Suppose in this case, defined the linking relationship between file that will file and the counter file of the number of times that is used for limiting access this document.
At first, counter file (step S1) to the access times of the file that will file set up to be described.Subsequently, be provided for opening the separate keys (step S2) of counter file.
The file that the foundation description will be filed and the file chaining specified file (step S3) of the linking relationship between the counter file.Be provided for the key (step S4) of access file link specified file.The symmetric key that will be used for all IC-cards is as this key (above description).
Figure 17 shows and is used for visiting the handling procedure that has at the file of the file chaining of file system appointment relation in a flowchart.Suppose in this case, defined the linking relationship between file that will file and the counter file of the number of times that is used for limiting access this document.
When the access file system, at first, checking in the file system has/does not have file chaining specified file (step S11).When not having the file chaining specified file, can conduct interviews to each file in the file system by independent authentication processing, therefore, can be utilized as the key that each file is provided with, by authentication processing conduct interviews (step S19).In the present embodiment, be used as the key that is used for the file chaining specified file for the common symmetric key of all IC-cards.
On the other hand, when having the file chaining specified file, check the description (step S12) in the file chaining specified file.Judge whether to be provided with file chaining relation (step S13) for the file that will visit.
When not having file chaining is set concerns, can conduct interviews to this document by independent authentication processing for the file that will visit.That is, can be utilized as the separate keys that this document is provided with, by authentication processing conduct interviews (step S20).In the present embodiment, to identical file, use to be the common symmetric key of all IC-cards.
When being provided with file chaining for the file that will visit and concern (step S13), be used for the key of the file that will visit and be used for having the key generation authenticate key of the file of linking relationship, and carry out while authentication processing (step S14) with this document.In the present embodiment, the file with linking relationship is the counter file, wherein, has described the access times to the file that will visit, and, for the file with linking relationship is provided with separate keys.Therefore,, under the situation of the separate keys of not knowing to be used for the counter file, can not authenticate simultaneously, prevent that thus history file is by disposable even when file that the common symmetric key of all IC-cards is used to visit.
When while during authentication success, open the counter file and check Counter Value (step S15).When still having Counter Value (step S16), can visit the file that to visit.Thus, allow to open this document (step S17) and make Counter Value subtract 1 (step S18).On the contrary, when the value of counter has been wiped free of, do not allow to open this document (step S21).
As mentioned above, used the scheme of wherein having specified the file chaining relation.Therefore, even to having distributed file, linking relationship with the file that has provided separate keys being set in file system makes and needs authentication simultaneously for the common symmetric key of all IC-cards.Therefore, can stop utilization, the identical file in another IC-card is carried out unauthorized access by obtaining the public keys that another IC-card is known.
When file is stored in the file system, specify file chaining with the counter file to allow arbitrarily to be provided with access times to this document in the file system.For example, for the file that will file, before this document is filed, specify the file chaining that is set to the counter file of " 1 " with Counter Value.In this case, unless by the authentication that utilizes the counter file Counter Value is override, otherwise after filing, just can not visit this document.So just realized safe file transfer.
As mentioned above, bibliographic structure can be introduced in the file system that decompresses in the memory area of IC-card.In this case, the file chaining specified scheme can also be applied to catalogue.Figure 14 schematically shows with the file in the catalogue and counter file chaining or with the configuration of the file system of catalogue and counter file chaining.
File 1-1, file 1-2, file 1-3, counter file 1 and file chaining specified file 1 have been arranged for 1 time in catalogue.
To file 1-1, file 1-2 and file 1-3, IC-card publisher is set respectively is the common symmetric key of all IC-cards.For counter file 1 is provided with separate keys.File chaining specified file 1 is set, thereby utilizes IC-card publisher to authenticate for the common symmetric key of all IC-cards.
File chaining specified file 1 is the special file that is used to specify the combination of files that can be authenticated simultaneously.In this case, defined file 1-1 links with counter file 1, that is, file 1-1 and counter file 1 must be opened simultaneously.
Therefore, can only utilize corresponding symmetric key that file 1-2 and file 1-3 are carried out independent authentication, and file 1-1 can not must be authenticated mutually simultaneously by independent authentication with counter file 1.Owing to used the symmetric key K that will be used for file 1-1 S1-1With the separate keys K that is used for the separate keys file P1The result of combination, therefore, the mutual authenticate key of Shi Yonging is a separate keys in this case.
Authenticate key K AUTH=f (the symmetric key K that is used for file 1-1 S1-1With the separate keys K that is used for counter file 1 P1)
When file 1-1 is opened, simultaneously counter file 1 is opened, and Counter Value is successively decreased.When the value of counter is 0xffff, can open the counter file at any time.On the contrary, when the value of counter is 0, can not open the counter file, therefore, can not will open file 1-1 with designated links.
On the other hand, file 2-1, file 2-2, file 2-3, counter file 2 and file chaining specified file 2 have been arranged for 2 times in catalogue.
To file 2-1, file 2-2 and file 2-3, IC-card publisher is set is the common symmetric key of all IC-cards.For counter file 2 is provided with separate keys.File chaining specified file 2 is set, thereby, utilizes IC-card publisher to carry out its authentication for the common symmetric key of all IC-cards as generic-document.
File chaining specified file 2 is the special files that are used to specify the combination of files that can be authenticated simultaneously.In this case, definition catalogue 2 links with counter file 2, that is, catalogue 2 must be opened simultaneously with counter file 2.
Therefore, all generic-documents under catalogue 2 all can not be by independent authentication, and catalogue 2 must be authenticated with counter file 2 simultaneously mutually.
When catalogue 2 was opened, counter file 2 was opened simultaneously, and Counter Value is successively decreased.When the value of counter is 0xffff, can open the counter file at any time.On the contrary, when the value of counter is 0, can not open the counter file, therefore, can not will open catalogue 2 with designated links.
When making counter file and directory link, at the handling procedure that is used for being provided with the file chaining relation, among the step S3 in process flow diagram shown in Figure 16, the file chaining specified file of describing the linking relationship between catalogue and the counter file is replaced.In addition, at the handling procedure that is used for visiting catalogue, among the step S11 in process flow diagram shown in Figure 17, check there being/not having the file chaining specified file with specified file linking relationship, and, subsequently whole catalogue rather than concrete file are authenticated and visit.
Like this, can realize being used for function with one or more catalogues or one or more archiving files.Following two options that are used to file are arranged.This can realize the backup of file or copy.
(1) only can the data of being filed be decompressed with the terminal with ID of appointment with data archiving the time (file system).
(2) can in any file system, decompress to the file that is filed.
For example, with counter file and directory link.When opening catalogue, the counter of counter file is successively decreased.When catalogue was 1 by the value of counter before filing, counter represented 0 after filing.Therefore, not overriding under the situation that visits the counter file, can not visit catalogue by verification process and with Counter Value.So just realized moving of catalogue and file.
When such catalogue is root directory, can back up, copy or move whole file system.
Below with reference to specific embodiment the present invention is described in detail. In the scope that does not break away from essence of the present invention, those skilled in the art can make amendment and replaces embodiment but clearly.
Although be combined in the example that the file space that provides in IC-card or the IC chip memory is provided here, the embodiment that file security is filed and back up is described, essence of the present invention is not limited thereto. For example, can apply the present invention to such situation, wherein, be set up rather than on IC-card or IC chip at memory device, to similar file system being filed or to the file system of the filing management that conducts interviews, and the present invention can provide identical advantage.
In fact, disclosed the present invention by example, and, content understanding as described herein should be restriction. In order to understand essence of the present invention, should consider the scope of claim.
1. information management apparatus comprises:
Data processing section is used for being handled by the data of described communications portion transmission/reception;
Storage space has wherein been arranged the file by described data processing division divisional processing; And
The history file apparatus for establishing, the file that is used at least one to back up is set up history file, when setting up history file appointment, described history file wants the terminal identification information of decompressed destination terminal to be attached on the described history file, makes described history file to be sent to described terminal identification information designated destination terminal from described information management apparatus.
2. information management apparatus as claimed in claim 1 also comprises access management apparatus, is used to manage the visit of having set up the file of history file to described.
3. information management apparatus as claimed in claim 2 also comprises the file chaining specified device, is used to specify the link of the file that will be opened simultaneously,
Wherein, the file chaining specified device is specified and have been set up linking between the file of history file and the access management information file of wherein having described the access management information that is used for this document, and
When the file of history file had been set up in visit, described access management apparatus was opened described Access Management Access file simultaneously, according to the access management information management that conducts interviews, and upgraded the content of described access management information.
4. information management apparatus as claimed in claim 3, wherein, described access management information file description as the Counter Value of access management information, be used for the described file of setting up history file; And
When described access management information file was opened, described access management apparatus successively decreased described Counter Value.
5. information management apparatus as claimed in claim 1, wherein, described storage space is used bibliographic structure, and
Described history file apparatus for establishing is set up history file for the catalogue that will back up, and the terminal identification information of the terminal of the destination that described history file will be decompressed is attached on the described history file.
6. approaches to IM that is used for information management apparatus comprises:
Communication steps is used for by wireless or Wired transmission path transmission/reception data;
Data processing step is used for handling in the data of described communication steps transmission/reception;
The step of file layout in storage space that in described data processing step, handle; And
The history file establishment step, the file that is used at least one to back up is set up history file, when setting up history file appointment, described history file wants the terminal identification information of decompressed destination terminal to be attached on the described history file, makes described history file to be sent to described terminal identification information designated destination terminal from described information management apparatus.
7. approaches to IM as claimed in claim 6 also comprises the Access Management Access step, is used to manage the visit of having set up the file of history file to described.
8. approaches to IM as claimed in claim 7 also comprises the file chaining given step, is used to specify the link of the file that will be opened simultaneously,
Wherein, in the file chaining given step, specify and to have set up linking between the file of history file and the access management information file of wherein having described the access management information that is used for this document, and
In the Access Management Access step, when the file of history file has been set up in visit, open described Access Management Access file simultaneously, according to the access management information management that conducts interviews, and upgrade the content of described access management information.
9. approaches to IM as claimed in claim 8, wherein, described access management information file description as the Counter Value of access management information, be used for the described file of setting up history file; And
In described Access Management Access step, when opening described Access Management Access file, Counter Value is successively decreased.
10. approaches to IM as claimed in claim 6, wherein, described storage space is used bibliographic structure, and
In described history file establishment step, for the catalogue that will back up is set up history file, the terminal identification information of the destination terminal that described history file will be decompressed is attached on the described history file.
CN 200580000692 2004-06-14 2005-06-09 Information management device and information management method CN1820260B (en)
JP2004175524 2004-06-14
JP175524/2004 2004-06-14
PCT/JP2005/010599 WO2005121976A1 (en) 2004-06-14 2005-06-09 Information management device and information management method
CN1820260A CN1820260A (en) 2006-08-16
CN1820260B true CN1820260B (en) 2010-09-29
ID=35503251
CN 200580000692 CN1820260B (en) 2004-06-14 2005-06-09 Information management device and information management method
US (1) US20060218196A1 (en)
EP (1) EP1764699A4 (en)
JP (1) JPWO2005121976A1 (en)
KR (1) KR20070030157A (en)
CN (1) CN1820260B (en)
HK (1) HK1089833A1 (en)
SG (1) SG133613A1 (en)
WO (1) WO2005121976A1 (en)
JP4631935B2 (en) * 2008-06-06 2011-02-23 ソニー株式会社 Information processing apparatus, information processing method, program, and communication system
JP5772316B2 (en) 2011-07-08 2015-09-02 ソニー株式会社 Information processing apparatus, information processing method, and computer program
WO2013150872A1 (en) 2012-04-06 2013-10-10 ソニー株式会社 Information processing device, information processing method, and computer program
CN103345647B (en) * 2013-05-09 2017-08-22 马钢控制技术有限责任公司 A kind of backup access method of data in RFID
JP6330279B2 (en) * 2013-09-18 2018-05-30 ソニー株式会社 Information processing apparatus, information processing system, information processing method, and program
KR101421666B1 (en) 2013-12-12 2014-07-22 이경아 Method for providing file aging service
CN108885581A (en) * 2016-03-23 2018-11-23 索尼公司 Information processing equipment and information processing method
CN1371050A (en) * 2001-02-20 2002-09-25 英业达股份有限公司 Method of generating application program with self test and self repair function
FR2730833B1 (en) * 1995-02-16 1997-03-28 Gemplus Card Int Secure update of eeprom memory
DE19600081C2 (en) * 1996-01-03 1999-11-18 Ibm Ensuring data integrity for data carrier cards
FR2765362B1 (en) * 1997-06-26 2001-08-17 Bull Cp8 Security module comprising means of creating links between main files and auxiliary files
JP3782261B2 (en) * 1999-07-23 2006-06-07 株式会社東芝 Portable electronic device
JP2003067257A (en) * 2001-08-27 2003-03-07 Sayaka Ando Fixing system for software use terminal
JP2004102465A (en) * 2002-09-06 2004-04-02 Toshiba Corp Personal digital assistant, information record control process, and recording-of-information control program
DE10247794B4 (en) * 2002-10-14 2008-05-08 Giesecke & Devrient Gmbh Managing a failed trial counter in a portable disk
2005-06-09 WO PCT/JP2005/010599 patent/WO2005121976A1/en not_active Application Discontinuation
2005-06-09 SG SG200704815-0A patent/SG133613A1/en unknown
2005-06-09 JP JP2006519592A patent/JPWO2005121976A1/en active Granted
2005-06-09 EP EP05748895A patent/EP1764699A4/en not_active Withdrawn
2005-06-09 CN CN 200580000692 patent/CN1820260B/en not_active IP Right Cessation
2005-06-09 US US10/567,921 patent/US20060218196A1/en not_active Abandoned
2005-06-09 KR KR1020067002943A patent/KR20070030157A/en not_active Application Discontinuation
2006-09-15 HK HK06110251A patent/HK1089833A1/en not_active IP Right Cessation
JP特开2001-66986A 2001.03.16
JP特开2003-67257A 2003.03.07
JP特开2004-102465A 2004.04.02
JPWO2005121976A1 (en) 2008-04-10
US20060218196A1 (en) 2006-09-28
EP1764699A4 (en) 2010-07-28
EP1764699A1 (en) 2007-03-21
HK1089833A1 (en) 2011-05-13
KR20070030157A (en) 2007-03-15
CN1820260A (en) 2006-08-16
WO2005121976A1 (en) 2005-12-22
SG133613A1 (en) 2007-07-30
US9582796B2 (en) 2017-02-28 Combicard transaction method and system having an application parameter update mechanism
TW412696B (en) 2000-11-21 A system for performing financial transactions using a smart card
CN102160068B (en) 2015-11-25 Contactless payment authoring system and method
KR100420600B1 (en) 2004-03-02 METHOD FOR PROCESSING EMV PAYMENT BY USING IrFM
Ref document number: 1089833
Termination date: 20130609