TECHNICAL FIELDThe present invention relates to a non contact type IC card, and more particularly to a non contact type IC card allowing the protection of data stored in the card and the prevention of data falsification.[0001]
BACKGROUND ARTA non contact type IC card performing data communication with an interrogator installed outside has been used conventionally. The examples include a ticket for ski lift, a seasonal ticket for the transportation and a prepaid card.[0002]
FIG. 7 is a block diagram schematically showing a basic structure of a conventional non contact[0003]type IC card900. Conventional non contacttype IC card900 shown herein, which is an IC card performing data communication in a signal superposing manner, supplies power and transmits/receives information using a signal(s) having one or more frequencies received from the interrogator not shown.
Conventional non contact[0004]type IC card900 as shown in FIG. 7 is an example of non contact type IC cards utilizing a single frequency and includes atuning circuit20, a rectifyingcircuit21, an amplifying/demodulating circuit22, a modulating/amplifyingcircuit23 and an SP/PS conversion circuit24.
[0005]Tuning circuit20 includes a coil L functioning as an antenna and a capacitor C0. Rectifyingcircuit21 rectifies a signal received attuning circuit20, thereby generates and supplies the power to each part of non contacttype IC card900.
Amplifying/demodulating[0006]circuit22 amplifies and demodulates data Q from an interrogator received attuning circuit20. A signal output from amplifying/demodulatingcircuit22 is SP-converted by SP/PS conversion circuit24 and then is output to amain control circuit2 described below.
With reference to FIG. 7, conventional non contact[0007]type IC card900 further includesmain control circuit2 and a memory1.
[0008]Main control circuit2 processes a signal output from SP/PS conversion circuit24.Main control circuit2 generates data DA to be stored in memory1 described below and designates a location (address) of memory1 to which data DA is to be written.
Memory[0009]1 includes normal data storage region B1 and data protection region B2. Memory1 receives data DA via a data line L2 as well as an address signal AD via an address line L1 indicating an address (a location to which data is to be written) to which data DA is to be written. Here, data stored in data protection region B2 particularly requires security in order to guarantee a normal data communication and whose rewriting is inhibited. An example of such data is an ID number of an ID card holding the personal information.
In addition,[0010]main control circuit2 reads data from designated region B1 or data protection region B2 of memory1 according to the contents of data Q received from the interrogator and generates a response data A based on the read data. Response data A is PS-converted at SP/PS conversion circuit24, processed at modulating/amplifyingcircuit23 and then transmitted to the interrogator via coil L forming the antenna.
In conventional non contact[0011]type IC card900, however, the rewriting (falsification) of stored data in memory1 can be easily performed from a device other than the interrogator once the protocol of the data communication with the interrogator is decoded, therefore the security cannot be guaranteed.
Hence an object of the present invention is to provide a non contact type IC card allowing the prevention of rewriting of a storage region in which data requiring security is stored.[0012]
Another object of the present invention is to provide a highly reliable non contact type IC card through the control of rewriting of the storage region in which data requiring security is stored.[0013]
DISCLOSURE OF THE INVENTIONA non contact type IC card according to the present invention is responsive to externally applied data for performing data communication, and includes: a first storing circuit storing data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; a control circuit controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the data; a selection circuit selecting whether the data is to be written into the location in the first storing circuit designated by the control circuit; and a state setting circuit controlling the selection by the selection circuit, the data is written into the location in the first storing circuit designated by the control circuit when the state setting circuit is in a first state, whereas, the data is inhibited from being written into the first storing circuit designated by the control circuit when the state setting circuit is in a second state other than the first state.[0014]
In another aspect of the present invention, a non contact type IC card is responsive to externally applied data for performing data communication, and includes: a first storing circuit storing the data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; a control circuit controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the data; a detection circuit receiving a control signal from the control circuit and giving instruction for controlling a state of the first storing circuit; and a selection circuit receiving the instruction of the detection circuit and selecting whether the data is to be written into the location of the first storing circuit designated by the control circuit; and the control signal output from the control circuit indicates whether the first storing circuit is in a data rewriting permitted state or a data rewriting inhibited state; and the data is written into the location in the first storing circuit designated by the control circuit when the detection circuit detects that the first storing circuit is in the data rewriting permitted state, whereas the data is not written into the location in the first storing circuit designated by the control circuit when the detection circuit detects that the first storing circuit is in the data rewriting inhibited state.[0015]
In still another aspect of the present invention, a non contact type IC card performs a data communication based on an externally applied radio wave signal, and includes: a receiving circuit receiving the radio wave signal; a first storing circuit storing the data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; a control circuit generating the data based on the radio wave signal received at the receiving circuit and controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the generated data; a detection circuit detecting a frequency of the radio wave signal received by the receiving circuit; and a selection circuit selecting whether the data is to be written into the location in the first storing circuit designated by the control circuit based on a result of the detection by the detection circuit; and wherein the data is written into the location in the first storing circuit designated by the control circuit, when the receiving circuit receives the radio wave signal and the frequency of the radio wave signal is detected to be a first frequency by the detection circuit, whereas the data is not written into the location in the first storing circuit designated by the control circuit when the frequency of the radio wave signal is detected to be a second frequency other than the first frequency by the detection circuit.[0016]
In still another aspect of the present invention, a non contact type IC card is responsive to externally applied data for performing data communication, and includes: a first storing circuit storing the data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; a control circuit controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the data; and a data fixing circuit receiving the data to be written into the location in the first storing circuit designated by the control circuit and supplying a particular data; and wherein a value of the predetermined data supplied from the data fixing circuit is a value determined by an initial state of the first storing circuit, and wherein only the particular data supplied from the data fixing circuit is written into the location in the first storing circuit designated by the control circuit.[0017]
In still another aspect of the present invention, a non contact type IC card is responsive to externally applied data for performing data communication, and includes: a first storing circuit storing said data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; a control circuit controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the data; a selection circuit selecting whether the data is to be written into the location in the first storing circuit designated by the control circuit; and a state setting circuit controlling the selection by the selection circuit; and wherein the data is written into the location in the first storing circuit designated by the control circuit when the state setting circuit is in a first state, whereas, the data is written into a location other than the location in the first storing circuit designated by the control circuit when the state setting circuit is in a second state other than the first state.[0018]
In still another aspect of the present invention, a non contact type IC card is responsive to externally applied data for performing data communication, and includes: a first storing circuit storing the data requiring security; a second storing circuit storing data other than the data to be stored in the first storing circuit; and a control circuit controlling for writing the data into a location in one of the first storing circuit and the second storing circuit according to a content of the data; and wherein the first storing circuit allows rewriting of a predetermined times.[0019]
Therefore a main advantage of the present invention lies in the prevention of falsification of storage contents through the control of rewriting of data stored in a storage portion storing data requiring security.[0020]
BRIEF DESCRIPTION OF THE DRAWINGSFIG. 1 shows a structure of a main portion of a non contact[0021]type IC card100 according to a first embodiment of the present invention.
FIG. 2 shows a structure of a main portion of a non contact[0022]type IC card200 according to a second embodiment of the present invention.
FIG. 3 shows a structure of a main portion of a non contact[0023]type IC card300 according to a third embodiment of the present invention.
FIG. 4 shows a structure of a main portion of a non contact[0024]type IC card400 according to a fourth embodiment of the present invention.
FIG. 5 shows a structure of a main portion of a non contact[0025]type IC card500 according to a fifth embodiment of the present invention.
FIG. 6 shows a structure of a main portion of a non contact[0026]type IC card600 according to a sixth embodiment of the present invention.
FIG. 7 is a diagram schematically showing a structure of a conventional non contact[0027]type IC card900.
BEST MODES FOR CARRYING OUT THE INVENTIONFirst Embodiment[0028]
The first embodiment of the present invention allows the prevention of rewriting of data previously stored in a data protection region by controlling an address to which data is to be written, at data writing for the data protection region of a memory in a non contact type IC card.[0029]
FIG. 1 shows a structure of a main portion of a non contact[0030]type IC card100 according to the first embodiment of the present invention. Components similar to those in conventional non contacttype IC card900 shown in FIG. 7 are denoted by the same reference numbers and same reference characters and the description thereof will not be repeated. Here, data transmission of the non contact type IC card adopting the present invention may be either in a signal superposing method or in a signal separating method.
Non contact[0031]type IC card100 shown in FIG. 1 differs from conventional non contacttype IC card900 in thatcard100 includes astate setting circuit3 and an address non selectingcircuit4 controlling a write address designated at data writing for data protection region B2 of memory1.
With reference to FIG. 1, the structure of non contact[0032]type IC card100 according to the first embodiment of the present invention will be described.
Address non selecting[0033]circuit4 receives a write enable signal RE supplied frommain control circuit2 and an address signal AD from an address line L1 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on a data line L2 is to be written, and write enable signal RE designates a data writing operation to data protection region B2. Address non selectingcircuit4 being controlled bystate setting circuit3 described below outputs an address selecting signal AC according to address signal AD.
State setting[0034]circuit3 controls address non selectingcircuit4 described above.
Address selecting signal AC output from address non selecting[0035]circuit4 changes its state based on a state (active state/inactive state) ofstate setting circuit3. Specifically, whenstate setting circuit3 is in an active state, an output address selecting signal AC selects a location designated by address AD as a location to which data is to be written, whereas whenstate setting circuit3 is in an inactive state, an output address selecting signal AC inhibits the writing to the location designated by address signal AD (non select state).
Data DT will be written into a location in data protection region B[0036]2 corresponding to and based on address selecting signal AC output from address non selectingcircuit4.
Next, an operation of non contact[0037]type IC card100 according to the first embodiment of the present invention will be described.
First, when[0038]state setting circuit3 is in an active state, address non selectingcircuit4 having received write enable signal RE and address signal AD outputs address selecting signal AC selecting a location designated by the address signal AD. In this case data DT will be written into the corresponding location in data protection region B2.
On the other hand, when[0039]stage setting circuit3 is in an inactive state, address non selectingcircuit4 having received write enable signal RE and address signal AD outputs address selecting signal AC turning the location designated by the address signal AD to a non select state. In this case data DT is not written into data protection region B2.
One example of such[0040]state setting circuit3 uses a fuse. For example, when a fuse is used, any numbers of data can be written into data protection region B2 before the fuse blow, however, after the fuse blow, data in data protection region B2 can not be rewritten. The methods of blowing the fuse includes high voltage application, laser cutting, induction heating or the like.
In other words, by controlling the state of state setting[0041]circuit3, non contacttype IC card100 can inhibit the access to data protection region B2 for data rewriting after the data requiring security is stored in data protection region B2 (for simplicity this state is referred to as protection data storage state).
Thus in non contact[0042]type IC card100, as the address selection for the data protection region can be controlled at the data writing operation, the falsification of data previously stored in the data protection region can be prevented.
Second Embodiment[0043]
Similar to the first embodiment of the present invention, the non contact type IC card according to the second embodiment of the present invention allows the prevention of rewriting of data stored in the data protection region by controlling an address to which the data is to be written at the time of data writing to the data protection region in the memory.[0044]
FIG. 2 shows a structure of a main portion of a non contact[0045]type IC card200 according to the second embodiment of the present invention and components similar to those in non contacttype IC card100 shown in FIG. 1 are denoted by the same reference numbers and same reference characters and the description thereof will not be repeated.
Non contact[0046]type IC card200 shown in FIG. 2 is different from conventional non contacttype IC card900 in that it includes acommand detection circuit5 and an addressnon selecting circuit6 controlling a designated address to which data is to be written at the time of data writing to the data protection region of the memory, and controls these circuits by a command output from amain control circuit12.
With reference to FIG. 2, the structure of non contact[0047]type IC card200 according to the second embodiment of the present invention will now be described.
Address[0048]non selecting circuit6 receives an address signal AD via an address line L1 as an input. Here, address signal AD indicates a location in data protection region B2 to which data DT on a data line L2 is to be written. Addressnon selecting circuit6 controlled bycommand detection circuit5 described below outputs address selecting signal AC according to the address signal AD.
[0049]Command detection circuit5 receives an address control command COM output frommain control circuit12 and controls address non selectingcircuit6. Here, address control command COM is a command permitting or inhibiting a data writing operation to data protection region B2 based on the address signal AD.
Address selecting signal AC output from address non selecting[0050]circuit6 changes its state according to a state ofcommand detection circuit5. Specifically, whencommand detection circuit5 detects a writing permitted state of a data protection region B2, an address selecting signal AC selecting a location designated by address AD as a location to which data is to be written is output. On the other hand, if data protection region B2 is detected to be in a writing inhibited state, address selecting signal AC turning a location designated by address signal AD to a non select state is output.
Based on the address selecting signal AC supplied from address non selecting[0051]circuit6, data DT is written into a corresponding location in data protection region B2.
Next an operation of non contact[0052]type IC card200 according to the second embodiment of the present invention will be described.
When an address control command COM permitting the data writing is supplied from[0053]main control circuit12, and is detected bycommand detection circuit5, address non selectingcircuit6 outputs an address selecting signal AC selecting a location designated by the address signal AD. In this case data DT is written into a corresponding location in data protection region B2.
On the other hand, when an address control command COM inhibiting the data writing is supplied from[0054]main control circuit12, and is detected bycommand detection circuit5, address non selectingcircuit6 outputs an address selecting signal AC turning the location designated by the address signal AD to a non select state. In this case data DT is not written into data protection region B2.
Thus, non contact[0055]type IC card200 allows the adjustment of storage of data requiring security in data protection region B2 (turning data protection region B2 to the protection data storage state) and inhibiting the access to data protection region B2 for the data rewriting, through the control ofcommand detection circuit5 based on a command output frommain control circuit12.
As non contact[0056]type IC card200 allows the control of selection of address of the data protection region at the data writing operation, the falsification of data previously stored in the data protection region can be prevented.
Third Embodiment[0057]
The third embodiment of the present invention allows the prevention of rewriting of data once stored in the data protection region in the non contact type IC card through the access control for the data protection region according to the frequency for data communication.[0058]
FIG. 3 shows a structure of a main portion of a non contact[0059]type IC card300 according to the third embodiment of the present invention, wherein components similar to those in non contacttype IC card100 shown in FIG. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated.
Non contact[0060]type IC card300 shown in FIG. 3 is different from conventional non contacttype IC card900 in that it includes afrequency detection circuit7 and an addressnon selecting circuit8.
With reference to FIG. 3, the structure of non contact[0061]type IC card300 according to the third embodiment of the present invention will now be described.
[0062]Frequency detection circuit7 detects a frequency of a radio wave received by tuningcircuit20 and includes a band pass filter and a switching circuit inside not shown. When a carrier frequency of a received radio wave is a predetermined frequency F1,frequency detection circuit7 detects the reception of an intended radio wave.
Address[0063]non selecting circuit8 receives address signal AD via address line L1 and a write enable signal RE frommain control circuit2 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on data line L2 is to be written.
Address[0064]non selecting circuit8 controlled byfrequency detection circuit7 outputs address selecting signal AC according to address signal AD. More specifically, whenfrequency detection circuit7 detects the reception of an intended radio wave (with predetermined frequency F1), an address selecting signal AC selecting a location designated by address signal AD as a location to which data is to be written is output, and otherwise (when received radio wave has a frequency other than the predetermined frequency F1), an address selecting signal AC turning the location designated by the address signal AD to a non select state is output.
Based on the address selecting signal AC, data DT is written into the corresponding location in data protection region B[0065]2.
With reference to FIG. 3, an operation of non contact[0066]type IC card300 will be described specifically.
As described above, when a radio wave with a carrier frequency F[0067]1 is received, address non selectingcircuit8 outputs an address selecting signal AC selecting a location designated by address signal AD. In this case data DT is written into the corresponding location in data protection region B2.
On the other hand, when a radio wave with a carrier frequency being an original frequency F[0068]0 different from F1 is received, address non selectingcircuit8 outputs an address selecting signal AC turning the location designated by address signal AD to a non select state. In this case data DT is not written into data protection region B2.
In other words, non contact[0069]type IC card300 allows the adjustment of the storage of data requiring security in data protection region B2 (turning data protection region B2 to the protection data storage state) and inhibiting the access to data protection region B2 for the data rewriting, through the use of different frequencies.
Thus, as a non contact[0070]type IC card300 allows the access control for the data protection region according to the frequency of radio wave for the data communication, the falsification of data previously stored in the data protection region can be prevented.
Fourth Embodiment[0071]
The fourth embodiment of the present invention allows the prevention of data falsification, which is the object of the present invention, in the non contact type IC card by controlling the data to be written at the data writing to the data protection region in the memory.[0072]
FIG. 4 shows a structure of a main portion of a non contact[0073]type IC card400 according to the fourth embodiment of the present invention, wherein components similar to those in non contacttype IC card100 shown in FIG. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated.
Non contact[0074]type IC card400 shown in FIG. 4 is different from conventional non contacttype IC card900 in that it includes an input data fixing circuit9 controlling data to be written into data protection region B2 of memory1.
With reference to FIG. 4, the structure of non contact[0075]type IC card400 according to the fourth embodiment of the present invention will be described.
Input data fixing circuit[0076]9 fixes a state of each location in data protection region B2 of memory1.
Input data fixing circuit[0077]9 receives data DT1 via a data line L2 as an input, converts data DT1 and outputs data DT2. Data DT2 is data to be written into data protection region B2.
A value of data DT[0078]2 output from input data fixing circuit9 is determined based on an initial state of data protection region B2. When states of all bits in data protection region B2 are “1”, for example, data DT2 always takes a value of the reverse polarity, in this case “0”. Hence, whenmain control circuit2 outputs data DT1 corresponding to the value “1”, the data writing to data protection region B2 will not be performed.
With reference to FIG. 4, an operation of non contact[0079]type IC card400 will be described specifically.
Assume that an initial state of each bit in data protection region B[0080]2 in memory1 is set to “1” (the state of bit to “1111”). In this case, input data fixing circuit9 receiving data DT1 outputs only the data DT2 of “0” for each bit.
First, data requiring security will be written into data protection region B[0081]2 (protection data storage state). Here, assume that the protection data storage state is “1100”. As described above, data DT2 output from input data fixing circuit9 takes the value “0”. Therefore, the bit once takes the state “0” cannot be returned to the state “1”. As a result, thereafter, the state of data protection region B2 (“1100”) cannot be rewritten to “1101”, for example.
Thus, data protection region B[0082]2 of non contacttype IC card400 functions as an OTP ROM (a non volatile memory allowing only one rewriting) and once data is stored in the data protection region, trial of the data rewriting is highly likely to result in a failure of an intended data setting.
Thus, as described above, as non contact[0083]type IC card400 allows the control of data to be written into the data protection region at the data writing operation, the rewriting of data once stored in the data protection region can be prevented.
Fifth Embodiment[0084]
The fifth embodiment of the present invention allows the prevention of data falsification, which is the object of the present invention, in the non contact type IC card, by controlling an address to which data is to be written at the data writing operation to the data protection region of the memory.[0085]
FIG. 5 shows a structure of a main portion of a non contact[0086]type IC card500 according to the fifth embodiment of the present invention, wherein components similar to those in non contacttype IC card100 shown in FIG. 1 are denoted by the same reference numbers and same reference characters, and the description thereof will not be repeated.
Non contact[0087]type IC card500 shown in FIG. 5, is different from conventional non contacttype IC card900 in that it includes astate setting circuit10 and an addressnon selecting circuit11 controlling a designated address to which data is to be written at the writing to data protection region B2 of memory1.
With reference to FIG. 5, the structure of non contact[0088]type IC card500 according to the fifth embodiment of the present invention will be described.
Address[0089]non selecting circuit11 receives a write enable signal RE output frommain control circuit2 and address signal AD via address line L1 as inputs. Here, address signal AD designates a location in data protection region B2 to which data DT on data line L2 is to be written. Addressnon selecting circuit11 controlled bystate setting circuit10 described below, outputs address selecting signal AC according to address signal AD.
[0090]State setting circuit10 controls address non selectingcircuit11 described above.
Address selecting signal AC output from address non selecting[0091]circuit11 changes its state according to a state (active state/inactive state) ofstate setting circuit10. More specifically, whenstate setting circuit10 is in an active state, address selecting signal AC selecting a location designated by address signal AD as a location to which data is to be written is output, and whenstate setting circuit10 is in an inactive state, address selecting signal AC selecting a location other than the location designated by address signal AD (or selecting neither of the location) is output.
Based on the address selecting signal AC output from address non selecting[0092]circuit11, data DT is written into the corresponding location in data protection region B2.
Next, an operation of non contact[0093]type IC card500 according to the fifth embodiment of the present invention will be described.
First, when[0094]state setting circuit10 is in an active state, address non selectingcircuit11 having received write enable signal RE and address signal AD outputs an address selecting signal AC selecting a location designated by address signal AD. In this case, data DT is written into the corresponding location in data protection region B2.
On the other hand, when[0095]state setting circuit10 is in an inactive state, address non selectingcircuit11 having received write enable signal RE and address signal AD outputs an address selecting signal AC selecting a location other than the location designated by address signal AD (or selecting neither of the locations). In this case, data DT is not written into the intended location of data protection region B2.
As described above, an example of such[0096]state setting circuit10 includes a fuse.
Thus even if the rewriting operation occurs, non contact[0097]type IC card500 can inhibit the rewriting of the intended data, after the data requiring security is stored in data protection region B2 (protection data storage state), by controlling the state ofstate setting circuit10.
Thus, as non contact[0098]type IC card500 allows the control of address selection in the data protection region at the data writing operation, rewriting and use of the data previously stored in the data protection region can be prevented.
Sixth Embodiment[0099]
According to the sixth embodiment of the present invention, a non contact type IC card includes an OTP ROM (an non volatile memory allowing only one rewriting) as a storage medium corresponding to the data protection region.[0100]
FIG. 6 shows a structure of a main portion of a non contact[0101]type IC card600 according to the sixth embodiment of the present invention, wherein components similar to those in non contacttype IC card100 shown in FIG. 1 are denoted by the same reference characters and the description thereof will not be repeated.
Non contact[0102]type IC card600 shown in FIG. 6 is different from conventional non contacttype IC card900 in that it includes amemory15 and amemory16 instead of memory1.
With reference to FIG. 6, the structure of non contact[0103]type IC card600 according to the sixth embodiment of the present invention will be described.
[0104]Memory15 is a storage medium storing rewritable data whereasmemory16 is a storage medium storing data requiring the security.
Specifically,[0105]memory15 includes a non volatile memory allowing rewriting as required such as an EEPROM and a flash memory, whereasmemory16 includes a memory allowing only one rewriting such as an EPROM.
Next, an operation of non contact[0106]type IC card600 according to the sixth embodiment of the present invention will be described. For simplicity, in the description,memory16 is assumed to be an EPROM.
Data to be held that is output from[0107]main control circuit2 is stored inmemory15 ormemory16.
In this case, as[0108]memory16 is an EPROM, once electric charge is stored in a memory cell not shown, the electric charge cannot be discharged until it is exposed to ultraviolet light. Therefore, assuming that the state of a memory cell with electric charge stored is called state1 and the discharged state of the memory cell is called state0, after the encapsulation ofIC card600, inmemory16, a memory cell in the state0 can be charged to be the state1, however, a memory cell in the state1 cannot be rewritten to be the state0.
Therefore, it is highly unlikely that the trial of rewriting of data once stored in[0109]memory16 achieves the intended data rewriting.
Thus, with the use of an OTPROM as a medium for storing data to be protected, non contact[0110]type IC card600 allows the suppression of data falsification to an extremely low level.
As can be seen from the foregoing, according to the present invention, the rewriting of storage region in which data requiring the security is stored can be prevented through the control of data rewriting.[0111]
In addition, according to the present invention, as the rewriting can be controlled with respect to the storage region in which data requiring the security is stored, the reliability of the non contact type IC card can be dramatically improved.[0112]