Setting or changing an access condition for an access management apparatus and method of a portable electronic device

• US 20040199788A1
• Filed: 04/28/2004
• Published: 10/07/2004
• Est. Priority Date: 03/24/1998
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Iijima, Yasuo
• Granted Patent: US 7,296,289 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An access management apparatus receives a command message having setting and changing functions, performs corresponding processing, and transmits results. A checking unit checks the presence/absence of a data element to be accessed. Access is permitted based on looking up a setting access condition if the data element is not set and looking up a changing access condition if the data element is set. A control table contains identification information, location information, a data setting access condition, and a data changing access condition of each of a plurality of data elements. When receiving a command, a determining unit determines whether the designated data element is already set by looking up location information of the data element in the control table. A data setting/changing unit sets or changes data in accordance with the access condition looked up.

Claims

1. An access management method of receiving a same command message having both setting and changing functions, performing corresponding processing, and transmitting the result to an external apparatus, comprising:

checking the presence/absence of a data element to be accessed when receiving the same command message having both said setting and changing functions; and

determining whether access is to be permitted by looking up a setting access condition if the data element is not set and looking up a changing access condition if the data element is set.

2. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a memory area to be accessed.

3. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed.

4. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed; and

setting an allowable length for each data element for changing/setting each data element.

5. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed;

setting an allowable length for each data element for changing/setting each data element; and

setting a unique length or the maximum allowable length.

6. An access management apparatus for receiving a same command message having both setting and changing functions, performing corresponding processing, and transmitting the result to an external apparatus, comprising:

checking means for checking the presence/absence of a data element to be accessed when receiving the same command message having both said setting and changing functions; and

determining means for determining whether access is to be permitted by looking up a setting access condition if the data element is not set and looking up a changing access condition if the data element is set.

7. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a memory area to be accessed.

8. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed.

9. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed; and

means for setting an allowable length for each data element for changing/setting each data element.

10. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed;

means for setting an allowable length for each data element for changing/setting each data element; and

means for setting a unique length or the maximum allowable length.

11. A portable electronic device for receiving a same command having a plurality of functions from an external apparatus, and performing corresponding processing, comprising:

a memory storing a control table containing identification information, location information, a data setting access condition, and a data changing access condition of each of a plurality of data elements;

determining means for determining, when receiving a command including identification information of a data element from an external apparatus, whether the designated data element is already set by looking up location information of the data element in the control table;

first look-up means for looking up a data setting access condition in the control table if said determining means determines that the data element is not set;

second look-up means for looking up a data changing access condition in the control table if said determining means determines that the data element is already set; and

means for setting or changing data in accordance with the access condition looked up by said first or second look-up means.

12. A portable electronic device for receiving a same command having a plurality of functions from an external apparatus, and performing corresponding processing, comprising:

a memory storing a control table containing identification information, location information, allowable length information, and discrimination information, which discriminates whether the allowable length information is fixed length information or a maximum length, of each of a plurality of data elements;

size determining means for, when receiving a command including identification information and setting data of a data element from an external apparatus, looking up allowable length information of the data element and discrimination information for discriminating whether the allowable length information is fixed length information or a maximum length, and determining whether a length of the received data element equals the fixed length information if the allowable length information is the fixed length information or determining whether the length of the received data element is not more than the maximum length if the allowable length information is the maximum length; and

means for setting the data if said size determining means determines that a size of the received data is a suitable size.