IC card having internal error checking capability

• US 4,930,129 A
• Filed: 03/11/1988
• Issued: 05/29/1990
• Est. Priority Date: 03/13/1987
• Status: Expired due to Term

• Current Assignee: Mitsubishi Denki Kabushiki Kaisha (Mitsubishi Electric Corporation)
• Original Assignee: Mitsubishi Denki Kabushiki Kaisha (Mitsubishi Electric Corporation)
• Inventors: Takahira, Kenichi
• Primary Examiner(s): Fleming, Michael R.
• Application Number:
  US07/166,624
• Time in Patent Office: 809 Days
• Field of Search: 371/38, 371/39, 371/37, 371/40
• US Class Current: 714/766
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An IC card particularly adapted for multiple functions and having an error checking capability which operates within the card and without the need for the processing power of the terminal. The IC card has an onboard memory and an onboard microprocessor. The onboard memory contains a plurality of application blocks to which access is selectively allowed by the microprocessor and a protected block which is accessible by the microprocessor but inaccessible by the terminal. Stored within the protected block are data specifying the location, size and application associated with each of the application blocks, as well as an error check code relating to the data then stored within the application block.

Claims

1. An IC card adapted to interface with at least one terminal for performing a plurality of applications, the IC card comprising in combination:

onboard memory means divided into a plurality of application blocks for storage of information related to the applications, some of the application blocks being of a size different from others, the memory means also having a protected block for storage of application block information including directory data and an error check code relating to each of the plurality of application blocks;

an onboard microprocessor for controlling access to the memory in such a way as to prevent access to the protected block by the terminal and to selectively allow access to the application blocks by the terminal for selectively performing the applications; and

program means for causing the microprocessor

(a) to compute an error check code for a data group related to one of the plurality of applications, and to store the data group in a selected application block and the computed error check code in the protected block in the location associated with the selected application block when the data group is sent from the terminal,

(b) to detect data error in the stored data group in an application block accessed from the terminal by using the data group and the error check code thereof when the data block is read out to the terminal.

2. An IC card according to claim 1 wherein the protected block includes a plurality of memory locations, one for each application block, the protected block being configured such that the information related to the application blocks associates the directory data with the error check code for each respective application block.

3. An IC card according to claim 2 further including means responsive to an open command for accessing a particular application file to initiate the detection step (b) and means responsive to a close command for completing access to an application block for invoking the computation step (a).

4. An IC card according to claim 3 wherein there is provided means for detecting whether the data in an application block has been written and in response thereto invoking step (a) of computing an error check on the rewritten data.

5. An IC card according to claim 2 including means responsive to reception of a read command from the terminal for invoking step (b) of detecting a data error and means for responding to a write command from the terminal for invoking step (a) of computing an error check.

6. A method of operating a multiple application IC card, the IC card having an onboard microprocessor and an onboard memory, the method comprising the steps of

(a) partitioning the memory into a protected block and a plurality of application blocks relating to the plurality of applications, at least some of the application blocks being of a size different than others,

(b) storing application block information in the protected block including directory data indicating the locations of the respective application blocks associated with an error check code relating to the data stored within the application blocks,

(c) responding to a request for access to a selected application block by locating the block using the stored directory data and performing an error check on the stored data using the error check code stored in the protected block which corresponds to the selected application block, and

(d) responding to an operation in which data within a selected application block is altered by performing an error check code computation on the data within the selected block and storing the error check code in the protected area in the location associated with the selected block.

7. A method according to claim 6 further including the step of testing for the performance of a write operation and performing step (d) when a write operation is detected.

8. A method according to claim 6 wherein the step (d) is invoked after all of the read and write operations are completed in a file access operation.

9. A method according to claim 6 in which the step (c) is performed in response to a read command directed to the selected application block and the step (d) is performed in connection with a write command directed to the selected application block.