Setting or changing an access condition for an access management apparatus and method of a portable electronic device

• US 7,296,289 B2
• Filed: 04/28/2004
• Issued: 11/13/2007
• Est. Priority Date: 03/24/1998
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Iijima, Yasuo
• Primary Examiner(s): Song; Hosuk
• Assistant Examiner(s): Ha; Leynna T.
• Application Number:
  US10/833,174
• Publication Number:
  US 20040199788A1
• Time in Patent Office: 1,294 Days
• Field of Search: 711/145, 711/151, 711/158, 711205-207, 711/168, 713200-201, 707/7, 707 9- 10, 709206-207, 709/225, 709228-229, 705/75, 726 2- 5, 726/26, 726/30
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An access management apparatus receives a command message having setting and changing functions, performs corresponding processing, and transmits results. A checking unit checks the presence/absence of a data element to be accessed. Access is permitted based on looking up a setting access condition if the data element is not set and looking up a changing access condition if the data element is set. A control table contains identification information, location information, a data setting access condition, and a data changing access condition of each of a plurality of data elements. When receiving a command, a determining unit determines whether the designated data element is already set by looking up location information of the data element in the control table. A data setting/changing unit sets or changes data in accordance with the access condition looked up.

Claims

1. An access management method of receiving a same command message having both setting and changing functions, performing corresponding processing, and transmitting the result to an external apparatus, comprising:

receiving in the same command message having both setting and changing functions, information including a length for a data element;

determining whether the length of the data element is a suitable size, including;

implementing a memory storing a table containing identification information, location information, allowable length information, and discrimination information, which discriminates whether the allowable length information is fixed length information or a maximum length, of each of a plurality of data elements;

implementing size determining means for, when receiving a same command having a plurality of functions and including identification information and setting data of a data element from an external apparatus, looking up allowable length information of the data element and discrimination information for discriminating whether the allowable length information is fixed length information or a maximum length, and determining whether a length of the received data element equals the fixed length information if the allowable length information is the fixed length information or determining whether the length of the received data element is not more than the maximum length if the allowable length information is the maximum length; and

implementing means for setting the data if said size determining means determines that a size of the received data is a suitable size; and

checking the presence/absence of the data element to be accessed when receiving the same command message having both said setting and changing functions to reflect that the length of the data element is a suitable size.

2. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a memory area to be accessed.

3. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed.

4. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed; and

setting an allowable length for each data element for changing/setting each data element.

5. A method according to claim 1, further comprising:

receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed;

setting an allowable length for each data element for changing/setting each data element; and

setting a unique length or the maximum allowable length.

6. An access management apparatus configured to receive in a same command message having both setting and changing functions, information including a length for a data element, perform corresponding processing, and transmit the result to an external apparatus, comprising:

a control device configured to determine whether the length of the data element is a suitable size, including;

implementing a memory storing a table containing identification information, location information, allowable length information, and discrimination information, which discriminates whether the allowable length information is fixed length information or a maximum length, of each of a plurality of data elements;

implementing size determining means for, when receiving a same command having a plurality of functions and including identification information and setting data of a data element from an external apparatus, looking up allowable length information of the data element and discrimination information for discriminating whether the allowable length information is fixed length information or a maximum length, and determining whether a length of the received data element equals the fixed length information if the allowable length information is the fixed length information or determining whether the length of the received data element is not more than the maximum length if the allowable length information is the maximum length; and

implementing means for setting the data if said size determining means determines that a size of the received data is a suitable size; and

checking means for checking the presence/absence of the data element to be accessed when receiving the same command message having both said setting and changing functions to reflect the length of the data element is a suitable size.

7. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a memory area to be accessed.

8. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed.

9. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed; and

means for setting an allowable length for each data element for changing/setting each data element.

10. An apparatus according to claim 6, further comprising:

means for receiving a command having a plurality of functions and determining whether access is to be permitted by selecting an access condition to be looked up in accordance with a storage state of a data element to be accessed;

means for setting an allowable length for each data element for changing/setting each data element; and

means for setting a unique length or the maximum allowable length.

11. A portable electronic device for receiving a same command having a plurality of functions from an external apparatus, and performing corresponding processing, comprising:

a memory storing a control table containing identification information, location information, a data setting access condition, and a data changing access condition of each of a plurality of data elements;

a length for a data element included in the same command having both setting and changing functions;

a module for determining whether the length of the data element is a suitable size, including;

implementing a memory storing a table containing identification information, location information, allowable length information, and discrimination information, which discriminates whether the allowable length information is fixed length information or a maximum length, of each of a plurality of data elements;

implementing size determining means for, when receiving a same command having a plurality of functions and including identification information and setting data of a data element from an external apparatus, looking up allowable length information of the data element and discrimination information for discriminating whether the allowable length information is fixed length information or a maximum length, and determining whether a length of the received data element equals the fixed length information if the allowable length information is the fixed length information or determining whether the length of the received data element is not more than the maximum length if the allowable length information is the maximum length; and

implementing means for setting the data if said size determining means determines that a size of the received data is a suitable size; and

determining means for determining, when receiving a same command having a plurality of functions and including identification information of a data element from an external apparatus, whether the designated data element is present by looking up location information of the data element in the control table; and

first look-up means for looking up a data setting access condition in the control table if said determining means determines that the data element is absent;

second look-up means for looking up a data changing access condition in the control table if said determining means determines that the data element is present; and

means for setting or changing data in accordance with the access condition looked up by said first or second look-up means, when receiving the same command message having both said setting and changing functions to reflect the length of the data element is a suitable size.