Secure device and system for issuing IC cards

• US 7,428,992 B2
• Filed: 01/10/2006
• Issued: 09/30/2008
• Est. Priority Date: 01/11/2005
• Status: Active Grant

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Takeuchi, Yasuo, Tanabiki, Masamoto, Tsurukiri, Emi, Sato, Mitsuhiro
• Primary Examiner(s): Labaze; Edwyn
• Application Number:
  US10/598,661
• Publication Number:
  US 20070136797A1
• Time in Patent Office: 994 Days
• Field of Search: 235/441, 235/492, 235/380, 235/382, 235/382.5, 235/375, 235/439, 726/6
• US Class Current: 235/441
• CPC Class Codes: G06K 17/00 Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02

Abstract

A secure device capable of reducing influences by interruptions of communication with an external device and allowing a user to install a desired application program speedily and safely. Command storage section (106) of this secure device (100) stores command groups for executing card issuance. Card issuance section (104) extracts a series of card issuance commands corresponding to a function of a card to be acquired from the command group stored in command storage section (106) and writes the commands into a buffer of card management section (102), Card management section (102) executes each card issuance command written by card issuance section (104). Card issuance is completed through internal processing of secure device (100).

Claims

1. A secure device that executes card issuance in response to a command from an external device, the secure device comprising:

a card issuance section that extracts a card issuance command corresponding to a function of a card to be acquired from-command groups stored in an internal memory; and

a card management section that executes the card issuance command extracted by said card issuance section,

the card issuance comprises;

outputting the card issuance command from said card issuance section to said card management section, executing the card issuance command by said card management section, and outputting a response from said card management section to said card issuance section, indicating that the card issuance execution is completed, and

wherein card issuance is executed only by communication within said secure device after receiving the command from said external device.

2. The secure device according to claim 1, wherein the command group is written by direct access from an external device to the internal memory.

3. The secure device according to claim 1, wherein said card management section starts to execute the card issuance command based on a request from an external device and sends a response to the external device indicating whether or not the card issuance has been successful.

4. The secure device according to claim 3, wherein said card issuance section monitors whether or not each card issuance command has been successfully executed at said card management section and outputs, to said card management section, when some card issuance commands have not been successfully executed, information to identify card issuance commands that have been successfully executed, and

said card management section sends a response to the external device including information indicating that some card issuance commands have not been successfully executed and identifying the card issuance commands that have been successfully executed.

5. The secure device according to claim 3, wherein said card management section stores an interruption history in executing the card issuance command, reports, to said card issuance section, a first card issuance command which has not sent any response to the external device, and

said card issuance section identifies a card issuance command to be executed first from the interruption history and the first card issuance command which has not sent any response to the external device and restarts execution of the card issuance command.

6. The secure device according to claim 1, further comprising a privileged mode management section that sets a privileged mode which prevents communication between said card management section and an external device,

wherein said privileged mode management section sets the privileged mode at a time at which execution of the card issuance command begins.

7. The secure device according to claim 6, wherein said card issuance section determines whether or not all card issuance commands have been successfully executed at said card management section, outputs a privileged mode cancellation request to said privileged mode management section when said card issuance section determines that all card issuance commands have been successfully executed or decides that some card issuance commands have not been successfully executed, and

said privileged mode management section cancels the privileged mode when the privileged mode cancellation request is input from said card issuance section.

8. The secure device according to claim 1, wherein said card issuance section comprises a direct reference section that directly refers to the command groups stored in the internal memory, and

said card management section executes the card issuance command through the direct reference section.

9. The secure device according to claim 1, wherein said card management section comprises a file management table to identify a file for storing a plurality of command groups corresponding to a plurality of card functions stored in the internal memory and executes a card issuance command which relates to a command group stored in a file specified by the external device.

10. An IC card issuance system comprising a secure device and an external device that communicates with the secure device,

wherein said external device comprises a command generator that generates a request command requesting card issuance and a command sender that sends the generated request command to said secure device, and

said secure device comprises a card issuance section that extracts a card issuance command corresponding to a function of a card to be acquired from command groups stored in an internal memory and a card management section that executes, when the request command is input, the card issuance command extracted by said card issuance section,

wherein said card management section of said secure device sends a response to said external device indicating whether or not the card issuance has been successful and

said external device comprises a response receiver that receives the response and a self-issuance management section that analyzes the response, ends card issuance when the response indicates that card issuance has been successful and outputs an instruction for resending the request command to said command generator when the response does not indicate that card issuance has been successful.

11. The IC card issuance system according to claim 10, wherein said card issuance section of said secure device monitors whether or not each card issuance command has been successfully executed at said card management section and outputs to said card management section, when some card issuance commands have not been successfully executed, information that identifies the card issuance commands that have been successfully executed, said card management section of said secure device sends, to the external device, a response including information indicating that some card issuance commands have not been successfully executed and identifying the card issuance commands that have been successfully executed, and

said self-issuance management section of said external device analyzes the response and outputs an instruction to said command generator for sending a request command for starting card issuance by executing the card issuance commands that have not been successfully executed.

12. A secure device comprising:

a card issuance section that extracts a card issuance command corresponding to a function of a card to be acquired from command groups stored in an internal memory;

a card management section that executes the card issuance command extracted by said card issuance section; and

a privileged mode management section that sets a privileged mode which prevents communication between said card management section and an external device,

wherein said privileged mode management section sets the privileged mode at a time at which execution of the card issuance command begins.

13. The secure device according to claim 12, wherein said card issuance section determines whether or not all card issuance commands have been successfully executed at said card management section, outputs a privileged mode cancellation request to said privileged mode management section when said card issuance section determines that all card issuance commands have been successfully executed or determines that some card issuance commands have not been successfully executed, and

said privileged mode management section cancels the privileged mode when the privileged mode cancellation request is input from said card issuance section.

14. The secure device according to claim 12, wherein the command group is written by direct access from an external device to the internal memory.

15. The secure device according to claim 12, wherein said card management section starts to execute the card issuance command based on a request from an external device and sends a response to the external device indicating whether or not the card issuance has been successful.

16. The secure device according to claim 12, wherein said card issuance section monitors whether or not each card issuance command has been successfully executed at said card management section and outputs, when some card issuance commands have not been successfully executed, information to identify card issuance commands that have been successfully executed to said card management section, and

said card management section sends a response including information indicating that some card issuance commands have not been successfully executed and identifying the card issuance commands that have been successfully executed to the external device.

17. The secure device according to claim 12, wherein said card issuance section comprises a direct reference section that directly refers to the command groups stored in the internal memory, and

said card management section executes the card issuance command through the direct reference section.

18. The secure device according to claim 12, wherein said card management section comprises a file management table to identify a file for storing a plurality of command groups corresponding to a plurality of card functions stored in the internal memory and executes a card issuance command which relates to a command group stored in a file specified by the external device.

19. A secure device comprising:

a card issuance section that extracts a card issuance command corresponding to a function of a card to be acquired from command groups stored in an internal memory; and

a card management section that executes the card issuance command extracted by said card issuance section,

wherein said card management section starts to execute the card issuance command based on a request from an external device and sends a response to the external device indicating whether or not the card issuance has been successful,

wherein said card management section stores an interruption history in executing the card issuance command, reports to said card issuance section a first card issuance command which has not sent any response to the external device and

said card issuance section identifies a card issuance command to be executed first from the interruption history and the first card issuance command which has not sent any response to the external device and restarts execution of the card issuance command.

20. A secure device comprising:

a card issuance section that extracts a card issuance command corresponding to a function of a card to be acquired from command groups stored in an internal memory; and

a card management section that executes the card issuance command extracted by said card issuance section,

wherein said card management section starts to execute the card issuance command based on a request from an external device and sends a response, to the external device, indicating whether or not the card issuance has been successful,

wherein said card issuance section monitors whether or not each card issuance command has been successfully executed at said card management section and outputs, to said card management section, when some card issuance commands have not been successfully executed, information to identify up to which card issuance command the execution has been successful, and

said card management section sends a response to the external device including information indicating that some card issuance commands have not been successfully executed and identifying the card issuance commands that have been successfully executed.