Technical field
[0001]
The present disclosure relates to an information processing apparatus and an information processing method.
BACKGROUND
[0002]
Recently, with the spread of IC (Integrated Circuit) card motion utilizing multiple services with a single IC card has become popular, the related art is disclosed numerous. For example, Patent Document 1, when a plurality of application performs the processing to the IC card, the terminal (reader-writer, etc.) or a server, a technique for appropriately controlling a plurality of applications are disclosed.
CITATION
Patent Document
[0003]
Patent Document 1: JP 2007-279966 JP
Summary of the Invention
Problems that the Invention is to Solve
[0004]
　However, in the case where the information processing device such as an IC card corresponds to more services, for processing by the terminal (reader-writer, etc.) or a server is increased, there is a problem that the load on the servers and terminals increases. Therefore, it possible to more processing has been required by the information processing apparatus such as an IC card.
[0005]
　The present disclosure has been made in view of the above, it is an object of the present disclosure, which can be linked to the data and processing for a plurality of services, providing a novel and improved information processing apparatus It is to.
Means for Solving the Problems
[0006]
　According to the present disclosure, are associated with the storage medium, comprises a processing unit for processing the data relating to services corresponding to a plurality of services, the information processing apparatus is provided.
Effect of the invention
[0007]
　According to the present disclosure described above, it is possible to link the data and processing for a plurality of services.
[0008]
　Incidentally, the above effect is not necessarily restrictive, with the above effects, or instead of the above effects, any effects shown herein, or other effects that may be grasped from the description, it may be achieved.
BRIEF DESCRIPTION OF THE DRAWINGS
[0009]
Is an explanatory diagram showing an example of an information processing system in FIG. 1 embodiment.
It is an explanatory view showing a configuration of an IC card in FIG. 2 embodiment.
3 is an explanatory diagram showing a hierarchical structure of data or the like included in the IC card.
FIG. 4 is an explanatory diagram showing a processing flow of associating the data in this embodiment.
FIG. 5 is an explanatory diagram showing a processing flow of setting the program in the present embodiment.
In [6] The present embodiment is an explanatory diagram showing the operation of the IC card and the reader-writer.
7 is an explanatory diagram showing a setting pattern of the data and programs associated with the present embodiment.
8 is an explanatory view showing a configuration of a logic card of the present embodiment.
9 is an explanatory diagram showing a hierarchical structure of data to be stored in the storage region in the present embodiment.
Is an explanatory diagram showing an association between the storage area in FIG. 10 embodiment.
11 is an explanatory diagram showing a hardware configuration of an IC card in this embodiment.
DESCRIPTION OF THE INVENTION
[0010]
　Reference will now be described in detail preferred embodiments of the present disclosure. In the specification and the drawings, components having substantially the same function and structure are a repeated explanation thereof by referring to the figures.
[0011]
　The description will be made in the following order.
　　<1. The first
　　embodiment> 1-1. Outline of an information processing system
　　1-2. The configuration of the IC card 100
　　1-3. The association of the data in the IC card 100
　　1-4. Set of programs in the IC card 100
　　1-5. IC card 100 and the operation of the reader-writer 200
　　<2. Second
　　Embodiment> <3. Example of the hardware configuration of the information processing apparatus>
[0012]
　<1. The first
　embodiment> [1-1. Overview of Information Processing System]
　First, referring to FIG. 1, an outline of an information processing system in the embodiment of the present disclosure. Figure 1 is an explanatory diagram showing an example of an information processing system in the present embodiment. As shown in FIG. 1, an information processing system in this embodiment includes an IC card 100 and the reader-writer 200, the IC card 100 and the reader-writer 200 is connected by a channel 300. IC card 100 in this embodiment, short-range wireless communication: a non-contact type IC card to be used for (NFC Near Field Communication).
[0013]
　Contactless IC card, it is utilized in the electronic money system or security system, etc., is recently widespread information processing apparatus. IC card is divided into a large contact type IC card and the contactless IC card. Contact type IC card, the module terminal is brought into contact with the reader writer, via the module terminal, an IC card of the type that communicates with a reader-writer. On the other hand, the non-contact type IC card includes a module for wireless communication, an IC card of the type performing the writer and wireless communication. For non-contact type IC card, when the user uses the IC card, there is no need to take out the IC card from the wallet or card case, etc., because of high convenience, be used when settlement such as transportation and retail case is increasing.
[0014]
　IC card 100 according to an embodiment of the present disclosure is to a non-contact type IC card as an example and is not limited to the non-contact type IC card. Specifically, the IC card 100 according to an embodiment of the present disclosure, for example, contact-type IC card, various communication devices with built-in IC card (mobile phone, wrist watch, PDA (Personal Digital Assistant), a portable game machine, a portable it may be embodied by the type video / audio players, etc.) and an information processing apparatus such as various servers. That is, embodiments of the present disclosure is not limited to the form of the card.
[0015]
　Furthermore, the one IC card 100 can be applied to multiple services. More specifically, one of the IC card 100, it is possible to correspond to a plurality of service of authentication services, such as ticket sales services that transportation is provided, the product sales service and financial institutions that retailers offer to provide . Then, the user, since it is not necessary to possess a dedicated IC card in order to take advantage of each service, it is easy to manage the IC card.
[0016]
　Writer 200, when the IC card 100 is decorated by the user, by performing non-contact communication with the IC card 100 is an information processing apparatus for reading and writing of data to the IC card 100. The reader writer 200 may be performed the reading and writing of data from the IC card 100. By writer 200 and the IC card 100 performs non-contact communication with each other, the user using the IC card 100 is able to receive various services.
[0017]
　Writer 200 according to an embodiment of the present disclosure is merely an example, embodiments of the present disclosure is not limited to the reader-writer 200. Specifically, the reader writer 200 according to an embodiment of the present disclosure, for example, automatic ticket gate of transportation, retail cash register, various vending machines of goods, financial institutions ATM (Automated / Automatic Teller Machine) and it may be embodied by an information processing apparatus such as various servers.
[0018]
　Channel 300 is a transmission path for short-range wireless communication (NFC). If, IC card 100 and the reader-writer 200, when replaced with an information processing apparatus such as various servers, communications path 300, a public wireless LAN (Local Area Network), Bluetooth (registered trademark) and infrared communication or the like short-distance wireless communication network, the Internet, or a public line network such as a telephone line network and satellite communication network, Ethernet (registered trademark) various LAN including, may include such WAN (Wide Area Network). The communication path 300 may include a leased line network such as such as IP-VPN (Internet Protocol-Virtual Private Network).
[0019]
　[1-2. Configuration of IC Card 100]
　In the above, in the present embodiment, an overview of an information processing system. Subsequently, with reference to FIGS. 2 and 3, illustrating the configuration of the IC card 100. Figure 2 is an explanatory view showing a configuration of the IC card 100 in the present embodiment, FIG. 3 is an explanatory diagram showing a hierarchical structure of such data included in the IC card 100. As shown in FIG. 2, IC card 100, processor 101, storage unit 102, a communication unit 103, encryption unit 104 includes a decoding unit 105,.
[0020]
　First, the communication unit 103 is an interface for the reader-writer 200, the polling from the reader writer 200 (Polling) request, receives various requests such as authentication message requests and data read and write requests. Further, the communication unit 103, to the various requests, polling reply, transmits various replies such as authentication message reply and data reading and writing replies. Further, although not shown, the communication unit 103 is, for example, composed of the modem circuit, a front-end circuit and a power supply reproducing circuit.
[0021]
　Modulation and demodulation circuit, for example ASK (Amplitude Shift Keying) modulation data in such a modulation scheme and demodulates. Power recovery circuit using antenna unit (not shown), the RF (Radio Frequency) operating field of the carrier wave received from the reader writer 200 to generate electric power by electromagnetic induction, taken in as the electromotive force of the IC card 100. The front-end circuit, a carrier reader writer 200 is sent, received using the antenna unit demodulates the carrier, it acquires a command or data from the reader writer 200 via the decoder unit 101 supplied to. Further the front-end circuit in response to commands and data relating to a predetermined service generated by the processing unit 101 modulates the carrier wave, the carrier wave transmitted from the antenna unit to the reader writer 200.
[0022]
　Encryption unit 104 and decryption unit 105 may be configured in a cryptographic co-processor (Co-Processor) or the like of the hardware with cryptographic processing function. For example, the encryption unit 104 and decryption unit 105 according to this embodiment is constituted by the co-processor corresponding to DES (Data Encryption Standard) and AES (Advanced Encryption Standard) plurality of encryption algorithms such as. By mounting such a co-processor, IC card 100 is enabled to wirelessly communicate with the reader-writer 200 and a plurality of cryptographic algorithms.
[0023]
　Processing unit 101, storage unit 102, a communication unit 103, encryption unit 104 controls the decoding unit 105, the execution and the like of the predetermined arithmetic processing, and a program. For example, processing unit 101 processing when communicating with the reader-writer 200 for a given service, or perform processing on the data related to the service storage unit 102 stores, with respect to the data by executing a program the to and go.
[0024]
　Storage unit 102 stores data concerning a plurality of services which the IC card 100 correspond. Specifically, as shown in FIG. 3, the storage unit 102 stores system forming a hierarchical structure, a directory, data and the like. Here, the system is a concept bundling the entire hierarchical structure, there one per hierarchy. Then, directory and is also referred to as "area", is a concept that bundling the data under, may be a plurality of presence per hierarchical structure. Directory may be placed under the system or other directories. Finally, which data A includes information necessary for providing the various services, it may be plural exist per hierarchy. Data may be placed under the system or directory.
[0025]
　When the IC card 100 corresponds to a plurality of services, the data relating to one of the service, may be included under the single directory may be included in a state of separated under the multiple directories. Also, one of the services, be made by one of the data, it may be made by a plurality of data.
[0026]
　In the hierarchical structure storage unit 102 stores, the system and various settings of the higher level directory can affect the directory and data are placed on their subordinate. Here, various settings and, for example, the system, the authentication key to the directory or data, an authentication method and access rights.
[0027]
　For example, the setting of access rights to directories that are located in the upper, may be the default setting for access to other directories and data located under the relevant directory. In other words, when access to the other directories and data is not set separately, the access right setting for the higher directory can be inherited. Such function, since it is not necessary to individually perform various settings for directories and data, it is possible to reduce the management load of the directories and data.
[0028]
　The storage unit 102 may store the data for each of the plurality of services, with the associated between different services. Associating how the data is associated with by the link (hereinafter, referred to as "associated" refers to the association by the link) that there is an association by the program.
[0029]
　Specifically, as the association 1 and association 2 shown in FIG. 3, the processing unit 101, and associate data with each other to be present under different directories, such as the association 3, data between existing under the same directory it is possible to or associated with. The association is the association by the link. On the other hand, the processing unit 101 may be the set in the data so that the association 4 programs, associating data with each other. The association is the association programmatic.
[0030]
　Although not shown, between three or more data may be associated with the data (or between services). The storage unit 102 is assumed to be a storage medium provided in the IC card 100. For more information about the association of data with each other, it will be described in the "association of data in 1-3.IC card 100".
[0031]
　Further, the storage unit 102 may store these programs in a state of setting the program system, the directory or data. Specifically, as shown in FIG. 3, the default program to the system 1, a program 1 to the directory 1, it is possible to set a program 2, etc. to the data 1-1 and the like. Also, as in the program 5, by setting the program to a plurality of data, it is also possible to associate the above data. Here, the default program is a program that is set to the system unit, the directory placed under the system, a program for performing processing on the data and programs. However, the default program, the data and the like may operate by default program alone without processing.
[0032]
　The program that is set to the directory and data directory placed under the said directory and data, but performs a process for data and programs, even when operating in single program similar to the default program good.
[0033]
　In the hierarchical structure storage unit 102 stores the system, directory or data access various settings such rights may be affected to the program to be set to their subordinate. For example, the setting of access rights to directories that are located in the upper, may be the default setting for access to a program set under the relevant directory. In other words, if the access to the program is not set separately, the access right setting to the higher of the directory can be inherited. Such function, since it is not necessary to individually perform various settings for a program, it is possible to reduce the management burden. For more information on the settings of the program will be explained in the "setting of the program in 1-4.IC card 100".
[0034]
　[1-3. Associations of the data in the IC card 100
　in the above configuration has been described in the IC card 100. As the storage unit 102 shown in FIG. 3 can store the data for each of the plurality of services, with the associated between different services.
[0035]
　As an example, the data B related to the data A and the service B associated with the service A is associated. Then, the processing unit 101 of the IC card 100, if they perform processing related to the service A, it is possible to perform the processing on the data B as well as the data A. Similarly, the processing unit 101 of the IC card 100, if they perform processing related to the service B, it is possible to perform the processing on the data A as well as the data B.
[0036]
　Here, the processing unit 101 of the IC card 100, the access rights in the case of performing processing on the data A and data B may be flexibly set. For example, if the process for the service A is performed, the access to the data A, "can read and write", "read and write (for example, a predetermined operation only) can" be set to "read may", etc. it can. Meanwhile, for the access to the data B, "can read and write", "read and write (for example, a predetermined operation only) can" can be set to "read may" and the like. In this case, the access rights are set in data A and data B may be different.
[0037]
　Further, as shown in FIG. 3, it is possible to set the program for the data. Then, it is possible to flexibly set the access rights to the program. For example, is set with the program A to the data A, the program B is set for the data B. And if the process for the service A is performed, processing unit 101 is either also feasible program A and program B, to set the like or can be executed only one of the program A or program B it can.
[0038]
　Next, with reference to FIG. 4, a process flow for associating data between multiple services. Figure 4 is a process flow for associating data A relating to the service A, and data B related to the service B. Here, the reader-writer A in FIG. 4 is a reader writer corresponding to the service A, the reader-writer B is assumed to be a writer corresponding to the service B. Moreover, since this is an example, mainly in the processing flow are not necessarily limited to the reader-writer A and writer B. Specifically, mainly in the processing flow had writer A and writer and B the same function, and those that can be replaced with various servers such as the external system A and the external system B. The reader-writer A and writer B may be an integral.
[0039]
　First, the reader-writer A is to create a shared information A (S400), encrypts the shared information with a predetermined algorithm (S404). The data sharer B creates shared information B (S408), it encrypts the shared information (S412).
[0040]
　Here, the shared information is that the various information necessary to associate the data contains information about the access right setting between services in the shared information. Specifically, the shared information A, setting information of the access rights for the data A and data B are included, also share information B, which contains the configuration information for the access rights for the data A and data B . Processing unit 101, by matching the shared information A and the shared information B, it associates the data A and data B. For example, processing unit 101, if the contents of the shared information A and shared information B match, determines that the service A and service B mutual agreement is taken, associating the data A and data B. In order to make an association, not need to match the shared information A and shared information B.
[0041]
　Furthermore, the shared information may include information about the access rights for programs A and B. Processing unit 101, by matching the information about the access rights contained in the shared information A and the shared information B, determines whether to share the program A and program B for both services. Also, it can be included in the shared information, the hash value of the program. Then, when the processing unit 101 match the shared information A and the shared information B, by the hash value included together coincide, it is possible to share the program A and program B for both services.
[0042]
　Subsequently, when the user is close to the IC card 100 to the reader-writer A, the IC card 100 to pass through the carrier generated by the reader-writer A. Then, the power regeneration circuit comprising a communication unit 103 of the IC card 100 generates the power. Then, IC card 100 starts the power as electromotive force (S416).
[0043]
　Next, the reader writer A transmits a polling request to the IC card 100 (S420). Specifically, the reader-writer 200 may continue to transmit a constantly polling request before the IC card 100 approaches.
[0044]
　Polling request includes identification information for identifying the type of the IC card 100. Note that the identification information, as long as information capable of specifying the type of the IC card 100 may be any identification information may be a system code or ID, or the like. In the present embodiment, illustrating a system code as identification information. Specifically, the reader-writer 200, by performing the polling type of the desired IC card you want to handle specified in the system code, reacted only kind of desired IC card can be a polling reply . That is, other than the desired IC card, when it receives the polling, since the system code contained in the polling is different, not transmit a polling reply. Then, for example, in a state where the user has a plurality of stacked type IC card, when brought close to the reader-writer 200, it is possible to perform processing only on the desired IC card. In this embodiment, IC card 100, and holds the system code A.
[0045]
　IC card 100 that has received the polling request transmits a polling reply to the reader-writer A (S424). Writer A receives the polling reply, creates an authentication message request, transmits an authentication message request to the IC card 100 (S428). IC card 100 receives the authentication message requests from the reader-writer A, creates an authentication message reply, transmits an authentication message reply to the reader-writer A (S432). Such treatment, IC card 100 and the mutual authentication between the reader-writer A is completed. After the mutual authentication is completed, the reader-writer A transmits the shared information A placement request (S436) to the IC card 100, IC card 100 stores the shared information A in the storage unit 102 in response to the request. Then, IC card 100 transmits the shared information A placement reply to the reader-writer A (S440).
[0046]
　Writer B by treatment of S444 ~ S464, and stores the shared information B in the storage unit 102 of the IC card 100. The contents of the processing is the same as the contents of processing of the processing (S420 ~ S440) in the reader-writer A described above, the description thereof is omitted.
[0047]
　Subsequently, either the reader-writer A or writer B performs a request for sharing data. For example, as shown in FIG. 4, the reader-writer B correspond to service B, the IC card 100, to share request data A on the service A (S468). Then, the processing unit 101 of the IC card 100, performs the butt of shared information A and shared information B (S472). Then, if the butting is successful, the data B is associated about the data A and the service B on the service A (S476). On the other hand, if the butt is not successful, the association of data is not performed.
[0048]
　Has been described the association of data between service A and service B, it may be associated with the data is performed in three or more services. Furthermore, it is also possible to associate a plurality of data with each other for the same service.
[0049]
　The processing flow for associating data with each other as described in Figure 4, IC card 100 is assumed to be performed when it is approached to the reader-writer by the user. However, the association of data with each other is not limited to the method described in FIG. 4, it is possible as long as the state in which the IC card 100 can communicate with external systems. Of course, it is also possible to associate data with each other at the time of manufacture of the IC card 100.
[0050]
　[1-4. Program settings in the IC card 100
　in the above, the storage unit 102 has been described association of data with each other to be stored. Subsequently, the system, the functions of the program can be set for the directory or the data will be described.
[0051]
　3 as the storage unit 102 described with reference to can store them in a state of setting the program system, the directory or data. Then, for example, processing unit 101 executes a program that is set in the data, it is possible to perform processing on the data. This feature because the program can be flexibly set the object to be processed, compared to conventional IC card, or to provide more flexible services, or can operate the IC card. For example, in the conventional IC card, authentication method because it was determined in uniform, it is difficult to modify and update the authentication method with respect to some services. On the other hand, in the present embodiment, it is possible to change the program for the authentication system, to a directory or data units. Then, it is possible to select an authentication method by each service corresponding to each. Further it says, it is that each service is to select a different authentication method to each, or to its own change the authentication method. Of course, the same authentication method may be selected by each service.
[0052]
　Conventionally, when associating the data with each other relating to a different service, when the processing is performed on both data, it is necessary to share key information between services. On the other hand, in the present embodiment, a program that includes the key information for data for each service can be set for the data associated with different service. In this case, including the program, key information for the data of both services by being encrypted, it can be assumed that the contents of the key information can not be deciphered. Processing unit 101, by executing the program that contains the key information, processor 101 can process the data of both services. In other words, without the service business with each other to teach the contents of the key information, it is possible to perform the processing to the data that is associated with between services. Of course, the key information need not be encrypted, or may be set in a state where the key information is disclosed between services to the program. Here, the key information, if any information for realizing the authentication, may be any number of information.
[0053]
　Therefore, next, with reference to FIG. 5, a system, a method of setting a program for the directory or data. Incidentally, the reader-writer shown in FIG. 5 is merely an example, mainly in the processing flow are not necessarily limited to the reader writer. Specifically, mainly in the processing flow is assumed to be replaced by a variety of servers, such as an external system or the like having a writer function equivalent.
[0054]
　Figure 5 is an explanatory diagram showing a flow of setting the program in the present embodiment. PCD, to create a program (S500), encrypts the program in a predetermined algorithm (S504). Encrypted program via the S508 ~ S524 process, is set in the IC card 100. Here, the content of the processing of S508 ~ S524 is the same as the contents of processing of the aforementioned S416 ~ S432, a description thereof will be omitted.
[0055]
　Then, the program allocation request from a reader writer to the IC card 100 is transmitted (S528), the IC card 100 receives the program allocation request, and stores the encrypted program in a storage unit 102. Then, IC card 100, by sending a program allocation reply to the external system (S532), the arrangement of the program is completed.
[0056]
　Process flow arranging the program described in FIG. 5, IC card 100 is assumed to be performed when it is approached to the reader writer 200 by the user. However, the arrangement method of the program is not limited to the method described in FIG. 5, it is possible as long as the state in which the IC card 100 can communicate with external systems. Of course, it is also possible to place the program at the time of manufacture of the IC card 100.
[0057]
　[1-5. IC card 100 and the operation of the reader-writer 200]
　above has been described how to set the program system, the directory or data. Subsequently, with reference to FIG. 6, the operation of the IC card 100 and the reader-writer 200 in this embodiment.
[0058]
　Here, the content of the processing of S600 ~ S616 in FIG. 6 is the same as the contents of processing of S416 ~ S432 in FIG. 4 described above, the description thereof is omitted. S616 by performing, after the mutual authentication is completed, the reader writer 200 can transmit data write request (S620) to the IC card 100, IC card 100 to perform a process corresponding to the request can. Further, IC card 100 transmits the data read and write back to the reader-writer 200 as a result of processing corresponding to the request is executed (S624).
[0059]
　Subsequently, with reference to FIGS. 3 and 7, in accordance with the data write request from the reader writer 200 (S620), details of the processing by the processing unit 101 of the IC card 100 is performed.
[0060]
　As described with reference to FIG. 3, the storage unit 102 may store the data for each of the plurality of services, with the associated between different services. Such association processing unit 101 of the IC card, not only performs the processing on the data for one of the services, processing can be performed also for data relating to other services associated with that data. For example, the processing unit 101 recognizes that when performing processing on the data 1-1 described in FIG. 3, the association 1, data 1-1 and data 1-1-1 is associated. Then, the processing unit 101 can perform processing with respect to data 1-1-1. Further, for example, processing unit 101, data 2-4 by executing a program 5 described in FIG. 3
when performing the processing to, since the processing of the data 2-5 is defined in the program 5, the data 2 processing can be performed even for -5.
[0061]
　With this configuration, for processing the data relating to different services, because there is no need to poll or authentication process and the like for each service, it is possible to reduce the load of a process of the reader-writer 200, to improve the processing speed can.
[0062]
　Further, as described above, the storage unit 102 may store these programs in a state of setting the program system, the directory or data. With this configuration, if, as compared with the case where the program can not be set only by the IC card or system units, can be set more flexibly programmed. Then, for example, can be set when setting a new program, it is not necessary to apply the new program to the entire IC card, the program only data about the required services. Further, when the program revision, it is not necessary to revise the IC card entire program may be revised only individual programs set in the service. Therefore, by such a configuration, it is possible to new program installation and, limiting the risks associated with the program revision. Specifically, it is possible to set different authentication methods for each service (encryption method, etc. of the authentication key), and can also easily be changed the authentication method for each service.
[0063]
　Here, system, program set for the directory or the data may operate in various patterns. For example, the program may perform (without processing the directory or data) Program alone treated. For example, the program is a like case of generating a random number used for authentication. Further, the program may also perform operations on the directory and data. For example, it is the case for performing a settlement from the electronic money stored in the IC card at the time of purchase. Furthermore, the program, and when authenticating with the directory or data, when performing some kind of processing on the directory or the data may be automatically executed. For example, if the coupon has been issued to a certain product, the user purchases the product, a case such as automatic coupon program is reduced selling price being executed. By programmed as described above it is processed in a variety of patterns, a variety of services using the IC card 100 may be provided.
[0064]
　Next, with reference to FIG. 7, illustrating the pattern of a method of setting the associated data and program. A is a pattern programmed for the associated data is not set (association 3 in FIG. 3). B and C is a pattern program for some of the data of the associated data is set (association 2 and program 4 in FIG. 3). D is a program for all associated data is set patterns (associations 1 and program 2, 3 in FIG. 3).
[0065]
　With this configuration, the processing unit 101 of the IC card, by executing a program, since it is possible to perform the processing on the associated data, can be processed for different services. Therefore, for processing the data relating to different services, polling and authentication process for each service, since there is no need to perform the execution of the program, it is possible to reduce the load of a process of the reader writer 200, to improve the processing speed be able to.
[0066]
　<2. Second Embodiment>
　In the following, a second embodiment, a physical card is an IC card 100, an example having a plurality of logic card, will be described with reference to FIG. Figure 8 is an explanatory view showing a configuration of a logic card of the present embodiment.
[0067]
　Here, the logic card, an IC card that is created virtually in physical card. In other words, the resources of a single physical card (storage area or the like) is divided, means that assigning a plurality of logical cards.
[0068]
　As shown in FIG. 8, the physical card in the present embodiment holds a physical card type as the identification information, and a logic card 1 and the logic card 2. On the other hand, the logic card 1 holds the logical card type 1 as the identification information, and a security model 1. Logic card 2, similarly to the logic card 1, holding the logical card type 2, and a security model 2.
[0069]
　Here, the security model, referred to in the "first embodiment", the system, that the directory or data of configured hierarchy and program structure. That is, in the second embodiment, the hierarchical structure and program structure are provided for each logic card. With this configuration, as compared with the case where the physical card has no more logical cards, it is possible to provide a more flexible service. For example, it is possible to form a hierarchy of data and the like for each service, it is possible to set the data structures and programs to suit the service provider.
[0070]
　Then, assuming the configuration described in FIG. 8, with reference to FIG. 9, illustrating a hierarchical structure of such data stored in the storage region in the present embodiment. Here, the storage area of ​​FIG. 9 corresponds to the logic card of Figure 8, the system code in Figure 9 and correspond to the logical card type of FIG.
[0071]
　As shown in FIG. 9, the storage unit 102 of the IC card 100 has a plurality of storage areas. Like the first embodiment, each storage area, the system, the hierarchical structure and a program such as a directory or data is stored.
[0072]
　As in the first embodiment, the storage unit 102, the data for each of the plurality of services can be stored in a state associated with different services, configure the program system, the directory or data can do.
[0073]
　In the second embodiment, the processing unit 101 in each memory area, the data for each of the plurality of services may be associated with different storage area (associated 5). Specifically, the processing unit 101, even between different storage areas, it is possible to make the association by the link or program. In Figure 9, between the two storage areas has been described how the data is associated, among three or more storage areas may be data associated with it. Moreover, the data associated between storage area, further (not shown) which may be associated with other data in the storage area.
[0074]
　Such association processing unit 101 of the IC card, it is possible to perform the processing on the associated data, it can be processed to different storage areas. For example, the processing unit 101 recognizes that when performing processing on the data 2-4 of the storage area 1, the 5 associated data 1-1-2 Data 2-4 and the storage area 2 is associated with to. Then, the processing unit 101, processing can be performed also for data 1-1-2 of the storage area 2. Further, for example, processing unit 101 when performing the processing to data 2-4 by executing a program 5 described in FIG. 9, in the program 5 and data 2-5 to data 1-1-2 of the storage area 2 since processing is defined, it is possible to perform processing with respect to data 1-1-2 data 2-5 and the storage area 2.
[0075]
　Therefore, for processing the data relating to storage areas different in the same manner as in the first embodiment (service), since there is no need to poll or authentication process and the like for each storage area (service), by treatment of the reader-writer 200 it can reduce the load, thereby improving the processing speed.
[0076]
　When you associate data between different storage areas as described above, by performing the process on the associated data, in order to perform the processing for the different storage area, activates the different storage area There is a need. Therefore, subsequently, with reference to FIG. 10, illustrating a method of activating a different storage area.
[0077]
　First, by dividing the IC card 100, to create a storage area 2 not only storage area 1 (S700). Storage area 1 is carrying a system code A as identification information, storage area 2 holds system code B as identification information. Incidentally, the identification information may be any information capable of specifying the storage area may be any identification information may be ID and the like.
[0078]
　Subsequently, the system code 2 is two second system code given to the storage area (S704). With this configuration, the storage area which the system code 2 have been given, not only masquerade as a storage area system code 1 is assigned, can also act as a storage area system code 2 is assigned. For example, in FIG. 10, since the grant system code A as a system code 2 to the storage area 2, the processing unit 101, the communication unit 103 a polling request system code A is designated from the reader writer 200 is when receiving, also identified storage area 2 not only storage area 1, is activated.
[0079]
　Thus, for example, in S604 of FIG. 6, if the polling request system code A is specified is transmitted from the reader-writer 200, the storage area 2 not only storage area 1 can also be activated.
[0080]
　In addition to a method for imparting system code 2, it is possible to activate different storage area by associating by applying a bridge between different storage areas (S 708).
[0081]
　<3. Hardware Configuration Example of Information Processing Apparatus>
　has been described above the information processing system in the embodiment of the present disclosure. The information processing in the information processing system described above, software is realized by cooperation of hardware of the IC card 100 to be described below. Hereinafter, with reference to FIG. 11, illustrating the hardware configuration of the IC card 100 in this embodiment.
[0082]
　Antenna 172 may, for example, a coil (inductor) L1 having a predetermined inductance is constituted by a resonance circuit consisting of capacitor C1 Metropolitan having a predetermined capacitance, causes an induced voltage by electromagnetic induction according to reception of the carrier wave . The antenna 172 outputs the received voltage by resonating the induced voltage at a predetermined resonance frequency. The resonance frequency of the antenna 172 is set, for example, according to the frequency of the carrier wave such as 13.56 [MHz]. Antenna 172, the above-described configuration, receiving the carrier wave, also transmits a response signal by load modulation performed in the load modulation circuit 186 IC chip 170 is provided.
[0083]
　IC chip 170 includes a carrier detection circuit 176, a detection circuit 178, a regulator 180, a demodulation circuit 182, and MPU184, a load modulation circuit 186. Although not shown in FIG. 11, IC chip 170 may, for example, may further include a protection circuit for preventing (not shown) to an overvoltage or overcurrent is applied to MPU184. Here, as the protective circuit (not shown), for example, a clamp circuit constituted by diodes and the like.
[0084]
　Moreover, IC chip 170 includes, for example, a ROM188, a RAM 190, a nonvolatile memory 192. And MPU184, a ROM188, a RAM 190, the nonvolatile memory 192, for example, are connected by a bus 194 serving as a data transmission path.
[0085]
　ROM188 stores control data such as programs and calculation parameters used by the MPU184. RAM190, a program executed by MPU184, operation results, and the like are temporarily stored execution state.
[0086]
　Nonvolatile memory 192 is, for example, encryption key information used for mutual authentication in NFC, electronic value, such as various applications, for storing various data. Here, the non-volatile memory 192, e.g., EEPROM (Electrically Erasable and Programmable Read Only Memory) and, and a flash memory. Nonvolatile memory 192, for example, a tamper-resistant, corresponds to an example of a secure recording medium.
[0087]
　Carrier detection circuit 176, based on the reception voltage transmitted from the antenna 172, for example, generates a rectangular detection signal, transmits the detection signal to MPU184. Further, MPU184 is the detection signal transmitted, for example, it is used as a processing clock for data processing. Here, the detection signal, so is based on the reception voltage transmitted from the antenna 172, and be synchronized with the frequency of the carrier wave transmitted from an external device such as a reader-writer 200. Thus, IC chip 170, by providing the carrier detection circuit 176, the processing between the external device such as a reader-writer 200 can be performed in synchronization with the external device.
[0088]
　Detection circuit 178 rectifies the reception voltage output from the antenna 172. Here, the detection circuit 178, for example, a diode D1, composed of the capacitor C2.
[0089]
　Regulator 180, a received voltage smoothing, and a constant voltage, and outputs a driving voltage to the MPU184. Here, the regulator 180 uses the DC component of the received voltage as a drive voltage.
[0090]
　Demodulation circuit 182 demodulates the carrier signal based on the reception voltage, data (e.g., binary data signals between high and low levels) corresponding to the carrier signal included in the carrier wave to output a. Here, the demodulation circuit 182, and outputs an AC component of the received voltage as data.
[0091]
　MPU184 drives the driving voltage output from the regulator 180 as a power source, and processes data demodulated in the demodulation circuit 182. Here, MPU184 is composed of, for example, a computation circuit such as MPU, and one or more processors, and the like various kinds of processing circuits.
[0092]
　Further, MPU184 selectively produce according a control signal for controlling the load modulation according to a response to an external device such as a reader-writer 200 in the processing result. Then, MPU184 selectively outputs the control signal to the load modulation circuit 186.
[0093]
　The load modulation circuit 186, for example, a load Z and a switch SW1, performs load modulation by selectively connecting a load Z according to the control signal transmitted from MPU184 (activate). Here, the load Z is composed of, for example, a resistor having a predetermined resistance value. The switch SW1 is, for example, p-channel type MOSFET (Metal Oxide Semiconductor Field effect transistor) and composed of n-channel type MOSFET.
[0094]
　IC chip 170 by the above-described configuration, processing the carrier signal by the antenna 172 is received, it is possible to transmit a response signal to the antenna 172 by load modulation.
[0095]
　IC chip 170 and the antenna 172, for example, by having the configuration shown in FIG. 11, communicates with an external device and the NFC, such as reader-writer 200 by using a carrier wave having a predetermined frequency. The configuration of the IC chip 170 and the antenna 172 according to the present embodiment is not limited to the example shown in FIG. 11, of course.
[0096]
　Here, to function as a processing unit 101 of the IC card 100 shown in FIG. 2 is a MPU184. To function as the storage unit 102, ROM188, RAM190, or a non-volatile memory 192. To function as the communication unit 103, an antenna 172, a carrier detection circuit 176, detection circuit 178, regulator 180, a demodulation circuit 182 and the load modulation circuit 186. Encryption unit 104 and the decoding unit 105, like the processing unit 101, a MPU184.
[0097]
　Having described in detail preferred embodiments of the present disclosure with reference to the accompanying drawings, the technical scope of the present disclosure is not limited to such an example. It would be appreciated by those skilled in the art of the present disclosure, within the scope of the technical idea described in the claims, it is clear that to cover various modifications, combinations, for these It is also understood to belong to the technical scope of the present disclosure.
[0098]
　For example, construction of the IC card 100 may be provided outside the IC card. Specifically, the encryption unit 104 and decryption unit 105 may be included in the external information processing apparatus. The encryption unit 104 and decryption unit 105 may not be provided.
[0099]
　Also, for example, all the functions of the IC card 100 may be embodied by the processing unit 101. In other words, the processing unit 101, storage unit 102, communication unit 103 may implement the functions of the encryption unit 104 and decryption unit 105. Of course, some of the functions of the IC card 100 may be embodied by the processing unit 101.
[0100]
　The effects described herein are not limiting be those that only illustrative or exemplary. In other words, the technology according to the present disclosure, together with the above effects, or instead of the above effects, can exhibit the apparent other effects to those skilled in the art from the description herein.
[0101]
　Also within the scope of the present disclosure the following configurations.
(1)
　associated with the storage medium, it comprises a processing unit for processing the data relating to services corresponding to a plurality of services,
　the information processing apparatus.
(2)
　data for the services that are associated, if stored in a different storage area in the storage medium,
　wherein the processing unit processes the data related to the service which is stored in said different storage areas,
　the the information processing apparatus according to (1).
(3)
　the processing unit, based on identification information for identifying the storage area, the storage area where the data relating to the services associated is stored, identifying,
　processing according to the above (2) apparatus.
(4)
　wherein the storage area, is set one or more of the identification information,
　wherein the processing unit is consistent with the identification information acquired, the one or more of the identification information is set the storage the region, specifically,
　the information processing apparatus according to (3).
(5)
　different said storage region has a different security model,
　the (2) to the information processing apparatus according to any one of (4).
(6)
　the processing unit, the service respectively, or, based on the key information corresponding to the data, respectively, to process the data related to the service,
　the (1) to according to any one of (5) the information processing apparatus.
(7)
　the service respectively, or, the key information corresponding to the data respectively, each of the service, or different for each of the data,
　the information processing apparatus according to (6).
(8)
　wherein the processing unit based on the authentication method corresponding to each of the service, to process the data related to the service,
　the (1) The information processing apparatus according to any one of (1) to (7).
(9)
　the authentication method corresponding to the respective service, different for each of the service,
　the information processing apparatus according to (8).
(10)
　The data relating to the service associated access right is set for each data related to the service,
　the (1) The information processing apparatus according to any one of - (9).
(11)
　Data relating to corresponding to a plurality of service services, if they are related by a program associated with the data related to the service,
　wherein the processing unit by executing the program, associated processing data related to the service,
　the (1) the information processing apparatus according to any one of - (10).
(12)
　Data relating to services corresponding to a plurality of services are associated by shared information associated with the respective data related to the service,
　the information processing according to any one of (1) to (11) apparatus.
(13)
　The information processing apparatus is a non-contact IC card or a communication device,
　wherein (1) The information processing apparatus according to any one of - (12).
(14)
　associated with the storage medium, has to process the data relating to services corresponding to a plurality of services,
　information processing method executed by an information processing apparatus.
DESCRIPTION OF SYMBOLS
[0102]
　100 IC card (information processing
　apparatus) 101 processor
　102 memory unit
　103 communication unit
　104 encryption unit
　105 decoding unit
　200 writer
　300 channel

The scope of the claims
[Requested item 1]
　Associated with the storage medium, it comprises a processing unit for processing the data relating to services corresponding to a plurality of services,
　the information processing apparatus.
[Requested item 2]
　Data related to the service that is associated, if stored in a different storage area in the storage medium,
　wherein the processing unit processes the data related to the service which is stored in said different storage areas,
　in claim 1 the information processing apparatus according.
[Requested item 3]
　Wherein the processing unit on the basis of the identification information identifying a storage area, the storage area where the data relating to the services associated is stored, identifying,
　information processing apparatus according to claim 2.
[Requested item 4]
　In the storage area, one or more of the identification information is set,
　the processing unit is consistent with the identification information acquired, the one or more said storage area in which the identification information is set in, specific to,
　the information processing apparatus according to claim 3.
[Requested item 5]
　Different said storage region has a different security model,
　the information processing apparatus according to claim 2.
[Requested item 6]
　Wherein the processing unit, the service respectively, or, based on the key information corresponding to the data, respectively, to process the data related to the service,
　the information processing apparatus according to claim 1.
[Requested item 7]
　The service respectively, or, the key information corresponding to the data respectively, each of the service, or different for each of the data,
　the information processing apparatus according to claim 6.
[Requested item 8]
　Wherein the processing unit based on the authentication method corresponding to each of the service, to process the data related to the service,
　the information processing apparatus according to claim 1.
[Requested item 9]
　Authentication method corresponding to each of the service is different for each of the service,
　the information processing apparatus according to claim 8.
[Requested item 10]
　The data related to the service associated with the access right is set for each data related to the service,
　the information processing apparatus according to claim 1.
[Requested item 11]
　Data about the service corresponding to a plurality of services, if they are related by a program associated with the data related to the service,
　wherein the processing unit by executing the program, related to the service associated processing the data,
　the information processing apparatus according to claim 1.
[Requested item 12]
　Data about the service corresponding to a plurality of services are associated by shared information associated with the respective data related to the service,
　the information processing apparatus according to claim 1.
[Requested item 13]
　The information processing apparatus is a non-contact IC card or a communication device,
　an information processing apparatus according to claim 1.
[Requested item 14]
　Associated with the storage medium, it has to process the data relating to services corresponding to a plurality of services,
　information processing method executed by an information processing apparatus.