File management apparatus for IC card

Claim 2

A file management apparatus in which a memory is divided into a plurality of files, and the divided files are managed in a tree structure constituted by upper and lower files belonging to the upper file, comprising: first access limiting means for limiting access to one lower file of lower files belonging to an upper file; first access relaxing means for relaxing an access limitation performed by said firs access limiting means; second access limiting means for limiting access to a set of a plurality of specific lower files of the lower files belonging to the upper file; second access relaxing means for relaxing an access limitation performed by said second access limiting means; and selecting means for selecting said first access limiting means, said second access limiting means, said first access relaxing means, and said second access relaxing means.

Claim 3

An IC card connected to a terminal device for transmitting to and receiving from a command and data, comprising: a memory including a plurality of files each having a plurality of areas depending to the files; first storage means for storing access inhibit information to the files of the memory; second storage means for storing access inhibit information to the areas depending to the files; means for inhibiting an access operation to a specific file and the areas depending to the specific file when the access operation to the specific file is inhibited by the inhibit information stored in said first storage means; and means for inhibiting an access operation to the areas depending to the specific file by the inhibit information stored in said second storage means when the access operation to the specific file is not inhibited by the inhibit information stored in said first storage means.

Claim 4

An IC card according to claim 3, characterized by further comprising: first renewing means for renewing the inhibit information stored in said first storage means in accordance with a command from said terminal device; and second renewing means for renewing the inhibit information stored in said second storage means in accordance with a command from said terminal device.

Claim 5

An IC card for receiving from and transmitting to a terminal device a command and data, comprising: data storage means having a file and areas depending to the file for storing data to the areas; directory information storage means for storing directory information including file definition information having position information of a file in said data storage means and access inhibit information to inhibit accessing to the file and area definition information having position information of a plurality of areas depending to the file and access inhibit information to inhibit accessing to the areas; first determining means for determining whether the accessing to the file by referring to the inhibit information included in the file definition information; second determining means for determining whether the accessing to the areas by referring to the inhibit information included in the area definition information; first means for inhibiting accessing to a specific file and all the areas depending to the specific file when it is determined by said first determining means that the accessing to the specific file is inhibited; second means for inhibiting accessing to the areas when it is determined by said first determining means that the accessing to the specific file is not inhibited and when it is determined by said second determining means that the accessing to the areas is inhibited; and means for allowing the accessing to the areas when it is determined by said first and second determining means that the accessing is not inhibited.

Claim 6

An IC card according to claim 5, characterized in that each of said areas includes a data area for storing data and a key area for storing identification key, and the area definition information with respect to the data area and the key area is stored in the directory area.

Claim 7

An IC card according to claim 6, characterized in that the inhibit information included in the file definition information represents access inhibition to definition information of the data areas and key areas depending to the specific file, and the first means inhibits accessing to the areas when the accessing to the area definition information is inhibited by the inhibit information.

Claim 8

An IC card according to claim 7, characterized by further comprising: first renewing means for renewing the inhibit information stored in said first storage means in response to a command from the terminal device; and second renewing means for renewing the inhibit information stored in said second storage means in response to a command from the terminal device.