CN105678152A

CN105678152A - Method and device for communication with intelligent secret key device

Info

Publication number: CN105678152A
Application number: CN201610032912.6A
Authority: CN
Inventors: 陆舟; 于华章
Original assignee: Feitian Technologies Co Ltd
Current assignee: Feitian Technologies Co Ltd
Priority date: 2016-01-19
Filing date: 2016-01-19
Publication date: 2016-06-15
Anticipated expiration: 2036-01-19
Also published as: CN105678152B

Abstract

The invention discloses a method and device for communication with an intelligent secret key device. The method includes the monitoring step and the communication step; in the monitoring step, a mobile terminal monitors whether the intelligent secret key device is inserted or not in a broadcast or enumeration mode, the mobile terminal obtains a device object corresponding to the intelligent secret key device and judges whether the device object has the device authority or not after monitoring that the intelligent secret key device is inserted, and the mobile terminal obtains a device connection handle and a device interface object corresponding to the device object and obtains a device communication endpoint corresponding to the device object according to the device interface object when judging that the intelligent secret key device has the device authority; in the communication step, the mobile terminal is in communication with the intelligent secret key device according to the device object, the device connection handle and the device communication endpoint corresponding to the intelligent secret key device.

Description

A kind of method with intelligent cipher key equipment communication and device

Technical field

The present invention relates to communication technical field, particularly to a kind of method with intelligent cipher key equipment communication and device.

Background technology

Along with the fast development of electronic information, internet bank trade is day by day popularized in daily life. USBKEY is propose for ensureing the safety of internet bank trade a kind of safe and the intelligent cipher key equipment easily with USB interface. Mobile terminal refers to the computer equipment that can use in movement, compares more portability with traditional computer. And in the last few years, along with developing rapidly of network technology and integrated circuit technique, mobile terminal has been enter into the intelligent development stage, himself has powerful disposal ability, become an integrated information processing platform, be an important tool indispensable in people's live and work.

OTG (On-The-Go) technology be a kind of can when there is no main frame, it is achieved from the prior art that the data of equipment room are transmitted, use on mobile terminals for USBKEY and established technical foundation. But in prior art, specifically how to utilize communication that OTG technology realizes between mobile terminal and USBKEY or one is needed badly and solves the technical problem that.

Summary of the invention

The invention provides a kind of method with intelligent cipher key equipment communication and device, solve above-mentioned technical problem of the prior art.

The invention provides a kind of and intelligent cipher key equipment communication method, including: monitoring flow process and communication flow;

Described monitoring flow process includes:

Step s1: mobile terminal initializes;

Step s2: described mobile terminal adopts broadcast or the mode enumerated, and has monitored whether that intelligent cipher key equipment inserts; When described mobile terminal monitored after intelligent cipher key equipment insertion, perform step s3;

Step s3: the device object that described acquisition for mobile terminal is corresponding with described intelligent cipher key equipment, it is judged that whether described device object has equipment authority, if it is, perform step s5; Otherwise, step s4 is performed;

Step s4: described mobile terminal is described device object application equipment authority, it is judged that whether described device object has equipment authority, if it is, perform step s5, otherwise, returns step s2;

Step s5: the equipment that described acquisition for mobile terminal is corresponding with described device object connects handle and equipment interface object, according to the device talk end points that described equipment interface object acquisition is corresponding with described device object;

Described communication flow includes:

Step r1: described mobile terminal generates the first communication instruction, obtains usb protocol mark according to described device object, according to described usb protocol mark, described first communication instruction is packaged;

Step r2: described mobile terminal connects handle and described device talk end points by the first communication instruction after encapsulation by described equipment, is sent to the described intelligent cipher key equipment of correspondence;

Step r3: described mobile terminal connects handle by described equipment and receives first response corresponding with the first communication instruction after described encapsulation from described intelligent cipher key equipment with described device talk end points;

Step r4: described first response is carried out deblocking according to described usb protocol mark by described mobile terminal, obtains the first response that solution is honored as a queen, communication success.

Present invention also offers a kind of and intelligent cipher key equipment communication device, including: initialization module, monitoring module, the first acquisition module, the first judge module, application authority module, the second judge module, the second acquisition module, the first package module, the first sending module, the first receiver module and the first deblocking module;

Described initialization module, is used for initializing;

Described monitoring module, for, after described initialization module initializes, adopting broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts; And when described second judge module be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts;

Described first acquisition module, for, after described monitoring module monitors intelligent cipher key equipment insertion, obtaining the device object corresponding with described intelligent cipher key equipment;

Described first judge module, for judging whether the described device object that the first acquisition module gets has equipment authority;

Described application authority module, for when described first judge module be judged to no after, for described device object application equipment authority;

Described second judge module, for after described application authority module is the device object application equipment authority that described first acquisition module gets, it is judged that whether described device object has equipment authority;

Described second acquisition module, for when described first judge module be judged to be after or when described second judge module be judged to be after, obtain the equipment corresponding with described device object and connect handle and equipment interface object, according to the device talk end points that described equipment interface object acquisition is corresponding with described device object;

First package module, for when after the device talk end points that described second acquisition module is corresponding with described device object according to described equipment interface object acquisition, generate the first communication instruction, obtain described usb protocol mark according to described device object, according to described usb protocol mark, described first communication instruction is packaged;

Described first sending module, the equipment for being got by described second acquisition module is connected handle and described device talk end points and the first communication instruction of described first package module encapsulation is sent to the described intelligent cipher key equipment of correspondence;

Described first receiver module, the equipment for being got by described second acquisition module is connected handle and receives first response corresponding with the first communication instruction after described encapsulation from described intelligent cipher key equipment with described device talk end points;

Described first deblocking module, carries out deblocking for the first response described first receiver module received according to described usb protocol mark, obtains the first response that solution is honored as a queen.

The invention has the beneficial effects as follows: the present invention passes through: after monitoring intelligent cipher key equipment insertion, obtain the device object corresponding with intelligent cipher key equipment, whether judgment device object has equipment authority, after judging that intelligent cipher key equipment has equipment authority, obtain the equipment corresponding with device object and connect handle and equipment interface object, according to the device talk end points that equipment interface object acquisition is corresponding with device object; Connect handle and device talk end points and intelligent cipher key equipment communication according to the device object corresponding with intelligent cipher key equipment, equipment, utilize the communication achieving between mobile terminal and intelligent cipher key equipment on the basis of OTG technology.

Accompanying drawing explanation

A kind of operational flowchart monitoring flow process that Fig. 1 provides for the embodiment of the present invention 1;

The operational flowchart of a kind of communication flow that Fig. 2 provides for the embodiment of the present invention 1;

A kind of concrete operations flow chart monitoring flow process that Fig. 3 provides for the embodiment of the present invention 1;

The concrete operations flow chart of the another kind monitoring flow process that Fig. 4 provides for the embodiment of the present invention 1;

The concrete operations flow chart of another monitoring flow process that Fig. 5 provides for the embodiment of the present invention 1;

The structure chart of the device of a kind of and intelligent cipher key equipment communication that Fig. 6 provides for the embodiment of the present invention 2.

Specific implementation method

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, it is clear that described embodiment is only a part of embodiment of the present invention, rather than whole embodiments. Based on the embodiment in the present invention, the every other embodiment that those of ordinary skill in the art obtain under not making creative work premise, broadly fall into the scope of protection of the invention.

Embodiment 1

Present embodiments provide a kind of and intelligent cipher key equipment communication method, including: monitoring flow process and communication flow;

Wherein, flow process is monitored, as it is shown in figure 1, include:

Step A1: mobile terminal opens monitoring flow process, initializes;

In the present embodiment, mobile terminal supports OTG technology.

Step A2: mobile terminal adopts broadcast or the mode enumerated, has monitored whether that USBKEY inserts or extracts; When mobile terminal monitored after USBKEY insertion, perform step A3; When mobile terminal monitored extract to USBKEY after, perform step A7;

Step A3: the device object that acquisition for mobile terminal is corresponding with USBKEY, it is judged that whether device object has equipment authority, if it is, perform step A4; Otherwise, step A6 is performed;

Step A4: the equipment that acquisition for mobile terminal is corresponding with device object connects handle and equipment interface object, according to the device talk end points that equipment interface object acquisition is corresponding with device object;

Step A5: mobile terminal generates the device talk handle corresponding with device object, device talk handle is connected handle, device talk end points and device object with equipment set up corresponding relation respectively and preserve, mobile terminal and USBKEY successful connection, return step A2;

Step A6: mobile terminal is device object application equipment authority, it is judged that whether device object has equipment authority, if it is, return step A4, otherwise, returns step A2.

Step A7: mobile terminal judges whether the device object corresponding with USBKEY exists corresponding device talk handle, if it is, perform step A8; Otherwise, step A9 is performed;

Step A8: mobile terminal destroys the device object corresponding with USBKEY, and the device talk handle corresponding respectively with it, equipment connect handle and device talk end points, mobile terminal and USBKEY connection failure, return step A2;

Step A9: mobile terminal destroys the device object corresponding with USBKEY, mobile terminal and USBKEY connection failure, returns step A2;

Communication flow, as in figure 2 it is shown, include:

Step B1: the device talk handle that acquisition for mobile terminal is corresponding with USBKEY, connects handle and device talk end points according to device object corresponding to the device talk handle acquiring corresponding with USBKEY, equipment;

Specifically, the device talk handle that acquisition for mobile terminal is corresponding with USBKEY, if the device talk handle got is for sky, then judges and USBKEY successful connection, connect handle and device talk end points according to device object corresponding to the device talk handle acquiring corresponding with USBKEY, equipment; Otherwise, it is determined that and USBKEY connection failure, the device talk handle that continuation acquisition is corresponding with USBKEY, or end current operation.

Step B2: mobile terminal judges whether to get the device object of correspondence, equipment connects handle and device talk end points, if it is, perform step B3; Otherwise, Communications failure, terminates.

Step B3: mobile terminal generates the first communication instruction, obtains usb protocol mark according to device object, according to usb protocol mark, the first communication instruction is packaged;

Wherein, according to usb protocol mark, the first communication instruction is packaged, particularly as follows: add the usb protocol head corresponding with usb protocol mark, the first communication instruction after being encapsulated before the first communication instruction. Wherein, the first communication instruction after encapsulation can include many bags data, often all includes usb protocol head in bag data.

In the present embodiment, the first communication instruction can be specially and take random number instruction, tests PIN instruction, generate double secret key instruction or signature command etc.; Usb protocol mark can be specially CCID protocol mark or HID protocol mark or SCSI protocol mark. The first communication instruction after encapsulation can include bag data or many bags data.

Such as, when the first communication instruction is specially signature command, after usb protocol is designated HID protocol mark, first communication instruction is: 0x000x2A0x860x800x800x000x010xFF0xFF0xFF0xFF0xFF0xFF0xFF 0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0x00 0x550x730x620x540x6F0x6B0x650x6E0x200x520x750x6E0x520x73 0x610x4B0x650x790x470x650x6E0x650x720x610x740x690x6F0x6E 0x540x650x730x740x2E0x2E0x2E0x550x730x620x540x6F0x6B0x65 0x6E0x200x520x750x6E0x520x730x610x4B0x650x790x470x650x6E 0x650x720x610x740x690x6F0x6E0x540x650x730x740x2E0x2E0x2E 0x550x730x620x540x6F0x6B0x650x6E0x200x520x750x6E0x520x73 0x610x4B0x650x790x470x650x6E0x650x720x610x740x690x6F0x6E 0x540x650x730x740x2E0x2E0x2E,

According to usb protocol mark, the first communication instruction is packaged, the first communication instruction after being encapsulated, the first communication instruction after encapsulation includes three guarantees data, wherein, first bag data are: 0x000x850x000x000x000x3A0x000x2A0x860x800x800x000x010xFF 0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF0xFF 0xFF0xFF0xFF0xFF0xFF0x000x550x730x620x540x6F0x6B0x650x6E 0x200x520x750x6E0x520x730x610x4B0x650x790x470x650x6E0x65 0x720x610x740x690x6F0x6E0x540x65,

Second bag data are: 0x000x850x000x3A0x000x3A0x730x740x2E0x2E0x2E0x550x730x62 0x540x6F0x6B0x650x6E0x200x520x750x6E0x520x730x610x4B0x65 0x790x470x650x6E0x650x720x610x740x690x6F0x6E0x540x650x73 0x740x2E0x2E0x2E0x550x730x620x540x6F0x6B0x650x6E0x200x52 0x750x6E0x520x730x610x4B0x650x79;

Three guarantees data are: 0x000x850x000x740x000x110x000x0D0xC80x0E0x100x400xCA0x19 0x000xD00xCE0x190x000x000xE00xFD0x7F;

Wherein, often the first six byte of bag data is HID protocol head, the data length that the second byte is the first communication instruction in HID protocol head, and nybble is the data length sent, and last byte is the data length that current bag sends. With three guarantees data instance, HID protocol head is particularly as follows: " 0x000x850x000x740x000x11 "; Second byte of HID protocol head is " 0x85 ", the data length representing the first communication instruction is 133 bytes, nybble " 0x74 " represents that the data length sent is 116 bytes, and last byte " 0x11 " represents that the data length that current bag sends is 17 bytes.

Step B4: mobile terminal connects handle and device talk end points by equipment and the first communication instruction after encapsulation is sent to the USBKEY of correspondence;

Specifically, mobile terminal uses the first communication instruction after equipment output end point and encapsulation, and the equipment that calls connects the data transfer function of handle, and the first communication instruction after encapsulation is sent to the USBKEY of correspondence.

Wherein, data transfer function can be intbulkTransfer (UsbEndpointendpoint, byte [] buffer, intlength, inttimeout);

Step B5: mobile terminal connects handle by equipment and device talk end points receives the first response from USBKEY;

Specifically, mobile terminal uses equipment input endpoint and equipment to connect handle, and the equipment that calls connects the data transfer function of handle, receive from USBKEY with encapsulation after the first communication instruction, the first corresponding response. Wherein, the first response can include bag data or many bags data.

When the first response be specially with encapsulate after response corresponding to signature command after, first response includes three guarantees data, wherein, the first response packet is: 0x000x820x000x000x000x3A0x960x2B0x0E0x420x700x270x230x7E 0x960x160xBD0x520xD90x0E0x7E0x530xB40x650xB90xF10x5B0x44 0xCF0x3E0x170xAE0xC50x580x830x2D0x5E0xDC0xA60xF80x4F0x88 0x4F0x750x760x130xDE0xCB0x580x160x7A0x5F0x050x3F0x800x43 0x980x3B0x850x4D0x3A0x490x5C0xC8;

Second response packet is: 0x000x820x000x3A0x000x3A0x480x000xC10x990x240x760x2F0xCC 0xF10x080x1A0x730x780x330xCA0x360x080x8B0x480x730x3C0xFF 0x960xB30xC50x800x150xA40x5B0x7E0x7C0xE60x3E0x970x750xB6 0xBA0xC80x510xDC0xB20x770xDC0x240xE90x300xA90x070x040x1F 0x2B0x3A0xBE0x300xA80x6A0x700xE0;

3rd response packet is: 0x000x820x000x740x000x0E0xB60x860x1E0xC90x6C0x4B0x5B0xF2 0x030xA20x330x6B0x900x00;

Wherein, the first six byte of each response packet is response header, and the second byte in response header is the valid data total length needing to receive, and nybble is the valid data length being received, and last byte is the valid data length that current bag receives. For the 3rd response packet, response header is particularly as follows: " 0x000x820x000x740x000x0E "; The second byte in response header is " 0x82 ", represent that the valid data total length needing to receive is 130 bytes, nybble " 0x74 " represents that be received effective is 116 bytes according to length, and last byte " 0x0E " represents that the valid data length that current bag receives is 14 bytes.

Step B6: the first response is carried out deblocking according to usb protocol mark by mobile terminal, obtains the first response that solution is honored as a queen, communication success.

Specifically, mobile terminal processes the first response according to usb protocol mark, removes the response header corresponding with usb protocol mark in the first response, obtains first response corresponding with the first communication instruction, communication success.

When the first response is corresponding with the signature command after encapsulation, the first response that solution is honored as a queen is particularly as follows: 0x960x2B0x0E0x420x700x270x230x7E0x960x160xBD0x520xD90x0E 0x7E0x530xB40x650xB90xF10x5B0x440xCF0x3E0x170xAE0xC50x58 0x830x2D0x5E0xDC0xA60xF80x4F0x880x4F0x750x760x130xDE0xCB 0x580x160x7A0x5F0x050x3F0x800x430x980x3B0x850x4D0x3A0x49 0x5C0xC80x480x000xC10x990x240x760x2F0xCC0xF10x080x1A0x73 0x780x330xCA0x360x080x8B0x480x730x3C0xFF0x960xB30xC50x80 0x150xA40x5B0x7E0x7C0xE60x3E0x970x750xB60xBA0xC80x510xDC 0xB20x770xDC0x240xE90x300xA90x070x040x1F0x2B0x3A0xBE0x30 0xA80x6A0x700xE00xB60x860x1E0xC90x6C0x4B0x5B0xF20x030xA2 0x330x6B0x900x00.

It should be noted that, the data length of the first response that solution is honored as a queen, being in the present embodiment needs the valid data total length of reception.

In the present embodiment, monitor flow process, it is possible to as it is shown on figure 3, mobile terminal specifically performs:

Step 101: open monitoring flow process, initialize USB management object and authority permission object;

Specifically, mobile terminal opens monitoring flow process, calls initialization function and initializes USB management object and authority permission object. Wherein, initialization function includes the first initialization function and the second initialization function.

Wherein, mobile terminal calls the first initialization function and initializes USB management object particularly as follows: mUsbManager=(UsbManager) getSystemService (Context.USB_SERVICE); Wherein, mUsbManager is USB management object;

Mobile terminal call second initialization function initialize authority permission object particularly as follows:

MPermissionIntent=PendingIntent.getBroadcast (this, 0, newIntent (ACTION_USB_PERMISSION), 0); Wherein, mPermissionIntent is authority permission object, illustrates further, and authority permission object is a pending event object;

ACTION_USB_PERMISSION is specially equipment entitlement messages,

ACTION_USB_PERMISSION can be specially

"com.android.example.USB_PERMISSION"。

Step 102: obtain the device object corresponding with USBKEY in Preset Time, after getting the device object corresponding with USBKEY in Preset Time, performs step 104; After not getting the device object corresponding with USBKEY in Preset Time, perform step 103;

Specifically, JAVA calls the acquisition list of devices function of USB management object and in Preset Time, USBKEY is enumerated, and obtains the device object corresponding with USBKEY, after getting the device object corresponding with USBKEY in Preset Time, performs step 104; After not getting the device object corresponding with USBKEY in Preset Time, perform step 103.

Preferably, Preset Time is 2 seconds.

Wherein, mobile terminal calls the acquisition list of devices function of USB management object and in Preset Time, USBKEY is enumerated, and obtains the device object corresponding with USBKEY, particularly as follows:

HashMap<String, UsbDevice>deviceMap=m_UsbManager.getDeviceList ();

Wherein, device object specifically includes: the identification of the manufacturer information of USBKEY. Wherein, the identification of the manufacturer information of USBKEY can be specially the PID (ProductID, product ID) and VID (VendorID, vendor identity) of USBKEY.

Step 103: empty the first list of devices, performs step 106;

Step 104: judge whether the device object corresponding with default identification of the manufacturer, if it is, perform step 105; Otherwise, step 102 is returned;

Specifically, the identification of the manufacturer information in acquisition for mobile terminal device object, it is judged that whether the identification of the manufacturer information in the device object got is corresponding with default identification of the manufacturer, if it is, perform step 105; Otherwise, step 102 is returned.

Step 105: stored to by the device object corresponding with default identification of the manufacturer in the first list of devices, performs step 106;

Step 106: judge whether to have in the first list of devices newly-increased device object, if it is, perform step 107; Otherwise, step 115 is performed;

Specifically, mobile terminal determines whether that device object is stored in the first list of devices and is not stored in the second list of devices, if, then judge the first list of devices has newly-increased device object and will be stored in the first list of devices and be not stored in the second list of devices device object as newly-increased device object, perform step 107; Otherwise, it is determined that the first list of devices does not have newly-increased device object, perform step 115.

It should be noted that, step 101 also includes initialize the second list of devices, wherein, initialize the second list of devices particularly as follows: create the second empty list of devices.

Step 107: preserve newly-increased device object;

Specifically, newly-increased device object is stored in the second list of devices by mobile terminal.

Step 108: judge whether newly-increased device object has equipment authority, if it is, perform step 111; Otherwise, step 109 is performed;

Specifically, mobile terminal uses the equipment authority function that obtains that newly-increased device object calls USB management object to obtain the equipment capability identification of newly-increased device object, whether the equipment capability identification of the device object that judgement is newly-increased is TRUE, if it is, perform step 111; Otherwise, step 109 is performed.

Wherein, mobile terminal use newly-increased device object call USB management object obtain equipment authority function obtain newly-increased device object equipment capability identification particularly as follows:

BooleanbHasPermissionm=m_UsbManager.hasPermission (device);

Step 109: for newly-increased device object application equipment authority;

Specifically, mobile terminal uses the application authority function that device object and authority permission object call USB management object to be device object application equipment authority.

Particularly as follows: m_UsbManager.requestPermission (device, mPermissionIntent);

In further detail, mobile terminal uses the application authority function that device object and authority permission object call USB management object to be device object application equipment authority, display interface at mobile terminal prompts the user whether to authorize into USBKEY, after USBKEY gets user's mandate, the equipment capability identification of the device object corresponding with USBKEY is TRUE.

Step 110: judge whether newly-increased device object has equipment authority, if it is, perform step 111; Otherwise, step 106 is returned;

Step 111: obtain the equipment corresponding with newly-increased device object and connect handle and equipment interface object;

Specifically, mobile terminal uses equipment of the opening function that newly-increased device object calls USB management object to obtain the equipment connection handle corresponding with newly-increased device object; The interface function that obtains calling newly-increased device object obtains the equipment interface object corresponding with newly-increased device object.

Wherein, mobile terminal uses equipment of the opening function that newly-increased device object calls USB management object to obtain the equipment connection handle corresponding with newly-increased device object, particularly as follows:

UsbDeviceConnectionhconnection=m_UsbManager.openDevice (device)

Mobile terminal calls the interface function that obtains of newly-increased device object and obtains the equipment interface object corresponding with newly-increased device object, particularly as follows:

UsbInterfacem_usbInterface=m_device.getInterface (0);

Step 112: connect handle initialization apparatus interface object according to equipment;

Specifically, mobile terminal calls the interface statement function initialization apparatus interface object of equipment connection handle;

Particularly as follows: m_connection.claimInterface (m_usbInterface, true);

Step 113: according to the device talk end points that equipment interface object acquisition is corresponding with newly-increased device object;

Specifically, mobile terminal call equipment interface object obtain end points function obtain the device talk end points corresponding with newly-increased device object. Particularly as follows:

Wherein, device talk end points specifically includes: equipment input endpoint and equipment output end point.

Step 114: generate device talk handle, sets up corresponding relation respectively by device talk handle and newly-increased device object, equipment connection handle and device talk end points and preserves, returning step 106;

Step 115: judge the device object whether having minimizing in the first list of devices, if it is, perform step 116; Otherwise, step 119 is performed;

Specifically, mobile terminal determines whether that device object is stored in the second list of devices and is not stored in first and sets in list, if, then judge that the device object having minimizing in the first list of devices the device object that will be stored in the second list of devices and be not stored in the first list of devices are as the device object reduced, and perform step 116; Otherwise, it is determined that the first list of devices does not have the device object reduced, perform step 119;

Step 116: judge whether the device talk handle corresponding with the device object reduced, if it is, perform step 117; Otherwise, step 118 is performed;

Step 117: destroy the device object reduced, and the device talk handle corresponding respectively with it, equipment connect handle and device talk end points, return step 115;

Step 118: destroy the device object reduced, returns step 115;

Step 119: judge whether to exit monitoring flow process, if it is, exit monitoring flow process; Otherwise, step 102 is returned.

Wherein, after step 105 and step 103, it is also possible to perform step 115; Corresponding when step 115 is judged to no after, return step 106, when step 106 is judged to no after execution step 119.

It addition, in step 102 after getting the device object corresponding with USBKEY in Preset Time, it is also possible to after being directly stored in the first list of devices by the device object got, perform step 106; Correspondingly, can also include between step 112 and step 113: mobile terminal connects handle according to equipment and obtains the equipment identification marking of USBKEY by controlling Transport endpoint, it is judged that whether equipment identification marking is preset identification marking, if it is, continue; Otherwise, step 102 is returned.

Specifically, mobile terminal calls the control transfer function of equipment connection handle by controlling the equipment identification marking of Transport endpoint acquisition USBKEY, it is judged that whether equipment identification marking is default identification marking, if it is, continuation; Otherwise, step 102 is returned.

Wherein, default identification marking is the default identification marking of the USBKEY supporting FIDO agreement, specifically includes: first presets identification marking and second presets identification marking, and first presets identification marking can be specially 0xf1d0; Second presets identification marking can be specially 0x01. Equipment identification marking specifically includes the first mark and the second mark.

Correspondingly, more specifically, mobile terminal calls equipment and connects the control transfer function of handle by controlling the first mark and second mark of Transport endpoint acquisition USBKEY, judge that first identifies whether to preset identification marking coupling and second identifies whether it is preset identification marking coupling with second with first, if it is, continue; Otherwise, step 102 is returned.

Wherein, controlling transfer function is intcontrolTransfer (intrequestType, intrequest, intvalue, intindex, byte [] buffer, intlength, inttimeout); First mark and the second mark can HID_UsagePage and HID_Usage in the report descriptor of respectively USBKEY.

In the present embodiment, monitor flow process, it is also possible to as shown in Figure 4, mobile terminal specifically performs:

Step 201: open monitoring flow process, initialize USB management object and authority permission object;

Wherein, mobile terminal call first initialization function initialize USB management object particularly as follows:

MUsbManager=(UsbManager) getSystemService (Context.USB_SERVICE); Wherein, mUsbManager is USB management object;

MPermissionIntent=PendingIntent.getBroadcast (this, 0, newIntent (ACTION_USB_PERMISSION), 0); Wherein mPermissionIntent is authority permission object;

Step 202: obtain the device object corresponding with USBKEY in Preset Time, after getting the device object corresponding with USBKEY in Preset Time, performs step 204; After not getting the device object corresponding with USBKEY in Preset Time, perform step 203;

Specifically, JAVA calls the acquisition list of devices function of USB management object and in Preset Time, USBKEY is enumerated, and obtains the device object corresponding with USBKEY, after getting the device object corresponding with USBKEY in Preset Time, performs step 204; After not getting the device object corresponding with USBKEY in Preset Time, perform step 203.

Preferably, Preset Time is 2 seconds.

Wherein, mobile terminal calls the acquisition list of devices function of USB management object and in Preset Time, USBKEY is enumerated, obtain the device object corresponding with USBKEY, particularly as follows: HashMap<String, UsbDevice>deviceMap=m_UsbManager.getDeviceList ();

Step 203: empty the first list of devices, performs step 206;

Step 204: judge whether the device object corresponding with default identification of the manufacturer, if it is, perform step 205; Otherwise, step 202 is returned;

Specifically, the identification of the manufacturer information in acquisition for mobile terminal device object, it is judged that whether the identification of the manufacturer information of the device object got is corresponding with default identification of the manufacturer, if it is, perform step 205; Otherwise, step 202 is returned.

Step 205: stored to by the device object corresponding with default identification of the manufacturer in the first list of devices, performs step 206;

Step 206: judge whether to have in the first list of devices newly-increased device object, if it is, perform step 207; Otherwise, step 210 is performed;

Specifically, mobile terminal determines whether that device object is stored in the first list of devices and is not stored in the second list of devices, if, then judge the first list of devices has newly-increased device object and will be stored in the first list of devices and be not stored in the second list of devices device object as newly-increased device object, perform step 207; Otherwise, it is determined that the first list of devices does not have newly-increased device object, perform step 210.

It should be noted that, step 201 also includes initialize the second list of devices, wherein, initialize the second list of devices particularly as follows: create the second empty list of devices.

Step 207: newly-increased device object is stored in the second list of devices;

Step 208: judge whether the device object in the second list of devices has equipment authority, if it is, return step 206; Otherwise, step 209 is performed;

Specifically, mobile terminal uses the equipment authority function that obtains that the device object in the second list of devices calls USB management object to obtain the equipment capability identification of newly-increased device object, whether the equipment capability identification of the device object that judgement is newly-increased is TRUE, if it is, return step 206; Otherwise, step 209 is performed.

Wherein, mobile terminal uses the equipment authority function that obtains that the device object in the second list of devices calls USB management object to obtain the equipment capability identification of newly-increased device object, particularly as follows:

BooleanbHasPermissionm=m_UsbManager.hasPermission (device);

Step 209: be the device object application equipment authority in the second list of devices, returns step 206;

Specifically, mobile terminal uses the application authority function that device object and authority permission object call USB management object to be device object application equipment authority in the second list of devices.

Step 210: judge the device object whether having minimizing in the first list of devices, if it is, perform step 211; Otherwise, step 214 is performed;

Specifically, mobile terminal determines whether that device object is stored in the second list of devices and is not stored in first and sets in list, if, then judge that the device object having minimizing in the first list of devices the device object that will be stored in the second list of devices and be not stored in the first list of devices are as the device object reduced, and perform step 211; Otherwise, it is determined that the first list of devices does not have the device object reduced, perform step 214;

Step 211: judge whether the device talk handle corresponding with the device object reduced, if it is, perform step 212; Otherwise, step 213 is performed;

Step 212: destroy the device object reduced, and the device talk handle corresponding respectively with it, equipment connect handle and device talk end points, return step 210;

Step 213: destroy the device object reduced, returns step 210;

Step 214: judge whether the device object in the second list of devices has equipment authority and be absent from device talk handle, if it is, perform step 215; Otherwise, step 219 is performed;

Step 215: obtain the equipment corresponding with the device object in the second list of devices and connect handle and equipment interface object;

Specifically, mobile terminal uses equipment of the opening function that the device object in the second list of devices calls USB management object to obtain the equipment connection handle corresponding with the device object in the second list of devices; The interface function that obtains calling the device object in the second list of devices obtains the equipment interface object corresponding with the device object in the second list of devices.

Wherein, mobile terminal uses equipment of the opening function that the device object in the second list of devices calls USB management object to obtain the equipment connection handle corresponding with the device object in the second list of devices, particularly as follows:

UsbDeviceConnectionhconnection=m_UsbManager.openDevice (device)

Mobile terminal calls the interface function that obtains of the device object in the second list of devices and obtains the equipment interface object corresponding with the device object in the second list of devices, particularly as follows: UsbInterfacem_usbInterface=m_device.getInterface (0);

Step 216: connect handle initialization apparatus interface object according to equipment;

Interface statement function is particularly as follows: m_connection.claimInterface (m_usbInterface, true);

217: according to the device talk end points that equipment interface object acquisition is corresponding with the device object in the second list of devices;

Step 218: generate device talk handle, by the device object in device talk handle and the second list of devices, equipment connects handle and device talk end points is set up corresponding relation respectively and preserves, and returns step 214;

Step 219: judge whether to exit monitoring flow process, if it is, exit monitoring flow process; Otherwise, step 202 is returned.

Wherein, after step 205 and step 203, can also carry out step 210, accordingly, when step 210 is judged to no after, perform step 206, step 206 is judged to no after, perform step 214.

It addition, in step 202 after getting the device object corresponding with USBKEY in Preset Time, it is also possible to after being directly stored in the first list of devices by the device object got, perform step 206; Correspondingly, can also include between step 216 and step 217: mobile terminal connects handle according to equipment and obtains the equipment identification marking of USBKEY by controlling Transport endpoint, it is judged that whether equipment identification marking is preset identification marking, if it is, continue; Otherwise, step 202 is returned.

Specifically, mobile terminal calls the control transfer function of equipment connection handle by controlling the equipment identification marking of Transport endpoint acquisition USBKEY, it is judged that whether equipment identification marking is default identification marking, if it is, continuation; Otherwise, step 202 is returned.

Wherein, default identification marking is the default identification marking of the USBKEY supporting FIDO agreement, specifically includes: first presets identification marking and second presets identification marking, and first presets identification marking can be specially 0xf1d0; Second presets identification marking can particularly as follows: 0x01. Equipment identification marking specifically includes the first mark and the second mark.

Correspondingly, more specifically, mobile terminal calls equipment and connects the control transfer function of handle by controlling the first mark and second mark of Transport endpoint acquisition USBKEY, judge that first identifies whether to preset identification marking coupling and second identifies whether it is preset identification marking coupling with second with first, if it is, continue; Otherwise, step 202 is returned.

Wherein, controlling transfer function is controlTransfer (); First mark and the second mark can HID_UsagePage and HID_Usage in the report descriptor of respectively USBKEY.

In the present embodiment, monitor flow process, it is also possible to as it is shown in figure 5, mobile terminal specifically performs:

Step 301: open monitoring flow process, initialize USB management object, broadcast reception object, authority permission object and broadcast filtering object;

Specifically, mobile terminal calls initialization function and initializes USB management object, authority permission object, broadcast reception object and broadcast filtering object. Wherein, initialization function includes the first initialization function, the second initialization function, the 3rd initialization function and the 4th initialization function.

MPermissionIntent=PendingIntent.getBroadcast (this, 0, newIntent (ACTION_USB_PERMISSION), 0); Wherein: mPermissionIntent is authority permission object; Illustrating further, authority permission object is a pending event object;

ACTION_USB_PERMISSION is equipment entitlement messages, and ACTION_USB_PERMISSION can be specially " com.android.example.USB_PERMISSION ".

Mobile terminal calls the 3rd initialization function and initializes broadcast reception object particularly as follows: privatefinalBroadcastReceivermUsbReceiver=newBroadcastRe ceiver (); Wherein, mUsbReceiver is broadcast reception object;

Mobile terminal calls the 4th initialization function and initializes broadcast filtering object particularly as follows: IntentFilterfilter=newIntentFilter (); Wherein, filter is broadcast filtering object.

Step 302: add in broadcast filtering object and be concerned about message;

Specifically, mobile terminal calls interpolation Message function and adds care message in filtering object, wherein, is concerned about that message includes equipment insertion message, equipment extracts message and equipment entitlement messages.

Wherein, mobile terminal call interpolation Message function adds in filtering object be concerned about message particularly as follows:

Filter.addAction (ACTION_USB_PERMISSION);

Filter.addAction (UsbManager.ACTION_USB_DEVICE_ATTACHED);

Filter.addAction (UsbManager.ACTION_USB_DEVICE_DETACHED); Wherein,

ACTION_USB_PERMISSION is equipment entitlement messages;

UsbManager.ACTION_USB_DEVICE_ATTACHED is that equipment inserts message;

UsbManager.ACTION_USB_DEVICE_DETACHED is that equipment extracts message.

Step 303: according to USB management object and broadcast filtering object registration radio receiver;

Specifically, mobile terminal uses USB management object and broadcast filtering object reference registration broadcast function registration radio receiver;

Register broadcast function as registerReceiver (mUsbReceiver, filter);

Step 304: according to message informing objects to be obtained such as broadcast reception objects, after getting message informing object, according to the device object that message informing object acquisition is corresponding with USBKEY;

Specifically, mobile terminal calls the message communication objects to be obtained such as the reception message informing function of broadcast reception object, and after getting message informing object, the first packing function of message call notice object obtains the device object corresponding with USBKEY;

Wherein, mobile terminal calls the message communication objects to be obtained such as the reception message informing function of broadcast reception object, receive message informing function particularly as follows:

PublicvoidonReceive (Contextcontext, Intentintent), wherein, intent is message communication object;

First packing function of mobile terminal message call notice object obtains the device object corresponding with USBKEY, particularly as follows: UsbDevicedevice=(UsbDevice) intent.getParcelableExtra (UsbManager.EXTRA_DEVICE); Wherein, device is device object.

Wherein, specifically including in device object: the identification of the manufacturer information of USBKEY, wherein, the identification of the manufacturer information of USBKEY can be specially the PID (ProductID of USBKEY, product ID) and VID (VendorID, vendor identity).

Step 305: whether judgment device object is corresponding with default identification of the manufacturer, if it is, perform step 306; Otherwise, step 304 is returned;

Specifically, the identification of the manufacturer information in acquisition for mobile terminal device object, it is judged that whether the identification of the manufacturer information in the device object got is corresponding with default identification of the manufacturer, if it is, perform step 306; Otherwise, step 304 is returned.

Step 306: the equipment capability identification according to message informing object acquisition device object, according to message informing object acquisition message informing, according to being concerned about that message judges the type of message informing, when the type of message informing is equipment entitlement messages, performs step 307; When the type of message informing is equipment insertion message, perform step 308; When the type of message informing be equipment extract message time, perform step 314;

Specifically, second packing function of mobile terminal message call notice object obtains the equipment authority of USBKEY, the acquisition Message function of message call notice object obtains message informing, according to being concerned about that message judges the type of message informing, when the type of message informing is equipment entitlement messages, perform step 307; When the type of message informing is equipment insertion message, perform step 308; When the type of message informing be equipment extract message time, perform step 314;

Wherein, the second packing function of mobile terminal message call notice object obtains the equipment capability identification of USBKEY, particularly as follows:

Boolean

BHasPermission=intent.getBooleanExtra (UsbManager.EXTRA_PERMISSION_GRANTED, false); Wherein, bHasPermission is equipment capability identification;

The acquisition Message function of mobile terminal message call notice object obtains message informing, particularly as follows:

Stringaction=intent.getAction (); Wherein, action is message informing.

Step 307: according to whether equipment capability identification judgment device object has equipment authority, if it is, perform step 309; Otherwise, step 317 is performed;

Specifically, whether mobile terminal judgment device capability identification is TRUE, if it is, judge that device object has equipment authority; Otherwise, it is determined that device object does not have equipment authority.

Step 308: according to whether equipment capability identification judgment device object has equipment authority, if it is, perform step 309; Otherwise, step 313 is performed;

Step 309: obtain the equipment corresponding with device object and connect handle and equipment interface object;

Specifically, mobile terminal uses equipment of the opening function that device object calls USB management object to obtain the equipment connection handle corresponding with device object; The interface function that obtains calling device object obtains the equipment interface object corresponding with device object.

Wherein, mobile terminal uses equipment of the opening function that device object calls USB management object to obtain the equipment connection handle corresponding with device object, particularly as follows:

UsbDeviceConnectionhconnection=m_UsbManager.openDevice (device)

The interface function that obtains calling device object obtains the equipment interface object corresponding with device object, particularly as follows: UsbInterfacem_usbInterface=m_device.getInterface (0);

Step 310: connect handle initialization apparatus interface object according to equipment;

Particularly as follows: m_connection.claimInterface (m_usbInterface, true);

Step 311: according to the device talk end points that equipment interface object acquisition is corresponding with device object;

Specifically, mobile terminal call equipment interface object obtain end points function obtain the device talk end points corresponding with device object. Particularly as follows:

Step 312: generate device talk handle, sets up corresponding relation respectively by device talk handle and device object, equipment connection handle and device talk end points and preserves, performing step 317;

Step 313: for device object application equipment authority, execution step 317;

Step 314: judge whether the device talk handle corresponding with device object, if it is, perform step 315; Otherwise, step 316 is performed;

Step 315: destroy device object, and the device talk handle corresponding respectively with it, equipment connect handle and device talk end points, perform step 317;

Step 316: destroy device object, performs step 317;

Step 317: judge whether to exit monitoring flow process, if it is, exit monitoring flow process; Otherwise, step 304 is returned;

It addition, mobile terminal can also directly perform step 306 after performing step 304; Correspondingly, can also include between step 310 and step 311: mobile terminal connects handle according to equipment and obtains the equipment identification marking of USBKEY by controlling Transport endpoint, it is judged that whether equipment identification marking is preset identification marking, if it is, continue; Otherwise, step 304 is returned.

Specifically, mobile terminal calls the control transfer function of equipment connection handle by controlling the equipment identification marking of Transport endpoint acquisition USBKEY, it is judged that whether equipment identification marking is default identification marking, if it is, continuation; Otherwise, step 304 is returned.

Correspondingly, more specifically, mobile terminal calls equipment and connects the control transfer function of handle by controlling the first mark and second mark of Transport endpoint acquisition USBKEY, judge that first identifies whether to preset identification marking coupling and second identifies whether it is preset identification marking coupling with second with first, if it is, continue; Otherwise, step 304 is returned.

Embodiment 2

Present embodiments provide a kind of and intelligent cipher key equipment communication device, as shown in Figure 6, including: initialization module 01, monitoring module the 02, first acquisition module the 03, first judge module 04, application authority module the 05, second judge module the 06, second acquisition module the 07, first package module the 08, first sending module the 09, first receiver module 10 and the first deblocking module 11;

Initialization module 01, is used for initializing;

Monitoring module 02, after initializing for initialization module 01, adopts broadcast or the mode enumerated, has monitored whether that intelligent cipher key equipment inserts; And when the second judge module 06 be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts;

First acquisition module 03, for, after monitoring module 02 monitors intelligent cipher key equipment insertion, obtaining the device object corresponding with intelligent cipher key equipment;

First acquisition module 03, specifically for adopting, when monitoring module 02, the mode enumerated, after having monitored intelligent cipher key equipment insertion, calls list of devices function and intelligent cipher key equipment is enumerated, obtain the device object corresponding with intelligent cipher key equipment.

Or the first acquisition module 03 specifically for adopting the mode of broadcast when monitoring module 02, after having monitored intelligent cipher key equipment insertion, call the first packing function and obtain the device object corresponding with intelligent cipher key equipment.

First judge module 04, for judging whether the device object that the first acquisition module 03 gets has equipment authority;

First judge module 04 is specifically for when the first acquisition module 03, call list of devices function intelligent cipher key equipment is enumerated, after obtaining the device object corresponding with intelligent cipher key equipment, call acquisition equipment authority function and obtain the equipment capability identification of device object, according to whether equipment capability identification judgment device object has equipment authority;

Or after the first acquisition module 03 calls the device object that the first packing function acquisition is corresponding with intelligent cipher key equipment, call the second packing function and obtain the equipment capability identification of device object, according to whether equipment capability identification judgment device object has equipment authority.

Application authority module 05, for when the first judge module 04 be judged to no after, for device object application equipment authority;

Application authority module 05 specifically for when the first judge module 04 be judged to no after, call apply for authority function be device object application equipment authority.

Second judge module 06, for after application authority module 05 is the device object application equipment authority that the first acquisition module 03 gets, it is judged that whether device object has equipment authority;

Second judge module 06 is specifically for when applying for that authority module 05 is that intelligent cipher key equipment is enumerated by the first acquisition module 03 by calling list of devices function, the device object corresponding with intelligent cipher key equipment got, after application equipment authority, call acquisition equipment authority function and obtain the equipment capability identification of device object, according to whether equipment capability identification judgment device object has equipment authority.

Or specifically for when applying for that authority module 05 is that the first acquisition module 03 is by calling the device object corresponding with intelligent cipher key equipment that the first packing function gets, after application equipment authority, call the second packing function and obtain the equipment capability identification of device object, according to whether equipment capability identification judgment device object has equipment authority.

Second acquisition module 07, for when the first judge module 04 be judged to be after or when the second judge module 06 be judged to be after, obtain the equipment corresponding with device object and connect handle and equipment interface object, according to the device talk end points that equipment interface object acquisition is corresponding with device object.

Second acquisition module 07, specifically for when the first judge module 04 be judged to be after or when the second judge module 06 be judged to be after, call and open equipment function and obtain corresponding with device object equipment connection handle; Call and obtain the equipment interface object that interface function acquisition is corresponding with device object; Call acquisition end points function and obtain the device talk end points corresponding with device object.

First package module 08, for when after the device talk end points that the second acquisition module 07 is corresponding with device object according to equipment interface object acquisition, generate the first communication instruction, obtain usb protocol mark according to device object, according to usb protocol mark, the first communication instruction is packaged;

First package module 08 includes the first acquiring unit and the first organizational unit;

First acquiring unit is used for generating the first communication instruction, obtains usb protocol mark according to the device object that the first acquisition module 03 gets;

Wherein, the first communication instruction is specially and tests PIN instruction or take random number instruction or produce double secret key instruction or signature command; Usb protocol mark is specially CCID protocol mark or HID protocol mark or SCSI protocol mark.

First organizational unit specifically for adding the usb protocol head corresponding with usb protocol mark, the first communication instruction after being encapsulated before the first communication instruction that the first acquiring unit generates.

First sending module 09, the equipment for being got by the second acquisition module 07 is connected handle and device talk end points and the first communication instruction that the first package module 08 encapsulates is sent to the intelligent cipher key equipment of correspondence;

First receiver module 10, the equipment for being got by the second acquisition module 07 is connected handle and receives first response corresponding with the first communication instruction after encapsulation from intelligent cipher key equipment with device talk end points;

First deblocking module 11, carries out deblocking for the first response the first receiver module 10 received according to usb protocol mark, obtains the first response that solution is honored as a queen.

First deblocking module 11, specifically for removing the response header corresponding with usb protocol mark in the first response that the first receiver module 10 receives according to the first package module 08, obtains the first response that solution is honored as a queen.

In the present embodiment, device talk end points includes equipment output end point and equipment input endpoint; Correspondingly:

First sending module 09 is called data transfer function specifically for the equipment connection handle got by the second acquisition module 07 and the first communication instruction after encapsulation is sent to by the equipment output end point that the second acquisition module 07 gets the intelligent cipher key equipment of correspondence;

First receiver module 10 is called data transfer function specifically for the device talk handle got by the second acquisition module 07 and receives first response corresponding with the first communication instruction after described encapsulation from intelligent cipher key equipment by equipment input endpoint.

In the present embodiment, communication device can also include the 3rd judge module; Correspondingly:

3rd judge module is for after the first acquisition module 03 obtains the device object corresponding with intelligent cipher key equipment, before whether the first judge module 04 judgment device object has equipment authority, it is judged that whether the device object that the first acquisition module 03 gets is corresponding with default identification of the manufacturer;

First judge module 04 specifically for when the 3rd judge module be judged to be after, it is judged that whether the device object that the first acquisition module 03 gets has equipment authority;

Monitoring module 02 be additionally operable to when the 3rd judge module be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts.

In the present embodiment, communication device can also include the 4th judge module; Correspondingly:

4th judge module for after getting the equipment connection handle corresponding with device object and equipment interface object when the second acquisition module 07, according to before the device talk end points that equipment interface object acquisition is corresponding with device object, connect handle according to equipment and use the equipment identification marking controlling Transport endpoint acquisition intelligent cipher key equipment, it is judged that whether equipment identification marking is preset identification marking;

Second acquisition module 07 specifically for when the first judge module 04 be judged to be after, obtain the equipment corresponding with device object and connect handle and equipment interface object; When the 4th judge module be judged to be after, according to the device talk end points that equipment interface object acquisition is corresponding with device object; And when the second judge module 06 be judged to be after, obtain the equipment corresponding with device object and connect handle and equipment interface object, when the 4th judge module be judged to be after, according to the device talk end points that equipment interface object acquisition is corresponding with device object;

Monitoring module 02 be additionally operable to when the 4th judge module be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts.

In the present embodiment, communication device can also include the 5th judge module and first and destroy module; Correspondingly:

After monitoring module 02 is additionally operable to initialization module 01 initialization, adopts broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment is extracted;

5th judge module is for monitoring after intelligent cipher key equipment extracts when monitoring module 02, it is judged that whether the device object corresponding with intelligent cipher key equipment exists corresponding equipment connection handle and device talk end points;

First destroy module for when the 5th judge module be judged to be after, destroys the device object corresponding with intelligent cipher key equipment, and distinguishes corresponding equipment connection handle and device talk end points with it; And when the 5th judge module be judged to no after, destroy the device object corresponding with intelligent cipher key equipment.

In the present embodiment, communication device can also include preserving module and the 3rd acquisition module; Correspondingly:

Preserving module to be used for generating device talk handle, the device object that equipment connection handle, device talk end points and the first acquisition module 03 device talk handle and the second acquisition module 07 got gets is set up corresponding relation respectively and preserves;

3rd acquisition module is for generating the first communication instruction when the first package module 08, usb protocol mark is obtained according to device object, according to usb protocol mark with before the first communication instruction obtains the second communication instruction, connect handle and device talk end points according to device object corresponding to device talk handle acquiring, equipment;

First sending module 09 is connected handle and device talk end points specifically for the equipment got by the 3rd acquisition module and the second communication instruction that the first package module 08 gets is sent to the intelligent cipher key equipment of correspondence.

When communication device initialization module 01, monitoring module the 02, first acquisition module the 03, first judge module 04, application authority module the 05, second judge module the 06, second acquisition module the 07, first package module the 08, first sending module the 09, first receiver module the 10, first deblocking module 11, preservation module and three acquisition modules, communication device can also include the 6th judge module and second and destroy module; Correspondingly:

6th judge module is for monitoring after intelligent cipher key equipment extracts when monitoring module 02, it is judged that whether the device object corresponding with intelligent cipher key equipment exists corresponding equipment connection handle and device talk end points;

Second destroy module for when the 6th judge module be judged to be after, destroys the device object corresponding with intelligent cipher key equipment, and distinguishes corresponding device talk handle, equipment connection handle and device talk end points with it; And when the 6th judge module be judged to no after, destroy the device object corresponding with intelligent cipher key equipment.

It should be noted that be, although in prior art, the intelligent cipher key equipment (intelligent cipher key equipment etc. such as the intelligent cipher key equipment of blue tooth interface or audio interface) that there are other interfaces can carry out communication with mobile terminal, but the means of communication of the intelligent cipher key equipment of the mobile terminal utilizing OTG technology to realize provided in the embodiment of the present invention and USB interface and communication device can while reducing cost, realize communication speed faster, more convenient.

The above; being only the present invention preferably detailed description of the invention, but protection scope of the present invention is not limited thereto, any those familiar with the art is in technical scope disclosed by the invention; the change that can readily occur in or replacement, all should be encompassed within protection scope of the present invention. Therefore, protection scope of the present invention should be as the criterion with scope of the claims.

Claims

1. one kind with the method for intelligent cipher key equipment communication, it is characterised in that including: monitoring flow process and communication flow;

Described monitoring flow process includes:

Step s1: mobile terminal initializes;

Described communication flow includes:

2. method according to claim 1, it is characterized in that, after the device object that described acquisition for mobile terminal is corresponding with described intelligent cipher key equipment, described judge whether described device object has equipment authority before, also include: judge that whether described device object is corresponding with default identification of the manufacturer, if it is, continue; Otherwise, step s2 is returned.

3. method according to claim 1, it is characterized in that, described acquisition for mobile terminal connects to the equipment corresponding with described device object after handle and equipment interface object, according to before the device talk end points that described equipment interface object acquisition is corresponding with described device object, also include: described mobile terminal connects handle according to described equipment and obtains the equipment identification marking of described intelligent cipher key equipment by controlling Transport endpoint, judge whether described equipment identification marking is preset identification marking, if it is, continue; Otherwise, step s2 is returned.

4. method according to claim 1, it is characterised in that also include in described step s2: described mobile terminal adopts broadcast or the mode enumerated, and has monitored whether that intelligent cipher key equipment is extracted; When described mobile terminal monitored extract to intelligent cipher key equipment after, perform step m1;

Step m1: described mobile terminal judges whether the device object corresponding with described intelligent cipher key equipment exists corresponding equipment and connect handle and device talk end points, if it is, perform step m2; Otherwise, step m3 is performed;

Step m2: described mobile terminal destroys the described device object corresponding with described intelligent cipher key equipment, and the equipment corresponding respectively with it connects handle and device talk end points;

Step m3: described mobile terminal destroys the described device object corresponding with described intelligent cipher key equipment.

5. method according to claim 1, it is characterized in that, also include after described step s5: described mobile terminal generates device talk handle, described device talk handle is connected with described equipment handle, described device talk end points and described device object and sets up corresponding relation respectively and preserve;

Also include before described step r1: described mobile terminal connects handle and described device talk end points according to described device object corresponding to described device talk handle acquiring, described equipment.

6. method according to claim 5, it is characterised in that also include in described s2: described mobile terminal adopts broadcast or the mode enumerated, and has monitored whether that intelligent cipher key equipment is extracted; When described mobile terminal monitored extract to intelligent cipher key equipment after, perform step n1;

Step n1: described mobile terminal judges whether the device object corresponding with described intelligent cipher key equipment exists corresponding device talk handle, if it is, perform step n2; Otherwise, step n3 is performed;

Step n2: described mobile terminal destroys the described device object corresponding with described intelligent cipher key equipment, and the device talk handle corresponding respectively with it, equipment connect handle and device talk end points;

Step n3: described mobile terminal destroys the described device object corresponding with described intelligent cipher key equipment.

7. method according to claim 1, it is characterized in that, described first communication instruction is packaged by described mark according to described usb protocol: particularly as follows: add the usb protocol head corresponding with described usb protocol mark before described first communication instruction, obtain the first communication instruction after described encapsulation.

8. method according to claim 1, it is characterized in that, described first response is carried out deblocking according to described usb protocol mark by described mobile terminal, obtain the first response that solution is honored as a queen, particularly as follows: described mobile terminal removes the response header corresponding with usb protocol mark in described first response, obtain the first response that described solution is honored as a queen.

9. method according to claim 1, it is characterised in that described first communication instruction is specially to be tested PIN instruction or takes random number instruction or produce double secret key instruction or signature command.

10. method according to claim 1, it is characterised in that described usb protocol mark is specially CCID protocol mark or HID protocol mark or SCSI protocol mark.

11. method according to claim 1, it is characterised in that described mobile terminal be described device object application equipment authority particularly as follows:

It is described device object application equipment authority that described mobile terminal calls application authority function.

12. method according to claim 1, it is characterised in that described step s5 connects handle particularly as follows: described mobile terminal calls the equipment opening the acquisition of equipment function corresponding with described device object; Call and obtain the equipment interface object that interface function acquisition is corresponding with described device object; Call acquisition end points function and obtain the device talk end points corresponding with described device object.

13. method according to claim 1, it is characterised in that described device talk end points includes equipment output end point and equipment input endpoint;

The first communication instruction after encapsulation is sent to the described intelligent cipher key equipment of correspondence particularly as follows: described mobile terminal calls data transfer function by described equipment connection handle by described step r2 by described equipment output end point;

Described step r3 receives first response corresponding with the first communication instruction after described encapsulation from described intelligent cipher key equipment particularly as follows: described mobile terminal calls data transfer function by described equipment connection handle by described equipment input endpoint.

14. method according to claim 1, it is characterized in that, after described mobile terminal adopts the mode enumerated to monitor the insertion of described intelligent cipher key equipment, device object that described acquisition for mobile terminal is corresponding with described intelligent cipher key equipment, particularly as follows: described mobile terminal calls list of devices function that described intelligent cipher key equipment is enumerated, obtains the device object corresponding with described intelligent cipher key equipment.

15. method according to claim 14, it is characterized in that, described judge described device object whether there is equipment authority particularly as follows: described mobile terminal call acquisition equipment authority function obtain described device object equipment capability identification, judge whether described device object has equipment authority according to described equipment capability identification.

16. method according to claim 1, it is characterized in that, after described mobile terminal adopts the mode of broadcast to monitor the insertion of described intelligent cipher key equipment, the device object that described acquisition for mobile terminal is corresponding with described intelligent cipher key equipment obtains the device object corresponding with described intelligent cipher key equipment particularly as follows: described mobile terminal calls the first packing function.

17. method according to claim 16, it is characterized in that, described judge described device object whether there is equipment authority particularly as follows: described mobile terminal call second packing function obtain described device object equipment capability identification, judge whether described device object has equipment authority according to described equipment capability identification.

18. one kind with the device of intelligent cipher key equipment communication, it is characterized in that, including: initialization module, monitoring module, the first acquisition module, the first judge module, application authority module, the second judge module, the second acquisition module, the first package module, the first sending module, the first receiver module and the first deblocking module;

Described initialization module, is used for initializing;

19. device according to claim 18, it is characterised in that described device also includes the 3rd judge module;

Described 3rd judge module is for after described first acquisition module obtains the device object corresponding with described intelligent cipher key equipment, before described first judge module judges whether described device object has equipment authority, it is judged that whether the described device object that described first acquisition module gets is corresponding with default identification of the manufacturer;

Described first judge module specifically for when described 3rd judge module be judged to be after, it is judged that whether the described device object that the first acquisition module gets has equipment authority;

Described monitoring module be additionally operable to when described 3rd judge module be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts.

20. device according to claim 18, it is characterised in that described device also includes the 4th judge module;

Described 4th judge module for after getting the equipment connection handle corresponding with described device object and equipment interface object when described second acquisition module, according to before the device talk end points that described equipment interface object acquisition is corresponding with described device object, connect handle according to described equipment and use the equipment identification marking controlling the Transport endpoint described intelligent cipher key equipment of acquisition, it is judged that whether described equipment identification marking is preset identification marking;

Described second acquisition module specifically for when described first judge module be judged to be after, obtain the equipment corresponding with described device object and connect handle and equipment interface object; And when described second judge module be judged to be after, obtain the equipment corresponding with described device object and connect handle and equipment interface object, when described 4th judge module be judged to be after, according to the device talk end points that described equipment interface object acquisition is corresponding with described device object;

Described monitoring module be additionally operable to when described 4th judge module be judged to no after, adopt broadcast or the mode enumerated, monitored whether that intelligent cipher key equipment inserts.

21. device according to claim 18, it is characterised in that described device also includes the 5th judge module and first and destroys module;

Described monitoring module is additionally operable to after described initialization module initializes, and adopts broadcast or the mode enumerated, has monitored whether that intelligent cipher key equipment is extracted;

Described 5th judge module is for monitoring after intelligent cipher key equipment extracts when described monitoring module, it is judged that whether the device object corresponding with described intelligent cipher key equipment exists corresponding equipment connection handle and device talk end points;

Described first destroy module for when described 5th judge module be judged to be after, destroys the described device object corresponding with described intelligent cipher key equipment, and distinguishes corresponding described equipment connection handle and described device talk end points with it; And when described 5th judge module be judged to no after, destroy the described device object corresponding with described intelligent cipher key equipment.

22. device according to claim 18, it is characterised in that described device also includes preserving module and the 3rd acquisition module;

Described preservation module is used for generating device talk handle, the described equipment that described device talk handle gets with described second acquisition module is connected the device object that handle, described device talk end points and described first acquisition module get and sets up corresponding relation respectively and preserve;

Described 3rd acquisition module is for generating the first communication instruction when described first package module, described usb protocol mark is obtained according to described device object, according to described usb protocol mark with before described first communication instruction obtains the second communication instruction, connect handle and described device talk end points according to described device object corresponding to described device talk handle acquiring, described equipment;

Described first sending module is sent to the described intelligent cipher key equipment of correspondence specifically for described second communication instruction that described first package module is got by the equipment connection handle got by described 3rd acquisition module and described device talk end points.

23. device according to claim 22, it is characterised in that described device also includes the 6th judge module and second and destroys module;

Described 6th judge module is for monitoring after intelligent cipher key equipment extracts when described monitoring module, it is judged that whether the device object corresponding with described intelligent cipher key equipment exists corresponding equipment connection handle and device talk end points;

Described second destroy module for when described 6th judge module be judged to be after, destroy the described device object corresponding with described intelligent cipher key equipment, and the described device talk handle corresponding respectively with it, described equipment connect handle and described device talk end points; And when described 6th judge module be judged to no after, destroy the described device object corresponding with described intelligent cipher key equipment.

24. device according to claim 18, it is characterised in that described first package module includes the first acquiring unit and the first organizational unit;

Described first acquiring unit is used for generating the first communication instruction, obtains described usb protocol mark according to the described device object that described first acquisition module gets;

Described first organizational unit, specifically for adding the usb protocol head corresponding with described usb protocol mark before the first communication instruction that described first acquiring unit generates, obtains the first communication instruction after described encapsulation.

25. device according to claim 18, it is characterized in that, described first deblocking module, specifically for removing the response header corresponding with usb protocol mark in described first response that described first receiver module receives according to described first package module, obtains the first response that solution is honored as a queen.

26. device according to claim 18, it is characterised in that described first communication instruction is specially to be tested PIN instruction or takes random number instruction or produce double secret key instruction or signature command.

27. device according to claim 18, it is characterised in that described usb protocol mark is specially CCID protocol mark or HID protocol mark or SCSI protocol mark.

28. according to the device described in right 18, it is characterised in that described application authority module specifically for when described first judge module be judged to no after, call application authority function be described device object application equipment authority.

29. device according to claim 18, it is characterized in that, described second acquisition module specifically for when described first judge module be judged to be after or when described second judge module be judged to be after, call and open equipment function and obtain corresponding with described device object equipment connection handle; Call and obtain the equipment interface object that interface function acquisition is corresponding with described device object; Call acquisition end points function and obtain the device talk end points corresponding with described device object.

30. device according to claim 18, it is characterised in that described device talk end points includes equipment output end point and equipment input endpoint;

Described first sending module is called data transfer function specifically for the described equipment connection handle got by described second acquisition module and the first communication instruction after encapsulation is sent to by the described equipment output end point that described second acquisition module gets the described intelligent cipher key equipment of correspondence;

Described first receiver module is called data transfer function specifically for the described device talk handle got by described second acquisition module and receives first response corresponding with the first communication instruction after described encapsulation from described intelligent cipher key equipment by described equipment input endpoint.

31. device according to claim 18, it is characterized in that, described first acquisition module is specifically for adopting, when described monitoring module, the mode enumerated, after having monitored intelligent cipher key equipment insertion, call list of devices function described intelligent cipher key equipment is enumerated, obtain the device object corresponding with described intelligent cipher key equipment.

32. device according to claim 31, it is characterized in that, described first judge module obtains the equipment capability identification of described device object specifically for calling acquisition equipment authority function, judges whether described device object has equipment authority according to described equipment capability identification;

Described second judge module is specifically for after described application authority module is the device object application equipment authority that described first acquisition module gets, call acquisition equipment authority function and obtain the equipment capability identification of described device object, judge whether described device object has equipment authority according to described equipment capability identification.

33. device according to claim 18, it is characterized in that, described first acquisition module is specifically for, after adopting when described monitoring module the mode of broadcast to monitor intelligent cipher key equipment insertion, calling the first packing function and obtain the device object corresponding with described intelligent cipher key equipment.

34. device according to claim 33, it is characterized in that, described first judge module specifically for, call second packing function obtain described device object equipment capability identification, judge whether described device object has equipment authority according to described equipment capability identification;

Described second judge module is specifically for after described application authority module is the device object application equipment authority that described first acquisition module gets, call the second packing function and obtain the equipment capability identification of described device object, judge whether described device object has equipment authority according to described equipment capability identification.