KR100720374B1 - Smart universal serial bus storage and soft smart card system and service support method using the same - Google Patents

Abstract

The present invention relates to a smart USB storage device and a soft smart card system and a method for providing the same, the soft smart card system according to an embodiment of the present invention comprises a user terminal loaded with a smart card system implemented in software; And a smart USB storage device configured to communicate with the user terminal to load the smart card system into the user terminal and to store smart data generated by the smart card system.

Smart Software, USB, Security, Smart Card System

Description

Smart Universal Serial Bus Storage And Soft Smart Card System And Service Support Method using the same}

1 is a block diagram showing the configuration of a soft smart card system according to an embodiment of the present invention.

2 is a cross-sectional view showing the configuration of the smart USB storage device of FIG.

FIG. 3 is a diagram illustrating the memory of FIG. 2 for each region. FIG.

4 is a configuration diagram schematically showing each configuration included in the automatic execution file of FIG.

5 is a diagram showing an auto-executing file loaded in a user terminal.

6 is a flowchart illustrating a smart card service providing method using a soft smart card system according to an exemplary embodiment of the present invention.

7 is a signal flow diagram illustrating a signal transmitted and received between the soft smart card system according to an embodiment of the present invention.

8 is a screen configuration diagram illustrating an interface of a virtual smart card reader.

9 is a screen configuration diagram showing an interface for installing a virtual smart card reader.

10 is a screen configuration diagram showing an interface for checking a user password.

11 is a screen configuration diagram showing an interface for changing a user password.

12A and 12B are screen configuration diagrams illustrating an interface for generating and storing smart card-related smart data.

      <Description of Symbols for Main Parts of Drawings>

10: user terminal 200: smart USB storage device

15: USB Connector 100: Smart USB Controller

210: memory 220: auto execution area

230: data area 240: spare area

250: smart zone 222b: smart card system

202: Virtual Smart Card Reader 204: HID Filter Driver

206: card operating system 208: crypto MD

209: virtual file system

The present invention relates to a smart USB storage device and a method for providing a soft smart card system and a service using the same, and in particular, the storage function, the calculation function, and the security function of the smart chip are implemented in software, and the implemented software and soft smart. A smart USB storage device capable of storing smart data generated by a card system, and a soft smart card system and a service providing method using the same.

Smart card is an IC chip equipped with microprocessor, operating system, security module, memory, etc., and has storage function, arithmetic function and security function, and records information and royalty management in many fields such as finance, communication, education, administration and transportation. It is widely used as a means of identification such as membership card, electronic money such as transportation card, credit card, and electronic bank account.

These smart cards can be classified in various ways according to their classification criteria, but they can be classified into contact cards, contactless cards, and combined cards according to the way the data is read.

A contact smart card refers to a form in which a smart card is activated by contacting a smart card with a contact of an interface device. A contactless smart card uses a computing device and a memory device required for an information processing function to be the same as a contact type. It is a card of the type that uses the electromagnetic induction method for communication with the interface device and the power supply is through RF (Radio Frequency) antenna, and the combined smart card is a smart card that supports both contact and non-contact functions. Combi card is a smart card configured to share the parts that can be shared in contact / contactless in one chip.

In the early days, smart cards were widely used in the form of transportation cards, one of the prepaid electronic money. The prepaid transportation card is a plastic card type contactless card with a contactless smart card and an RF antenna. The card is charged at the charging station in advance and charged to the card. It is a smart card of the way that the transportation fee is reduced from the stored amount, there was a inconvenience to visit the charging station to recharge the amount. Since then, the contactless transportation card has been combined with a credit card so that it can be paid as a post-payment by credit like a general merchandise price without additional charges. It can be said to be combined in a card.

However, smart cards are more expensive than IC and other alternative technologies, and require cost reduction measures due to hardware design and manufacturing. Therefore, the development of application-related technologies related to smart cards is difficult. Although ongoing, the research is very poor. In particular, as the incidents related to authentication and security occurring in Korea frequently occur, smart card technology is required to provide easy and reliable security in connection with software security.

SUMMARY OF THE INVENTION An object of the present invention is to solve the above problems, and by configuring the reader for reading the smart card system and the smart card operating system in software and storing them in a USB storage device, the smart card is provided in a device provided with a universal USB interface. The present invention provides a smart USB storage device capable of implementing security and authentication functions and a soft smart card system and a service providing method using the same.

In addition, another object of the present invention, by configuring a hardware smart card system in the software storage in the USB storage device, a smart USB storage device and a soft smart card system using the same that can reduce the cost of hardware design and production and To provide a service providing method.

In order to achieve the above object, a soft smart card system according to an embodiment of the present invention is a user terminal loaded with a smart card system implemented in software; And a smart USB storage device configured to communicate with the user terminal to load the smart card system into the user terminal and to store smart data generated by the smart card system.

The user terminal comprises a smart card resource manager for generating a command for driving the smart card system; RAM in which the smart card system is loaded; A device driver for checking a connection of the smart USB storage device; And a virtual smart card reader for recognizing the smart USB storage device as a smart card.

The system further includes a terminal operating system including the smart card resource manager and controlling the RAM, the device driver, and the virtual smart card reader.

The smart data is characterized in that the ISO-7816 standard.

The smart USB storage device includes a connector for connecting to the user terminal; A memory for storing the smart card system and the smart data; And a controller for accessing the memory.

The memory has an auto-execution area for storing the smart card system automatically loaded in the user terminal, a smart area for storing the smart data, a data area for storing text, video, and audio file data, and an offset file system. It is characterized by including at least one of the areas.

The memory may include at least one of the auto execution region recognized by the user terminal as a virtual CDROM, a smart region in which the smart data is stored, and a data region recognized by the user terminal as a mass storage device. .

The auto execution region may include at least one of the smart card system, an auto execution routine for automatically loading the smart card system to the user terminal, a serial number of the smart USB storage device, and detailed information.

The smart card system includes a virtual smart card reader for recognizing the smart USB storage device as a smart card; A human interface device filter driver for filtering commands from the user terminal; A card operating system for generating and storing the smart data according to the command; An encryption module for encrypting the smart data; And a virtual file system that virtually defines a file type for storing the smart data in the smart USB storage device.

The system is characterized in that it further comprises an automatic execution routine for automatically executing the smart card system in the user terminal, wherein the encryption module is characterized in that the crypto MD.

A method for providing a soft smart card service according to an exemplary embodiment of the present invention includes a first step of connecting a smart USB storage device including a smart card system implemented in software to a user terminal; A second step of loading at least one of an automatic execution routine for automatically loading the smart card system into the user terminal and the smart card system into the user terminal; And generating a smart data using the smart card system and storing the smart data in the smart USB storage device.

The method may further include verifying a password for accessing the smart USB storage device.

The second step may include a first substep of checking whether the virtual smart card reader is installed; And a second sub-step of installing the virtual smart card reader according to the installation.

The third step may include a first sub-step of encrypting the generated smart data by an encryption module; And a second substep of storing the encrypted smart data in the smart USB storage device.

Smart USB storage device according to an embodiment of the present invention comprises a connector for connecting to an external device; A smart card system implemented in software and a memory for storing smart data generated by the smart card system; And a controller for accessing the memory.

The above and other objects and features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a soft smart card system according to an embodiment of the present invention.

1, a soft smart card system according to an embodiment of the present invention includes a smart USB storage device 200 equipped with a smart card system implemented in software, and a smart card system stored in the smart USB storage device 200. And a user terminal 10 which processes and transmits and receives smart data SM_Data. Here, the smart data SM_Data is preferably data that requires security, and may be an official certificate or a security card-related number. The smart data SM_Data is encrypted and stored at the time of storage.

As illustrated in FIG. 2, the smart USB storage device 200 includes a USB connector 15, a smart USB controller 100, and a memory 210 in which a smart card system is stored.

The USB connector 15 is a means for transmitting / receiving a role of transmitting / receiving a passage of smart data SM_Data by being connected to an external device, that is, a USB port provided in the user terminal 10, and directly connected to the main body of the user terminal 10 or an extension cable. It is connected with the computer main body through the back.

When the smart USB controller 100 reads data stored in the memory 210 under the control of the user terminal 10 or generates smart data SM_Data and stores the data in the memory 210, the smart USB controller 100 controls access to the memory 210. do. The smart USB controller 100 enables USB high-speed data transmission and reception between the user terminal 10 and the smart USB storage device 200, and controls the overall operation of the smart USB storage device 200. Meanwhile, the smart USB controller 100 supports a PIN function to process a process of inputting a personal user password while accessing a smart area of the memory 210 described below of the smart USB storage device 200. Such a PIN may be stored in a spare area or the like described below.

The memory 210 is an area for storing the user data including the smart data SM_Data and the smart card system 222b under the control of the smart USB controller 100 as described above, and is typically configured using a flash memory. . As shown in FIG. 3, the memory 210 includes an auto execution region 220, a data region 230, a spare region 240, and a smart region 250.

The auto-execution area 220 has a CD-ROM file system, that is, a CDFS-type file structure, supports a read-only file format, and has an EEPROM characteristic so that data can be written according to a specific command. The file format of the auto-execution area 220 is recognized as a virtual CD medium even if no actual CD is inserted, and supports a function of automatically executing a predetermined program. The capacity of the auto execution region 220 may be selectively designated according to the total capacity of the smart USB storage device 200. The autoexecution area 220 may store the autoexecution file 222 and the unique serial number 224 and license information of the smart USB storage device 200 for implementing the above-described autoexecution function. The information stored in the auto execution region 220 is not changed later. The autorun file 222 is a file containing the smart card system 222b. The autorun file 222 is an autorun routine 222a, for example, Autorun.inf file name SDU.exe, as shown in FIG. A virtual smart card reader 202, a human interface device (HID) filter driver 204, a card operating system (COS) 206, a cryptographic module example For example, the smart card system 222b includes a Crypto MD 208 and a Virtual File System (VFS) 209. When the smart USB storage device 200 is connected to the user terminal 10, the auto executable file 222 is loaded and activated on the user terminal 10. This will be described later with reference to FIG. 5.

The automatic execution routine 222a serves to load the smart card system 222b onto the memory of the user terminal 10 at the moment when the smart USB storage device 200 is connected to the user terminal 10. The command input for the smart card service using the user terminal 10 is examined and the command is transmitted to the smart card system 222b.

The virtual smart card reader 202 is a software replacement for the hardware reader of the smart card and satisfies all the standard specifications of the smart card. The virtual smart card reader 202 is installed in the user terminal 10, and when the smart USB storage device 200 is connected, recognizes the smart USB storage device 200 as a smart card, and the user terminal 10. Command sent from the HID filter driver 204 to the COS 206.

The HID filter driver 204 is a driver for filtering various HIDs supporting USB. That is, the HID filter driver 204 resides in the memory of the user terminal 10 and filters the instructions transmitted from the COS 206 or the instructions transmitted from the COS 206.

The COS 206 is an operating system for operating the smart card system 222b and performs a command input from the virtual smart card reader 202 through the HID filter driver 204. That is, the COS 206 records the smart data SM_Data related to the information of the individual user in the smart area 250 under the control of the user terminal 10, and at this time, the information to be written, that is, the smart data SM_Data, is stored in the crypto MD. By encrypting using 208, it is possible to more securely protect from hacking and viruses.

The VFS 209 writes the smart data SM_Data in the smart area 250 or virtually sets the data type so that data transmission and reception can be smoothly maintained while reading the smart data SM_Data from the smart area 250. Will be defined. That is, the VFS 209 is not a data type supported for the terminal operating system 11 and the COS 206 used by the user terminal 10, regardless of the data type. It defines a virtual data type for reading and writing smart data SM_Data. Here, the terminal operating system 11 may be Windows 98, 2000, NT, XP, or the like of the Windows series.

The data area 230 is an area in which general files such as video, audio, and text files can be read and written, and the file format is determined in consideration of an operating system of an external device to which the smart USB storage device 200 is connected. As an example, when the operating system of the external device is Windows, FAT or NTFS file types may be applied. The capacity of the data area 230 may have a size excluding the auto execution area 220, the spare area 240, and the smart area 250 among the capacities of the entire smart USB storage device 200.

The spare area 240 is an area in which data can be directly read and written. The spare area 240 is an area in which a user can define a file system structure, and performs an offset function so that specific data can be stored with a specific size of memory. That is, the spare area 240 has an offset file system.

The smart area 250 is an area in which the smart card system 222b is stored. Similar to the spare area 240, the smart area 250 is an area capable of directly reading and writing the smart data SM_Data. The smart area 250 is an area in which data related to the smart card system 222b is stored when the smart USB storage device 200 is to be used for a smart card. The smart data SM_Data stored in the smart area 250 follows the ISO-7816 standard, which is a smart card standard IO standard. The capacity of the smart area 250 is preferably 64 KB or more, and it is preferable that the capacity of the smart area 250 is determined up to about 32 MB by adding up to the capacity of the spare area 240.

As shown in FIG. 5, the user terminal 10 recognizes the smart card system 222b that is automatically executed from the smart USB storage device 200 and loaded into the RAM 14, and the connected smart USB storage device 200. Device driver 16, terminal operating system 11, for example, a smart card resource manager included in a window or communicating with the terminal operating system 11, and generating commands for controlling the recognized smart USB storage device 200. It is comprised including 12.

RAM 14 is a memory space into which autorun file 222 containing autorun routine 222a and smart card system 222b is loaded. The smart card system 222b loaded in the RAM 14 receives an instruction, for example, an application protocol data unit (APDU), transmitted from the smart card resource manager 12 by the auto-executing routine 222, and thus the COS 206. The smart card service is provided by reading and writing the smart data SM_Data. The smart card system 222b loaded on the RAM 14 includes a virtual smart card reader 202, a HID filter driver 204, a COS 206, a crypto MD 208 and a VFS 209.

The device driver 16 recognizes a smart USB storage device 200 connected through an external connection terminal, for example, a USB port. In this case, the device driver 16 recognizes each area of the smart USB storage device 200 separately. In detail, the device driver 16 uses the auto-executing area 220 of the smart USB storage device 200 as a CD-ROM, the data area 230 as a mass storage device, and the smart area 250 as a secure area or a smart device. Recognize it as a card.

The smart card resource manager 12 is a PC / SC interface that performs smart card recognition, and generates commands for creating, adding, and deleting smart data SM_Data under operating system control. In other words, the smart card resource manager 12 transmits a command for controlling the smart card system 222b to the smart card system 222b through the autorun routine 222, and executes the smart on the smart area 250. Generates commands for reading and writing data (SM_Data).

A service providing method of a smart card system according to an embodiment of the present invention having such a configuration will be described with reference to FIGS. 6 and 7.

6 is a flowchart illustrating a smart card service providing method according to an exemplary embodiment of the present invention, and FIG. 7 is a signal flow diagram illustrating a signal flow between smart card systems.

6 and 7, the service providing method of the smart card system according to an embodiment of the present invention connects the smart USB storage device 200 and the user terminal 10 (S101).

In step S101, the USB connector 15 of the smart USB storage device 200 is connected to a port provided in the user terminal 10. Accordingly, the device driver 16 of the user terminal 10 may use the data area 240 of the smart USB storage device 200 as a mass storage device and the auto execution area 220 of the smart USB storage device 200. With the virtual CD ROM, the smart zone 250 is recognized as a secure zone or a smart card.

Next, the auto execution region 220 of the smart USB storage device 200 is activated (S102).

In operation S102, the autorun routine 222a and the smart card system 222b stored in the autorun area 220 are loaded on the RAM 14 of the user terminal 10. At this time, the smart card system 222b provides an interface as shown in FIG. 8 in order to install a configuration necessary for providing a smart card service, wherein the virtual smart card reader 202 is previously transferred to the user terminal 10. If it is not installed, the interface for installation is provided as shown in FIG. 9, and if it is already installed, installation is omitted.

Next, when the user terminal 10 approaches the smart area 250 (S103), the input of the personal user password (PIN) is checked (S104).

In operation S103, when the user terminal 10 wants to access the smart area 250, an interface for inputting a PIN, which is a user password, is provided as illustrated in FIG. 10. Here, the PIN, which is the user password, can be adjusted as shown in FIG. 11 when the user desires. Here, when the smart USB storage device 210 is to be used as a mass storage device, a separate personal user password (PIN) is not input (S106).

Next, smart data (SM_Data) is generated and stored under the control of the smart card resource manager 12 (S105).

In operation S104, under the control of the user terminal 10, a security-related official certificate or a security card number and the like are input through an interface as shown in FIGS. 12A and 12B. Then, when the OK button is clicked, the input data is encrypted by the crypto MD 208 and converted into smart data SM_Data, and stored in the smart area 250. When the smart data SM_Data is stored in the smart region 250, the smart data SM_Data is stored by the VFS 209 which virtually defines the data type.

As described above, the smart USB storage device according to an embodiment of the present invention, and a soft smart card system and a service providing method using the same, may be configured by software by configuring a reader and a smart card system that reads the smart card system in software. By storing in a storage device, the security and authentication functions of a smart card can be implemented in a device provided with a USB universal interface.

In addition, the smart USB storage device according to an embodiment of the present invention, and a soft smart card system and a service providing method using the same, by configuring the hardware smart card system in software and storing in the USB storage device, according to the hardware design and manufacture You can save money.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to make various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the scope of the claims You will have to look.

Claims (24)

A user terminal on which a smart card system implemented by software is loaded; A smart USB storage device configured to communicate with the user terminal to load the smart card system into the user terminal, and to store smart data generated by operating the smart card system; And an automatic execution routine for automatically executing the smart card system in the user terminal. The method of claim 1, The user terminal A smart card resource manager generating a command for driving the smart card system; RAM in which the smart card system is loaded; A device driver for checking a connection of the smart USB storage device; And a virtual smart card reader for recognizing the smart USB storage device as a smart card. The method of claim 2, And a terminal operating system including the smart card resource manager and controlling the RAM, the device driver, and the virtual smart card reader. The method of claim 1, The smart data is a soft smart card system, characterized in that the ISO-7816 standard. The method of claim 1, The smart USB storage device A connector for connecting to the user terminal; A memory for storing the smart card system and the smart data; And And a controller for accessing the memory. The method of claim 5, The memory is At least one of an auto execution area for storing the smart card system automatically loaded in the user terminal, a smart area for storing the smart data, a data area for storing text, video, and audio file data, and a spare area having an offset file system Soft smart card system characterized in that it comprises one. The method of claim 5, The memory is The automatic execution region recognized by the user terminal as a virtual CD-ROM, A smart region in which the smart data is stored, And at least one of a data area recognized by the user terminal as a mass storage device. The method according to any one of claims 5 to 6, The auto execution region is And at least one of the smart card system, an autorun routine for automatically loading the smart card system to the user terminal, serial numbers and detailed information of the smart USB storage device. The method of claim 1, The smart card system A virtual smart card reader for recognizing the smart USB storage device as a smart card; A human interface device filter driver for filtering commands from the user terminal; A card operating system for generating and storing the smart data according to the command; An encryption module for encrypting the smart data; And And a virtual file system that virtually defines a file type for storing the smart data in the smart USB storage device. delete A first step of connecting a smart USB storage device including a smart card system implemented in software to a user terminal; A second step of loading at least one of an automatic execution routine for automatically loading the smart card system into the user terminal and the smart card system into the user terminal; And And a third step of storing the smart data generated according to the smart card system operation in the smart USB storage device. The method of claim 11, wherein Soft smart card service providing method characterized in that it further comprises a password confirmation step for accessing the smart USB storage device. The method of claim 11, wherein The smart card system A virtual smart card reader for recognizing the smart USB storage device as a smart card; A human interface device filter driver for filtering commands from the user terminal; A card operating system for generating and storing the smart data according to the command; An encryption module for encrypting the smart data; And And a virtual file system that virtually defines a file type for storing the smart data in the smart USB storage device. The method of claim 13, The second step is A first substep of confirming whether the virtual smart card reader is installed; And And a second sub-step of installing the virtual smart card reader according to the installation. The method of claim 13, The third step is A first sub-step of encrypting the generated smart data by an encryption module; And And a second substep of storing the encrypted smart data in the smart USB storage device. delete delete A connector for connecting to an external device; A smart card system implemented with software and a memory for storing smart data generated according to the smart card system operation; And A controller for accessing the memory; The memory is An automatic execution region for storing the smart card system, A smart region in which the smart data is stored, A data area for storing text, video and audio file data, Smart USB storage device comprising at least one of the spare area having an offset file system. A connector for connecting to an external device; A smart card system implemented with software and a memory for storing smart data generated according to the smart card system operation; And A controller for accessing the memory; The memory is The automatic execution region recognized as a virtual CD-ROM, A smart region in which the smart data is stored, Smart USB storage device comprising at least one of the data area recognized as a mass storage device. The method according to any one of claims 18 or 19, The auto execution region is And at least one of the smart card system, an autorun routine for automatically loading the smart card system, and a serial number and detailed information of the smart USB storage device. The method according to any one of claims 18 or 19, The smart area is Smart USB storage device, characterized in that the size is more than 64KB. A connector for connecting to an external device; A smart card system implemented with software and a memory for storing smart data generated according to the smart card system operation; And A controller for accessing the memory; The smart card system A virtual smart card reader that recognizes the smart USB storage device as a smart card; A human interface device filter driver for filtering commands transmitted from the outside to the smart card system; A card operating system for generating and storing the smart data according to the command; An encryption module for encrypting the smart data; And And a virtual file system for virtually defining a file type of the smart data to store the smart data in the smart USB storage device. delete A connector for connecting to an external device; A smart card system implemented with software and a memory for storing smart data generated according to the smart card system operation; And A controller for accessing the memory; The smart data is a smart USB storage device, characterized in that the ISO-7816 standard.

Images