TW201702918A - System and method for smart card firmware authorization wherein the smart card may control the firmware authorization number - Google Patents

Abstract

This invention discloses a system and a method for smart card firmware authorization. A set of authorization codes is generated after encryption operation via a smart card by using a smart card encryption and decryption technology and a serial number of a hardware device, and then stored and recorded in a memory block of the hardware device. After a hardware device is activated, a firmware program thereof must be verified by the authorization code and then normally implements its program functions. The smart card stores the number of authorized apparatuses, the number minuses one after each generation of a set of authorization codes, until the authorization number runs out, and the smart card may control the firmware authorization number.

Description

System and method for smart card firmware authorization

The invention relates to a system and a method for authorizing a smart card firmware, which generates a set of authorization codes by a built-in chip serial number of a hardware device via a smart card encryption operation function, and the firmware implementation is performed when the hardware device is powered on. First verify that the authorization code is correct. If it is not correct, execute the exception mode, so that the firmware program cannot be authorized to use. If it is correct, the normal mode is executed, and the firmware program can perform its normal functions.

At present, the way to use the firmware is to use the authorization sticker, such as the authorization of the BIOS of the computer motherboard, and attach the authorization sticker on the chip. The motherboard manufacturer proposes the shipment quantity to the BIOS manufacturer, and the BIOS manufacturer issues the authorization sticker to the motherboard. The manufacturer, by the amount issued to deduct the authorized amount, but this method can not really effectively control the number of firmware issued, you can still burn the firmware to the chip without authorization.

On the other hand, there is another method of using certified wafers. For example, the peripheral products authorized by American Apple must add a certification chip on the circuit. After the data exchange between the processor and the authentication chip, the verification can be normal. Execute the program. However, although this method can effectively prevent the firmware from being cracked or improperly authorized, it also increases the hardware manufacturing cost and design complexity.

In view of the shortcomings derived from the above-mentioned conventional methods, the inventors of the present invention have Nai Sisi made improvements and innovations, and after years of painstaking research, he finally succeeded in researching and developing the system and method for the authorization of this smart card firmware.

It is an object of the present invention to provide a system and method for smart card firmware authorization that allows hardware product developers to protect their intellectual property. Hardware manufacturers get firmware files, unauthorized programs can not be executed properly, allowing hardware device developers to safely hand over to the hardware manufacturer, not afraid of firmware code outflow, and can control the number of hardware device licenses To protect the rights of its developers. The invention also eliminates the use of additional hardware such as authentication wafers, and can reduce production costs.

A system and method for authorizing the smart card firmware to achieve the above object is to calculate a group by using the encryption and decryption operation function of the smart card and the unique serial number (Unique ID, UID) of the hardware device authorized by the firmware. The authorization code is stored in the memory of the hardware device, and the UID is read when the firmware program is turned on, and the authentication code is calculated by itself, and then compared with the authorization code. If the same, the hardware device is authorized. Run its functions normally. The invention also utilizes the function of the smart card to store the authorized number, and can control the number of authorized hardware devices. When the authorized number is reached, the smart card can stop the operation of continuing the authorization code.

A smart card firmware authorization system, which mainly comprises: a smart card and a card reading device, is for performing authorization code calculation and authorization quantity control; a person computer is a smart card and card reading device and a hard to be authorized The physical device is connected, and the smart card and the card reading device have an encryption calculation algorithm and a license number N; the hardware device to be authorized is provided with a serial number, and a firmware program is provided, and the firmware program is comparable. Whether the authorization code is correct; an operating program, It is installed in the personal computer and writes an authorization code to the hardware device to be authorized. The personal computer is a desktop computer, a notebook computer or a tablet computer.

A smart card firmware authorization method, the flow is as follows: issuing a smart card memory authorization number N; burning the firmware to the authorized device; the operating program reads the serial number of the hardware device to be authorized; the smart card is to be authorized The serial number of the physical device calculates a set of authorization codes; the authorization code is written in the memory of the hardware device; the authorized number of the smart card memory is N-1; the authorized authorization quantity N=0; if yes, the authorization ends and stops generating, if not, Burn the firmware to the authorized device.

The invention provides a system and method for authorizing smart card firmware, which has the following advantages when compared with other conventional technologies:

1. The invention eliminates the use of the certification chip, which can reduce the hardware cost and make the product more competitive.

2. The authorized number of the controllable tube firmware of the present invention is issued according to the quantity required by the manufacturer, and the authorization fee can be surely charged according to the quantity.

110‧‧‧Smart card and card reader

120‧‧‧PC

121‧‧‧ operating program

130‧‧‧Unauthorized hardware devices

S210~S260‧‧‧ program flow

S310~S380‧‧‧The process of writing firmware to hardware device

S410~S450‧‧‧ Certification Process

Please refer to the detailed description of the present invention and the accompanying drawings, which can further understand the technical content of the present invention and its function. The related drawings are: FIG. 1 is a system architecture diagram of the system and method for authorizing the smart card firmware of the present invention. 2 is a flow chart of a program for generating a firmware authorization code of the system and method for smart card firmware authorization according to the present invention; 3 is a flow chart of writing a license code to a hardware device of the system and method for authenticating a smart card firmware according to the present invention; and FIG. 4 is a flow chart for authenticating the system and method for authenticating a smart card firmware according to the present invention.

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Hereinafter, the present invention will be further described with reference to the accompanying drawings:

Please refer to FIG. 1 , which is a schematic diagram of a system architecture of a system and method for authorizing a smart card firmware according to the present invention. The smart card and the card reading device 110 are connected to the personal computer 120 through a communication interface, and the smart card contains the number of authorized hardware. N and the program of the authorization code operation, and the hardware device 130 to be authorized is connected to the personal computer 120 through another communication interface, each of the hardware devices to be authorized has a unique set of device serial number (UID), and the personal computer The 120 built-in operating program 121 performs a firmware authorization operation procedure between the smart card and the card reading device 110 and the hardware device 130 to be authorized.

Referring to FIG. 2, a flow chart of a firmware authorization code generation system for a system and method for authenticating a smart card firmware according to the present invention, the authorized operation program performs the following process: the operating program 121 communicates with the hard disk through the personal computer communication interface. The smart device and the card reader device 110 transmit the serial number of the device to be authorized (UID) to the smart card S220 through the communication interface, and the smart card and the card reader device 110 transmit the serial number of the hardware device. The (UID) encryption operation generates an authorization code S230, and generates a set of authorization codes. The smart card and the card reading device 110 transmit the authorization code S240 to the operation program 121 through the communication interface. The program 121 writes the authorization code to the hardware device memory S250 through the communication interface. After the writing of the authorization code is completed, the hardware device restarts S260 after the writing is completed, and the hardware device 130 to be authorized responds to the authentication state S270. The result is to the operating program 121, and if the response code is a normal value, the authorization has been successfully obtained.

Referring to FIG. 3, a flow chart of writing an authorization code to a hardware device of the system and method for authenticating a smart card firmware of the present invention is as follows: S310 issues a smart card memory authorization number N; S230 burns firmware to be treated Authorizing the device; the S330 operating program reads the serial number of the hardware device to be authorized; the S340 smart card calculates a set of authorization codes from the serial number of the hardware device to be authorized; S350 writes the authorization code in the memory of the hardware device; S360 The authorized number of smart card memory is N-1; S370 confirms the authorized number N=0; if S380, the authorization ends to stop generating, if not, the firmware is to be authorized to the authorized device.

It is known from the above that the smart card is issued to the hardware manufacturer, and the smart card memory has the authorized quantity N. When the hardware manufacturer produces the hardware device, the smart card must be used for the authorization action, and the firmware is first burned when the equivalent product is produced. On the hardware device to be authorized, the serial number (UID) of the hardware device to be authorized is read through the operating program, and then the serial number (UID) is transmitted to the smart card to calculate a set of authorization codes, and the operating program writes the authorization code. After the number of authorized cards of the smart card is N-1, when the number of authorizations in the smart card is N=0, the smart card can no longer perform the authorization code calculation, and the hardware manufacturer terminates the authorization. ,stop producing.

Referring to FIG. 4, the system for authorizing the smart card firmware of the present invention And the method of authentication of the method, the authorized hardware device boot authorization authentication process is as follows: S410 firmware program starts; S420 removes the hardware device serial number (UID) and authorization code in the hardware device; S430 firmware program is hard The device number (UID) encryption operation generates an authorization code; S440 determines whether the authentication code and the authorization code are the same; if S441, the program enters the abnormal mode; if S450, the program enters the forward mode operation.

It is known from the above that when the firmware program is started, the firmware program reads the hardware device serial number (UID) and the authorization code stored in the memory, and the firmware program calculates the hardware device serial number (UID) through the encryption algorithm. The authentication code is compared with the authorization code stored in the memory. If the program enters the abnormal mode if the program is different, the program of the abnormal mode is executed; if the comparison result is the same, the program enters the normal mode.

The detailed description of the present invention is intended to be illustrative of a preferred embodiment of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. Approved this invention patent application, in order to invent invention, to the sense of virtue.

110‧‧‧Smart card and card reader

120‧‧‧PC

121‧‧‧ operating program

130‧‧‧Unauthorized hardware devices

Claims (6)

A smart card firmware authorization system, which mainly comprises: a smart card and a card reading device, which is an authorization code operation and an authorized quantity control; a personal computer, and the smart card and card reading device and a hard to be authorized The device is connected; the hardware device to be authorized is provided with a serial number and is provided with a firmware program; an operating program is installed in the personal computer, and an authorization code is written for the hardware device to be authorized. In. The system for authorizing the smart card firmware as described in claim 1, wherein the smart card and the card reading device have an encryption calculation algorithm and a license number N. A system for authorizing a smart card firmware as described in claim 1, wherein the firmware of the hardware device to be authorized is compared to the authorization code. A system for authorizing a smart card firmware as described in claim 1, wherein the personal computer is a desktop computer, a notebook computer or a tablet computer. A smart card firmware authorization method is as follows: the operating program interfaces with the to-be-authorized hardware device through the personal computer communication interface to retrieve the to-be-authorized hardware device serial number (UID); the operating program transmits the to-be-authorized hardware device through the communication interface. The serial number (UID) to the smart card; the smart card and the card reading device generate an authorization code through the hardware device serial number (UID) encryption operation; generate a set of authorization codes, and the smart card and the card reading device transmit through the communication interface The authorization code is sent to the operating program; the operating program writes the authorization code to the hardware device memory through the communication interface; after the writing of the authorization code is completed, the hardware device is restarted after the writing is completed; the authorized hardware device responds to the authentication status. The result is to the operating program; if the response code is normal, the authorization has been successfully obtained. The method for authorizing the smart card firmware according to claim 5, wherein the process of writing the authorization code to the hardware device is as follows: issuing a smart card memory authorization number N; burning the firmware to the authorized device The operating program reads out the serial number of the hardware device to be authorized; the smart card calculates a set of authorization codes from the serial number of the hardware device to be authorized; writes the authorization code in the memory of the hardware device; and the authorized number of the smart card memory N- 1; confirm the number of authorizations N=0; if yes, the authorization ends to stop generating, if not, burn the firmware to the authorized device.