TWI410873B - Secure access module (SAM card) authentication method - Google Patents

Abstract

An authentication method for security access module card enables a card manager to calculate an unblock PIN code, based on an user card number of a user, using an algorithm in SAM card under offline condition, and further obtain an authority for changing password, unblocking under offline condition and the like. The present invention utilizes a card control of SAM card so that a user PIN and the unblock PIN of a user card can be unlocked with security when the user card is offline from a card management center. The present invention not only keeps the security but also further provides convenience.

Description

Secure access module (SAM card) authentication method

The invention relates to a security access module (SAM card) authentication method, in particular to the authority authentication information that can be used by the SAM card management personnel to control the card operation in the SAM card production process, and can be used to calculate the user. The SAM APPLET (referred to as a small application) of the card's Unblock PIN is written into the SAM card.

Currently used SAM card, when the user's private authentication code (User PIN) is forgotten or locked, if you want to unlock, you must connect to the remote card management center by phone or network, in order to manually The user's SAM card is confirmed by its source and usage status; this way of opening and unlocking is not only difficult for the operator of the card management center and the computer to control, but for the user, the connection state must be ensured to perform related decoding operations.

However, the method uses the application written by the SAM card itself to unlock the unlock card of the user card (Unblock PIN), and directly changes the User PIN of the user card to directly replace the new User PIN. The decoding of the lock card.

It can be seen that there are still many shortcomings in the above-mentioned methods of use. It is not a good design and needs to be improved.

In view of the shortcomings derived from the above-mentioned conventional methods, the inventor of the present invention has improved and innovated, and after years of painstaking research, he finally successfully developed a secure access module (SAM card) authentication method.

The main object of the present invention is to provide a method for unlocking a card without connecting to a remote card tube center, so that a authorized person can use the secure access module (SAM card) to obtain card reading and writing in an offline environment. The purpose of the permission.

The second object of the present invention is to provide a SAM card as a security control method, which improves the convenience of maintenance management.

Another object of the present invention is to provide an application that is written by the SAM card itself to unlock the Unblock PIN of the user card, and directly change the User PIN of the user card to directly replace the new User PIN. The decoding of the lock card.

A security access module (SAM card) authentication method capable of achieving the above object of the invention, in the process of manufacturing the SAM card, the SAM card management personnel, the authority authentication information for controlling the card operation, and the information available for The SAM APPLET (referred to as a small application) for calculating the Unblock PIN of the user card is written into the SAM card; the method also includes the process of unlocking the user card by using the SAM card, and changing the User PIN of the card of the user card. And achieve lock card release or other card management functions.

Please refer to FIG. 1 , which is a flowchart of a security access module (SAM card) authentication method according to the present invention. The method includes the following steps: Step 1: generate a unique card serial number 101, which is connected to the card through a system. The database, obtain the latest card serial number and compile the unique card number; Step 2: judge whether the card number is successful 102; if successful, write the card number to the card 103; if it fails, return the system error message 104 and end the process; : Determine whether the card number is successfully written to the card 105; if successful, proceed to step 4; if it fails, return the card error message 106 and end the process; Step 4: Then use the card serial number to calculate the user of the user card according to the algorithm of the SAM card PIN and Unblock PIN 107; Step 5: Determine whether the information 108 is successfully obtained; if successful, continue with step 6; if it fails, return system error message 104 and end the process; Step 6: Card number, User PIN, and Unlock The PIN and other information is written into the card 109; Step 7: Determine whether the information 110 is successfully written; if successfully written, the blank user credential card has been successfully After the production is completed, the card database 111 can be connected to the card database 111; if it fails, the card error message 106 is returned and the process ends; step 8: whether the status 112 is successfully updated; if successful, the card status is successful for card production, and ends. Flow; if it fails, it returns a card error message 106 and ends the process.

Please refer to FIG. 2, which is a schematic diagram of a card production method for a secure access module (SAM card) authentication method according to the present invention: it is initialized by a blank SAM card (white card 10), and is written after being authorized. The SAM card management personnel controls the authority authentication information of the card operation, and writes the SAM Applet to the card, that is, completes the card issuing operation of the SAM card 11.

Wherein the SAM card system used in line with Global Platform v2.1.1, Java Card ^TM 2.2 specifications or other chip card.

Please refer to FIG. 3 , which is an unlocking flowchart of a security access module (SAM card) authentication method according to the present invention. When the user PIN of the user card is forgotten, locked, or other information is to be updated or inquired, The SAM card authentication method obtains appropriate rights, including: Step 1: The user card number can be read by the card reader or a card number input interface is provided, and the user card number is transmitted to the SAM card 301; Step 2: Determine whether the card number is successfully obtained. 302; if successful, continue with step 3; if it fails, return card error message 304 and end the process; step 3: SAM card can use this user card number and built-in SAM Applet to calculate the Unblock PIN 303 of the user card, and then By obtaining the authority of the authentication, the user card is changed by the User PIN, and the unlocking card function is achieved; wherein the third step includes: through the User PIN authentication, the key card production, the certificate writing, etc. can be performed on the user card card. Homework, and can display the key pair, voucher content, quantity and other identifiable data to confirm the card source and status; Step 4: Determine whether the information is successfully obtained 305, yes Updating a card state 306; otherwise the system returns 307 an error message and terminates the process; Step Five: Success is determined whether the update state 308, a flow is ended; otherwise, an error message card 304 and ends the process.

The security access module (SAM card) authentication method provided by the present invention has the following advantages when compared with other conventional technologies:

1. The present invention can provide a user lock card, and contact any authorized card management center to unlock the user card with the SAM card.

2. In order to ensure the user's rights and interests, the card management center uses the SAM card as an unlocking tool to be safer than using the software to unlock.

3. The invention can be used in any case of password verification, identity verification, card verification or unlocking.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also able to enhance the above-mentioned multiple functions compared with conventional articles. It should fully comply with the statutory invention patent requirements of novelty and progressiveness, and apply in accordance with the law. I urge you to approve this article. Invention patent application, in order to invent invention, to the sense of virtue.

10. . . White card

11. . . SAM card

1 is a flow chart of a production method of a secure access module (SAM card) authentication method according to the present invention;

2 is a schematic diagram of card production of a secure access module (SAM card) authentication method according to the present invention;

FIG. 3 is a flowchart of unlocking a secure access module (SAM card) authentication method according to the present invention.

10. . . White card

11. . . SAM card

Claims (3)

A security access module (SAM card) authentication method, which mainly comprises a production process and an unlocking process, and is offline, according to the user card number, using the algorithm in the SAM card to calculate the lock card of the user card Deblocking (Unblock PIN), and then obtaining the permission to change the password and the card decoding in the offline state; wherein the production process includes: Step 1: generating a unique card serial number, which is obtained by linking to the card database through a system. The latest card serial number and the unique card number; Step 2: Determine whether the card number is successful; if successful, write the card number to the card; if it fails, return the system error message and end the process; Step 3: Determine whether the card number is written The card succeeds; if successful, it continues with step 4; if it fails, it returns a card error message and ends the process; step 4: then uses the card serial number to calculate the User PIN and Unblock PIN of the user card according to the algorithm of the SAM card; : Determine whether the information is successfully obtained; if successful, continue with step 6; if it fails, return a system error message and end the flow. Step 6: Write the card serial number, User PIN, and Unlock PIN information into the card; Step 7: Determine whether the information is successfully written; if successfully written, the blank user credential card has been successfully produced, at this time Can connect to the card database; if it fails, return the card error message and end the process; Step 8: Determine whether the status is successfully updated; if successful, update the card status to successful card-making, and end the process: If it fails, return a card error message And ending the process; where the unlocking process includes: Step 1: The user card number can be read by the card reader or a card number input interface can be provided, and the card number of the user card can be transmitted to the SAM card; Step 2: determine whether the card number is successfully obtained; if successful, continue with step 3; Return the card error message and end the process; Step 3: The SAM card can use the user card number and the built-in SAMApplet to calculate the Unblock PIN of the user card, and then obtain the permission through the authentication, and change the User PIN of the user card. And reach the unlock card function; Step 4: Determine whether the information is successfully obtained, then update the card status; otherwise, return the system error message and end the process; Step 5: Determine whether the status is successfully updated, then the process ends; otherwise, the card error is returned. Message and end the process. A security access module (SAM card) authentication method according to claim 1, wherein the algorithm is SAM APPLET, which is a small application written during card production. For example, the method for authenticating a security access module (SAM card) according to claim 4, wherein the third step further comprises: through the User PIN authentication, the key card production, the voucher writing, etc. Jobs, as well as the ability to display in-card key pairs, voucher content, quantity, and other identifiable data to confirm card source and status.