WO2018153225A1

WO2018153225A1 - Authentication apparatus with built-in electronic identity information

Info

Publication number: WO2018153225A1
Application number: PCT/CN2018/074521
Authority: WO
Inventors: 李志忠; 张华�
Original assignee: 杨宪国; 孙卫平
Priority date: 2017-02-24
Filing date: 2018-01-30
Publication date: 2018-08-30
Also published as: CN206470768U; TWM561854U

Abstract

An authentication apparatus (10) with built-in electronic identity information. The authentication apparatus (10) includes: a storage unit (11) for storing an electronic identity which is written in; a main control chip (12) provided with an authentication processing module for carrying out identity authentication on the electronic identity; a Bluetooth radio-frequency chip (13) connected to the main control chip (12); a Bluetooth radio-frequency antenna (14) connected to the Bluetooth radio-frequency chip (13) and used for communicating with an external Bluetooth device (15); a dual-interface chip (16) connected to the main control chip (12); an induction coil antenna (17) connected to the dual-interface chip (16) and used for communicating with an external device (18) matching an operating frequency of the induction coil antenna; and a communication contact point (19) connected to the main control chip (12) and used for communicating with an external device (20) supporting the ISO/IEC 7816 transport protocol. By means of the authentication apparatus (10), a plurality of different types of communication interfaces can be integrated so as to carry out communication in different communication modes, thereby carrying out identity authentication by effectively utilising electronic identity information in the authentication apparatus.

Description

Authentication device with built-in electronic ID card information

Technical field

The utility model relates to the technical field of communication, in particular to an authentication device with built-in electronic identity card information.

Background technique

EID (Electronic IDentity) is the alienation form of the resident ID card on the network. It is called the citizen network electronic identity. The EID is the authoritative electronic information file on the network to remotely prove the true identity of the individual. The identification system is issued.

In the prior art, in order to ensure the convenience, security and reliability of network users in identity authentication, a method of applying EID to a mobile terminal is proposed. Enhance authentication and promote the popularity of EID by effectively binding the authentication device of the mobile terminal with the EID.

Generally, the authentication device is composed of five modules: a central processing unit CPU, a working memory RAM, a program memory ROM, a data memory EEPRoM, and a serial communication unit.

It should be noted that the above description of the technical background is only for the purpose of facilitating a clear and complete description of the technical solutions of the present application, and is convenient for understanding by those skilled in the art. The above technical solutions are not considered to be well known to those skilled in the art simply because these aspects are set forth in the background section of this application.

Summary of the invention

The inventor of the present application found that when an electronic identification card (EID) is applied to an existing authentication device, for example, since the authentication device does not have a Bluetooth Low Energy (BLE) interface, the external Bluetooth device The authentication device cannot interact with the authentication device, so the mobile terminal cannot use the EID information in the authentication device for identity authentication by means of Bluetooth communication; for example, because the authentication device does not have an International Organization for Standardization (ISO) ) / International Engineering Consortium (IEC) 7816 interface, external devices supporting the ISO/IEC 7816 transmission protocol cannot interact with the authentication device, so the mobile terminal cannot use the communication method based on ISO/IEC 7816. The EID information in the device is authenticated. That is, since the authentication device cannot communicate with the external device in different communication manners, the mobile terminal cannot effectively use the EID information in the authentication device for identity authentication, and thus the EID is largely restricted in the mobile terminal. Wide range of applications.

In order to solve the problems of the prior art, the present invention provides an authentication device with built-in electronic ID card information, which can communicate in different communication modes by integrating a plurality of different types of communication interfaces in the authentication device, thereby Effectively use the electronic ID card information in the authentication device for identity authentication.

According to a first aspect of the present invention, there is provided an authentication device with built-in electronic ID card information, the authentication device having: a storage unit for storing an electronic ID card to be written; a main control chip, The utility model is provided with an authentication processing module for authenticating the electronic ID card, a Bluetooth radio frequency chip connected to the main control chip, a Bluetooth radio frequency antenna connected to the Bluetooth radio frequency chip, and used for performing with an external Bluetooth device. a dual interface chip coupled to the master chip; an inductive coil antenna coupled to the dual interface chip and configured to communicate with an external device that matches an operating frequency of the inductive coil antenna; and communication A contact that is connected to the master chip and is used to communicate with an external device supporting the ISO/IEC 7816 transport protocol.

According to another aspect of the embodiments of the present application, the Bluetooth radio frequency chip performs data reception and transmission between the Bluetooth radio frequency antenna and the external Bluetooth device; the Bluetooth radio frequency chip will be via the Bluetooth radio frequency antenna. The data received from the external Bluetooth device is transparently transmitted to the main control chip, and the operation result of the main control chip is transparently transmitted to the external Bluetooth device via the Bluetooth radio frequency antenna.

According to another aspect of the embodiments of the present application, the dual interface chip performs data reception and transmission via the inductive coil antenna and an external device that matches an operating frequency of the inductive coil antenna; The interface chip transmits the data received from the external device via the inductive coil antenna to the main control chip, and transparently transmits the operation result of the main control chip to the external device via the induction coil antenna.

According to another aspect of the embodiments of the present application, the Bluetooth radio frequency chip is connected to the main control chip through a serial peripheral interface, and the dual interface chip is connected to the main control chip through a serial peripheral interface.

According to another aspect of the embodiments of the present application, the storage unit supports dynamic management of security data, the main control chip is a financial level security main control chip, and supports a national secret algorithm, a hard advanced encryption standard stream encryption algorithm. And at least one of the RSA algorithms. According to another aspect of the embodiments of the present application, the operating frequency of the inductive coil antenna is 13.56 MHz.

According to another aspect of the embodiments of the present application, wherein the size of the authentication device conforms to the requirements of the fourth type of specification card.

According to another aspect of the embodiments of the present application, the authentication device can be set to a predetermined card tray to meet the requirements for a card holder for accommodating a third type of card or a second type of card.

According to another aspect of the embodiments of the present application, the authentication device supports a multi-operator network.

The utility model has the beneficial effects that: through the authentication device of the embodiment of the present invention, a plurality of different types of communication interfaces can be integrated, and communication is performed in different communication modes, thereby effectively utilizing the electronic ID card information in the authentication device. Authenticate.

Specific embodiments of the present invention are disclosed in detail with reference to the following description and drawings, which illustrate the manner in which the principles of the invention can be employed. It should be understood that the embodiments of the invention are not limited in scope. The embodiments of the present invention include many variations, modifications, and equivalents within the spirit and scope of the appended claims.

Features described and/or illustrated with respect to one embodiment may be used in one or more other embodiments in the same or similar manner, in combination with, or in place of, features in other embodiments. .

It should be emphasized that the term "comprising/containing/having" as used herein refers to the presence of a feature, component, or component, but does not exclude the presence or addition of one or more other features, components or components.

DRAWINGS

The drawings are included to provide a further understanding of the embodiments of the invention, and are in the Obviously, the drawings in the following description are only some embodiments of the present invention, and those skilled in the art can obtain other drawings according to the drawings without any inventive labor. In the drawing:

FIG. 1 is a schematic diagram of an authentication device with built-in electronic ID card information.

detailed description

The foregoing and other features of the present invention will be apparent from the The specific embodiments of the present invention are specifically disclosed in the specification and the drawings, which illustrate some embodiments in which the principles of the present invention may be employed, it is understood that the invention is not limited to the described embodiments. Rather, the invention includes all modifications, variations and equivalents that fall within the scope of the appended claims.

In the present invention, the authentication device may be a Subscriber Identity Module (SIM) card, or other kinds of chips.

In the present invention, the mobile terminal can be a portable electronic device such as a feature phone, a smart phone or a tablet computer.

Embodiments of the present invention will now be described with reference to the accompanying drawings.

Example 1

This embodiment provides an authentication device with built-in electronic ID card information.

1 is a schematic diagram of an authentication device with built-in electronic ID card information. As shown in FIG. 1, the authentication device 10 has a storage unit 11 and a main control chip 12.

The storage unit 11 is configured to store an electronic identification card (EID) to be written. Here, an implementation manner of writing an electronic identification card into the storage unit 11 of the authentication device 10 can refer to the prior art.

The main control chip 12 is provided with an authentication processing module (not shown) for authenticating the electronic ID card, whereby the external device communicating with the authentication device 10 can realize the identity through interaction with the main control chip 12. Authentication, for example, the master chip 12 can read the electronic ID card stored in the storage unit 11 and receive it based on any one of the 7816 interface, the Bluetooth interface, and the Single Wire Protocol (SWP) interface. The identity authentication request of the external device is authenticated by the authentication processing module.

As shown in FIG. 1, the authentication device 10 has a Bluetooth radio frequency chip 13 and a Bluetooth radio frequency antenna 14. The Bluetooth radio chip 13 is connected to the main control chip 12, and the Bluetooth radio frequency antenna 14 is connected to the Bluetooth radio frequency chip 13 and is used for communication with the external Bluetooth device 15. In this embodiment, the model of the Bluetooth radio frequency chip 13 may be, for example, the DA14580. In addition, the embodiment is not limited thereto, and the Bluetooth radio frequency chip 13 may be other models. The structure and function of the Bluetooth radio frequency antenna 14 are the same as in the prior art. Through the Bluetooth radio frequency chip 13 and the Bluetooth radio frequency antenna 14, the function of the Bluetooth Low Energy (BLE) interface supporting the main control chip 10 to communicate with the external Bluetooth device 15 can be realized. Thus, the external Bluetooth device 15 can interact with the master chip 12 of the authentication device 10 via the Bluetooth radio frequency chip 13 and the Bluetooth radio frequency antenna 14 in a Bluetooth communication manner.

As shown in FIG. 1, the authentication device 10 has a dual interface chip 16 and an inductive coil antenna 17. The dual interface chip 16 is coupled to a master chip 12 that is coupled to the dual interface chip 16 for communication with an external device 18 that matches the operating frequency of the inductive coil antenna 17. Here, the structure and function of the dual interface chip 16 and the induction coil antenna 17 are the same as those of the prior art. Through the dual interface chip 16 and the inductive coil antenna 17, the function of the Single Wire Protocol (SWP) interface that supports the communication between the main control chip 10 and the external device 18 can be realized. Thus, the external device 18 can interact with the master chip 12 of the authentication device 10 in a Near Field Communication (NFC) manner via the dual interface chip 16 and the inductive coil antenna 17.

As shown in FIG. 1, the authentication device 10 has a communication contact 19. The communication contact 19 can be, for example, a 7816 contact, which is connected to the main control chip 12 and used in conjunction with the International Organization for Standardization (ISO)/International Engineering Consortium (IEC). The external device 20 of the 7816 transmission protocol communicates. Here, the structure and function of the communication contact 19 are also the same as in the prior art. Through the communication contact 19, the function of supporting the ISO/IEC 7816 interface in which the master chip 10 communicates with the external device 20 can be realized. Thus, the external device 20 can interact with the master chip 12 of the authentication device 10 in an ISO/IEC 7816-based communication manner.

Thus, by the structure of the above authentication device, the external Bluetooth device 15, the external device 18 matching the operating frequency of the induction coil antenna 17, and the external device 20 based on the ISO/IEC 7816 transmission protocol can be respectively communicated with different communication methods. The main control chip 12 of the authentication device 10 interacts to implement identity authentication for the EID. That is, by integrating different types of the above three communication interfaces, namely the BLE interface, the SWP interface and the ISO/IEC 7816 interface, in the authentication device, communication can be performed in different manners, thereby effectively utilizing the EID in the authentication device. Information for identity authentication.

In an embodiment of the present embodiment, the Bluetooth radio frequency chip 13 and the Bluetooth radio frequency antenna 14 can support the transparent transmission of an Application Protocol Data Unit (APDU), and can also support the transmission of peripheral control commands of the Bluetooth protocol stack. For example, the Bluetooth radio frequency chip 13 can receive and transmit data between the Bluetooth radio frequency antenna 14 and the external Bluetooth device 15; the Bluetooth radio frequency chip 13 can also transparently transmit data received from the external Bluetooth device 15 via the Bluetooth radio frequency antenna 14. The main control chip 12 transmits the operation result of the main control chip 12 to the external Bluetooth device 15 via the Bluetooth radio frequency antenna 14, thereby passing the Bluetooth radio frequency chip 13 and the Bluetooth radio frequency antenna 14, the external Bluetooth device 15 and the main control chip 12 There is an interaction between them. Moreover, the parameters of the Bluetooth protocol stack are configured by the above peripheral control commands, thereby meeting the needs of different users.

In one embodiment of the present embodiment, the dual interface chip 16 can receive and transmit data between the inductive coil antenna 17 and the external device 18 that matches the operating frequency of the inductive coil antenna 17; the dual interface chip can also The data received from the external device 18 via the inductive coil antenna 17 is transparently transmitted to the main control chip 12, and the operation result of the main control chip 12 is transparently transmitted to the external device 18 via the inductive coil antenna 17. Thus, through the dual interface chip 16 and the inductive coil antenna 17, interaction between the external device 18 and the main control chip 12 is possible.

In an embodiment of the present embodiment, the Bluetooth radio frequency chip 13 can be connected to the main control chip 12 through a Serial Peripheral Interface (SPI) to implement interaction with the main control chip 12. The dual interface chip 16 can also be connected to the main control chip 12 through the SPI to implement interaction with the main control chip 12.

In an embodiment of the embodiment, the storage unit 11 can support dynamic management of security data, and the main control chip 12 can be a financial-level security master chip, and supports a national secret algorithm, an Advanced Encryption Standard (Advanced Encryption Standard, AES) At least one of a stream encryption algorithm and an RSA algorithm, wherein the country secret algorithm may be, for example, SM1, SM2, SM3 or SM4.

In one embodiment of the present embodiment, the operating frequency of the inductive coil antenna 17 can be 13.56 MHz, and thus the operating frequency of the external device 18 in communication with the inductive coil antenna 17 is also 13.56 MHz.

In an embodiment of the present embodiment, the external dimensions of the authentication device 10 may conform to the requirements of a Fourth Form Factor (4FF) card. The 4FF card may be a card having a size of 12 mm*9 mm. For example, the authentication device 10 may be a Nano SIM card, which is applicable to products such as the iPhone 6 and the like.

In an embodiment of the present embodiment, the authentication device 10 can also conform to a Third Form Factor (3FF) card or a Second Form Factor (2FF) card by using a predetermined card tray. The requirements of the matching card holder. Among them, the 3FF card can be a card with a size of 12mm*15mm, such as a Micro SIM card, which can be applied to products such as iPhone4s; the 2FF card can be a standard SIM card with a size of 15mm*25mm. Thus, the authentication device 10 can be applied to different types of mobile terminals in accordance with the requirements of different types of decks.

In an embodiment of the present embodiment, the authentication device 10 can support a multi-operator network, for example, Global System for Mobile Communications (GSM), time division/space division code division multiple access (Time/Space- Division Code Division Multiple Access (TSDCDMA), Wideband Code Division Multiple Access (WCDMA), CDMA2000, CDMA1x, Long Term Evolution (LTE), and the like.

The present invention has been described in connection with the specific embodiments thereof, and it should be understood by those skilled in the art that these descriptions are illustrative and not limiting the scope of the invention. A person skilled in the art can make various modifications and changes to the present invention in accordance with the spirit and principle of the present invention. These modifications and modifications are also within the scope of the present invention.

Claims

An authentication device with built-in electronic ID card information, characterized in that the authentication device has:

a storage unit for storing the written electronic ID card;

a main control chip, which is provided with an authentication processing module for authenticating the electronic ID card;

a Bluetooth radio chip connected to the main control chip;

a Bluetooth radio frequency antenna connected to the Bluetooth radio frequency chip and configured to communicate with an external Bluetooth device;

a dual interface chip connected to the main control chip;

An inductive coil antenna coupled to the dual interface chip and for communicating with an external device that matches an operating frequency of the inductive coil antenna;

A communication contact that is coupled to the master chip and is for communicating with an external device that supports the ISO/IEC 7816 transport protocol.
The authentication device according to claim 1, wherein the Bluetooth radio frequency chip receives and transmits data between the Bluetooth radio frequency antenna and the external Bluetooth device; the Bluetooth radio frequency chip is to be The data received by the Bluetooth radio frequency antenna from the external Bluetooth device is transparently transmitted to the main control chip, and the operation result of the main control chip is transparently transmitted to the external Bluetooth device via the Bluetooth radio frequency antenna.
The authentication device according to claim 1, wherein the dual interface chip performs data reception and transmission via the inductive coil antenna and an external device that matches an operating frequency of the inductive coil antenna; Transmitting, by the dual interface chip, data received from the external device via the inductive coil antenna to the main control chip, and transparently transmitting the operation result of the main control chip to the external device.
The authentication device according to claim 1, wherein the Bluetooth radio chip is connected to the main control chip through a serial peripheral interface, and the dual interface chip communicates with the main control through a serial peripheral interface Chip connection.
The authentication device according to claim 1, wherein the storage unit supports dynamic management of security data, the main control chip is a financial-level security main control chip, and supports a national secret algorithm and a hard advanced encryption standard. At least one of a stream encryption algorithm and an RSA algorithm.
The authentication device according to claim 1, wherein said induction coil antenna has an operating frequency of 13.56 MHz.
The authentication device according to claim 1, wherein the size of the authentication device conforms to the requirements of the fourth type of specification card.
The authentication apparatus according to claim 7, wherein said authentication means is capable of being placed in a predetermined card tray to conform to a request for accommodating a deck of a third type of card or a second type of card.
The authentication device of claim 1, wherein the authentication device supports a multi-operator network.