CN101184096B - System and method for improving security of intelligent cipher device - Google Patents
System and method for improving security of intelligent cipher device Download PDFInfo
- Publication number
- CN101184096B CN101184096B CN2007101789414A CN200710178941A CN101184096B CN 101184096 B CN101184096 B CN 101184096B CN 2007101789414 A CN2007101789414 A CN 2007101789414A CN 200710178941 A CN200710178941 A CN 200710178941A CN 101184096 B CN101184096 B CN 101184096B
- Authority
- CN
- China
- Prior art keywords
- module
- operation information
- intelligent
- intelligent key
- sends
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Telephone Function (AREA)
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention provides a system and the method for improving the security of intelligent key devices, belonging to the technical field of computer security, wherein the system comprises an intelligent key device, a communication device and a second signal channel receiving device. The method is as follow: the intelligent key device is connected with the computer, and the application software module in the communication device runs automatically in the computer; the intelligent key device sends key operational information to the communication device; the communication device sends the key operational information to the second signal channel receiving device; the second signal channel receiving device receives and displays the key operational information. With the intelligent key module and the second channel receiving device, the invention enables the legal owners to know the key operational information of the intelligent key device in time and response correspondingly, therefore, the invention has an advantage of protecting the benefit of the legal owners to the largest extent.
Description
Technical field
The present invention relates to information security field, be meant a kind of system and method that improves security of intelligent cipher device especially.
Background technology
Intelligent key apparatus is a kind of small hardware portable unit that has processor and memory, and it adopts the double factor authentication pattern, and use is simple, cost is lower.Its built-in single-chip microcomputer or intelligent card chip can be stored user's key or digital certificate, utilizes the authentication of the built-in cryptographic algorithm realization of intelligent key apparatus to user identity.That intelligent key apparatus has is E-mail enciphered, digital signature, safety certificate, secure network login and visit SSL (Security Socket Layer, the secure socket layer protocol layer) function such as secure network, and has the feature that the private key that guarantees the user leaves hardware never, also have the characteristic of attack protection physically, fail safe is high.
Simultaneously, we also see, along with mobile communication rapid development, increasing people brings into use all kinds of hand-held devices such as mobile phone, PDA (Personal Digital Assistant, personal digital assistant) etc. to converse, receive and dispatch short message, reminds account etc.These hand-held devices all have display and input unit, and display design is increasing, and the also more convenient user of input unit design uses.And the information interaction that also makes between computer and the mobile phone that develops rapidly of network becomes more and more general, SMS platform is exactly a kind of general-purpose platform of the information interaction between computer and mobile phone or the PDA with mobile communication function, it is a kind of SP (Service Provider, the ISP) system, by mobile message interaction platform, be the information issue towards portable terminal, the mobile Internet website that receives, manages based on the WEB interface management.
In addition, Email and JICQ such as QQ, MSN, bubble and Fetion etc. also are the instruments that generally uses of user's acquired information.
Present problem is, how can the legal holder of intelligent key apparatus grasp the situation that intelligent key apparatus is carried out the intelligent key operation in time, clearly? particularly when intelligent key apparatus is falsely used or is usurped by other people, how legal holder this know in time that other people use this intelligent key apparatus to carry out the information of intelligent key operation? in the face of these problems, also there is not good solution at present.
Summary of the invention
For the legal holder who makes intelligent key apparatus can grasp the situation that intelligent key apparatus is carried out the intelligent key operation in time, clearly, particularly after being falsely used or usurp, intelligent key apparatus can in time notify its legal holder, its legal holder is in time reacted, reduce the loss to greatest extent, the invention provides a kind of system and method that improves security of intelligent cipher device.
The system of raising security of intelligent cipher device provided by the invention comprises: intelligent key apparatus, communicator and second channel receiving system, described intelligent key apparatus is used to carry out the intelligent key operation, described communicator is used for communicating with described intelligent key apparatus and described second channel receiving system, and described second channel receiving system is used to the information that shows that described communicator sends;
Described intelligent key apparatus comprises operation information sending module, intelligent key module and moves module automatically, described operation information sending module is used for sending key operation information to described communicator, described intelligent key module is used to carry out the intelligent key operation, and described automatic operation module is used for moving automatically the application software module of described communicator on described computer after described intelligent key apparatus connects computer;
Described communicator comprises that application software module and information service provide module;
Described application software module, being used to receive the described key operation information that described operation information sending module sends and sending it to described information service provides module;
Described information service provides module, is used for sending it to described second channel receiving system after receiving the described key operation information that described application software module sends;
Described application software module comprises operation information receiving element and operation information retransmission unit, described operation information receiving element is used to receive the described key operation information that described intelligent key apparatus sends and sends it to described operation information retransmission unit, and described operation information retransmission unit is used for after receiving described key operation information it being transmitted to described information service provides module.
Described application software module also comprises the heartbeat signal transmitting element, and described heartbeat signal transmitting element is used for periodically sending heartbeat signal to described intelligent key apparatus after described application software module operation; First heartbeat signal that described heartbeat signal transmitting element sends is used to activate described intelligent key apparatus, automatic terminating operation when described intelligent key apparatus can not receive described heartbeat signal in the official hour interval.
Described key operation specifically is that described intelligent key apparatus generates key or the data that described intelligent key apparatus receives are encrypted or digital signature.
Described intelligent key apparatus also comprises authentication module, is used for the legitimacy by PIN code mode or biological characteristic mode authenticated user identity.
Described information service provides module specifically to be meant SMS platform or instant communication server or mail server.
Described second channel receiving system comprises operation information receiver module and display module, described operation information receiver module is used to receive the described key operation information that described communicator sends and sends it to described display module, and described display module is used to receive and show the described key operation information that described operation information receiver module sends.
Described second channel receiving system specifically is meant mobile phone or has PDA or the Email or the JICQ of mobile communication function.
The present invention also provides a kind of method that improves security of intelligent cipher device simultaneously, and described method comprises:
Steps A: intelligent key apparatus is connected with computer, application software module on described computer in the automatic operational communications device, described application software module sends first heartbeat signal to described intelligent key apparatus and activates described intelligent key apparatus, and regularly sends heartbeat signal to described intelligent key apparatus;
Step B: described intelligent key apparatus sends key operation information to the application software module in the described communicator, and described application software module receives described key operation information, and the information service that sends it in the described communicator provides module;
Step C: described communicator sends to described second channel receiving system with described key operation information;
Step D: described second channel receiving system reception also shows described key operation information, automatic terminating operation when described intelligent key apparatus does not receive described heartbeat signal in the official hour interval.
Described step C is specially:
Information service in the described communicator provides module that described key operation information is sent to described second channel receiving system.
Described information service provides module specifically to be meant SMS platform or instant communication server or mail server.
Described key operation specifically is meant intelligent key apparatus generation key or the data that described intelligent key apparatus receives is encrypted or the digital signature operation.
Described second channel receiving system specifically is meant mobile phone or has PDA or the Email or the JICQ of mobile communication function.
Also comprise between described steps A and the step B:
By PIN code mode or biological characteristic mode the user is carried out authentication.
Described intelligent key apparatus links to each other by USB connector with described computer.
The beneficial effect that adopts technical scheme provided by the invention to bring is:
The present invention utilizes existing simple intelligent key apparatus and second channel receiving system; a kind of method that improves the system of security of intelligent cipher device and realize this system is provided; saved and exploited natural resources; make the legal holder of intelligent key apparatus can be timely simultaneously; grasp intelligent key apparatus clearly and carry out the situation of intelligent key operation; particularly stolen or emit the time spent at intelligent key apparatus; legal holder utilizes the second channel receiving system can in time learn key operation information; legal holder can in time be reacted; as stoping other people to proceed illegal operation etc. by mode such as reporting the loss; and then prevented the further expansion of losing, protected legal holder's interests to greatest extent.
Description of drawings
Fig. 1 is the system schematic of the raising security of intelligent cipher device that provides of the embodiment of the invention 1;
Fig. 2 is the flow chart of the method for the raising security of intelligent cipher device that provides of the embodiment of the invention 2.
Embodiment
The invention will be further described below in conjunction with the drawings and specific embodiments, but not as a limitation of the invention.
Embodiment 1: referring to Fig. 1, present embodiment provides a kind of system 100 that improves security of intelligent cipher device, this system 100 comprises intelligent key apparatus 110, communicator 120 and second channel receiving system 130, wherein, intelligent key apparatus 110 comprises operation information sending module 111, intelligent key module 112 and moves module 113 automatically, communicator 120 comprises that application software module 121 and information service provide module 122, and second channel receiving system 130 comprises operation information receiver module 131 and display module 132.
Intelligent key apparatus 110 is used to carry out the intelligent key operation, specifically, operation information sending module 111 wherein is used for sending the key operation information to communicator 120, and key operation is meant specifically that intelligent key apparatus 110 generates keys or intelligent key is adorned 110 data that receive are encrypted or the digital signature operation; Intelligent key module 112 is used to carry out the intelligent key operation; Automatically operation module 113 is used for after intelligent key apparatus 110 connects computers on computers the application software module 121 of operational communications device 120 automatically, and preferably, we select for use autorun software to realize moving automatically the function of module 113.
In the practical application, intelligent key apparatus 110 can also comprise authentication module, be used for by PIN code (PersonalIdentification Number, Personal Identification Number) identity of mode or biological characteristic mode authenticated user, biological characteristic can be fingerprint, palmmprint, iris, facial characteristics etc.
Communicator 120 is used for communicating with intelligent key apparatus 110 and second channel receiving system 130, specifically, being used to wherein receives the key operation information that operation information sending module 111 sends and send this key operation information provides the application software module 121 of module 122 to comprise operation information receiving element 1211 to information service, operation information retransmission unit 1212 and heartbeat signal transmitting element 1213, operation information receiving element 1211 are used to receive the key operation information that intelligent key apparatus 110 sends and send it to operation information retransmission unit 1212; Operation information retransmission unit 1212 is used for after receiving key operation information it being transmitted to information service provides module 122, heartbeat signal transmitting element 1213 is used for periodically sending heartbeat signal to intelligent key apparatus 110 after application software module 121 operations, first heartbeat signal that heartbeat signal transmitting element 1213 sends is used to activate intelligent key apparatus 110, automatic terminating operation when intelligent key apparatus 110 can not receive heartbeat signal in the official hour interval; Information service provides module 122 to be used for after receiving the key operation information that application software module 121 sends this key operation information being sent to second channel receiving system 130.
In the practical application, application software module 121 does not comprise that heartbeat signal transmitting element 1213 also can realize the present invention.
The key operation information that second channel receiving system 130 is used to receive and display communication apparatus 120 sends, specifically, operation information receiver module 131 wherein is used for the key operation information that received communication device 120 sends and this key operation information is sent to display module 132; The key operation information that display module 132 is used to receive and display operation information receiving module 131 sends.
Preferably, we select for use SMS platform to realize that information service provides the function of module 122, SMS platform is an a kind of SP system, by mobile message interaction platform based on the WEB interface management, it is information issue towards portable terminal, accept, the mobile Internet website of management, in the present embodiment, we connect communication between second channel receiving system 130 and the application software module 121 with SMS platform, because application software module 121 moves on computers, so SMS platform that is to say the information interaction that has connected between second channel receiving system 130 and the computer, correspondingly, our preferred mobile phone or PDA with mobile communication function realize the function of second channel receiving system 130.In the practical application, we also can select for use instant communication server or mail server to realize that information service provides the function of module 122, correspondingly, our preferred JICQ such as QQ or MSN or bubble or Fetion etc. or Email are replaced the function that SMS platform is realized second channel receiving system 130.
Embodiment 2: referring to Fig. 2, present embodiment provides a kind of method that improves security of intelligent cipher device, and this method comprises:
Step 201: connect intelligent key apparatus and computer, and the application software in the automatic on computers operational communications device, preferably, intelligent key apparatus links to each other by USB connector with computer, and on computers by the application software in the next automatic operational communications device of autorun software;
Step 202: intelligent key apparatus judges whether to carry out key operation, if do not carry out then end operation or other nonessential operation of continuation execution, if carry out then execution in step 203;
Above-mentioned key operation is meant that specifically intelligent key apparatus generates key or the data that intelligent key apparatus receives are carried out digital signature operation or cryptographic operation etc.;
Step 203: intelligent key apparatus sends key operation information to communicator, and above-mentioned key operation information is specifically received by the application software module in the communicator, and the information service that is sent in the communicator by application software module provides module;
Step 204: the information service in the communicator provides module that above-mentioned key operation information is sent to the second channel receiving system;
Step 205: the reception of second channel receiving system also shows above-mentioned key operation information.
Preferably, we select for use SMS platform to realize that information service provides the function of module, connect the information interaction between computer and the second channel receiving system, correspondingly, our preferred mobile phone or the PDA with mobile communication function realize the function of second channel receiving system.In the practical application, we also can select for use instant communication server or mail server to realize that information service provides the function of module, correspondingly, our preferred JICQ such as QQ or MSN or bubble or Fetion etc. or Email are replaced the function that SMS platform is realized the second channel receiving system.
In the practical application, can also comprise step after executing above-mentioned steps 201: intelligent key apparatus is by PIN code mode or biological characteristic mode authenticated user identity, if not by authentication, end operation then, if by authentication then execution in step 202, biological characteristic such as fingerprint, palmmprint, iris, facial characteristics etc.
Utilize said method, the legal holder of intelligent key apparatus just can be timely, grasp intelligent key apparatus clearly and carry out the situation of intelligent key operation, particularly when intelligent key apparatus is falsely used or is usurped, after the legal holder of intelligent key apparatus learns crucial intelligent key operation information, just can in time react, as report the loss intelligent key apparatus and make it unavailable etc., like this, above-mentioned legal holder just can in time stop falsely using of intelligent key apparatus or appropriator to continue to implement illegal operation, reduces the loss that above-mentioned legal holder is caused to greatest extent.
More than a kind of system and using method thereof that improves security of intelligent cipher device provided by the present invention is described in detail, used specific case herein principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that all can change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.
Claims (13)
1. system that improves security of intelligent cipher device, it is characterized in that, described system comprises intelligent key apparatus, communicator and second channel receiving system, described intelligent key apparatus is used to carry out the intelligent key operation, described communicator is used for communicating with described intelligent key apparatus and described second channel receiving system, and described second channel receiving system is used to the information that shows that described communicator sends;
Described intelligent key apparatus comprises operation information sending module, intelligent key module and moves module automatically, described operation information sending module is used for sending key operation information to described communicator, described intelligent key module is used to carry out the intelligent key operation, and described automatic operation module is used for moving automatically the application software module of described communicator on described computer after described intelligent key apparatus connects computer;
Described communicator comprises that application software module and information service provide module;
Described application software module, being used to receive the described key operation information that described operation information sending module sends and sending it to described information service provides module;
Described information service provides module, is used for sending it to described second channel receiving system after receiving the described key operation information that described application software module sends;
Described application software module comprises operation information receiving element and operation information retransmission unit, described operation information receiving element is used to receive the described key operation information that described intelligent key apparatus sends and sends it to described operation information retransmission unit, and described operation information retransmission unit is used for after receiving described key operation information it being transmitted to described information service provides module.
Described application software module also comprises the heartbeat signal transmitting element, and described heartbeat signal transmitting element is used for periodically sending heartbeat signal to described intelligent key apparatus after described application software module operation; First heartbeat signal that described heartbeat signal transmitting element sends is used to activate described intelligent key apparatus, automatic terminating operation when described intelligent key apparatus can not receive described heartbeat signal in the official hour interval.
2. the system of raising security of intelligent cipher device as claimed in claim 1 is characterized in that, described key operation specifically is that described intelligent key apparatus generates key or the data that described intelligent key apparatus receives are encrypted or digital signature.
3. the system of raising security of intelligent cipher device as claimed in claim 1 is characterized in that, described intelligent key apparatus also comprises authentication module, is used for the legitimacy by PIN code mode or biological characteristic mode authenticated user identity.
4. the system of raising security of intelligent cipher device as claimed in claim 1 is characterized in that, described information service provides module specifically to be meant SMS platform or instant communication server or mail server.
5. the system of raising security of intelligent cipher device as claimed in claim 1, it is characterized in that, described second channel receiving system comprises operation information receiver module and display module, described operation information receiver module is used to receive the described key operation information that described communicator sends and sends it to described display module, and described display module is used to receive and show the described key operation information that described operation information receiver module sends.
6. the system of raising security of intelligent cipher device as claimed in claim 5 is characterized in that, described second channel receiving system specifically is meant mobile phone or has PDA or the Email or the JICQ of mobile communication function.
7. a method that improves security of intelligent cipher device is characterized in that, described method comprises:
Steps A: intelligent key apparatus is connected with computer, application software module on described computer in the automatic operational communications device, described application software module sends first heartbeat signal to described intelligent key apparatus and activates described intelligent key apparatus, and regularly sends heartbeat signal to described intelligent key apparatus;
Step B: described intelligent key apparatus sends key operation information to the application software module in the described communicator, and described application software module receives described key operation information, and the information service that sends it in the described communicator provides module;
Step C: described communicator sends to described second channel receiving system with described key operation information;
Step D: described second channel receiving system reception also shows described key operation information, automatic terminating operation when described intelligent key apparatus does not receive described heartbeat signal in the official hour interval.
8. the method for raising security of intelligent cipher device as claimed in claim 7 is characterized in that, described step C is specially:
Information service in the described communicator provides module that described key operation information is sent to described second channel receiving system.
9. the method for raising security of intelligent cipher device as claimed in claim 8 is characterized in that, described information service provides module specifically to be meant SMS platform or instant communication server or mail server.
10. the method for raising security of intelligent cipher device as claimed in claim 8 is characterized in that, described key operation specifically is meant intelligent key apparatus generation key or the data that described intelligent key apparatus receives are encrypted or the digital signature operation.
11. the method for raising security of intelligent cipher device as claimed in claim 8 is characterized in that, described second channel receiving system specifically is meant mobile phone or has PDA or the Email or the JICQ of mobile communication function.
12. the method for raising security of intelligent cipher device as claimed in claim 7 is characterized in that, also comprises between described steps A and the step B:
By PIN code mode or biological characteristic mode the user is carried out authentication.
13. the method for raising security of intelligent cipher device as claimed in claim 7 is characterized in that, described intelligent key apparatus links to each other by USB connector with described computer.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2007101789414A CN101184096B (en) | 2007-12-07 | 2007-12-07 | System and method for improving security of intelligent cipher device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2007101789414A CN101184096B (en) | 2007-12-07 | 2007-12-07 | System and method for improving security of intelligent cipher device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101184096A CN101184096A (en) | 2008-05-21 |
| CN101184096B true CN101184096B (en) | 2010-08-11 |
Family
ID=39449178
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2007101789414A Active CN101184096B (en) | 2007-12-07 | 2007-12-07 | System and method for improving security of intelligent cipher device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101184096B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103490894B (en) * | 2013-09-09 | 2016-08-10 | 飞天诚信科技股份有限公司 | A kind of implementation method determining intelligent cipher key equipment life cycle and device |
| CN104573591B (en) * | 2015-01-05 | 2017-11-28 | 飞天诚信科技股份有限公司 | A kind of secure readers and its method of work |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1296229A (en) * | 1999-11-16 | 2001-05-23 | 黄金富 | Method for ensuring safety money payment by internet combined with hand set system and the relative system |
| CN1588383A (en) * | 2004-08-25 | 2005-03-02 | 周星 | Cellphone short message confirming system for bank transfer |
| CN1904934A (en) * | 2006-08-18 | 2007-01-31 | 王忠杰 | Safety network trading method |
| CN101051372A (en) * | 2006-04-06 | 2007-10-10 | 北京易富金川科技有限公司 | Method for safety verifying financial business information in electronic business |
-
2007
- 2007-12-07 CN CN2007101789414A patent/CN101184096B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1296229A (en) * | 1999-11-16 | 2001-05-23 | 黄金富 | Method for ensuring safety money payment by internet combined with hand set system and the relative system |
| CN1588383A (en) * | 2004-08-25 | 2005-03-02 | 周星 | Cellphone short message confirming system for bank transfer |
| CN101051372A (en) * | 2006-04-06 | 2007-10-10 | 北京易富金川科技有限公司 | Method for safety verifying financial business information in electronic business |
| CN1904934A (en) * | 2006-08-18 | 2007-01-31 | 王忠杰 | Safety network trading method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101184096A (en) | 2008-05-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8214888B2 (en) | Two-factor USB authentication token | |
| KR100881938B1 (en) | System and method for managing multiple smart card sessions | |
| CN101668288B (en) | Identity authenticating method, identity authenticating system and terminal | |
| CN102255730A (en) | Digital certificate safety lock device and digital certificate authentication system and method | |
| CN103780620B (en) | Network security method and network security system | |
| CN102377769A (en) | Communication system providing wireless authentication for private data access and related methods | |
| CN101808077B (en) | Information security input processing system and method and smart card | |
| CN101605325A (en) | The method of authentication and portable terminal, server and identity authorization system | |
| US8751805B2 (en) | Service providing client, wireless terminal and method for implementing binding | |
| CN101184107B (en) | Network transaction system and method for executing network transaction using the system | |
| CN104883686A (en) | Mobile terminal safety certificate method, device, system and wearable equipment | |
| CN109729000A (en) | A kind of instant communicating method and device | |
| CN103401686A (en) | User Internet identity authentication system and application method thereof | |
| CN104518949A (en) | Method and system for message prompt | |
| CN101184096B (en) | System and method for improving security of intelligent cipher device | |
| CN100452813C (en) | User verification processing system for contemporary mobile communication terminal and its running method | |
| CN202150861U (en) | Digital certificate safety lock apparatus and digital certificate authentication system | |
| CN104541488A (en) | Authentication system preserving secret data confidentiality | |
| CN101226671B (en) | Adversaria prompting method and apparatus | |
| CN103581843B (en) | A kind of personal information transmission method and system | |
| CN202918498U (en) | SIM card adapter, mobile terminal and digital signature authentication system | |
| DE60328882D1 (en) | SECURITY NEWS ABOUT A MOBILE COMMUNICATION NETWORK | |
| TWI577145B (en) | Method for encrypted data transmission of near field communication device and system thereof | |
| CN113515075A (en) | Intelligent control system and method through low-power-consumption long-distance radio frequency wireless network | |
| KR100601405B1 (en) | Certificate information management system using communication terminal and thereof method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C56 | Change in the name or address of the patentee |
Owner name: FEITIAN TECHNOLOGIES CO., LTD. Free format text: FORMER NAME: BEIJING FEITIAN CHENGXIN SCIENCE + TECHNOLOGY CO. LTD. |
|
| CP03 | Change of name, title or address |
Address after: 100085 Beijing city Haidian District Xueqing Road No. 9 Ebizal building B block 17 layer Patentee after: Feitian Technologies Co., Ltd. Address before: 100083, Haidian District, Xueyuan Road, No. 40 research, 7 floor, 5 floor, Beijing Patentee before: Beijing Feitian Chengxin Science & Technology Co., Ltd. |