CN104574652A - Method for increasing and deducting pollution discharge data of IC card and IC card - Google Patents

Abstract

The invention discloses a method for increasing and deducting the sewage discharge data of an IC card and an IC card, wherein the method for increasing the sewage discharge data of the IC card includes: receiving an instruction for increasing the sewage discharge amount issued by a recharging device, and the instruction for increasing the sewage discharge amount includes: first Random number: judging whether the first random number is random, if the first random number is random, the command to increase the amount of pollutant discharge is legal, and the recharge operation of the recharge device is accepted. The method for increasing and deducting the sewage data of the IC card and the IC card of the present invention introduce the concept of random numbers in the sewage discharge command, effectively preventing illegal users from intercepting the recharge data and performing multiple recharges; and introducing a special authentication code measure , the special authentication code is written into the security data area of the chip, which prevents the generation of cloned chips; the introduction of the check code measures prevents the transmission error of the sewage data or the illegal attack during the transmission process, thus ensuring the pollution discharge Security and confidentiality of data during transmission.

Description

Method for increasing and deducting pollutant discharge data of IC card and IC card

technical field

The invention relates to the technical field of data transmission and safety in the communication field, in particular to a method for increasing and deducting sewage discharge data of an IC card and an IC card.

Background technique

The pollutant discharge permit system is aimed at improving environmental quality, based on the total amount of pollutant discharge control, and stipulates the types and data of pollutants discharged by pollutant discharge units. It is an administrative management system with legal implications. , The means of quantitative management of the main pollutant discharge of key pollutant discharge units. In the past, in the process of pollution source remediation, only the emission concentration was controlled, and the pollution problem could not be solved as a whole. Only by controlling the total amount of emission from key pollution sources and issuing pollutant discharge permits can the environmental quality of the entire region be improved. Specifically aiming at the different environmental quality requirements in different regions, identify different pollution sources and reduce the discharge of different pollutants. The close combination of pollution control and environmental quality objectives is conducive to saving treatment funds and achieving environmental quality objectives.

The IC card system used in the current pollution discharge permit system mainly adopts the mifare card technology, or the "China Financial Integrated Circuit (IC) Card Specification" (JR/T 0025-2005) (industry referred to as PB0C2.0) e-wallet/passbook application technology. The number of wallets is relatively limited due to the spatial relationship, and the algorithm security is low. Among them, the crypto algorithm in the mifare card technology and the DES in the financial electronic wallet passbook are relatively less secure, and the operation process is more complicated.

In the course of realizing the present invention, the inventor finds that there are at least the following problems in the prior art:

The traditional IC card sewage data addition and deduction system mainly uses mifare card technology, or the electronic wallet/passbook application technology in the "China Financial Integrated Circuit (IC) Card Specification" (JR/T 0025-2005). The algorithm adopts crypto algorithm or DES algorithm; it adopts simple wallet application or financial e-wallet application. At present, the mifare technology has been cracked, and the deposit amount of the financial electronic wallet is transmitted in clear text when depositing, which is prone to insecure transactions.

Contents of the invention

The purpose of the present invention is to overcome the defect of poor security of IC card sewage discharge data in the prior art, and according to one aspect of the present invention, a method for increasing IC card sewage discharge data is proposed.

The method for increasing the sewage discharge data of an IC card according to an embodiment of the present invention includes:

Receive an instruction to increase the amount of pollutant discharge issued by the recharge device, the instruction to increase the amount of pollutant discharge includes: a first random number;

It is judged whether the first random number is random, and if the first random number is random, the command to increase the pollutant discharge amount is legal, and the recharge operation of the recharge device is accepted.

In order to overcome the defect of poor security of IC card sewage data in the prior art, the present invention proposes an IC card for increasing sewage data according to another aspect of the present invention.

The IC card for realizing the increase of sewage discharge data according to the embodiment of the present invention includes:

The instruction receiving module is used to receive the instruction for increasing the amount of pollutant discharge issued by the recharging device. The instruction for increasing the amount of pollutant emission includes: the first random number;

The instruction authentication module is used to judge whether the first random number is random, and if the first random number is random, then the instruction to increase the pollutant discharge amount is legal, and receives the recharge operation of the recharge device.

The method for increasing the sewage data of the IC card and the IC card of the embodiment of the present invention adopt the national secret SM1 algorithm to replace the crypto algorithm or the DES algorithm in the algorithm, and change the plaintext transmission in the prior art into the ciphertext transmission, which ensures The security and confidentiality of sewage data during transmission.

The method for increasing the sewage discharge data of the IC card and the IC card of the embodiment of the present invention introduce the concept of random numbers in the sewage discharge command, which effectively prevents illegal users from intercepting the recharge data and recharging multiple times; introduces the measures of special authentication codes, The special authentication code is written into the security data area of the chip, which prevents the generation of cloned chips; the introduction of the check code measures prevents the transmission error of the sewage data or the illegal attack during the transmission process.

The purpose of the present invention is to overcome the defect of poor security of IC card sewage discharge data in the prior art, and according to one aspect of the present invention, a method for deduction of IC card sewage discharge data is proposed.

The method for deduction of IC card sewage data according to an embodiment of the present invention includes:

Receive the pollutant emission reduction command issued by the pollution discharge control terminal, the pollutant discharge reduction command includes: the third random number, the additional code, the third random number and the additional code are used to generate the second verification when recharging the pollution discharge control terminal ESAM code;

Determine whether the balance in the IC card is sufficient, if sufficient, generate the fourth random number, if not, generate no random number;

Encrypt the deducted sewage data, the fourth random number and the second special authentication code to obtain encrypted ciphertext, and perform MAC calculation on the additional code and the encrypted ciphertext according to the third random number to obtain the second The verification code, the additional code, the encrypted ciphertext and the second verification code constitute an instruction to increase the amount of pollutant discharge for recharging the ESAM of the pollution control terminal.

The purpose of the present invention is to overcome the defect of poor security of IC card sewage discharge data in the prior art. According to one aspect of the present invention, an IC card for realizing deduction of sewage discharge data is proposed.

According to the embodiment of the present invention, the IC card for realizing the deduction of sewage data includes:

The instruction receiving module is used to receive the pollutant emission reduction instruction issued by the emission control terminal. The emission reduction instruction includes: the third random number, the additional code, and the third random number and the additional code are generated when recharging the emission control terminal ESAM the second check code;

A random number generation module, used to judge whether the balance in the IC card is sufficient, if sufficient, generate a fourth random number, if not, generate no random number;

The verification code generation module is used to encrypt the deducted sewage data, the fourth random number and the second special authentication code to obtain encrypted ciphertext, and perform MAC calculation on the additional code and encrypted ciphertext according to the third random number to obtain the second The verification code, the additional code, the encrypted ciphertext and the second verification code constitute an instruction to increase the amount of pollutant discharge for recharging the ESAM of the pollution control terminal.

The method and IC card of the IC card sewage data deduction of the embodiment of the present invention adopt the national secret SM1 algorithm to replace the crypto algorithm or the DES algorithm in the algorithm, and change the plain text transmission in the prior art into the cipher text transmission, guarantee It ensures the security and confidentiality of sewage data during transmission.

The method and IC card of the IC card sewage data deduction in the embodiment of the present invention introduce the concept of random numbers in the sewage discharge command, effectively preventing illegal users from intercepting recharge data and recharging multiple times; introducing special authentication code measures , the special authentication code is written into the security data area of the chip, which prevents the generation of cloned chips; the introduction of the check code measures prevents the transmission error of the sewage data or the illegal attack during the transmission process.

In the method for deduction of sewage discharge data of an IC card and the IC card in the embodiment of the present invention, during the recharging process, the sewage discharge data is transmitted in cipher text, which ensures the security of transmission; The control terminal ESAM recharges the message, and the sewage control terminal is only used as a transmission medium, which cannot interfere with the recharge message, ensuring data security.

Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.

The technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings and embodiments.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the description, and are used together with the embodiments of the present invention to explain the present invention, and do not constitute a limitation to the present invention. In the attached picture:

Fig. 1 is a schematic diagram of the IC card recharging process of the present invention;

Fig. 2 is a schematic diagram of IC card deduction and ESAM recharging process of the present invention;

Fig. 3 is the structural schematic diagram of the IC card that realizes the increase of sewage discharge data according to an embodiment of the present invention;

Fig. 4 is a structural schematic diagram of an IC card for realizing deduction of pollutant discharge data according to another embodiment of the present invention.

Detailed ways

The specific embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, but it should be understood that the protection scope of the present invention is not limited by the specific embodiments.

The present invention is aimed at the problem that mifare technology and the DES algorithm in the financial electronic wallet are used in the prior art. When the financial electronic wallet deposits, the data is transmitted in plain text, the security of data storage and transmission cannot be guaranteed, and the transaction process is too complicated. A new method of increasing and deducting the emission data of IC card is proposed.

The present invention proposes a new method for increasing sewage discharge data of an IC card. The software system for realizing the method is used to download to the user card as the only card of an enterprise, and can also be downloaded to the ESAM ( Embedded Secure Access Module, embedded security control module) is used as the storage module of "security information of sewage terminal control equipment" and "pollution data balance". The method supports the instruction of increasing the pollutant discharge data, the instruction of deducting the pollutant discharge data and the instruction of reading the balance of the pollutant discharge data for controlling the pollutant discharge data.

In order to achieve the above-mentioned purpose of the invention, the present invention provides a method for increasing the sewage discharge data of an IC card, and the specific implementation steps are as follows:

The sewage discharge enterprise needs to apply for an IC card as the only sewage discharge permit of the enterprise. The key in this IC card is the unique key of the enterprise, and has a corresponding relationship with the ESAM in the sewage discharge terminal control equipment of the enterprise (pollution discharge terminal control The ESAM in the device is obtained by dispersing the key in the IC card of the pollution discharge permit, and it is irreversible).

IC card recharge:

As shown in Figure 1, the embodiment of the present invention discloses a method for increasing the sewage discharge data of an IC card. This embodiment focuses on the recharging of the IC card by the higher-level environmental protection department, including:

Step 101: The pollutant discharge data operator inputs the type of pollutant discharge data to be recharged and the recharge amount into the recharging device;

Step 102: The recharge device of the upper-level environmental protection department performs identity authentication on the IC card of the pollutant discharge permit;

Step 103: The recharge device sends an instruction to obtain a second random number (eg, random number 1) to the IC card, and the IC card generates a random number 1 and sends it back to the recharge device;

Step 104: The recharge device generates a first random number (such as: random number 2), and the recharge device obtains the corresponding wallet short file identifier (SFI) according to the type of pollution discharge, obtains the enterprise password according to the enterprise number, and according to the instruction format, Construct the "increase sewage discharge command" message;

Step 105: The recharging device sends an "increase pollutant discharge command" to the IC card, where the instruction includes: the short file identifier (SFI) of the wallet corresponding to the purchased pollutant discharge type, the key corresponding to the pollutant discharge wallet that has passed through the enterprise, based on The national secret SM1 algorithm encrypts the ciphertext of "purchase amount + random number 2 + first special authentication code", "command header + ciphertext", the first check code calculated by MAC key and random number 1;

Step 106: After the IC card receives the "command to increase the amount of pollutant discharge", it verifies the first verification code. If the verification is passed, it means that the communication transmission has not received any attack or interference; if the verification fails, an error operation is returned ;

Step 107: The IC card finds the corresponding key stored in the wallet according to the sewage wallet targeted in the "increase sewage volume command", and decrypts the received ciphertext generated in step 105 based on the key;

Step 108: judging whether the first special authentication code obtained in step 107 is consistent with the built-in special authentication code in the IC card, if consistent, then the pollutant discharge unit is a legal enterprise; if inconsistent, then return to an error operation;

Step 109: Determine whether the random number 2 is random. If the random number 2 is a fixed code, or matches the random number of the previous (for example: ten) recharge operations, the random number is not random, and the recharge command may be subject to malicious attacks. Return error operation; if the random number 2 is random, then this recharge command is not a malicious attack command;

Step 110: After determining the random number 2, the recharge device recharges the corresponding sewage wallet in the IC card.

The format of the instruction to increase the amount of pollutant discharge mentioned above is shown in Table 1:

Table 1

P1---Short file identifier SFI of sewage wallet file;

Increment (16 bytes of ciphertext) --- It is obtained by encrypting by SM1 after adding 4 bytes of fixed authentication code + 8 bytes of random number from 4 bytes of incremental plaintext.

Check code --- is the MAC value calculated by "CLA+INS+P1+P2+Lc+increment" through the MAC key.

IC card deduction and ESAM recharge:

As shown in Figure 2, another embodiment of the present invention discloses a method for deduction of sewage data by IC card. The embodiment of the present invention focuses on deduction of IC card and recharging of sewage control terminal ESAM, including:

Step 201: The sewage data operator enters the recharge amount on the sewage control terminal;

Step 202: The sewage control terminal ESAM performs identity authentication on the IC card, and returns an error operation if the authentication fails;

Step 203: The IC card authenticates the identity of the pollution discharge control terminal ESAM, and returns an error operation if the authentication fails;

Step 204: After the IC card passes the authentication of the pollution discharge control terminal, it sends an instruction to obtain a random number to the pollution discharge control terminal ESAM, and the pollution discharge control terminal generates a third random number (such as: random number 3), and sends the random number 3 to the IC card;

Step 205: The pollution discharge control terminal obtains the wallet SFI, random number 3, and additional code according to the pollution discharge information, and constructs a "pollution reduction command" message;

Step 206: The pollution discharge control terminal sends a "pollution reduction command" message to the IC card;

Step 207: Check whether the IC card balance is sufficient, and return an error operation if the balance in the card is insufficient;

Step 208: If the balance in the IC card is sufficient, a fourth random number (such as: random number 4) is generated inside the IC card;

Step 209: The IC card encrypts the "pollution deduction data", "random number 4" and "second special authentication code" using the key dispersion factor to generate the "recharge ciphertext";

Step 210: The IC card uses the MAC key and the random number 3 to perform MAC calculation on the "additional code" and "recharge ciphertext" to obtain the second verification code;

Step 211: The IC card sends back the "command to increase pollutant discharge volume" constructed by the "recharge ciphertext" and "check code" to the pollution discharge control terminal;

Step 212: The pollution discharge control terminal will receive the "increase pollution discharge command" message returned by the IC card with the "additional code" and transmit it to the pollution discharge control terminal ESAM in plain text;

Step 213: After receiving the "increase pollution discharge command", the pollution discharge control terminal ESAM verifies the second verification code, and if the verification is passed, it means that the communication transmission has not received any attack or interference; if the verification fails, an error is returned operate;

Step 214: The pollution discharge control terminal ESAM decrypts the received ciphertext generated in the above step 209 based on the key corresponding to the "command to increase the pollution discharge volume", and obtains the decrypted second special authentication code;

Step 215: judging whether the second special authentication code obtained in step 214 is consistent with the special authentication code built in the IC card, if consistent, the IC card is legal; if inconsistent, return to an error operation;

Step 216: Determine whether the random number 4 is random. If the random number 4 is a fixed code, or matches the random number of previous (for example: ten) recharge operations, the random number is not random, and the recharge command may be subject to malicious attacks. Return error operation; if the random number 4 is random, then this recharge command is not a malicious attack command;

Step 217: After the random number 4 is determined, the IC card recharges the pollution discharge control terminal ESAM.

The format of the "Deduction of Pollution Discharge Instruction" for IC card deduction mentioned above is shown in Table 2:

Table 2

P1---sewage wallet file;

Additional code---that is, increase the sewage discharge command header "E43Axx0014";

N---The value range is 0~3;

Checksum --- is the XOR value of each byte of "CLA+INS+P1+P2+Lc+deduction amount".

The method for increasing and subtracting the sewage discharge data of the IC card in the embodiment of the present invention uses the national secret SM1 algorithm to encrypt the sewage discharge data during the transmission process of the sewage discharge data. security and confidentiality;

The method for increasing and deducting IC card sewage data in the embodiment of the present invention adds the introduction of random numbers, which effectively prevents illegal users from recharging multiple times after intercepting recharge data; increases the introduction of special authentication codes, special authentication The code is written into the security data area in the chip, which cannot be obtained by enterprise users, which fundamentally prevents the possibility of cloning the chip; the adoption of the verification code is added, and the verification of the verification code can effectively prevent the transmission of sewage data Mistakes and illegal data attacks; the measures introduced by the above embodiments of the present invention ensure the security and confidentiality of the sewage data during storage and transmission.

The embodiment of the present invention discloses an IC card for realizing the increase of sewage data, as shown in Figure 3, including the following modules:

An instruction receiving module 301, configured to receive the pollutant discharge instruction issued by the recharging device;

The instruction authentication module 302 is used to judge whether the first random number is random, and if the first random number is random, then the instruction to increase the pollutant discharge volume is legal, and receives the recharge operation of the recharge device.

Wherein, the instruction authentication module 302 includes the following modules:

The random number comparison sub-module 3021 is used to compare the first random number with the random number of the previous recharge operation;

The random number determination sub-module 3022 is used to confirm whether the first random number is random according to the comparison result. If the first random number matches the random number of the previous recharge operation or the first random number is a fixed code, the first random number is not random , the order to increase sewage discharge is illegal.

Among them, the IC card that realizes the increase of sewage data also includes the following modules:

An authentication code obtaining module 303, configured to decrypt the encrypted ciphertext according to the decryption key, and obtain a decrypted special authentication code;

Authentication code comparison module 304, for comparing the special authentication code with the special authentication code stored in the IC card, if the two are inconsistent, then the authentication fails;

If the special authentication code is consistent with the special authentication code stored in the IC card, the authentication of the special authentication code is passed.

Among them, the IC card that realizes the increase of sewage data also includes the following modules:

The receiving and sending module 305 is used to receive the random number acquisition instruction issued by the recharge device, generate a second random number, and send the second random number back to the recharge device for generating a check code attached to the instruction for increasing the pollutant discharge amount.

Among them, the IC card that realizes the increase of sewage data also includes the following modules:

The check comparison module 306 is used to compare the check code with the check code calculated inside the IC card, and if the two are equal, the check is passed;

If the two are not equal, the validation fails.

The IC card for realizing the increase of sewage data in the embodiment of the present invention adopts the national secret SM1 algorithm to replace the crypto algorithm or the DES algorithm in the algorithm, and changes the plain text transmission in the prior art into the cipher text transmission, which ensures that the sewage data is in Security and confidentiality during transmission.

The IC card that realizes the increase of sewage data in the embodiment of the present invention introduces the concept of random number in the sewage volume command, effectively preventing illegal users from intercepting the recharge data and recharging multiple times; introducing the measures of special authentication code, special authentication code It is written into the security data area of the chip, which prevents the generation of cloned chips; the introduction of the check code measures prevents the transmission error of the sewage data or the illegal attack during the transmission process.

In the IC card that realizes the increase of sewage data in the embodiment of the present invention, during the recharge process, the sewage data is transmitted in cipher text, which ensures the security of the transmission; For the recharge message, the sewage control terminal is only used as a transmission medium, and cannot interfere with the recharge message, ensuring data security.

The embodiment of the present invention also discloses an IC card for realizing deduction of sewage data, as shown in Figure 4, including the following modules:

The instruction receiving module 401 is used to receive the pollutant emission reduction instruction issued by the emission control terminal. The emission reduction instruction includes: a third random number, an additional code, and the third random number and the additional code are used to carry out A second verification code is generated when recharging.

Random number generating module module 402, for judging whether the balance in the IC card is sufficient, if sufficient, then generate the fourth random number, if insufficient, then not generate random number;

The verification code generation module 403 is used to encrypt the deducted sewage data, the fourth random number and the second special authentication code to obtain the encrypted ciphertext, and perform MAC calculation on the additional code and the encrypted ciphertext according to the third random number to obtain the first Two verification codes, the additional code, the encrypted ciphertext and the second verification code constitute an instruction to increase the amount of pollutant discharge for recharging the ESAM of the pollution control terminal.

The aforementioned IC card also includes:

The instruction authentication module 404 is used to judge whether the fourth random number is random, and if the fourth random number is random, then the instruction to increase the pollution discharge amount is legal, and recharges the pollution discharge control terminal ESAM.

Wherein, the instruction authentication module 404 includes the following modules:

The random number comparison sub-module 4041 is used to compare the fourth random number with the random number of the previous recharge operation;

The random number determination sub-module 4042 is used to confirm whether the fourth random number is random according to the comparison result. If the fourth random number matches the random number of the previous recharge operation or the fourth random number is a fixed code, the first random number is not random , the order to increase sewage discharge is illegal.

The aforementioned IC card also includes:

An authentication code obtaining module 405, configured to decrypt the encrypted ciphertext, and obtain a decrypted second special authentication code;

The authentication code comparison module 406 is used to compare the second special authentication code with the special authentication code stored in the sewage control terminal ESAM, and if the two are inconsistent, the authentication fails;

If the second special authentication code is consistent with the special authentication code stored in the sewage control terminal ESAM, the special authentication code authentication is passed.

The aforementioned IC card also includes:

The check code comparison module 407 is used to compare the second check code attached to the command to increase the pollutant discharge amount with the check code calculated inside the terminal ESAM, and if the two are equal, the check is passed;

If the two are not equal, the validation fails.

The IC card for realizing the deduction of sewage data in the embodiment of the present invention adopts the national secret SM1 algorithm instead of the crypto algorithm or DES algorithm in the algorithm, and changes the plaintext transmission in the prior art into ciphertext transmission to ensure the sewage data Security and confidentiality during transmission.

The IC card for realizing the deduction of sewage data in the embodiment of the present invention introduces the concept of random number in the sewage command, which effectively prevents illegal users from intercepting recharge data and recharging multiple times; introduces special authentication code measures, special authentication The code is written into the security data area of the chip, which prevents the generation of cloned chips; the introduction of the check code measures prevents the transmission error of the sewage data or the illegal attack during the transmission process.

In the IC card that realizes the deduction of sewage data in the embodiment of the present invention, during the recharge process, the sewage data is transmitted in cipher text, which ensures the security of the transmission; For the recharge message, the sewage control terminal is only used as a transmission medium, and cannot interfere with the recharge message, ensuring data security.

The present invention can have a variety of specific implementations in different forms. The technical solutions of the present invention are illustrated in conjunction with the accompanying drawings by taking Fig. 1-Fig. 4 as examples above. In the specific process or embodiment structure, those of ordinary skill in the art should understand that the specific implementations provided above are only some examples of various preferred usages, and any implementation that embodies the claims of the present invention shall be included in the present invention. Within the scope of protection required by the technical solution.

Finally, it should be noted that: the above is only a preferred embodiment of the present invention, and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, for those skilled in the art, it still The technical solutions recorded in the foregoing embodiments may be modified, or some technical features thereof may be equivalently replaced. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (20)

1. A method for increasing IC card sewage data, characterized in that it comprises: Receive an instruction to increase the amount of pollutant discharge issued by the recharge device, and the instruction to increase the amount of pollutant discharge includes: a first random number; Judging whether the first random number is random, if the first random number is random, the command to increase the pollutant discharge amount is legal, and the recharging operation of the recharging device is accepted. 2. The method according to claim 1, wherein said judging whether the first random number is random comprises: Comparing the first random number with the random number of the previous recharge operation, if the two match or the first random number is a fixed code, the first random number is not random, and the instruction to increase the amount of pollutant discharge is not legitimate. 3. The method according to claim 1, further comprising: The instruction for increasing the amount of pollutant discharge also includes: the encrypted ciphertext of the first special authentication code and the decryption key corresponding to the instruction for the amount of pollutant discharge; Decrypting the encrypted ciphertext according to the decryption key to obtain a decrypted first special authentication code; Comparing the first special authentication code with the special authentication code stored in the IC card, if the two are inconsistent, the authentication fails; If the first special authentication code is consistent with the special authentication code stored in the IC card, the authentication of the special authentication code is passed. 4. The method according to claim 1, further comprising: receiving a random number acquisition instruction issued by the recharging device, generating a second random number, and sending the second random number back to the recharging device for generating a first check code attached to the instruction for increasing the amount of pollutant discharge . 5. The method according to claim 4, further comprising: After receiving the instruction to increase the amount of pollutant discharge issued by the recharge device, compare the first check code generated by the recharge device with the check code calculated inside the IC card, and if the two are equal, check passed the test; If the two are not equal, the validation fails. 6. An IC card for increasing sewage discharge data, characterized in that it comprises: An instruction receiving module, configured to receive an instruction for increasing the amount of pollutant discharge issued by the recharge device, the instruction for increasing the amount of pollutant emission includes: a first random number; The instruction authentication module is used for judging whether the first random number is random, if the first random number is random, the instruction for increasing the pollutant discharge amount is legal, and receives the recharge operation of the recharge device. 7. IC card according to claim 6, is characterized in that, described instruction authentication module comprises: The random number comparison submodule is used to compare the first random number with the random number of the previous recharge operation; The random number determining submodule is used to confirm whether the first random number is random according to the comparison result: if the first random number matches the random number of the previous recharge operation or the first random number is a fixed code, Then the first random number is not random, and the instruction to increase the amount of pollutant discharge is illegal. 8. The IC card according to claim 6, wherein the instruction to increase the amount of pollutant discharge also includes: the encrypted ciphertext of the special authentication code and the decryption key corresponding to the instruction for the amount of pollutant discharge, and the IC card further includes: An authentication code obtaining module, configured to decrypt the encrypted ciphertext according to the decryption key, and obtain a decrypted first special authentication code; An authentication code comparison module, configured to compare the first special authentication code with the special authentication code stored in the IC card, and if the two are inconsistent, the authentication fails; If the first special authentication code is consistent with the special authentication code stored in the IC card, the authentication of the special authentication code is passed. 9. The IC card according to claim 6, further comprising: The receiving and sending module is used to receive the random number acquisition instruction issued by the recharging device, generate a second random number, and send the second random number back to the recharging device for generating The first check code of . 10. The IC card according to claim 6, further comprising: The check comparison module is used to compare the first check code with the check code calculated inside the IC card after receiving the instruction to increase the pollutant discharge amount issued by the recharge device, and if the two are equal, then Verification passed; If the two are not equal, the validation fails. 11. A method for deducting pollutant discharge data by an IC card, characterized in that it comprises: Receive the pollutant discharge reduction instruction issued by the pollution discharge control terminal, the pollutant discharge reduction instruction includes: a third random number and an additional code, the third random number and the additional code are used to recharge the pollution discharge control terminal ESAM When the second check code is generated; Determine whether the balance in the IC card is sufficient, if sufficient, generate the fourth random number, if not, generate no random number; Encrypt the deducted sewage data, the fourth random number and the second special authentication code to obtain encrypted ciphertext, and perform MAC calculation on the additional code and the encrypted ciphertext according to the third random number to obtain the second The verification code, the additional code, the encrypted ciphertext and the second verification code constitute an instruction to increase the amount of pollutant discharge for recharging the ESAM of the pollution control terminal. 12. The method of claim 11, further comprising: It is judged whether the fourth random number is random, and if the fourth random number is random, then the instruction to increase the pollutant discharge volume is legal, and the operation of recharging the pollution discharge control terminal ESAM is performed. 13. The method according to claim 12, wherein said judging whether the fourth random number is random comprises: Comparing the fourth random number with the random number of the previous recharge operation, if the two match or the fourth random number is a fixed code, the fourth random number is not random, and the instruction to increase the amount of pollutant discharge is not legitimate. 14. The method of claim 11, further comprising: Decrypting the encrypted ciphertext to obtain a decrypted second special authentication code; Comparing the second special authentication code with the special authentication code stored in the sewage control terminal ESAM, if the two are inconsistent, the authentication fails; If the second special authentication code is consistent with the special authentication code stored in the pollution discharge control terminal ESAM, the authentication of the special authentication code is passed. 15. The method of claim 11, further comprising: Comparing the second check code attached to the pollutant discharge command with the check code calculated inside the terminal ESAM, if the two are equal, the check is passed; If the two are not equal, the validation fails. 16. An IC card for deduction of pollutant discharge data, characterized in that it comprises: The command receiving module is used to receive the command for reducing the amount of pollutant discharge issued by the pollution control terminal. The command for reducing the amount of pollutant discharge includes: a third random number and an additional code. The third random number and the additional code are used for The second check code is generated when the sewage control terminal ESAM recharges; A random number generation module, used to judge whether the balance in the IC card is sufficient, if sufficient, generate a fourth random number, if not, generate no random number; A verification code generating module, configured to encrypt the deducted sewage data, the fourth random number and the second special authentication code to obtain encrypted ciphertext, and to encrypt the additional code and the encrypted ciphertext according to the third random number MAC calculation is performed on the cipher text to obtain a second check code, and the additional code, the encrypted cipher text, and the second check code constitute an instruction to increase the amount of pollutant discharge for recharging the ESAM of the pollution control terminal. 17. The IC card according to claim 16, further comprising: The instruction authentication module is used to judge whether the fourth random number is random, if the fourth random number is random, then the instruction to increase the pollution discharge amount is legal, and recharges the pollution discharge control terminal ESAM. 18. The IC card according to claim 16, further comprising: The random number comparison sub-module is used to compare the fourth random number with the random number of the previous recharge operation; The random number determination sub-module is used to confirm whether the fourth random number is random according to the comparison result. If the fourth random number matches the random number of the previous recharge operation or the fourth random number is a fixed code, the first random number is not random. The order to increase the amount of sewage discharged is illegal. 19. The IC card according to claim 16, further comprising: An authentication code obtaining module, configured to decrypt the encrypted ciphertext to obtain a decrypted second special authentication code; The authentication code comparison module is used to compare the second special authentication code with the special authentication code stored in the sewage control terminal ESAM, if the two are inconsistent, the authentication fails; If the second special authentication code is consistent with the special authentication code stored in the pollution discharge control terminal ESAM, the authentication of the special authentication code is passed. 20. The IC card according to claim 16, further comprising: The verification code comparison module is used to compare the second verification code attached to the instruction to increase the pollutant discharge amount with the verification code obtained by the internal calculation of the terminal ESAM, and if the two are equal, the verification is passed; If the two are not equal, the validation fails.