CN105991544A

CN105991544A - Data interaction method

Info

Publication number: CN105991544A
Application number: CN201510055972.5A
Authority: CN
Inventors: 李东声
Original assignee: Tendyron Technology Co Ltd
Current assignee: Tendyron Corp; Tendyron Technology Co Ltd
Priority date: 2014-11-07
Filing date: 2015-02-03
Publication date: 2016-10-05

Abstract

The present invention provides a data interaction method. The data interaction method includes the following steps that: secure connections are built between a card sleeve and a simulation card as well as between the card sleeve and a real card management device, the card sleeve acquires a card sleeve end real card information list, carries out prompting, receives a real card selection instruction and determines a selected real card; the simulation card receives data sent by a transaction terminal, carries out first processing on the received data and sends processed data to the card sleeve; the card sleeve carries out second processing on received data, carries out prompting, carries out first processing on the data which have been subjected to the second processing after receiving a confirmation instruction, and sends processed data to the real card management device; and the real card management device carries out second processing on received data and sends processed data to the selected real card. With the data interaction method of the invention adopted, data interaction among the simulation card, the card sleeve and the real card management device can be realized; portable conveniences can be brought to a user; and a high-security transaction solution can be provided.

Description

Data interactive method

Technical field

The present invention relates to electronic information security technical field, particularly relate to a kind of data interactive method.

Background technology

In existing transaction flow, such as: withdraw the money or do shopping and swipe the card, usual user needs to carry with the bank card handled from bank, and user is carry-on Carry bank card and there is certain security risk, once lose, then easily the assets of user are caused damage.Further, since bank card kind is multiple Various, a user may have the bank card of multiple different banks simultaneously, as carried with the bank card of multiple different banks, the most portable, If in order to be convenient for carrying, when only carrying some bank card in multiple bank cards, when using these bank cards to carry out withdrawing the money or do shopping to swipe the card, There may be inter-bank transaction, cause transaction occurs unnecessary expense.

Therefore, prior art is badly in need of provide one both to facilitate user to carry, and the trading solution that safety is higher.

Summary of the invention

Present invention seek to address that the problems referred to above.

A kind of data interactive method of offer is provided.

For reaching above-mentioned purpose, technical scheme is specifically achieved in that

One aspect of the present invention provides a kind of data interactive method, including: cutting ferrule sets up secure connection with simulation card, it is thus achieved that cutting ferrule and simulation card Between carry out cutting ferrule end the first safe transmission key and the analog card bit end safe transmission key of Security Data Transmission, and cutting ferrule manages with Truth cards Secure connection set up by device, it is thus achieved that carry out cutting ferrule end the second safe transmission key of Security Data Transmission and true card between cutting ferrule and Truth cards manager Sheet manager end safe transmission key；Cutting ferrule obtains cutting ferrule end Truth cards information list, wherein, cutting ferrule end Truth cards information list be cutting ferrule from The Truth cards manager end Truth cards information list obtained in Truth cards manager, Truth cards manager end Truth cards information list includes The Truth cards information of the Truth cards being connected with Truth cards manager；Cutting ferrule prompting cutting ferrule end Truth cards information list；Cutting ferrule receives true card Sheet selects instruction, determines the Truth cards chosen；And simulation card receives the data that transaction terminal sends, and utilize analog card bit end safe transmission The data that double secret key receives send to cutting ferrule after carrying out the first process；Cutting ferrule receives the data that simulation card sends, and utilizes cutting ferrule end the first safety After the data that transmission double secret key receives carry out the second process, the data after prompting the second process, and just receive the data after instruction the second process After true confirmation instruction, the data after utilizing cutting ferrule end the second safe transmission double secret key second to process send to true card management after carrying out the first process Device；Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Send to the Truth cards chosen after two process.

Additionally, data interactive method also includes: the Truth cards that Truth cards manager pair is connected with Truth cards manager detects；True card Sheet manager, after the Truth cards being connected with Truth cards manager being detected, obtains the Truth cards information of Truth cards, wherein, Truth cards Information at least includes: card number；After Truth cards manager obtains the Truth cards information of Truth cards, generate Truth cards manager end Truth cards Information list.

Additionally, data interactive method also includes: Truth cards manager also generates Truth cards manager end identification list, Truth cards manager end Mark in identification list and the Truth cards information one_to_one corresponding in Truth cards manager end Truth cards information list.

Additionally, cutting ferrule receives Truth cards selects instruction, determine the Truth cards chosen；Including: cutting ferrule receives Truth cards and selects instruction, obtains Choose mark, wherein, choose and identify the Truth cards chosen for instruction；Cutting ferrule will choose mark to send to true card management device；Truth cards Manager, according to choosing mark from the Truth cards being connected with Truth cards manager, determines the Truth cards chosen corresponding with choosing mark.

Additionally, set up secure connection at cutting ferrule and Truth cards manager, it is thus achieved that carry out Security Data Transmission between cutting ferrule and Truth cards manager Before cutting ferrule end the second safe transmission key and Truth cards manager end safe transmission key, data interactive method also includes: cutting ferrule is to Truth cards Manager sends logging request；Secure connection is set up, it is thus achieved that between cutting ferrule and Truth cards manager, carry out data at cutting ferrule and Truth cards manager After cutting ferrule end the second safe transmission key of safe transmission and Truth cards manager end safe transmission key, data interactive method also includes: cutting ferrule The login password received by cutting ferrule end the second safe transmission double secret key is sent to true card management device after carrying out the first process；Truth cards manages Device receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive are verified at second after carrying out the second process The correctness of the data after reason；After Truth cards manager data after checking the second process are passed through, cutting ferrule logs in Truth cards manager.

Additionally, the data that Truth cards manager utilizes Truth cards manager end safe transmission double secret key to receive verify second after carrying out the second process The correctness of the data after process includes: the data that Truth cards manager utilizes Truth cards manager end safe transmission double secret key to receive carry out After two process, it is thus achieved that password to be verified；Truth cards manager judges whether password to be verified is alarm cipher；If password to be verified is close for reporting to the police Code, then Truth cards manager determines that password authentification to be verified is passed through, and performs operation of reporting to the police；If password to be verified is not alarm cipher and for stepping on Record password, then Truth cards manager determines that password authentification to be verified is passed through.

Additionally, after cutting ferrule logs in Truth cards manager, data interactive method also includes: cutting ferrule end identification list searched by cutting ferrule；If cutting ferrule is searched To cutting ferrule end identification list, then cutting ferrule end the second safe transmission double secret key cutting ferrule end identification list is utilized to send to Truth cards pipe after carrying out the first process Reason device, Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the After two process, it is judged that the data after the second process are the most identical, if not with the Truth cards manager end identification list that Truth cards manager stores Identical, then Truth cards manager utilizes Truth cards manager end safe transmission double secret key to update instruction and more new data carries out transmission after the first process To cutting ferrule, cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out second After process, update cutting ferrule end Truth cards information list；If cutting ferrule does not finds cutting ferrule end identification list, then utilize cutting ferrule end the second safe transmission Double secret key is preset and is sent after mark carries out the first process to true card management device, and Truth cards manager receives the data that cutting ferrule sends, and utilizes true After the data that card management device end safe transmission double secret key receives carry out the second process, Truth cards manager determine the data after the second process for Instruction cutting ferrule end is not when storing cutting ferrule end identification list, utilizes Truth cards manager end safe transmission double secret key to update instruction and more new data carries out the Sending to cutting ferrule after one process, cutting ferrule receives the data that Truth cards manager sends, and utilizes cutting ferrule end the second safe transmission double secret key to receive After data carry out the second process, update cutting ferrule end Truth cards information list.

Additionally, after cutting ferrule logs in Truth cards manager, data interactive method also includes: Truth cards manager utilizes true cutting ferrule manager end to pacify Full transmission double secret key Truth cards manager end identification list sends to cutting ferrule after carrying out the first process；Cutting ferrule receives the number that Truth cards manager sends According to, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, it is judged that the data after the second process and cutting ferrule storage Cutting ferrule end identification list is the most identical；If it is not the same, then cutting ferrule sends more newly requested to Truth cards manager；Truth cards manager receives more Newly requested, utilize Truth cards manager end safe transmission double secret key to update after instruction carries out the first process with more new data and send to cutting ferrule；Card socket Receive the data that Truth cards manager sends, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, more neocaine Set end Truth cards information list.

Additionally, cutting ferrule also includes heart beating park mode, wherein, heart beating park mode is the non-operating mode of low-power consumption, and data interactive method also includes: It is fastened under heart beating park mode, sends detection information every the first Preset Time to Truth cards manager；Truth cards manager receives detection Information, sends response message to cutting ferrule；If not receiving response message in being fastened in the second Preset Time, then disconnect cutting ferrule and Truth cards manager Between secure connection；If receiving response message in being fastened in the second Preset Time, then the safety keeping cutting ferrule and Truth cards manager to set up connects Connect.

If also comprising renewal information, data interactive method additionally, receive in being fastened in the second Preset Time in response message, and response message Also include: cutting ferrule storage updates information；After cutting ferrule is entered mode of operation by heart beating park mode, cutting ferrule sends more to Truth cards manager Newly trigger request；Truth cards manager receives and updates the request of triggering, utilizes Truth cards manager end safe transmission double secret key Truth cards manager End identification list sends to cutting ferrule after carrying out the first process；Cutting ferrule receives the data that Truth cards manager sends, and utilizes cutting ferrule end the second safe transmission After the data that double secret key receives carry out the second process, it is judged that the data after the second process are the most identical with the cutting ferrule end identification list that cutting ferrule stores；As Fruit differs, then cutting ferrule sends more newly requested to Truth cards manager；Truth cards manager receives more newly requested, utilizes Truth cards manager End safe transmission double secret key updates after instruction carries out the first process with more new data and sends to cutting ferrule；Cutting ferrule receives the number that Truth cards manager sends According to, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, update cutting ferrule end Truth cards information list.

If also comprising renewal information, data interactive method additionally, receive in being fastened in the second Preset Time in response message, and response message Also include: cutting ferrule storage updates information；After cutting ferrule is entered mode of operation by heart beating park mode, cutting ferrule utilizes cutting ferrule end the second safe transmission Double secret key cutting ferrule end identification list sends to true card management device after carrying out the first process；Truth cards manager receives the data that cutting ferrule sends, profit After the data received with Truth cards manager end safe transmission double secret key carry out the second process, it is judged that the data after the second process and Truth cards pipe The Truth cards manager end identification list of reason device storage is the most identical；If it is not the same, then Truth cards manager utilizes Truth cards manager end Safe transmission double secret key updates after instruction carries out the first process with more new data and sends to cutting ferrule；Cutting ferrule receives the number that Truth cards manager sends According to, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, update cutting ferrule end Truth cards information list.

Include additionally, cutting ferrule sets up secure connection with simulation card: cutting ferrule is set up the first of secure connection to simulation card transmission for instruction and connected safely Connecing instruction, wherein, the first secure connection instruction includes: cutting ferrule utilizes the simulation card PKI in simulation card certificate to cutting ferrule end the first binding factor And generate first connection random factor be encrypted acquisition first connection ciphertext, cutting ferrule utilize cutting ferrule private key to cutting ferrule end the first binding factor with And first connect random factor carry out signature obtain first connection signature；Simulation card receives the first secure connection instruction, utilizes simulation card private key Connect ciphertext to first to be decrypted, it is thus achieved that cutting ferrule end first is bound decryption factor and first and connected the decryption random factor；Simulation card utilizes cutting ferrule Cutting ferrule PKI in certificate, cutting ferrule end first bind decryption factor and the first connection decryption random factor pair first connects signature and verifies；Simulation After card checking the first connection signature is correct, it is the most identical with analog card bit end binding factor that checking cutting ferrule end first binds decryption factor；Simulation card Checking cutting ferrule end first bind decryption factor identical with analog card bit end binding factor after, generate second connect random factor；Simulation card utilizes cutting ferrule Cutting ferrule PKI in certificate connects the decryption random factor to first and the second connection random factor is encrypted acquisition the second connection ciphertext, utilizes simulation Card private key connects the decryption random factor to first and the second connection random factor carries out signature and obtains the second connection signature；Simulation card is sent out to cutting ferrule Sending the first secure connection response, wherein, the first secure connection response includes: second connects ciphertext and second connects signature；Cutting ferrule receives the first peace Full connection response, utilizes cutting ferrule private key to connect ciphertext to second and is decrypted, it is thus achieved that the first connection decryption random factor and second after deciphering connect with Machine decryption factor；Cutting ferrule utilizes the simulation card PKI in simulation card certificate, the first connection decryption random factor and second after deciphering to connect random Decryption factor connects signature to second and verifies；The first connection decryption random factor after cutting ferrule checking the second connection signature is correct, after checking deciphering It is connected random factor the most identical with first；After cutting ferrule verifies that the first connection decryption random factor after deciphering is identical with the first connection random factor, extremely The second connection decryption random factor is utilized to generate cutting ferrule end the first safe transmission key between cutting ferrule and simulation card less；Simulation card is at least with second Connect random factor and generate the analog card bit end safe transmission key between cutting ferrule and simulation card.

Include additionally, cutting ferrule sets up secure connection with simulation card: cutting ferrule receive simulation card send simulation card generate the 3rd be connected random because of Son and simulation card uniquely identify；Cutting ferrule sends the second secure connection instruction setting up secure connection for instruction, wherein, second to simulation card Secure connection instruction includes: cutting ferrule uniquely identifies, cutting ferrule utilizes the simulation card PKI in simulation card certificate to connect random factor and life to the 3rd The 4th connection random factor become is encrypted the 3rd connection ciphertext of acquisition, cutting ferrule utilizes cutting ferrule private key to connect random factor and the 4th even to the 3rd Connect random factor and carry out the 3rd connection signature that signature obtains；Simulation card receives the second secure connection instruction, it is judged that cutting ferrule uniquely identifies whether at mould Intend in Card-terminal list of bindings；If cutting ferrule uniquely identifies in analog card bit end list of bindings, simulation card utilizes simulation card private key to the 3rd even Connect ciphertext to be decrypted, it is thus achieved that the 3rd connects the decryption random factor and the 4th connects the decryption random factor；Simulation card utilizes the card in cutting ferrule certificate Set PKI, the 3rd connection decryption random factor and the 4th connect decryption random factor pair the 3rd connection signature and verify；Simulation card checking the 3rd Connecting after signing correctly, it is the most identical that checking the 3rd connection decryption random factor is connected random factor with the 3rd；If the 3rd connects the decryption random factor With the 3rd connect random factor identical, simulation card utilize simulation card private key to the 3rd connect the decryption random factor and the 4th connect decryption random because of Son carries out signature and obtains the 4th connection signature；Simulation card sends the second secure connection response to cutting ferrule, and wherein, the second secure connection response includes: 4th connects signature；Cutting ferrule receive second secure connection response, utilize simulation card certificate in simulation card PKI, the 3rd connect random factor and 4th connects random factor verifies the 4th connection signature；After cutting ferrule checking the 4th connection signature is correct, connect random factor at least with the 4th And cutting ferrule end the first binding factor generates cutting ferrule end the first safe transmission key between cutting ferrule and simulation card；Simulation card connects at least with the 4th The decryption random factor and analog card bit end binding factor generate the analog card bit end safe transmission key between cutting ferrule and simulation card；Cutting ferrule utilizes cutting ferrule Hold the first safe transmission double secret key the 3rd connection random factor and the 4th to connect after random factor carries out the first process to send to simulating card；Analog card Sheet utilizes analog card bit end safe transmission double secret key the 3rd connection decryption random factor and the 4th to connect after the decryption random factor carries out the first process and sends out Deliver to cutting ferrule；Cutting ferrule receives the data that simulation card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, Data after relatively second process are connected random factor with the 3rd and the 4th connection random factor is the most identical；The number that simulation card receiving card set sends According to, and the data utilizing analog card bit end safe transmission double secret key to receive carry out the second process, compare the data after the second process be connected with the 3rd with It is the most identical that machine decryption factor and the 4th connects the decryption random factor.

Include additionally, cutting ferrule sets up secure connection with Truth cards manager: cutting ferrule sends to Truth cards manager and sets up secure connection for instruction The 3rd secure connection instruction, wherein, the 3rd secure connection instruction include: cutting ferrule utilizes the Truth cards manager in Truth cards manager certificate PKI is encrypted the 5th connection ciphertext of acquisition to the 5th connection random factor of cutting ferrule end the second binding factor and generation, and cutting ferrule utilizes cutting ferrule private Key connects random factor and carries out the 5th connection signature that signature obtains cutting ferrule end the second binding factor and the 5th；Truth cards manager receives the 3rd Secure connection instructs, and utilizes Truth cards manager private key to connect ciphertext to the 5th and is decrypted, it is thus achieved that cutting ferrule end second binds decryption factor and the Five connect the decryption random factor；Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate, cutting ferrule end second to bind decryption factor and the 5th even Connect decryption random factor pair the 5th connection signature to verify；After Truth cards manager checking the 5th connection signature is correct, checking cutting ferrule end second is tied up Determine decryption factor the most identical with Truth cards manager end binding factor；Truth cards manager checking cutting ferrule end second binds decryption factor with true After card management device end binding factor is identical, generate the 6th connection random factor；Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate to The five connection decryption random factors and the 6th connect random factor and are encrypted acquisition the 6th connection ciphertext, utilize Truth cards manager private key to the 5th Connect the decryption random factor and the 6th connection random factor carries out signature and obtains the 6th connection signature；Truth cards manager sends the 3rd peace to cutting ferrule Full connection response, wherein, the 3rd secure connection response includes: the 6th connects ciphertext and the 6th connects signature；Cutting ferrule receives the 3rd secure connection and rings Should, utilize cutting ferrule private key to the 6th connect ciphertext be decrypted, it is thus achieved that after deciphering the 5th connection the decryption random factor and the 6th connect decryption random because of Son；Cutting ferrule utilizes the 5th connection decryption random factor and the 6th connection after the Truth cards manager PKI in Truth cards manager certificate, deciphering Decryption random factor pair the 6th connects signature and verifies；The 5th connection decryption random after cutting ferrule checking the 6th connection signature is correct, after checking deciphering It is the most identical that the factor is connected random factor with the 5th；It is identical that the 5th connection decryption random factor after cutting ferrule checking deciphering connects random factor with the 5th After, connect the decryption random factor at least with the 6th and generate cutting ferrule end the second safe transmission key between cutting ferrule and Truth cards manager；Truth cards Manager connects random factor at least with the 6th and generates the Truth cards manager end safe transmission key between cutting ferrule and Truth cards manager.

Include additionally, cutting ferrule sets up secure connection with Truth cards manager: cutting ferrule receives the Truth cards manager life that Truth cards manager sends The 7th connection random factor become and Truth cards manager uniquely identify；Cutting ferrule sends to Truth cards manager and sets up secure connection for instruction 4th secure connection instruction, wherein, the 4th secure connection instruction includes: it is true that cutting ferrule uniquely identifies, cutting ferrule utilizes in Truth cards manager certificate Real card management device PKI is encrypted the 7th connection ciphertext, cutting ferrule of acquisition to the 8th connection random factor of the 7th connection random factor and generation Utilize cutting ferrule private key to connect random factor to the 7th and the 8th connection random factor carries out the 7th connection signature that signature obtains；Truth cards manager Receive the 4th secure connection instruction, it is judged that cutting ferrule uniquely identifies whether in Truth cards manager end list of bindings；If cutting ferrule uniquely identifies very In real card management device end list of bindings, Truth cards manager utilizes Truth cards manager private key to connect ciphertext to the 7th and is decrypted, it is thus achieved that the Seven connect the decryption random factor and the 8th connects the decryption random factor；Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate, the 7th connection The decryption random factor and the 8th connects decryption random factor pair the 7th connection signature and verifies；Truth cards manager checking the 7th connection signature is just After Que, it is the most identical that checking the 7th connection decryption random factor is connected random factor with the 7th；It is connected with the 7th if the 7th connects the decryption random factor Random factor is identical, and Truth cards manager utilizes Truth cards manager private key to connect the decryption random factor and the 8th connection decryption random to the 7th The factor carries out signature and obtains the 8th connection signature；Truth cards manager sends the 4th secure connection response to cutting ferrule, and wherein, the 4th secure connection rings Should include: the 8th connects signature；Cutting ferrule receive the 4th secure connection response, utilize the Truth cards manager PKI in Truth cards manager certificate, 7th connection random factor and the 8th connects random factor and verifies the 8th connection signature；After cutting ferrule checking the 8th connection signature is correct, at least profit Connect random factor with the 8th and cutting ferrule end the second binding factor generates cutting ferrule end the second safe transmission key between cutting ferrule and Truth cards manager； Truth cards manager connects the decryption random factor at least with the 8th and Truth cards manager end binding factor generates cutting ferrule and Truth cards pipe Truth cards manager end safe transmission key between reason device；Cutting ferrule utilizes cutting ferrule end the second safe transmission double secret key the 7th to connect random factor and the Eight connection random factors send to true card management device after carrying out the first process；Truth cards manager utilizes Truth cards manager end safe transmission Double secret key the 7th connection decryption random factor and the 8th connection decryption random factor send to cutting ferrule after carrying out the first process；Cutting ferrule receives Truth cards The data that manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, compare the number after the second process According to be connected with the 7th random factor and the 8th connect random factor the most identical；Truth cards manager receives the data that cutting ferrule sends, and utilizes true The data that real card management device end safe transmission double secret key receives carry out the second process, compare the data after the second process and are connected decryption random with the 7th It is the most identical that the factor and the 8th connects the decryption random factor.

Additionally, before cutting ferrule sets up secure connection with simulation card, data interactive method also includes: cutting ferrule performs bindings with simulation card.

Include additionally, cutting ferrule and simulation card perform bindings: cutting ferrule receives for indicating and simulate the trigger command that card carries out binding；Cutting ferrule To simulation card send first binding instruction, wherein, first binding instruction includes: cutting ferrule generate first binding random factor, cutting ferrule certificate and Cutting ferrule uniquely identifies；Simulation card receives the first binding instruction, utilizes root certificate to verify cutting ferrule certificate；Simulation card checking cutting ferrule certificate closes After method, generate the second binding random factor；Simulation card utilize cutting ferrule PKI in cutting ferrule certificate to the first binding random factor and the second binding with The machine factor is encrypted acquisition the first binding ciphertext, utilizes simulation card private key to sign the first binding random factor and the second binding random factor Name obtains the first binding signature；Simulation card sends the first binding response to cutting ferrule, and wherein, the first binding response includes: the first binding ciphertext, the One binding signature, simulation card certificate and simulation card uniquely identify；Cutting ferrule receives the first binding response, utilizes root certificate to simulation card certificate Verify；After cutting ferrule checking simulation card certificate is legal, utilize cutting ferrule private key that the first binding ciphertext is decrypted, it is thus achieved that the first binding RANDOM SOLUTION The close factor and the second binding decryption random factor；Cutting ferrule utilize simulation card certificate in simulation card PKI, first binding the decryption random factor and Second binding decryption random factor pair first is bound signature and is verified；After cutting ferrule checking the first binding signature is correct, checking the first binding decryption random The factor is the most identical with the first binding random factor；After cutting ferrule checking the first binding decryption random factor is identical with the first binding random factor, point out mould Intend card uniquely to identify；Cutting ferrule receive for confirm simulate card uniquely identify correct trigger command, utilize cutting ferrule private key to first binding random because of Son and the second binding decryption random factor are signed, it is thus achieved that the second binding signature, and storage simulation card uniquely identifies, simulates card certificate And cutting ferrule end the first binding factor is to cutting ferrule end the first list of bindings, wherein, cutting ferrule end the first binding factor is the second binding decryption random factor； Cutting ferrule sends the second binding signature to simulation card；Simulation card receives the second binding signature, utilizes the cutting ferrule PKI in cutting ferrule certificate, the first binding Second binding signature is verified by random factor and the second binding random factor；After simulation card checking the second binding signature is correct, store cutting ferrule Unique mark, cutting ferrule certificate and analog card bit end binding factor are to analog card bit end list of bindings, and wherein, analog card bit end binding factor is second Binding random factor.

Additionally, before cutting ferrule sets up secure connection with Truth cards manager, data interactive method also includes: cutting ferrule is held with Truth cards manager Row bindings.

Include additionally, cutting ferrule and Truth cards manager perform bindings: cutting ferrule receives for touching that instruction and Truth cards manager carry out binding Say the word；Cutting ferrule sends the second binding instruction by wireless network to Truth cards manager, and wherein, the second binding instruction includes: cutting ferrule generates 3rd binding random factor, cutting ferrule certificate and cutting ferrule uniquely identify；Truth cards manager receives the second binding instruction, utilizes root certificate to cutting ferrule Certificate is verified；After Truth cards manager checking cutting ferrule certificate is legal, generate the 4th binding random factor；Truth cards manager utilizes cutting ferrule Cutting ferrule PKI in certificate is encrypted acquisition the second binding ciphertext to the 3rd binding random factor and the 4th binding random factor, utilizes Truth cards Manager private key carries out signature to the 3rd binding random factor and the 4th binding random factor and obtains the 3rd binding signature；Truth cards manager passes through Wireless network sends the second binding response to cutting ferrule, and wherein, the second binding response includes: the second binding ciphertext, the 3rd binding signature, Truth cards Manager certificate and Truth cards manager uniquely identify；Cutting ferrule receives the second binding response, utilizes root certificate to enter Truth cards manager certificate Row checking；Cutting ferrule checking Truth cards manager certificate legal after, utilize cutting ferrule private key to second binding ciphertext be decrypted, it is thus achieved that the 3rd binding with Machine decryption factor and the 4th binding decryption random factor；Cutting ferrule utilizes the Truth cards manager PKI in Truth cards manager certificate, the 3rd binding The decryption random factor and the 4th binding decryption random factor pair the 3rd binding signature are verified；After cutting ferrule checking the 3rd binding signature is correct, checking The 3rd binding decryption random factor is the most identical with the 3rd binding random factor；Cutting ferrule checking the 3rd binding the decryption random factor with the 3rd binding random because of After son is identical, prompting Truth cards manager uniquely identifies；Cutting ferrule receives for confirming that Truth cards manager uniquely identifies correct trigger command, Utilize cutting ferrule private key that the 3rd binding random factor and the 4th binding decryption random factor are signed, it is thus achieved that the 4th binding signature, and storage is true Real card management device uniquely identifies, Truth cards manager certificate and cutting ferrule end the second binding factor to cutting ferrule end the second list of bindings, wherein, card Set end the second binding factor is the 4th binding decryption random factor；Cutting ferrule sends the 4th binding signature to Truth cards manager；Truth cards manager Receive the 4th binding signature, utilize the cutting ferrule PKI in cutting ferrule certificate, the 3rd binding random factor and the 4th binding random factor that the 4th binding is signed Name is verified；After Truth cards manager checking the 4th binding signature is correct, storage cutting ferrule uniquely identifies, cutting ferrule certificate and Truth cards management Device end binding factor is to true card management device end list of bindings, and wherein, Truth cards manager end binding factor is the 4th binding random factor.

Additionally, data interactive method also includes: cutting ferrule to major general's cutting ferrule certificate sends to updating platform；Update platform and generate the first renewal encryption key； Updating platform utilizes the first renewal encryption key that cutting ferrule application program installation kit is encrypted acquisition the first installation kit ciphertext；Update platform and utilize renewal Platform private key carries out signature and obtains the first installation kit signature the first installation kit ciphertext；Update platform and utilize the cutting ferrule public key encryption first in cutting ferrule certificate Update encryption key, it is thus achieved that first updates encryption key ciphertext；Update platform to send cutting ferrule more fresh information to cutting ferrule, wherein, cutting ferrule more fresh information Including: update platform credential, the first installation kit ciphertext, the first installation kit signature and the first renewal encryption key ciphertext；Cutting ferrule receives cutting ferrule and updates Information, utilizes root certification authentication to update platform credential；After cutting ferrule checking renewal platform credential is passed through, utilize the renewal platform updated in platform credential public Key carries out sign test to the first installation kit signature；After cutting ferrule verifies that the first installation kit signature is correct, utilize cutting ferrule private key deciphering the first renewal encryption key close Literary composition, it is thus achieved that the first decruption key；Cutting ferrule utilizes first decryption key decryption the first installation kit ciphertext, it is thus achieved that cutting ferrule application program installation kit；Cutting ferrule is tested The data form of Card sleeve application program installation kit is the most correct；If the data form of cutting ferrule checking cutting ferrule application program installation kit is correct, cutting ferrule root Install according to cutting ferrule application program installation kit.

Additionally, data interactive method also includes: cutting ferrule obtains simulation card certificate from simulation card, sends to updating to major general's analog card sheet certificate Platform；Update platform and generate the second renewal encryption key；Updating platform utilizes the second renewal encryption key to carry out simulation card application program installation kit Encryption obtains the second installation kit ciphertext；Updating platform utilizes renewal platform private key that the second installation kit ciphertext carries out signature acquisition the second installation kit signature； Updating platform utilizes the simulation card public key encryption second in simulation card certificate to update encryption key, it is thus achieved that second updates encryption key ciphertext；Update Platform will simulation card update information send to cutting ferrule, wherein, simulation card update information include: update platform credential, the second installation kit ciphertext, Second installation kit signature and second updates encryption key ciphertext；Cutting ferrule receives simulation card and updates information, utilizes cutting ferrule end the first safe transmission key Simulation card is updated after information carries out the first process and sends to simulating card；The data that simulation card receiving card set sends, utilize analog card bit end to pacify After the data that full transmission double secret key receives carry out the second process, it is thus achieved that simulation card updates information；Simulation card utilizes root certification authentication to update platform Certificate；After simulation card checking renewal platform credential is passed through, utilize the renewal platform PKI updated in platform credential that the second installation kit signature is tested Sign；After simulation card verifies that the second installation kit signature is correct, utilize simulation card private key deciphering the second renewal encryption key ciphertext, it is thus achieved that the second deciphering Key；Simulation card utilizes second decryption key decryption the second installation kit ciphertext, it is thus achieved that simulation card application program installation kit；Simulation card checking mould The data form intending card application program installation kit is the most correct；If the data form of simulation card checking simulation card application program installation kit is just Really, simulation card is installed according to simulation card application program installation kit.

Additionally, data interactive method also includes: Truth cards manager to major general's Truth cards manager certificate sends to updating platform；Update platform Generate the 3rd renewal encryption key；Updating platform utilizes the 3rd renewal encryption key that Truth cards manager application installation kit is encrypted acquisition 3rd installation kit ciphertext；Updating platform utilizes renewal platform private key that the 3rd installation kit ciphertext carries out signature acquisition the 3rd installation kit signature；Update platform The Truth cards manager public key encryption the 3rd in Truth cards manager certificate is utilized to update encryption key, it is thus achieved that the 3rd updates encryption key ciphertext； Updating platform to send Truth cards manager more fresh information to true card management device, wherein, Truth cards manager more fresh information includes: update Platform credential, the 3rd installation kit ciphertext, the 3rd installation kit signature and the 3rd update encryption key ciphertext；Truth cards manager receives Truth cards Manager more fresh information, utilizes root certification authentication to update platform credential；After Truth cards manager checking renewal platform credential is passed through, utilize to update and put down Renewal platform PKI in platform certificate carries out sign test to the 3rd installation kit signature；After Truth cards manager checking the 3rd installation kit signature is correct, utilize Truth cards manager private key deciphering the 3rd renewal encryption key ciphertext, it is thus achieved that the 3rd decruption key；Truth cards manager utilizes the 3rd decruption key Decipher the 3rd installation kit ciphertext, it is thus achieved that Truth cards manager application installation kit；Truth cards manager checking Truth cards manager application journey The data form of sequence installation kit is the most correct；If the data form of Truth cards manager checking Truth cards manager application installation kit is just Really, Truth cards manager is installed according to Truth cards manager application installation kit.

Additionally, the first process includes: encryption, the second process includes: decryption processing；Or the first process includes: verification calculating processes, the Two process include: verification checking calculating processes；Or the first process includes: encrypt and verify calculating and process, the second process includes: deciphers and verifies Checking calculating processes.

Additionally, Truth cards manager is according to the safety grades of Truth cards, the Truth cards to the Truth cards being connected with Truth cards manager The access limit of information carries out the setting opened and/or close.

During additionally, cutting ferrule detects the efficient communication scope that simulation card exceeds cutting ferrule, carry out safety instruction.

Additionally, cutting ferrule is mobile device.

Additionally, cutting ferrule is mobile device and electronic signature equipment, or cutting ferrule is electronic signature equipment.

As seen from the above technical solution provided by the invention, can realize simulating card, cutting ferrule with true by the data interactive method of the present invention Data interaction between card management device, to provide a kind of novel user that both facilitates to carry, and the trading solution that safety is higher.

Accompanying drawing explanation

In order to be illustrated more clearly that the technical scheme of the embodiment of the present invention, in describing embodiment below, the required accompanying drawing used is situated between simply Continue, it should be apparent that, the accompanying drawing in describing below is only some embodiments of the present invention, from the point of view of those of ordinary skill in the art, not On the premise of paying creative work, it is also possible to obtain other accompanying drawings according to these accompanying drawings.

The flow chart of the data interactive method that Fig. 1 provides for the embodiment of the present invention；

In the data interactive method that Fig. 2 provides for the embodiment of the present invention, cutting ferrule and simulation card perform the flow chart of bindings；

In the data interactive method that Fig. 3 provides for the embodiment of the present invention, cutting ferrule and Truth cards manager perform the flow chart of bindings；

In the data interactive method that Fig. 4 provides for the embodiment of the present invention, the flow chart of safe connection mode one set up by cutting ferrule and simulation card；

In the data interactive method that Fig. 5 provides for the embodiment of the present invention, the flow chart of safe connection mode two set up by cutting ferrule and simulation card；

In the data interactive method that Fig. 6 provides for the embodiment of the present invention, the flow chart of safe connection mode one set up by cutting ferrule and Truth cards manager；

In the data interactive method that Fig. 7 provides for the embodiment of the present invention, the flow chart of safe connection mode two set up by cutting ferrule and Truth cards manager；

The flow chart of cutting ferrule application program update in the data interactive method that Fig. 8 provides for the embodiment of the present invention；

The data interactive method that Fig. 9 provides for the embodiment of the present invention is simulated the flow chart of card application program update；

The flow chart that in the data interactive method that Figure 10 provides for the embodiment of the present invention, Truth cards manager application updates.

Detailed description of the invention

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, it is clear that retouched The embodiment stated is only a part of embodiment of the present invention rather than whole embodiments.Based on embodiments of the invention, ordinary skill people The every other embodiment that member is obtained under not making creative work premise, broadly falls into protection scope of the present invention.

In describing the invention, it is to be understood that term " " center ", " longitudinally ", " laterally ", " on ", D score, "front", "rear", " left ", The orientation of the instruction such as " right ", " vertically ", " level ", " top ", " end ", " interior ", " outward " or position relationship are to close based on orientation shown in the drawings or position System, be for only for ease of describe the present invention and simplifying describe rather than instruction or the hint device of indication or element must have specific orientation, with Specific azimuth configuration and operation, be therefore not considered as limiting the invention.Additionally, term " first ", " second " are only used for describing purpose, And it is not intended that indicate or imply relative importance or quantity or position.

In describing the invention, it should be noted that unless otherwise clearly defined and limited, term " is installed ", " being connected ", " connection " should do Broadly understood, connect for example, it may be fixing, it is also possible to be to removably connect, or be integrally connected；Can be to be mechanically connected, it is also possible to be electricity Connect；Can be to be joined directly together, it is also possible to be indirectly connected to by intermediary, can be the connection of two element internals.Common for this area For technical staff, above-mentioned term concrete meaning in the present invention can be understood with concrete condition.

Below in conjunction with accompanying drawing, the embodiment of the present invention is described in further detail.

The invention provides the framework of a kind of data interaction, both facilitate user to carry to provide, and the trading solution that safety is higher.These data Interworking architecture includes: simulation card, cutting ferrule and Truth cards manager.

Wherein:

Simulation card, can include one or more, and this simulation card can be that separately fabricated card can also be for being reserved with simulation card function Truth cards.This simulation card is identical with existing bank card dimensions, in notebook data interworking architecture, substitutes Truth cards and completes transaction.Simulation Card has contact and/or non-contact interface, in order to coordinate existing transaction terminal (such as ATM, POS, mass transit card top-up machines etc.) Complete transaction.Simulation card also has wave point, and simulation card can carry out data interaction by this wave point and cutting ferrule.Wherein, contact Interface can be contact etc., and non-contact interface can be NFC interface etc., and this wave point can be blue tooth interface, infrared interface, 2.4GHz Interface, WIFI interface, RFID interface etc..

Cutting ferrule, can include one or more cutting ferrule, and this cutting ferrule can manage one or more simulation card, and every simulation card can only belong to one Individual cutting ferrule is also managed by it.This cutting ferrule can be the separately fabricated equipment for card envelope shape, it is also possible to for having the card provided in notebook data framework The mobile device of set function, including: smart mobile phone, panel computer (PAD), PDA (such as palm PC, learning machine), notebook computer, E-book reading device, wearable device (such as intelligent wristwatch, intelligent glasses etc.) etc..Cutting ferrule can have contact and/or non-contact interface, To coordinate the contact of simulation card and/or non-contact interface to carry out data interaction, cutting ferrule can also have wave point, in order to wireless by this Interface carries out data interaction with the simulation corresponding interface of card, and wherein, contact interface can be contact etc., and non-contact interface can be NFC Interface etc., this wave point can be blue tooth interface, infrared interface, 2.4GHz interface, WIFI interface, RFID interface etc.；Cutting ferrule also has net Network interface, in order to carrying out data interaction by this network interface network interface corresponding with Truth cards manager, wherein, this network interface can be WIFI interface, mobile interchange network interface (such as 3G, 4G network) etc..It addition, cutting ferrule can also be the group of mobile device and electronic signature equipment Closing, wherein the network interface of cutting ferrule realizes by means of the network interface of mobile device, other interfaces (such as wave point, contact and/or noncontact Formula interface etc.) can be respectively positioned in electronic signature equipment, or these other interfaces can also be respectively positioned in mobile device, or in the middle part of these other interfaces Tap mouth is positioned in electronic signature equipment, and part of interface is positioned in mobile device；The process operation that cutting ferrule performs all performs in electronic signature equipment； Cutting ferrule can moreover be only electronic signature equipment.Wherein, electronic signature equipment can be key equipment, such as industrial and commercial bank's U-shield, and agricultural bank K is precious.

Truth cards manager, can manage multiple cutting ferrule, and this Truth cards manager have multiple contact (such as draw-in groove etc.) interface and/ Or contactless (such as NFC etc.) interface, to facilitate Truth cards manager can connect different types of Truth cards by different modes, Wherein, Truth cards manager is connected with at least one Truth cards, and storage has Truth cards manager end Truth cards information list, truly Card management device end Truth cards information list includes the Truth cards information of the Truth cards being connected with Truth cards manager, this Truth cards information May include that the information such as card number, card authentication information, this card authentication information is whether certification Truth cards is regular channel (such as bank, public affairs Hand over to the collective or the state department etc.) card image issued；This Truth cards can be function card (such as mass transit card, mess card, purchase card, member card, accumulating card etc.) Or the bank card that bank issues；Optionally, what Truth cards manager could be arranged to preserve in connected Truth cards is all or part of true The Truth cards information of real card, in order to user makes different setting according to the security requirement of Truth cards, such as, can manage at Truth cards The Truth cards information not allowing to obtain some Truth cards is set on device, thus ensures the safety of these Truth cards.Truth cards manager is also There is network interface, in order to carrying out data interaction by this network interface network interface corresponding with cutting ferrule, wherein, this network interface can be WIFI Interface, mobile interchange network interface (such as 3G, 4G network) etc..

In notebook data interworking architecture, simulation card and Truth cards are smart chip card.

Hereinafter, the term in the present invention is illustrated:

First process includes: encryption, and the second process includes: decryption processing；Specifically, simple encryption ensures data transmission security, is treating When transmission data security levels requires higher, can process to use this kind of mode.Or

First process includes: verification calculating processes, and the second process includes: verification verifies that calculating processes；Specifically, simple verification ensures data transmission Integrity, prevents from distorting, and when treating integrity of data transmission requirement and being higher, can process to use this kind of mode.Or

First process includes: encrypts and verifies calculating and process, and the second process includes: deciphers and verifies checking calculating and process.Specifically, encryption is used Ensure data transmission security and complete with verification hybrid mode, when data security levels to be transmitted is required the highest, can carry out to use this kind of mode Process.

Based on above-mentioned data interaction framework, the present invention provides a kind of data interactive method, by this data interactive method, it is possible to achieve simulation card, Data interaction between cutting ferrule and Truth cards manager, to provide a kind of novel user that both facilitates to carry, and the transaction solution party that safety is higher Case.

Fig. 1 shows the flow chart of the data interactive method that the embodiment of the present invention provides, and sees Fig. 1, the data interactive method of the present invention, including:

Cutting ferrule sets up secure connection with simulation card, it is thus achieved that cutting ferrule end the first safe transmission carrying out Security Data Transmission between cutting ferrule and simulation card is close Key and analog card bit end safe transmission key, and cutting ferrule and Truth cards manager set up secure connection, it is thus achieved that cutting ferrule and Truth cards manager it Between carry out cutting ferrule end the second safe transmission key and the Truth cards manager end safe transmission key of Security Data Transmission；

Cutting ferrule obtains cutting ferrule end Truth cards information list, and wherein, cutting ferrule end Truth cards information list is that cutting ferrule obtains from Truth cards manager Truth cards manager end Truth cards information list, Truth cards manager end Truth cards information list includes being connected with Truth cards manager The Truth cards information of Truth cards；

Cutting ferrule prompting cutting ferrule end Truth cards information list；

Cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；And simulation card receives the data that transaction terminal sends, and utilize The data that analog card bit end safe transmission double secret key receives send to cutting ferrule after carrying out the first process；

After cutting ferrule receives simulates the data that card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, carry Show the data after the second process, and after receiving the confirmation instruction that the data after instruction the second process are correct, utilize cutting ferrule end the second safe transmission close Key sends to true card management device after the data after the second process are carried out the first process；

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Send to the Truth cards chosen after two process.

Hereinafter, for above-mentioned data interactive method, being described in detail, specifically, this data interactive method can comprise the following aspects:

One, binding:

1, cutting ferrule and simulation card execution bindings:

In the present invention, cutting ferrule can be bound in the following way with simulation card:

Cutting ferrule and simulation card mutual authentication the other side's certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process generation Binding factor.

Below, it is provided that a kind of cutting ferrule and the specific implementation simulating card execution bindings:

Fig. 2 shows that in the data interactive method that the embodiment of the present invention provides, cutting ferrule and simulation card perform the flow chart of bindings, see Fig. 2, Cutting ferrule performs bindings with simulation card and includes:

Cutting ferrule receives for indicating and simulate the trigger command that card carries out binding；Specifically, before cutting ferrule uses, can in advance cutting ferrule be performed Power-on operation, now, optionally, cutting ferrule prompting user inputs startup password, and receives the startup password that user inputs, opening of checking user's input The correctness of secret code, after the startup password of checking user's input is correct, performs power-on operation, and card covers into mode of operation.Use cutting ferrule with Before simulation card carries out data interaction, optionally, cutting ferrule is bound with simulation card, the safety mutual to improve follow-up data.Wherein, What cutting ferrule received can be to be provided separately within the binding physical button generation that card puts for the trigger command indicating cutting ferrule and simulation card to carry out binding , or can be that the binding virtual key on the touch screen of cutting ferrule generates, or can be that start-up password verification generates the most afterwards, or permissible For generate after simulation card is inserted into cutting ferrule, or can be the menu of display to select binding function to generate on cutting ferrule screen, certainly, Can also generate for other any modes, the most not be restricted.

Cutting ferrule sends the first binding instruction to simulation card, and wherein, the first binding instruction includes: the first binding random factor, cutting ferrule that cutting ferrule generates Certificate and cutting ferrule uniquely identify；Specifically, cutting ferrule can connect (by contact interface) to simulation card transmission the first binding by contact Instruction, cutting ferrule can also send the first binding instruction by contactless connection (by non-contact interface or wave point) to simulation card, The former can improve binding safety, and the latter can improve binding convenience.The first binding random factor is carried in first binding instruction and is possible to prevent weight Put attack, cutting ferrule certificate is carried in the first binding instruction so that cutting ferrule is authenticated by simulation card, cutting ferrule is carried in the first binding instruction and uniquely identifies So that simulation card knows which cutting ferrule is bound with it；Wherein, first binding random factor can be cutting ferrule generation random number, random character or its Combination, certainly, after generating the first binding random factor, it is also possible to verify the randomness of the first binding random factor, tie up improving first Determine the randomness of random factor, prevent from being cracked；Cutting ferrule uniquely identify can be cutting ferrule serial number, EIC equipment identification code, MAC Address etc. arbitrary or A combination thereof is with unique mark identifying cutting ferrule.

Simulation card receives the first binding instruction, utilizes root certificate to verify cutting ferrule certificate；Specifically, simulation card prestores root certificate, This root certificate is utilized to complete the checking to cutting ferrule certificate, to ensure the safety of follow-up use cutting ferrule certificate.

After simulation card checking cutting ferrule certificate is legal, generate the second binding random factor；Specifically, the second binding random factor can be analog card sheet Random number, random character or a combination thereof generated；Certainly, generate second binding random factor after, it is also possible to second binding random factor with Machine is verified, to improve the randomness of the second binding random factor, prevents from being cracked.

Simulation card utilizes the cutting ferrule PKI in cutting ferrule certificate that the first binding random factor and the second binding random factor are encrypted acquisition first Binding ciphertext, utilizes simulation card private key that the first binding random factor and the second binding random factor are carried out signature and obtains the first binding signature；Tool Body ground, simulation card utilize cutting ferrule PKI be encrypted to ensure to the first binding random factor and the second binding random factor the first binding random because of Son and second binding random factor transmission safety, simulation card utilize simulation card private key to first binding random factor and second binding with The machine factor is signed, to ensure that the legitimacy of simulation card identity can be authenticated by follow-up cutting ferrule.

Simulation card sends the first binding response to cutting ferrule, and wherein, the first binding response includes: the first binding ciphertext, the first binding signature, simulation Card certificate and simulation card uniquely identify；Specifically, the first binding response that simulation card sends is carried simulation card certificate so that cutting ferrule pair Simulation card is authenticated, and carries simulation card and uniquely identify so that cutting ferrule knows which simulation card is bound with it in the first binding response；Wherein, It can be that analog card sheet serial number, EIC equipment identification code, MAC Address etc. are arbitrary or a combination thereof is with unique mark simulation card that simulation card uniquely identifies Mark.

Cutting ferrule receives the first binding response, utilizes root certificate to verify simulation card certificate；Specifically, cutting ferrule prestores root certificate, utilizes This root certificate completes the checking to simulation card certificate, to ensure the follow-up safety using simulation card certificate.

After cutting ferrule checking simulation card certificate is legal, utilize cutting ferrule private key that the first binding ciphertext is decrypted, it is thus achieved that the first binding decryption random factor With the second binding decryption random factor；Specifically, cutting ferrule private key is utilized to be decrypted, the first binding ciphertext if there occurs number in the data transmission According to error of transmission, or there occurs in the data transmission and distort, then will cause cannot successful decryption, or the first binding decryption random decrypted because of Son and the second binding decryption random factor are different from the first binding random factor and the second binding random factor.And added by cutting ferrule PKI Close, only cutting ferrule private key can be with successful decryption, thus it is also ensured that the safety of data deciphering.

Cutting ferrule utilizes the simulation card PKI in simulation card certificate, the first binding decryption random factor and the second binding decryption random factor pair first Binding signature is verified；Specifically, the signature that cutting ferrule utilizes the simulation card PKI after being verified to send simulation card is verified, with really Protect the legitimate origin of data.

After cutting ferrule checking the first binding signature is correct, checking the first binding decryption random factor is the most identical with the first binding random factor；Specifically, The first binding random factor and the first binding decryption random factor that cutting ferrule checking generates self are identical, it is ensured that data are also not tampered with, and encryption Data Source really for cutting ferrule send first binding random factor object.

After cutting ferrule checking the first binding decryption random factor is identical with the first binding random factor, prompting simulation card uniquely identifies；Specifically, cutting ferrule Can show that simulation card uniquely identifies, it is also possible to speech play (such as loudspeaker are play or by headset earpiece broadcasting etc.) simulation card is uniquely marked Know, in order to the verity of simulation card is confirmed by user, improve binding safety.

Cutting ferrule receives for confirming that simulating card uniquely identifies correct trigger command, utilizes cutting ferrule private key to tie up the first binding random factor and second Determine the decryption random factor to sign, it is thus achieved that the second binding signature, and storage simulation card uniquely identifies, simulates card certificate and cutting ferrule end the One binding factor is to cutting ferrule end the first list of bindings, and wherein, cutting ferrule end the first binding factor is the second binding decryption random factor；Specifically, cutting ferrule Receiving can be to be provided separately within the confirmation physical button generation that card puts for confirming that simulation card uniquely identifies correct trigger command, or Can be that confirming on the touch screen of cutting ferrule selects in virtual key generation, or the menu shown on cutting ferrule screen to confirm what function generated, or Can be that the voice that the voice acquisition device (such as Mike) of cutting ferrule receives generates when confirming instruction and be verified rear, or can be cutting ferrule Fingerprint acquisition device receive and generate after fingerprint identification indicates and is verified, or it is true to be that the iris collection device of cutting ferrule receives iris Generate after recognizing instruction and being verified, it is, of course, also possible to generate for other any modes, the most it is not restricted；Utilize cutting ferrule private First binding random factor and the second binding decryption random factor are signed so that the identity of cutting ferrule is authenticated by follow-up simulation card by key；When So, cutting ferrule can also store cutting ferrule end the first list of bindings, and this cutting ferrule end first list of bindings is relevant to the simulation card of cutting ferrule binding for record Information, such as: simulation card uniquely identifies, simulates card certificate etc., ties up it addition, cutting ferrule end the first list of bindings is additionally operable to store cutting ferrule end first Determining cause, this cutting ferrule end first binding factor is the second binding random factor of ciphertext transmission, is ciphertext transmission based on the second binding random factor, Therefore, this cutting ferrule end first binding factor is safety and is not tampered with.

Cutting ferrule sends the second binding signature to simulation card；Specifically, cutting ferrule sends the second binding signature to simulation card, in order to simulation card is to card Set identity is authenticated.

Simulation card receives the second binding signature, utilizes the cutting ferrule PKI in cutting ferrule certificate, the first binding random factor and the second binding random factor Second binding signature is verified；Specifically, the signature that simulation card utilizes the cutting ferrule PKI after being verified to send cutting ferrule is verified, with Guarantee the legitimate origin of data.

After simulation card checking the second binding signature is correct, storage cutting ferrule uniquely identifies, cutting ferrule certificate and analog card bit end binding factor be to analog card Bit end list of bindings, wherein, analog card bit end binding factor is the second binding random factor.Specifically, simulation card can also store simulation card End list of bindings, this analog card bit end list of bindings is for recording and simulate the relevant information of cutting ferrule of card binding, such as: cutting ferrule uniquely identifies, Cutting ferrule certificates etc., it addition, analog card bit end list of bindings is additionally operable to store analog card bit end binding factor, this analog card bit end binding factor is simulation The second binding random factor that card generates.

As can be seen here, bind based on above-mentioned cutting ferrule and simulation card, it is ensured that the safety of data interaction between follow-up cutting ferrule and simulation card.

It addition, the step that the operation of above-mentioned cutting ferrule and simulation card execution binding is not necessarily, according to the demand of different application scene, can select not Perform the operation of above-mentioned cutting ferrule and simulation card execution binding.

Certainly, above-mentioned cutting ferrule and simulation card perform the operation of binding, it is not limited to the implementation of above-mentioned offer, such as, can also use manually Binding, i.e. under trusted context, inputs the mark of simulation card to be bound as cutting ferrule end the first binding factor, simulation card acquiescence on card set The mark of simulation card is as analog card bit end binding factor；Or cutting ferrule is carried out contact is connected with simulation card, on card set input any with Machine value is as cutting ferrule end the first binding factor, and cutting ferrule is connected by contact to be bound the random value transmission of input as analog card bit end to simulation card Factor etc., as long as so that cutting ferrule and simulation card all obtain identical binding factor and all should belong to protection scope of the present invention.

2, cutting ferrule and Truth cards manager execution bindings:

In the present invention, cutting ferrule can be bound in the following way with Truth cards manager:

Cutting ferrule and Truth cards manager mutual authentication the other side's certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process The binding factor of middle generation.

Below, it is provided that a kind of cutting ferrule and the specific implementation of Truth cards manager execution bindings:

Fig. 3 shows that in the data interactive method that the embodiment of the present invention provides, cutting ferrule and Truth cards manager perform the flow chart of bindings, see Fig. 3, cutting ferrule and Truth cards manager execution bindings include:

Cutting ferrule reception carries out the trigger command bound for instruction and Truth cards manager；Specifically, before cutting ferrule uses, can be in advance to card Set performs power-on operation, and now, optionally, cutting ferrule prompting user inputs startup password, and receives the startup password that user inputs, and checking user is defeated The correctness of the startup password entered, after the startup password of checking user's input is correct, performs power-on operation, and card covers into mode of operation.Using Before cutting ferrule and Truth cards manager carry out data interaction, optionally, cutting ferrule is bound with Truth cards manager, to improve follow-up data Mutual safety.Wherein, the trigger command being used for indicating cutting ferrule and Truth cards manager to carry out binding that cutting ferrule receives can be to be provided separately within The binding physical button that card puts generates, or can be that the binding virtual key on the touch screen of cutting ferrule generates, or can be that startup password is tested Generate after card is correct, or can be the menu of display to select binding function to generate, it is, of course, also possible to be that other are any on cutting ferrule screen Mode generates, and is not the most restricted.

Cutting ferrule to Truth cards manager send second binding instruction, wherein, second binding instruction includes: cutting ferrule generate the 3rd binding random factor, Cutting ferrule certificate and cutting ferrule uniquely identify；Specifically, cutting ferrule can wirelessly (such as mobile network, WIFI etc.) to Truth cards pipe Reason device sends the second binding instruction.Second binding instruction is carried the 3rd binding random factor and is possible to prevent Replay Attack, the second binding instruction is carried Cutting ferrule certificate, so that cutting ferrule is authenticated by Truth cards manager, carries cutting ferrule in the second binding instruction and uniquely identifies so that Truth cards manager obtains Know which cutting ferrule is bound with it；Wherein, the 3rd binding random factor can be random number, random character or a combination thereof that cutting ferrule generates, certainly, Generate the 3rd binding random factor after, it is also possible to the 3rd binding random factor randomness verify, with improve the 3rd binding random factor with Machine, prevents from being cracked；It can be that cutting ferrule serial number, EIC equipment identification code, MAC Address etc. are arbitrary or a combination thereof is with unique mark that cutting ferrule uniquely identifies Know the mark of cutting ferrule.

Truth cards manager receives the second binding instruction, utilizes root certificate to verify cutting ferrule certificate；Specifically, Truth cards manager is in advance Storage root certificate, utilizes this root certificate to complete the checking to cutting ferrule certificate, to ensure the safety of follow-up use cutting ferrule certificate.

After Truth cards manager checking cutting ferrule certificate is legal, generate the 4th binding random factor；Specifically, the 4th binding random factor can be true Random number, random character or a combination thereof that real card management device generates；Certainly, after generating the 4th binding random factor, it is also possible to the 4th binding The randomness of random factor is verified, to improve the randomness of the 4th binding random factor, prevents from being cracked.

Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate that the 3rd binding random factor and the 4th binding random factor are encrypted and are obtained Obtain the second binding ciphertext, utilize Truth cards manager private key that the 3rd binding random factor and the 4th binding random factor are carried out signature acquisition the 3rd Binding signature；Specifically, Truth cards manager utilize cutting ferrule PKI to the 3rd binding random factor and the 4th binding random factor be encrypted with Ensureing the 3rd binding random factor and the safety of the 4th binding random factor transmission, Truth cards manager utilizes Truth cards manager private key pair 3rd binding random factor and the 4th binding random factor are signed, to ensure that follow-up cutting ferrule can be to the legitimacy of Truth cards manager identity It is authenticated.

Truth cards manager sends the second binding response to cutting ferrule, and wherein, the second binding response includes: second binding ciphertext, the 3rd binding signature, Truth cards manager certificate and Truth cards manager uniquely identify；Specifically, the second binding response that Truth cards manager sends is carried Truth cards manager certificate, so that Truth cards manager is authenticated by cutting ferrule, carries Truth cards manager and uniquely identifies in the second binding response So that cutting ferrule knows which Truth cards manager is bound with it；Wherein, Truth cards manager uniquely identifies can be Truth cards manager sequence Number, EIC equipment identification code, MAC Address etc. are arbitrary or a combination thereof is with unique mark identifying Truth cards manager.

Cutting ferrule receives the second binding response, utilizes root certificate to verify Truth cards manager certificate；Specifically, cutting ferrule prestores root certificate, This root certificate is utilized to complete the checking to Truth cards manager certificate, to ensure the safety of follow-up use Truth cards manager certificate.

After cutting ferrule checking Truth cards manager certificate is legal, utilize cutting ferrule private key that the second binding ciphertext is decrypted, it is thus achieved that the 3rd binding RANDOM SOLUTION The close factor and the 4th binding decryption random factor；Specifically, cutting ferrule private key is utilized to be decrypted, the second binding ciphertext if sent out in the data transmission Given birth to data transmission fault, or there occurs in the data transmission and distort, then will cause cannot successful decryption, or the 3rd binding decrypted is random Decryption factor and the 4th binding decryption random factor are different from the 3rd binding random factor and the 4th binding random factor.And entered by cutting ferrule PKI Row encryption, only cutting ferrule private key can be with successful decryption, thus it is also ensured that the safety of data deciphering.

Cutting ferrule utilizes the Truth cards manager PKI in Truth cards manager certificate, the 3rd binding decryption random factor and the 4th binding RANDOM SOLUTION Close factor pair the 3rd binding signature is verified；Specifically, cutting ferrule utilizes the Truth cards manager PKI after being verified to Truth cards manager The signature sent is verified, to guarantee the legitimate origin of data.

After cutting ferrule checking the 3rd binding signature is correct, checking the 3rd binding decryption random factor is the most identical with the 3rd binding random factor；Specifically, The 3rd binding random factor and the 3rd binding decryption random factor that cutting ferrule checking generates self are identical, it is ensured that data are also not tampered with, and encryption Data Source really for cutting ferrule send the 3rd binding random factor object.

After cutting ferrule checking the 3rd binding decryption random factor is identical with the 3rd binding random factor, prompting Truth cards manager uniquely identifies；Specifically, Cutting ferrule can show that Truth cards manager uniquely identifies, it is also possible to speech play (such as loudspeaker are play or by headset earpiece broadcasting etc.) is true Card management device uniquely identifies, in order to the verity of Truth cards manager is confirmed by user, improves binding safety.

Cutting ferrule receives for confirming that Truth cards manager uniquely identifies correct trigger command, utilize cutting ferrule private key to the 3rd binding random factor and The 4th binding decryption random factor is signed, it is thus achieved that the 4th binding signature, and storage Truth cards manager uniquely identifies, Truth cards management Device certificate and cutting ferrule end the second binding factor are to cutting ferrule end the second list of bindings, and wherein, cutting ferrule end the second binding factor is the 4th binding decryption random The factor；Specifically, what cutting ferrule received can be to be provided separately within what card put for confirming that Truth cards manager uniquely identifies correct trigger command Confirm what physical button generated, or can be confirming in virtual key generation, or the menu shown on cutting ferrule screen on the touch screen of cutting ferrule Select to confirm what function generated, or can be after the voice that the voice acquisition device (such as Mike) of cutting ferrule receives confirms to indicate and be verified Shi Shengcheng's, or can be that the fingerprint acquisition device of cutting ferrule receives and generates after fingerprint identification indicates and is verified, or can be cutting ferrule Iris collection device receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, in the present invention In be not restricted；Cutting ferrule private key is utilized to sign so that follow-up Truth cards to the 3rd binding random factor and the 4th binding decryption random factor The identity of cutting ferrule is authenticated by manager；Certainly, cutting ferrule can also store cutting ferrule end the second list of bindings, and this cutting ferrule end second list of bindings is used for The relevant information of Truth cards manager of record and cutting ferrule binding, such as: Truth cards manager uniquely identifies, Truth cards manager certificate etc., It addition, cutting ferrule end the second list of bindings is additionally operable to store cutting ferrule end the second binding factor, this cutting ferrule end second binding factor is that the 4th of ciphertext transmission is tied up Determining random factor, be ciphertext transmission based on the 4th binding random factor, therefore, this cutting ferrule end second binding factor is safety and is not tampered with.

Cutting ferrule sends the 4th binding signature to Truth cards manager；Specifically, cutting ferrule sends the 4th binding signature to Truth cards manager, in order to Cutting ferrule identity is authenticated by Truth cards manager.

Truth cards manager receive the 4th binding signature, utilize the cutting ferrule PKI in cutting ferrule certificate, the 3rd binding random factor and the 4th binding with Machine factor pair the 4th binding signature is verified；Specifically, Truth cards manager utilizes the signature that cutting ferrule is sent by the cutting ferrule PKI after being verified Verify, to guarantee the legitimate origin of data.

After Truth cards manager checking the 4th binding signature is correct, storage cutting ferrule uniquely identifies, cutting ferrule certificate and the binding of Truth cards manager end The factor is to true card management device end list of bindings, and wherein, Truth cards manager end binding factor is the 4th binding random factor.Specifically, very Real card management device can also store Truth cards manager end list of bindings, and this Truth cards manager end list of bindings is for record and Truth cards The relevant information of cutting ferrule of manager binding, such as: cutting ferrule uniquely identifies, cutting ferrule certificate etc., it addition, Truth cards manager end list of bindings is also For storing Truth cards manager end binding factor, this Truth cards manager end binding factor be Truth cards manager generate the 4th binding with The machine factor.

As can be seen here, bind based on above-mentioned cutting ferrule and Truth cards manager, it is ensured that data between follow-up cutting ferrule and Truth cards manager Mutual safety.

It addition, the step that the operation of above-mentioned cutting ferrule and the execution binding of Truth cards manager is not necessarily, according to the demand of different application scene, permissible Select the operation not performing above-mentioned cutting ferrule with the execution binding of Truth cards manager.

Certainly, above-mentioned cutting ferrule and Truth cards manager perform the operation of binding, it is not limited to the implementation of above-mentioned offer, such as, can also adopt With manually binding, i.e. under trusted context, on card overlaps, input the mark of Truth cards manager to be bound as cutting ferrule end the first binding factor, The mark of Truth cards manager acquiescence Truth cards manager is as Truth cards manager end binding factor；Or it is defeated on Truth cards manager Entering the mark of cutting ferrule to be bound as Truth cards manager end binding factor, the mark of cutting ferrule acquiescence cutting ferrule is as cutting ferrule end the second binding factor； Or on card set, input any random value as cutting ferrule end the second binding factor, Truth cards manager inputs identical random value as truly Card management device end binding factor etc., as long as so that cutting ferrule and Truth cards manager all obtain identical binding factor and all should belong to the present invention Protection domain.

Certainly, above-mentioned cutting ferrule and the operation simulating card execution binding, and the while that above-mentioned cutting ferrule performing, with Truth cards, operation the non-required bound Perform, according to the demand of different application scene, the bindings only performing cutting ferrule with simulation card can be selected, or only perform cutting ferrule and true card The bindings of sheet manager, or all not execution of above-mentioned bindings.

Two, secure connection is set up:

1, secure connection set up by cutting ferrule and simulation card, it is thus achieved that the cutting ferrule end first carrying out Security Data Transmission between cutting ferrule and simulation card passes safely Defeated key and analog card bit end safe transmission key:

In the present invention, cutting ferrule can set up secure connection in the following way with simulation card:

Mode one, cutting ferrule and simulation card mutual authentication the other side's identity (such as mutual authentication the other side signed data), and in mutual authentication the other side's identity During, the binding factor comparing both sides' storage is the most identical, and the binding factor in relatively both sides storage is identical and mutual authentication the other side's identity is passed through After, generate safe transmission key (cutting ferrule end the first safe transmission key and the analog card bit end carrying out Security Data Transmission between cutting ferrule and simulation card Safe transmission key).

What deserves to be explained is, if before cutting ferrule sets up secure connection with simulation card, perform above-mentioned cutting ferrule and simulation card mutual authentication the other side Certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process the bindings of the binding factor generated, then we In formula one, cutting ferrule and simulation card mutual authentication the other side's identity are cutting ferrule and simulation card mutual authentication the other side identity again.

Hereinafter, the one of presentation mode one of the present invention implements:

Fig. 4 shows that in the data interactive method that the embodiment of the present invention provides, the flow chart of safe connection mode one set up by cutting ferrule and simulation card, sees Fig. 4, cutting ferrule sets up secure connection include with simulation card:

Cutting ferrule sends the first secure connection instruction setting up secure connection for instruction to simulation card, and wherein, the first secure connection instruction includes: card Set utilizes the simulation card PKI in analog card sheet certificate to be encrypted the first connection random factor of cutting ferrule end the first binding factor and generation and obtains The the first connection ciphertext obtained, cutting ferrule utilizes cutting ferrule private key that cutting ferrule end the first binding factor and the first connection random factor are carried out the first of signature acquisition Connect signature；Specifically, before using cutting ferrule to carry out data interaction with simulation card, optionally, between cutting ferrule and simulation card, safety is set up Connect, the safety mutual to improve follow-up data.Wherein, what cutting ferrule received is used for indicating the first secure connection instruction setting up secure connection permissible The connection physical button put for being provided separately within card generates, or can be that the virtual key that connects on the touch screen of cutting ferrule generates, or permissible Generate the most afterwards for start-up password verification, or can be that simulation card is generated after cutting ferrule is extracted, or can be aobvious on cutting ferrule screen Selecting linkage function to generate in the menu shown, or can be to obtain cutting ferrule end Truth cards information list at cutting ferrule, user therefrom selects truly to block Generate after sheet.It is, of course, also possible to generate for other any modes, the most it is not restricted.Wherein, the first connection random factor can Think random number, random character or a combination thereof that cutting ferrule generates, certainly, after generating the first connection random factor, it is also possible to connect random to first The randomness of the factor is verified, to improve the randomness of the first connection random factor, prevents from being cracked；Specifically, cutting ferrule utilizes simulation card public Key connects random factor and is encrypted to ensure that cutting ferrule end the first binding factor and first connects at random cutting ferrule end the first binding factor and first The safety of factor transmission, cutting ferrule utilizes cutting ferrule private key that cutting ferrule end the first binding factor and first are connected random factor and signs, after ensureing The legitimacy of cutting ferrule identity can be authenticated by continuous simulation card.Cutting ferrule end the first binding factor is sent to simulating card, in order to follow-up analog card Binding factor that whether cutting ferrule end the first binding factor is stored by sheet with it is identical to be judged, thus judges whether this cutting ferrule is carried out with this simulation card Binding.Optionally, before this step, after cutting ferrule detects simulation card, cutting ferrule may determine that whether simulation card is bound at cutting ferrule end first In list, such as: can judge in the following way: be fastened in after simulation card being detected, the simulation card image that simulation card sends is received (such as simulation card uniquely identifies and/or simulates card certificate etc.), according to the simulation card image received, it is judged that whether this simulation card is at card In set end the first list of bindings；And/or can also by simulation card judge cutting ferrule whether in analog card bit end list of bindings, such as: can pass through as follows Mode judges: is fastened in after simulation card being detected, sends cutting ferrule information (such as cutting ferrule uniquely identify and/or cutting ferrule certificate etc.) to simulation Card, simulation card is according to the cutting ferrule information received, it is judged that whether this cutting ferrule is in analog card bit end list of bindings；Only judging that the other side is certainly After in the list of bindings of body, just perform follow-up flow process, optimize flow process, improve efficiency.

Simulation card receives the first secure connection instruction, utilizes simulation card private key to connect ciphertext to first and is decrypted, it is thus achieved that cutting ferrule end first is bound Decryption factor and first connects the decryption random factor；Specifically, utilize simulation card private key to connect ciphertext to first to be decrypted, if in data Transmission there occurs data transmission fault, or there occurs in the data transmission and distort, then will cause cannot successful decryption, or the cutting ferrule decrypted It is different from cutting ferrule end the first binding factor and the first connection random factor that end the first binding decryption factor and first connects the decryption random factor.And lead to Crossing simulation card PKI to be encrypted, only simulation card private key can be with successful decryption, thus it is also ensured that the safety of data deciphering.

Simulation card utilizes the cutting ferrule PKI in cutting ferrule certificate, cutting ferrule end first to bind decryption factor and the first connection decryption random factor pair first connects Connect signature to verify；Specifically, the signature that simulation card utilizes cutting ferrule PKI to send cutting ferrule is verified, to guarantee the legitimate origin of data.

After simulation card checking the first connection signature is correct, it is the most identical with analog card bit end binding factor that checking cutting ferrule end first binds decryption factor； Specifically, simulation card also verify the cutting ferrule end first decrypted bind decryption factor whether with the analog card bit end binding of simulation card self storage because of Son is the most identical, if identical, then illustrate that this is fastened in and simulates before card sets up secure connection, has been completed the operation of binding, based on this, Simulation card may determine that whether cutting ferrule is bound with simulation card.

Simulation card checking cutting ferrule end first bind decryption factor identical with analog card bit end binding factor after, generate second connect random factor；Specifically Ground, second connect random factor can be analog card sheet generate random number, random character or a combination thereof, certainly, generate second connect random because of After son, it is also possible to the second randomness connecting random factor is verified, to improve the randomness of the second connection random factor, prevents from being cracked.

Simulation card utilizes the cutting ferrule PKI in cutting ferrule certificate to connect the decryption random factor to first and the second connection random factor is encrypted acquisition Second connects ciphertext, utilizes simulation card private key to connect the decryption random factor to first and the second connection random factor carries out signature and obtains the second connection Signature；Specifically, simulation card utilizes cutting ferrule PKI to connect the decryption random factor and second to first to connect random factor and be encrypted to ensure the One connects the decryption random factor and second connects the safety of random factor transmission, and simulation card utilizes simulation card private key to connect RANDOM SOLUTION to first The close factor and second connects random factor and signs, to ensure that the legitimacy of simulation card identity can be authenticated by follow-up cutting ferrule.

Simulation card sends the first secure connection response to cutting ferrule, and wherein, the first secure connection response includes: second connects ciphertext and second connects Signature；Specifically, simulation card connects second ciphertext and second and connects signature transmission to cutting ferrule, in order to the data received are decrypted by cutting ferrule And checking.

Cutting ferrule receives the first secure connection response, utilizes cutting ferrule private key to connect ciphertext to second and is decrypted, it is thus achieved that the first connection RANDOM SOLUTION after deciphering The close factor and second connects the decryption random factor；Specifically, utilize cutting ferrule private key to connect ciphertext to second to be decrypted, if sent out in the data transmission Given birth to data transmission fault, or there occurs in the data transmission and distort, then will cause cannot the first connection after successful decryption, or deciphering random It is different from the first connection random factor and the second connection random factor that decryption factor connects the decryption random factor with second.And added by cutting ferrule PKI Close, only cutting ferrule private key can be with successful decryption, thus it is also ensured that the safety of data deciphering.

Cutting ferrule utilizes the simulation card PKI in simulation card certificate, the first connection decryption random factor and second after deciphering to connect the decryption random factor Connect signature to second to verify；Specifically, the signature that cutting ferrule utilizes simulation card PKI to send simulation card is verified, to guarantee data Legitimate origin.

After cutting ferrule checking the second connection signature is correct, it is the most identical that the first connection decryption random factor after checking deciphering is connected random factor with first； Specifically, the first connection random factor that cutting ferrule checking self generates is identical with the first connection decryption random factor after deciphering, it is ensured that data are also It is not tampered with, and the Data Source of encryption sends the object of the first connection random factor really for cutting ferrule.

Cutting ferrule checking deciphering after first connection the decryption random factor with first connect random factor identical after, at least with second connection decryption random because of Son generates cutting ferrule end the first safe transmission key between cutting ferrule and simulation card；Simulation card connects random factor at least with second and generates cutting ferrule and mould Intend the analog card bit end safe transmission key between card.Specifically, cutting ferrule can utilize the second connection decryption random factor to generate cutting ferrule and simulation card Between cutting ferrule end the first safe transmission key, it is also possible to utilize the first connection random factor, second connect the decryption random factor and generate cutting ferrule and analog card Cutting ferrule end the first safe transmission key between sheet, it is also possible to utilize the first connection random factor, the second connection decryption random factor and cutting ferrule end first Binding factor generates cutting ferrule end the first safe transmission key between cutting ferrule and simulation card；Same, simulation card can also utilize the second connection random The factor generate cutting ferrule and simulation card between analog card bit end safe transmission key, it is also possible to utilize the first connection decryption random factor, second connect with The machine factor generates the analog card bit end safe transmission key between cutting ferrule and simulation card, it is also possible to utilize the first connection decryption random factor, the second connection Random factor and analog card bit end binding factor generate the analog card bit end safe transmission key between cutting ferrule and simulation card；If cutting ferrule and analog card Sheet uses the algorithm that identical parameter is identical to generate safe transmission key.As can be seen here, in the present invention, safe transmission cryptographic key factor is at cutting ferrule End can be the second connection decryption random factor, or second connects the decryption random factor and the first connection random factor；Safe transmission cryptographic key factor Can be the second connection random factor in analog card bit end, or second connects random factor and the first connection decryption random factor.It addition, safety Transmission key can include encryption and decryption key and/or check key, uses encryption and decryption key can participate in data transmission and can ensure that the safety that data are transmitted Property, use check key to participate in data transmission and can ensure that the integrity that data are transmitted, in the present invention it is possible to according to the safety etc. of transmission data Level optionally uses safe transmission key.

Certainly, in the present invention, simulation card connects random factor at least with second and generates the analog card bit end safe transmission between cutting ferrule and simulation card The step of key is not limited to the step in the manner one, it is also possible to generate analog card bit end after simulation card generates the second connection random factor Safe transmission key, it is also possible to after cutting ferrule verifies that the first connection decryption random factor after deciphering is identical with the first connection random factor, receive cutting ferrule Analog card bit end safe transmission key is generated after the successful information sent.

As can be seen here, the secure connection set up with simulation card based on above-mentioned cutting ferrule, can improve the safety of data transmission, at the same time it can also be test Whether card both sides are bound, and further increase safety.

If before cutting ferrule sets up secure connection with simulation card, perform above-mentioned manual binding and store the operations such as binding factor, then in the manner one In, cutting ferrule and simulation card are in addition to mutual authentication the other side's identity, in addition it is also necessary to mutual authentication the other side's certificate.

Additionally, the invention is not limited in that the foundation of secure connection initiated by above-mentioned cutting ferrule, it is also possible to triggered simulation card by cutting ferrule and initiate secure connection Setting up, now, simulation card send the first secure connection and instruct to cutting ferrule, other flow processs are contrary with above-mentioned flow implementation main body can be realized, This repeats the most one by one.

Mode two, cutting ferrule and simulation card mutual authentication the other side's identity (such as mutual authentication the other side signed data), and in mutual authentication the other side's identity During generate safe transmission cryptographic key factor, after mutual authentication the other side's identity is passed through, at least with storage binding factor and safe transmission key because of Son generates safe transmission key (cutting ferrule end the first safe transmission key and the analog card bit end peace carrying out Security Data Transmission between cutting ferrule and simulation card Entirely transmit key), and verify that the safe transmission key that both sides generate is the most identical.

What deserves to be explained is, if before cutting ferrule sets up secure connection with simulation card, perform above-mentioned cutting ferrule and simulation card mutual authentication the other side Certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process the bindings of the binding factor generated, then we In formula two, cutting ferrule and simulation card mutual authentication the other side's identity are cutting ferrule and simulation card mutual authentication the other side identity again.

Hereinafter, the one of presentation mode two of the present invention implements:

Fig. 5 shows that in the data interactive method that the embodiment of the present invention provides, the flow chart of safe connection mode two set up by cutting ferrule and simulation card, sees Fig. 5, cutting ferrule sets up secure connection include with simulation card:

Cutting ferrule receives to simulate the 3rd connection random factor of the simulation card generation that card sends and simulate card and uniquely identifies；Specifically, the 3rd even Connecing random factor can be random number, random character or a combination thereof that analog card sheet generates, and certainly, after generating the 3rd connection random factor, also may be used Verify with the randomness to the 3rd connection random factor, to improve the randomness of the 3rd connection random factor, prevent from being cracked.This step it Before, simulation card generate the 3rd connection random factor, after cutting ferrule detects this simulation card, simulation card by the 3rd connect random factor and Simulation card uniquely identifies transmission to cutting ferrule.

Cutting ferrule sends the second secure connection instruction setting up secure connection for instruction to simulation card, and wherein, the second secure connection instruction includes: card The unique mark of set, cutting ferrule utilize the simulation card PKI in simulation card certificate to connect the 4th connection random factor of random factor and generation to the 3rd Be encrypted the 3rd connection ciphertext of acquisition, cutting ferrule utilizes cutting ferrule private key to connect random factor to the 3rd and the 4th connection random factor carries out signature and obtains The 3rd connection signature obtained；Specifically, before using cutting ferrule to carry out data interaction with simulation card, optionally, between cutting ferrule and simulation card Set up secure connection, the safety mutual to improve follow-up data.Wherein, the second secure connection setting up secure connection for instruction that cutting ferrule receives Instruction can be to be provided separately within the connection physical button generation that card puts, or can be that the virtual key that connects on the touch screen of cutting ferrule generates, Or can be that start-up password verification generates the most afterwards, or can be that simulation card is generated after cutting ferrule is extracted, or can be at cutting ferrule Selecting linkage function to generate on screen in the menu of display, or can be to obtain cutting ferrule end Truth cards information list at cutting ferrule, user therefrom selects Generate after selecting Truth cards.It is, of course, also possible to generate for other any modes, the most it is not restricted.Specifically, cutting ferrule utilizes Simulation card PKI connect the 3rd the 4th connection random factor of random factor and generation be encrypted to ensure the 3rd connection random factor and The safety of the 4th connection random factor transmission generated, cutting ferrule utilizes cutting ferrule private key random to the 4th connection of the 3rd connection random factor and generation The factor is signed, to ensure that the legitimacy of cutting ferrule identity can be authenticated by follow-up simulation card.It addition, the 4th connection random factor can be Random number, random character or a combination thereof that cutting ferrule generates, certainly, after generating the 4th connection random factor, it is also possible to connect random factor to the 4th Randomness verify, with improve the 4th connection random factor randomness, prevent from being cracked；Optionally, before this step, cutting ferrule receives To simulation after card uniquely identifies, cutting ferrule uniquely can identify according to simulation card judge simulation card whether in cutting ferrule end the first list of bindings, Only after judging that simulation card is in cutting ferrule end the first list of bindings, just perform follow-up flow process, optimize flow process, improve efficiency.

Simulation card receives the second secure connection instruction, it is judged that cutting ferrule uniquely identifies whether in analog card bit end list of bindings；Specifically, analog card Sheet uniquely identifies according to the cutting ferrule received, it is judged that whether this cutting ferrule is in analog card bit end list of bindings；Only it is fastened in analog card bit end in judgement After in list of bindings, just perform follow-up flow process, optimize flow process, improve efficiency.

If cutting ferrule uniquely identifies in analog card bit end list of bindings, simulation card utilizes simulation card private key to connect ciphertext to the 3rd and is decrypted, Obtain the 3rd connection decryption random factor and the 4th and connect the decryption random factor；Specifically, utilize simulation card private key to connect ciphertext to the 3rd to carry out Deciphering, if there occurs data transmission fault in the data transmission, or there occurs in the data transmission and distorts, then will cause cannot successful decryption, Or obtain the 3rd connection the decryption random factor and the 4th connect the decryption random factor be connected with the 3rd random factor and the 4th connection random because of Son is different.And be encrypted by simulation card PKI, only simulation card private key can be with successful decryption, thus it is also ensured that the peace of data deciphering Quan Xing.

Simulation card utilizes the cutting ferrule PKI in cutting ferrule certificate, the 3rd connection decryption random factor and the 4th to connect decryption random factor pair the 3rd connection Signature is verified；Specifically, the signature that simulation card utilizes cutting ferrule PKI to send cutting ferrule is verified, to guarantee the legitimate origin of data.

After simulation card checking the 3rd connection signature is correct, it is the most identical that checking the 3rd connection decryption random factor is connected random factor with the 3rd；Specifically Ground, it is identical that the 3rd connection random factor and the 3rd that simulation card checking generates self connects the decryption random factor, it is ensured that data are also not tampered with, And the Data Source of encryption sends the object of the 3rd connection random factor really for simulation card.

If it is identical that the 3rd connection decryption random factor connects random factor with the 3rd, simulation card utilizes simulation card private key to the 3rd connection RANDOM SOLUTION The close factor and the 4th connects the decryption random factor and carries out signature acquisition the 4th connection signature；Specifically, simulation card utilizes simulation card private key to the The three connection decryption random factors and the 4th connect the decryption random factor and sign, to ensure that follow-up cutting ferrule can be to the legitimacy of simulation card identity It is authenticated.

Simulation card sends the second secure connection response to cutting ferrule, and wherein, the second secure connection response includes: the 4th connects signature；Specifically, mould Intend card and connect signature transmission by the 4th to cutting ferrule, in order to the data received are verified by cutting ferrule.

Cutting ferrule receive second secure connection response, utilize simulation card certificate in simulation card PKI, the 3rd connect random factor and the 4th connect with Machine factor pair the 4th connects signature and verifies；Specifically, the signature that cutting ferrule utilizes simulation card PKI to send simulation card is verified, with really Protect the legitimate origin of data.

After cutting ferrule checking the 4th connection signature is correct, connects random factor at least with the 4th and cutting ferrule end the first binding factor generates cutting ferrule and simulation Cutting ferrule end the first safe transmission key between card；Simulation card connects the decryption random factor at least with the 4th and analog card bit end binding factor is raw Become the analog card bit end safe transmission key between cutting ferrule and simulation card；Specifically, cutting ferrule can utilize the 4th connection random factor and cutting ferrule end the One binding factor generates cutting ferrule end the first safe transmission key between cutting ferrule and simulation card, it is also possible to utilize the 3rd connection random factor, the 4th connection Random factor and cutting ferrule end the first binding factor generate cutting ferrule end the first safe transmission key between cutting ferrule and simulation card；Same, simulate card The analog card bit end that the 4th connection decryption random factor and analog card bit end binding factor can also be utilized to generate between cutting ferrule and simulation card passes safely Defeated key, it is also possible to utilize the 3rd connection random factor, the 4th connection decryption random factor and analog card bit end binding factor to generate cutting ferrule and simulation Analog card bit end safe transmission key between card；As long as the algorithm that the parameter that cutting ferrule is identical with simulation card employing is identical generates safe transmission key i.e. Can.As can be seen here, in the present invention, safe transmission cryptographic key factor cutting ferrule end can be the 4th connect random factor, or the 3rd connect random because of Son and the 4th connects random factor；Safe transmission cryptographic key factor can be the 4th connection decryption random factor in analog card bit end, or the 3rd connects Random factor and the 4th connects the decryption random factor.It addition, safe transmission key can include encryption and decryption key and/or check key, use and add solution Decryption key can participate in data transmission and can ensure that the safety that data are transmitted, and uses check key participation data transmission to can ensure that data are transmitted complete Whole property, in the present invention it is possible to optionally use safe transmission key according to the safety grades of transmission data.

Cutting ferrule utilizes cutting ferrule end the first safe transmission double secret key the 3rd to connect random factor and the 4th connection random factor carries out transmission after the first process To simulating card；Simulation card utilizes analog card bit end safe transmission double secret key the 3rd to connect the decryption random factor and the 4th connection decryption random factor Send to cutting ferrule after carrying out the first process；Specifically, both sides utilize the safe transmission data key of each self-generating to send to right after carrying out the first process Side, in order to the other side verifies that the safe transmission key that both sides generate is the most identical.

Cutting ferrule receives the data that simulation card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, compare Data after second process are connected random factor with the 3rd and the 4th connection random factor is the most identical；The data that simulation card receiving card set sends, And the data utilizing analog card bit end safe transmission double secret key to receive carry out the second process, compare the data after the second process and be connected RANDOM SOLUTION with the 3rd It is the most identical that the close factor and the 4th connects the decryption random factor.Specifically, both sides utilize the data that the safe transmission double secret key of each self-generating receives After carrying out the second process, each comparing the data after the second process the most identical with the data each sent, if identical, then explanation both sides generate Safe transmission key is identical, in order to ensure that the follow-up safe transmission key that can utilize each self-generating of both sides carries out Security Data Transmission.It addition, testing While safe transmission key that card both sides generate is identical, it is also possible to the binding factor of checking each storage is identical, and checking the other side is real further Bound object, improves the safety of subsequent data transmission further.

Certainly, in the present invention, simulation card generates the step of analog card bit end safe transmission key and is not limited to the step in the manner two, also may be used To generate analog card bit end safe transmission key after deciphering obtains the 4th connection decryption random factor, it is also possible to send at cutting ferrule checking simulation card After 4th connection signature is errorless, after receiving the successful information that cutting ferrule sends, generate analog card bit end safe transmission key；Cutting ferrule generates cutting ferrule end first pacifies The step of full transmission key is also not limited to the step in the manner two, it is also possible to generate cutting ferrule end first after cutting ferrule generates the 4th connection random factor Safe transmission key.

If before cutting ferrule sets up secure connection with simulation card, perform above-mentioned manual binding and store the operations such as binding factor, then in the manner two In, cutting ferrule and simulation card are in addition to mutual authentication the other side's identity, in addition it is also necessary to mutual authentication the other side's certificate.

Additionally, the invention is not limited in that the foundation of secure connection initiated by above-mentioned cutting ferrule, it is also possible to triggered simulation card by cutting ferrule and initiate secure connection Setting up, now, simulation card send the second secure connection and instruct to cutting ferrule, other flow processs are contrary with above-mentioned flow implementation main body can be realized, This repeats the most one by one.

Certainly, in aforesaid way one and mode two, generate the process of the safe transmission key carrying out Security Data Transmission between cutting ferrule and simulation card In, the binding factor of employing is the binding factor that cutting ferrule generates in binding procedure with simulation card and preserves, and this binding factor can be by above-mentioned Cutting ferrule and simulation card mutual authentication the other side's certificate and the other side's identity, and after both sides, all certification is passed through, be each stored in verification process tying up of generating Determining cause, or can be the mode manually the bound binding factor that inputs and store.

If it addition, be not carried out bindings between cutting ferrule and simulation card, then the binding factor used in aforesaid way one and mode two can be The random value being manually entered during setting up secure connection；Or during setting up secure connection, only generate safe transmission by random factor close Key, not verifies binding factor or does not use binding factor to generate safe transmission key.

2, secure connection set up by cutting ferrule and Truth cards manager, it is thus achieved that carry out the cutting ferrule of Security Data Transmission between cutting ferrule and Truth cards manager Hold the second safe transmission key and Truth cards manager end safe transmission key:

In the present invention, cutting ferrule and Truth cards manager can set up secure connection in the following way:

Mode one, cutting ferrule and Truth cards manager mutual authentication the other side's identity, and during mutual authentication the other side's identity, compare both sides' storage Binding factor the most identical, after binding factor is identical and mutual authentication the other side's identity passes through of relatively both sides storage, generate cutting ferrule and Truth cards (cutting ferrule end the second safe transmission key and Truth cards manager end safe transmission are close to carry out the safe transmission key of Security Data Transmission between manager Key).

What deserves to be explained is, if before cutting ferrule sets up secure connection with Truth cards manager, perform above-mentioned cutting ferrule and Truth cards manager Mutual authentication the other side's certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process the binding behaviour of the binding factor generated Make, then, in the manner one, cutting ferrule and Truth cards manager mutual authentication the other side's identity are cutting ferrule and Truth cards manager mutual authentication again The other side's identity.

The scheme that cutting ferrule and Truth cards manager use mode one to set up secure connection uses mode one to set up secure connection with cutting ferrule with simulation card Scheme differ only in:

One to be carried out main body different: in the scheme that cutting ferrule and Truth cards manager use mode one to set up secure connection, executive agent be cutting ferrule and Truth cards manager；Using mode one to set up in the scheme of secure connection at cutting ferrule and simulation card, executive agent is cutting ferrule and simulation card.Its In, it being fastened in this two schemes execution operation identical, it is identical that Truth cards manager performs operation with simulation card in this two schemes.

Two is the generating mode difference of secure connection instruction: use mode one to set up in the scheme of secure connection at cutting ferrule and Truth cards manager, the Three secure connection instructions can be to be provided separately within the connection physical button generation that card puts, or can be that the connection on the touch screen of cutting ferrule is virtual press Key generates, or can be that start-up password verification generates the most afterwards, or can be that cutting ferrule is raw when Truth cards manager sends logging request Become, or can be the menu of display to select linkage function to generate on cutting ferrule screen.

Hereinafter, the scheme only using mode one to set up secure connection cutting ferrule and Truth cards manager is briefly described as follows, is not described in detail in this.

Fig. 6 shows that in the data interactive method that the embodiment of the present invention provides, the flow process of safe connection mode one set up by cutting ferrule and Truth cards manager Figure, sees Fig. 6, and cutting ferrule is set up secure connection with Truth cards manager and included:

Cutting ferrule sends the 3rd secure connection instruction setting up secure connection for instruction, wherein, the 3rd secure connection instruction bag to Truth cards manager Include: cutting ferrule utilize Truth cards manager PKI in Truth cards manager certificate to the 5th connection of cutting ferrule end the second binding factor and generation with The machine factor is encrypted the 5th connection ciphertext of acquisition, and cutting ferrule utilizes cutting ferrule private key to enter cutting ferrule end the second binding factor and the 5th connection random factor The 5th connection signature that row signature obtains；

Truth cards manager receives the 3rd secure connection instruction, utilizes Truth cards manager private key to connect ciphertext to the 5th and is decrypted, it is thus achieved that card Set end second is bound decryption factor and the 5th and is connected the decryption random factor；

Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate, cutting ferrule end second to bind decryption factor and the 5th connection decryption random factor pair 5th connects signature verifies；

After Truth cards manager checking the 5th connection signature is correct, checking cutting ferrule end second bind decryption factor and the binding of Truth cards manager end because of Son is the most identical；

Truth cards manager checking cutting ferrule end second bind decryption factor identical with Truth cards manager end binding factor after, generate the 6th connect with The machine factor；

Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate to connect the decryption random factor to the 5th and the 6th connection random factor adds Close acquisition the 6th connects ciphertext, utilizes Truth cards manager private key to connect the decryption random factor to the 5th and the 6th connection random factor is signed Obtain the 6th connection signature；

Truth cards manager sends the 3rd secure connection response to cutting ferrule, and wherein, the 3rd secure connection response includes: the 6th connects ciphertext and the Six connect signature；

Cutting ferrule receives the 3rd secure connection response, utilizes cutting ferrule private key to connect ciphertext to the 6th and is decrypted, it is thus achieved that the 5th connection RANDOM SOLUTION after deciphering The close factor and the 6th connects the decryption random factor；

Cutting ferrule utilizes the 5th connection decryption random factor and the 6th connection after the Truth cards manager PKI in Truth cards manager certificate, deciphering Decryption random factor pair the 6th connects signature and verifies；

After cutting ferrule checking the 6th connection signature is correct, it is the most identical that the 5th connection decryption random factor after checking deciphering is connected random factor with the 5th；

Cutting ferrule checking deciphering after the 5th connection the decryption random factor with the 5th connect random factor identical after, at least with the 6th connection decryption random because of Son generates cutting ferrule end the second safe transmission key between cutting ferrule and Truth cards manager；Truth cards manager connects random factor at least with the 6th Generate the Truth cards manager end safe transmission key between cutting ferrule and Truth cards manager.

Certainly, in the present invention, Truth cards manager connects, at least with the 6th, the true card that random factor generates between cutting ferrule and Truth cards manager The step of sheet manager end safe transmission key is not limited to the step in the manner one, it is also possible to Truth cards manager generate the 6th connection with Truth cards manager end safe transmission key is generated, it is also possible to the 5th connection decryption random factor after cutting ferrule checking deciphering is with the after the machine factor After five connection random factors are identical, after receiving the successful information that cutting ferrule sends, generate Truth cards manager end safe transmission key.

As can be seen here, the secure connection set up with Truth cards manager based on above-mentioned cutting ferrule, can improve the safety of data transmission, meanwhile, also Can verify whether both sides are bound, further increase safety.

If before secure connection set up by cutting ferrule and Truth cards manager, perform above-mentioned manual binding and store the operations such as binding factor, then at this In mode one, cutting ferrule and Truth cards manager are in addition to mutual authentication the other side's identity, in addition it is also necessary to mutual authentication the other side's certificate.

Additionally, the invention is not limited in that the foundation of secure connection initiated by above-mentioned cutting ferrule, it is also possible to triggered Truth cards manager by cutting ferrule and initiate safety Establishment of connection, now, is sent the 3rd secure connection by Truth cards manager and instructs to cutting ferrule, and other flow processs are contrary with above-mentioned flow implementation main body Can realize, this is no longer going to repeat them.

Mode two, cutting ferrule and Truth cards manager mutual authentication the other side's identity, and during mutual authentication the other side's identity, generate safe transmission key The factor, after mutual authentication the other side's identity is passed through, binding factor and safe transmission cryptographic key factor at least with storage generate cutting ferrule and Truth cards pipe (cutting ferrule end the second safe transmission key and Truth cards manager end safe transmission are close to carry out the safe transmission key of Security Data Transmission between reason device Key), and verify that the safe transmission key that both sides generate is the most identical.

What deserves to be explained is, if before cutting ferrule sets up secure connection with Truth cards manager, perform above-mentioned cutting ferrule and Truth cards manager Mutual authentication the other side's certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in verification process the binding behaviour of the binding factor generated Make, then, in the manner two, cutting ferrule and Truth cards manager mutual authentication the other side's identity are cutting ferrule and Truth cards manager mutual authentication again The other side's identity.

The scheme that cutting ferrule and Truth cards manager use mode two to set up secure connection uses mode two to set up secure connection with cutting ferrule with simulation card Scheme differ only in:

One to be carried out main body different: in the scheme that cutting ferrule and Truth cards manager use mode two to set up secure connection, executive agent be cutting ferrule and Truth cards manager；Using mode two to set up in the scheme of secure connection at cutting ferrule and simulation card, executive agent is cutting ferrule and simulation card.Its In, it being fastened in this two schemes execution operation identical, it is identical that Truth cards manager performs operation with simulation card in this two schemes.

Two is the generating mode difference of secure connection instruction: use mode two to set up in the scheme of secure connection at cutting ferrule and Truth cards manager, the Four secure connection instructions can be to be provided separately within the connection physical button generation that card puts, or can be that the connection on the touch screen of cutting ferrule is virtual press Key generates, or can be that start-up password verification generates the most afterwards, or can be that cutting ferrule is raw when Truth cards manager sends logging request Become, or can be the menu of display to select linkage function to generate on cutting ferrule screen.

Hereinafter, the scheme only using mode two to set up secure connection cutting ferrule and Truth cards manager is briefly described as follows, is not described in detail in this.

Fig. 7 shows that in the data interactive method that the embodiment of the present invention provides, the flow process of safe connection mode two set up by cutting ferrule and Truth cards manager Figure, sees Fig. 7, and cutting ferrule is set up secure connection with Truth cards manager and included:

The 7th connection random factor and Truth cards manager that the Truth cards manager that cutting ferrule reception Truth cards manager sends generates uniquely are marked Know；

Cutting ferrule sends the 4th secure connection instruction setting up secure connection for instruction, wherein, the 4th secure connection instruction bag to Truth cards manager Include: cutting ferrule uniquely identifies, cutting ferrule utilizes the Truth cards manager PKI in Truth cards manager certificate to connect random factor and generation to the 7th The 8th connection random factor be encrypted the 7th connection ciphertext, cutting ferrule of acquisition and utilize cutting ferrule private key to connect random factor and the 8th connection to the 7th Random factor carries out the 7th connection signature that signature obtains；

Truth cards manager receives the 4th secure connection instruction, it is judged that cutting ferrule uniquely identifies whether in Truth cards manager end list of bindings；

If cutting ferrule uniquely identifies in Truth cards manager end list of bindings, Truth cards manager utilizes Truth cards manager private key to the 7th Connect ciphertext to be decrypted, it is thus achieved that the 7th connects the decryption random factor and the 8th connects the decryption random factor；

Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate, the 7th connects the decryption random factor and the 8th and connect decryption random factor pair the Seven connect signature verifies；

After Truth cards manager checking the 7th connection signature is correct, checking the 7th connection decryption random factor is connected random factor whether phase with the 7th With；

If the 7th to connect the decryption random factor identical with the 7th connection random factor, Truth cards manager utilizes Truth cards manager private key to the The seven connection decryption random factors and the 8th connection decryption random factor carry out signature acquisition the 8th connection and sign；

Truth cards manager sends the 4th secure connection response to cutting ferrule, and wherein, the 4th secure connection response includes: the 8th connects signature；

Cutting ferrule receives the 4th secure connection response, utilizes the Truth cards manager PKI in Truth cards manager certificate, the 7th connection random factor Connect random factor with the 8th the 8th connection signature is verified；

After cutting ferrule checking the 8th connection signature is correct, connects random factor at least with the 8th and cutting ferrule end the second binding factor generates cutting ferrule with true Cutting ferrule end the second safe transmission key between card management device；Truth cards manager connects the decryption random factor and Truth cards at least with the 8th Manager end binding factor generates the Truth cards manager end safe transmission key between cutting ferrule and Truth cards manager；

Cutting ferrule utilizes cutting ferrule end the second safe transmission double secret key the 7th to connect random factor and the 8th connection random factor carries out transmission after the first process To true card management device；Truth cards manager utilizes Truth cards manager end safe transmission double secret key the 7th to connect the decryption random factor and the The eight connection decryption random factors send to cutting ferrule after carrying out the first process；

Cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive are carried out at second Reason, compare the data after the second process be connected with the 7th random factor and the 8th connection random factor the most identical；Truth cards manager receiving card Overlap the data sent, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the second process, after comparing the second process Data are connected the decryption random factor with the 7th and the 8th connection decryption random factor is the most identical.

Certainly, in the present invention, Truth cards manager generates the step of Truth cards manager end safe transmission key and is not limited in the manner two Step, it is also possible to deciphering obtain the 8th connection the decryption random factor after generate Truth cards manager end safe transmission key, it is also possible at cutting ferrule Checking Truth cards manager send the 8th connection signature errorless after, receive cutting ferrule send successful information after generate Truth cards manager end safety Transmission key；Cutting ferrule generates the step of cutting ferrule end the second safe transmission key and is also not limited to the step in the manner two, it is also possible to generate the at cutting ferrule Eight connect generation cutting ferrule end the second safe transmission key after random factor.

If before secure connection set up by cutting ferrule and Truth cards manager, perform above-mentioned manual binding and store the operations such as binding factor, then at this In mode two, cutting ferrule and Truth cards manager are in addition to mutual authentication the other side's identity, in addition it is also necessary to mutual authentication the other side's certificate.

Additionally, the invention is not limited in that the foundation of secure connection initiated by above-mentioned cutting ferrule, it is also possible to triggered Truth cards manager by cutting ferrule and initiate safety Establishment of connection, now, is sent the 4th secure connection by Truth cards manager and instructs to cutting ferrule, and other flow processs are contrary with above-mentioned flow implementation main body Can realize, this is no longer going to repeat them.

Certainly, in aforesaid way one and mode two, between generation cutting ferrule and Truth cards manager, carry out the safe transmission key of Security Data Transmission During, the binding factor of employing is the binding factor that cutting ferrule generates in binding procedure with Truth cards manager and preserves, and this binding factor is permissible For by above-mentioned cutting ferrule and Truth cards manager mutual authentication the other side's certificate and the other side's identity, and after all certification is passed through both sides, each it is stored in and recognizes The binding factor generated during card, or can be the mode manually the bound binding factor that inputs and store.

If it addition, be not carried out bindings between cutting ferrule and Truth cards manager, then the binding factor used in aforesaid way one and mode two It can be the random value being manually entered during setting up secure connection；Or during setting up secure connection, only generate safety by random factor Transmission key, not verifies binding factor or does not use binding factor to generate safe transmission key.

It addition, set up secure connection at cutting ferrule of the present invention and Truth cards manager, it is thus achieved that carry out data safety between cutting ferrule and Truth cards manager Before cutting ferrule end the second safe transmission key of transmission and Truth cards manager end safe transmission key, cutting ferrule sends to Truth cards manager and logs in Request；Specifically, logging request can be to be provided separately within the login physical button generation that card puts, or can be stepping on the touch screen of cutting ferrule Record virtual key generates, or can be that start-up password verification generates the most afterwards, or can be to select in the menu of display on cutting ferrule screen Login feature generates；Logging request can include that cutting ferrule uniquely identifies, in order to which cutting ferrule request Truth cards manager knows logs in.

Sending logging request at cutting ferrule to Truth cards manager, secure connection set up by cutting ferrule and Truth cards manager, it is thus achieved that cutting ferrule and Truth cards After carrying out cutting ferrule end the second safe transmission key and the Truth cards manager end safe transmission key of Security Data Transmission between manager:

Cutting ferrule sends to true card management device after carrying out the first process by the login password that cutting ferrule end the second safe transmission double secret key receives；Specifically Ground, cutting ferrule can also point out user to input login password, after user have input login password, utilizes cutting ferrule end the second safe transmission double secret key to log in Password sends after carrying out the first process to true card management device, can improve the safety of login password transmission.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second The correctness of the data after the second process is verified after process；Specifically, Truth cards manager utilizes Truth cards manager end safe transmission double secret key After the data that cutting ferrule sends carry out the second process, it is thus achieved that the login password of user's input, the legal login password stored with it compares, and only exists When the legal login password that stores with it of login password of user's input is identical, just allow cutting ferrule login Truth cards manager, raising login security, Ensure the safety of subsequent data transmission.If Truth cards manager possesses warning function in the present invention, then can be in advance at Truth cards manager In legal login password and legal alarm cipher are set, now, Truth cards manager utilizes Truth cards manager end safe transmission double secret key to receive To data carry out the second process after, it is thus achieved that password to be verified；Truth cards manager judges whether password to be verified is alarm cipher；If it is to be tested Card password is alarm cipher, then Truth cards manager determines that password authentification to be verified is passed through, and performs operation of reporting to the police；If password to be verified is not Alarm cipher and be login password, then Truth cards manager determines that password authentification to be verified is passed through.Owing to being provided with alarm cipher, when user inputs Login password when being alarm cipher, Truth cards manager can identify current login and there is security risk, and the operation that performs to report to the police is (the trueest Real card management device sends alarming short message, dials the police emergency number to law enforcement agency etc.).

After Truth cards manager data after checking the second process are passed through, cutting ferrule logs in Truth cards manager.

As can be seen here, before the secure connection set up between cutting ferrule and Truth cards manager, logging request initiated in advance by cutting ferrule, and sends at cutting ferrule Trigger the foundation of secure connection while logging request, and after secure connection is set up, login password is verified, flow process can be saved, improve Processing speed.

Three, Truth cards information list generates and updates:

1, Truth cards manager end Truth cards information list generates and updates:

Truth cards manager carries out the generation of Truth cards manager end Truth cards information list, certainly, the present invention not office in the following way It is limited to this:

The Truth cards that Truth cards manager pair is connected with Truth cards manager detects；Specifically, Truth cards manager is arranged on which Contact interface and/or non-contact interface detect, to determine whether that Truth cards is attached with Truth cards manager, can be successively Detected whether connected Truth cards, it is also possible to detected whether connected Truth cards simultaneously.Optionally, Truth cards manager Could be arranged to preserve the Truth cards information of all or part of Truth cards in connected Truth cards, in order to user is according to Truth cards Security requirement make different setting, the Truth cards letter not allowing to obtain some Truth cards such as can be set on Truth cards manager Breath, thus ensure the safety of these Truth cards.

Truth cards manager after the Truth cards being connected with Truth cards manager being detected, obtain Truth cards Truth cards information, wherein, Truth cards information at least includes: card number；Specifically, Truth cards manager, when having detected that Truth cards is attached with it, reads and it The Truth cards information of storage in the Truth cards connected, and finally obtain the Truth cards letter of the Truth cards being all connected with Truth cards manager Breath.Additionally, Truth cards information is except comprising card extra, it is also possible to the information such as issuer mark comprising card authentication information, Truth cards.

After Truth cards manager obtains the Truth cards information of Truth cards, generate Truth cards manager end Truth cards information list.Specifically, After Truth cards manager obtains the Truth cards information of connected Truth cards, generate Truth cards manager end Truth cards information row Table, in order to follow-up cutting ferrule can obtain this Truth cards manager end Truth cards information list, facilitates follow-up use.Optionally, Truth cards pipe What reason device can get is, and user setup is the Truth cards information of Truth cards allowing to be acquired.

Additionally, Truth cards manager is in addition to generating Truth cards manager end Truth cards information list, also generate Truth cards manager end mark Know list, the mark in this Truth cards manager end identification list and the Truth cards information in Truth cards manager end Truth cards information list One_to_one corresponding.Specifically, the mark in this Truth cards manager identification list can uniquely identify corresponding Truth cards, and this mark can be: (such as 1 represents and has Truth cards, and 0 represents without truly for the mark that shows whether to have Truth cards to connect at contact interface and/or non-contact interface Card), or this mark can be the issuer coding (when such as Truth cards is bank card, this is encoded to bank's coding) of Truth cards, true The tail number of the card number of card, Truth cards the information such as the check value (such as CRC check value etc.) of card number in one or its combination in any.Very Real card management device generates this Truth cards manager end identification list, and follow-up cutting ferrule can be facilitated to carry out the renewal of Truth cards information list.

Certainly, Truth cards manager can detect and generate Truth cards manager end true after each Truth cards manager is started shooting the most again Card image list；Or can also be triggered true card by the function button (physical button or virtual key) that Truth cards manager provides After sheet detection, regenerate Truth cards manager end Truth cards information list；Or can also detect very at Truth cards manager every time When real card carries out plugging or carrying out admission appearance, Truth cards information list performs to increase and/or delete the operation of Truth cards information.

Optionally, Truth cards manager could be arranged to preserve the Truth cards letter of all or part of Truth cards in connected Truth cards Breath, in order to user according to the security requirement of Truth cards is made different setting, such as, can arrange on Truth cards manager and not allow to obtain The Truth cards information of some Truth cards, thus ensure the safety of these Truth cards.

Specifically, contact interface and/or non-contact interface can be carried out subregion by Truth cards manager, according to the difference using safety coefficient It is divided into conventional cards region and important card panel region.Such as: Truth cards less for the amounts of money involved such as the card with small amount of money of user, vice card, mass transit card is put Put in conventional cards region, and Truth cards bigger for the amounts of money involved such as the wholesale card of user, credit card main card is placed on important card panel region.

After Truth cards manager carries out subregion to contact interface and/or non-contact interface, can be to allowing to obtain the Truth cards of Truth cards The conventional cards region of information is read out, to obtain the Truth cards information of the Truth cards being attached in conventional cards region；And cannot be to not The important card panel region obtaining the Truth cards information of Truth cards is allowed to be read out, it is impossible to obtain the true card being attached in important card panel region The Truth cards information of sheet.Thus, the Truth cards manager end Truth cards information list that Truth cards manager generates can only be included in common The Truth cards information of the Truth cards that card panel region connects, cutting ferrule can obtain the Truth cards letter of the Truth cards connected in conventional cards region Breath, it is impossible to obtain the Truth cards information of Truth cards connected in important card panel region, such as: the Truth cards in conventional cards region for Cutting ferrule is visible, and cutting ferrule can directly be attached using；Truth cards in important card panel region is invisible for cutting ferrule, and cutting ferrule cannot Directly it is attached using, as the Truth cards in important card region need to be attached use, then needs a pair to be in the following way somebody's turn to do Card in important card panel region is configured, in order to cutting ferrule can be attached making with all or part of Truth cards in this important card panel region With:

Mode one, user are after input login password, and cutting ferrule only has the authority that the whole Truth cards in conventional cards region are attached use, Not there is the authority that the Truth cards in important card region is attached use, as being attached making to the Truth cards in important card region With, then physical button can be set on Truth cards manager or virtual key is set on Truth cards manager or at Truth cards Function menu is set on manager, in order to user can arrange cutting ferrule on Truth cards manager and carry out the Truth cards in important card region even Connect the authority of use.Such as: user can press the option in physical button, virtual key or function menu manually, starts card Set is attached the authority used to all or part of Truth cards in this important card panel region, so that cutting ferrule can be with this important card section In territory, the Truth cards of open authority is attached using.

Mode two, user are after input login password, and cutting ferrule only has the authority that the whole Truth cards in conventional cards region are attached use, Not there is the authority that the Truth cards in important card region is attached use, as being attached making to the Truth cards in important card region With, then client can be set on Truth cards manager, or arrange be connected with Truth cards manager control terminal (such as: PC, Smart mobile phone, panel computer etc.), and client is set in control terminal, user carries out priority assignation by logging in client, with open or pass Close the authority that all or part of Truth cards in important card region is attached using by cutting ferrule, in order to make the cutting ferrule can be with this important card In region, the Truth cards of open authority is attached using.

Mode three, user are after input login password, and cutting ferrule only has the authority that the whole Truth cards in conventional cards region are attached use, Not there is the authority that the Truth cards in important card region is attached use, as being attached making to the Truth cards in important card region With, then web-privilege password Web can be set on Truth cards manager, Truth cards manager can be initiated priority assignation by cutting ferrule by user asks, Truth cards manager is only receiving priority assignation request and is receiving the web-privilege password Web of user's input, and close in the authority of checking user's input After code is correct, just with open or close cutting ferrule, all or part of Truth cards in important card region can be attached the authority of use, in order to Make cutting ferrule can be attached using by the Truth cards of open authority with in this important card panel region.Wherein, web-privilege password Web and login password and report Alert password is different.Certainly, if the web-privilege password Web of Truth cards manager checking user's input is incorrect, the most do not perform in important card region All or part of Truth cards is attached the setting of the authority used.

2, cutting ferrule end Truth cards information list updates:

In the present invention, the cutting ferrule end Truth cards information list that cutting ferrule obtains is that the Truth cards manager end obtained from Truth cards manager is true Card image list.

Cutting ferrule end Truth cards information list updates and can include following manner:

After mode one, cutting ferrule log in Truth cards manager, Truth cards manager judges whether to need to carry out cutting ferrule end Truth cards information list Update and operate:

A kind of implementation of mode one presented below:

Cutting ferrule end identification list searched by cutting ferrule；Specifically, cutting ferrule end identification list is the Truth cards management that cutting ferrule obtains from Truth cards manager Device end identification list.

If cutting ferrule finds cutting ferrule end identification list, then after utilizing cutting ferrule end the second safe transmission double secret key cutting ferrule end identification list to carry out the first process Sending to true card management device, Truth cards manager receives the data that cutting ferrule sends, utilizes Truth cards manager end safe transmission key to dock After the data received carry out the second process, it is judged that the Truth cards manager end identification list that the data after the second process store with Truth cards manager It is the most identical, if it is not the same, then Truth cards manager utilizes Truth cards manager end safe transmission double secret key to update instruction and more new data enters Row first sends to cutting ferrule after processing, and cutting ferrule receives the data that Truth cards manager sends, and utilizes cutting ferrule end the second safe transmission double secret key to receive To data carry out the second process after, update cutting ferrule end Truth cards information list；Specifically, update cutting ferrule end Truth cards information list can lead to Cross following manner to carry out: the renewal instruction that Truth cards manager sends includes increasing and/or deleting instruction, and more new data packets includes needs to be increased or delete The Truth cards information removed, is fastened in after receiving renewal instruction and more new data, believes cutting ferrule end Truth cards according to updating instruction and more new data Breath list performs to increase and/or deletion action；Or the renewal instruction that Truth cards manager sends includes increasing and/or deleting instruction, more new data Including the mark that the Truth cards information needing increase Truth cards information or needs to delete is corresponding, it is fastened in and receives renewal instruction and more new data After, perform to increase and/or deletion action to cutting ferrule end Truth cards information list according to updating instruction and more new data；Or, Truth cards manager The renewal instruction sent includes replacement instruction, and more new data packets includes up-to-date Truth cards manager end Truth cards information list, is fastened in and receives After updating instruction and more new data, according to updating instruction and more new data, cutting ferrule end Truth cards information list is performed replacement operation.

If cutting ferrule does not finds cutting ferrule end identification list, then utilize cutting ferrule end the second safe transmission double secret key to preset after mark carries out the first process and send To true card management device, Truth cards manager receives the data that cutting ferrule sends, utilizes Truth cards manager end safe transmission double secret key to receive Data carry out the second process after, Truth cards manager determine the second process after data for indicating cutting ferrule end not store cutting ferrule end identification list Time, utilizing Truth cards manager end safe transmission double secret key to update after instruction carries out the first process with more new data and send to cutting ferrule, cutting ferrule receives The data that Truth cards manager sends, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, update cutting ferrule end Truth cards information list.Specifically, update cutting ferrule end Truth cards information list can carry out in the following way: Truth cards manager sends Renewal instruction include storage instruction, more new data packets includes up-to-date Truth cards manager end Truth cards information list, is fastened in and receives renewal After instruction and more new data, according to updating instruction and more new data, cutting ferrule end Truth cards information list is performed storage operation.

Above-mentioned implementation based on mode one, cutting ferrule carries out judging whether unanimously to true card management device by being sent by cutting ferrule end identification list, Owing to cutting ferrule end identification list data volume is much smaller than cutting ferrule end Truth cards information list, it therefore reduces the data volume of data transmission, improve number According to transfer rate, also improve the judgement speed of Truth cards manager.If cutting ferrule is to use for the first time, then cutting ferrule itself does not store cutting ferrule end Identification list, now, sends and presets mark to true card management device, in order to Truth cards manager issues Truth cards manager end identification list And Truth cards manager end Truth cards information list is to cutting ferrule, this default mark can be empty mark, predefined numerical value or predefined word Symbol etc..

Certainly, the invention is not limited in the above-mentioned implementation of mode one, it is also possible to do not store identification list at cutting ferrule and Truth cards manager Time, realize one of in the following way the renewal of cutting ferrule end Truth cards information list:

Cutting ferrule end Truth cards information list is directly transmitted to Truth cards manager, in order to after Truth cards manager is compared, judgement is by cutting ferrule No renewal；Or

The numbering of table of cutting ferrule end Truth cards information list is sent to Truth cards manager, in order to Truth cards manager comparison list is compiled by cutting ferrule Number the most identical judging whether updates；Or

Received the renewal instruction of user's input by Truth cards manager after, Truth cards manager is by Truth cards manager end Truth cards information List sends to cutting ferrule.

Certainly, after Truth cards manager judges that needs are updated, it is also possible to sending renewal inquiry and ask to cutting ferrule, this renewal pointed out by cutting ferrule Inquiry request is to user, in order to user is confirmed whether to be updated.

After mode two, cutting ferrule log in Truth cards manager, cutting ferrule judges whether that needing to carry out the renewal of cutting ferrule end Truth cards information list operates:

After Truth cards manager utilizes true cutting ferrule manager end safe transmission double secret key Truth cards manager end identification list to carry out the first process Send to cutting ferrule；

Cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process After, it is judged that the data after the second process are the most identical with the cutting ferrule end identification list that cutting ferrule stores；Specifically, if cutting ferrule uses for the first time or never Truth cards manager end identification list is downloaded in success, and storage cutting ferrule end identification list, is not the most directly judged to difference.

If it is not the same, then cutting ferrule sends more newly requested to Truth cards manager；

Truth cards manager receives more newly requested, utilizes Truth cards manager end safe transmission double secret key to update instruction and more new data carries out first Send to cutting ferrule after process；

Cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process After, update cutting ferrule end Truth cards information list.Specifically, update cutting ferrule end Truth cards information list can carry out in the following way: true The renewal instruction that card management device sends includes increasing and/or deleting instruction, and more new data packets includes the Truth cards information needing to increase or delete, card It is enclosed within after receiving renewal instruction and more new data, performs to increase and/or delete to cutting ferrule end Truth cards information list according to updating instruction and more new data Division operation；Or the renewal instruction that Truth cards manager sends includes increasing and/or deleting instruction, more new data packets includes to be needed to increase Truth cards letter Breath or need mark corresponding to Truth cards information deleted, is fastened in after receiving renewal instruction and more new data, according to updating instruction and updating Cutting ferrule end Truth cards information list is performed to increase and/or deletion action by data；Or, the renewal instruction that Truth cards manager sends includes replacing Instruction, more new data packets includes up-to-date Truth cards manager end Truth cards information list, is fastened in after receiving renewal instruction and more new data, According to updating instruction and more new data, cutting ferrule end Truth cards information list is performed replacement operation.

Above-mentioned implementation based on mode two, Truth cards manager is by judging the transmission of Truth cards manager end identification list to cutting ferrule The most consistent, owing to Truth cards manager end identification list data volume is much smaller than Truth cards manager end Truth cards information list, therefore, subtract The data volume of little data transmission, improves message transmission rate, also improves the judgement speed of cutting ferrule.If cutting ferrule is to use for the first time, then block Set itself does not store cutting ferrule end identification list, now, receives after Truth cards manager issues Truth cards manager end identification list, directly Send more newly requested so that Truth cards manager sends Truth cards manager end Truth cards information list to cutting ferrule.

Certainly, the invention is not limited in the above-mentioned implementation of mode two, it is also possible to do not store identification list at cutting ferrule and Truth cards manager Time, realize one of in the following way the renewal of cutting ferrule end Truth cards information list:

Directly Truth cards manager end Truth cards information list is sent to cutting ferrule, in order to cutting ferrule directly stores by Truth cards manager；Or

The numbering of table of Truth cards manager end Truth cards information list is sent to cutting ferrule, in order to cutting ferrule comparison list is compiled by Truth cards manager Number the most identical judging whether updates；Or

Received the renewal instruction of user's input by cutting ferrule after, cutting ferrule sends and updates request to Truth cards manager, in order to Truth cards manager is straight Connect and issue the transmission of Truth cards manager end Truth cards information list to cutting ferrule.

Certainly, after cutting ferrule judges that needs are updated, it is also possible to prompting user is confirmed whether to be updated, and after user confirms to be updated, Perform follow-up renewal to operate.

The cutting ferrule of the present invention, in addition to possessing normal mode of operation, also has heart beating park mode, and wherein, heart beating park mode is the non-of low-power consumption Mode of operation, i.e. closes some unnecessary power consumption programs etc..Specifically, cutting ferrule can enter heart beating dormancy mould after not operating in Preset Time Formula, it is also possible to controlled to enter heart beating park mode by the operation of user.

It is fastened under heart beating park mode, it is also possible to judge whether the secure connection keeping setting up between cutting ferrule and Truth cards manager, in order at card Set is by when recovering to mode of operation under phychology park mode, it is not necessary to again set up secure connection with Truth cards manager, improves convenience.

A kind of being fastened under heart beating park mode presented below judges whether to keep the tool of the secure connection of foundation between cutting ferrule and Truth cards manager Body implementation:

It is fastened under heart beating park mode, sends detection information every the first Preset Time to Truth cards manager；

Truth cards manager receives detection information, sends response message to cutting ferrule；

If not receiving response message in being fastened in the second Preset Time, then disconnect the secure connection between cutting ferrule and Truth cards manager；

If receiving response message in being fastened in the second Preset Time, then keep the secure connection that cutting ferrule is set up with Truth cards manager.

Do not receive response message in being fastened in the second Preset Time, may be the unstable networks between cutting ferrule and Truth cards manager, or truly Card management device operation irregularity, the secure connection now disconnected between cutting ferrule and Truth cards manager ensure that safety；It is fastened in second when presetting In receive response message, then cutting ferrule keep and Truth cards manager between secure connection, when cutting ferrule recovery mode of operation, it is not necessary to again build Vertical secure connection, convenient use.

Certainly, under heart beating park mode, user can also select manually to disconnect the secure connection between cutting ferrule and Truth cards manager, such as, make Cutting ferrule such as is logged off from Truth cards manager at the operation, or user performs power-off operation to cutting ferrule.

Above-mentioned first Preset Time can be identical from the second Preset Time or different.

Under heart beating park mode provided below, the mode that cutting ferrule end Truth cards information list updates:

After mode three, cutting ferrule log in Truth cards manager, cutting ferrule is under heart beating park mode, and it is true that cutting ferrule judges whether to need to carry out cutting ferrule end Card image list update operates:

Under heart beating park mode, also comprise renewal information if received in being fastened in the second Preset Time in response message, and response message, Then cutting ferrule storage updates information；Wherein, updating information is that Truth cards manager informs that cutting ferrule Truth cards manager has Truth cards pipe The information that reason device end Truth cards information list updates.

After cutting ferrule is entered mode of operation by heart beating park mode, cutting ferrule sends to Truth cards manager and updates the request of triggering；Specifically, cutting ferrule can With in the following way by heart beating park mode enter mode of operation: cutting ferrule receive renewal information after automatically into mode of operation, or card socket After receiving the operational order (such as user carries out the operational order etc. of key-press input) of user's input, enter mode of operation.

Truth cards manager receives and updates the request of triggering, utilizes Truth cards manager end safe transmission double secret key Truth cards manager end identity column Table sends to cutting ferrule after carrying out the first process；

Above-mentioned implementation based on mode three, Truth cards manager is by judging the transmission of Truth cards manager end identification list to cutting ferrule The most consistent, owing to Truth cards manager end identification list data volume is much smaller than Truth cards manager end Truth cards information list, therefore, subtract The data volume of little data transmission, improves message transmission rate, also improves the judgement speed of cutting ferrule.If cutting ferrule is to use for the first time, then block Set itself does not store cutting ferrule end identification list, now, receives after Truth cards manager issues Truth cards manager end identification list, directly Send more newly requested so that Truth cards manager sends Truth cards manager end Truth cards information list to cutting ferrule.

Certainly, the invention is not limited in the above-mentioned implementation of mode three, it is also possible to do not store identification list at cutting ferrule and Truth cards manager Time, realize one of in the following way the renewal of cutting ferrule end Truth cards information list:

After mode four, cutting ferrule log in Truth cards manager, cutting ferrule is under heart beating park mode, and Truth cards manager judges whether that needs are carried out Cutting ferrule end Truth cards information list updates and operates:

Being fastened under heart beating park mode, if received in being fastened in the second Preset Time, response message, and response message also comprising renewal prompting letter Breath, then cutting ferrule storage updates information；Wherein, updating information is that Truth cards manager informs that cutting ferrule Truth cards manager has true card The information that sheet manager end Truth cards information list updates.

Entering after mode of operation by heart beating park mode at cutting ferrule, cutting ferrule utilizes cutting ferrule end the second safe transmission double secret key cutting ferrule end identification list to carry out the Send to true card management device after one process；Specifically, cutting ferrule can be entered mode of operation by heart beating park mode in the following way: cutting ferrule is received To updating after information automatically into mode of operation, or cutting ferrule receives the operational order of user's input, and (such as user carries out the operation of key-press input Instruction etc.) after, enter mode of operation.If cutting ferrule is for using for the first time or from being not successfully downloaded Truth cards manager end identification list, then blocking Not storing cutting ferrule end identification list in set, now, cutting ferrule utilizes cutting ferrule end the second safe transmission double secret key to preset after mark carries out the first process and sends To true card management device.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second After process, it is judged that the data after the second process are the most identical with the Truth cards manager end identification list that Truth cards manager stores；Specifically, Truth cards manager receives presets mark, is also judged as differing.

If it is not the same, then Truth cards manager utilizes Truth cards manager end safe transmission double secret key to update instruction and more new data carries out first Send to cutting ferrule after process；

Above-mentioned implementation based on mode four, cutting ferrule carries out judging whether unanimously to true card management device by being sent by cutting ferrule end identification list, Owing to cutting ferrule end identification list data volume is much smaller than cutting ferrule end Truth cards information list, it therefore reduces the data volume of data transmission, improve number According to transfer rate, also improve the judgement speed of Truth cards manager.If cutting ferrule is to use for the first time, then cutting ferrule itself does not store cutting ferrule end Identification list, now, sends and presets mark to true card management device, in order to Truth cards manager issues Truth cards manager end identification list And Truth cards manager end Truth cards information list is to cutting ferrule, this default mark can be empty mark, predefined numerical value or predefined word Symbol etc..

Certainly, the invention is not limited in the above-mentioned implementation of mode four, it is also possible to do not store identification list at cutting ferrule and Truth cards manager Time, realize one of in the following way the renewal of cutting ferrule end Truth cards information list:

Optionally, it is attached using to all or part of Truth cards in important card region at the open or close cutting ferrule of Truth cards manager Authority after, owing to Truth cards manager end Truth cards information list is updated, therefore, Truth cards manager can will open cutting ferrule The Truth cards information of the authority that all or part of Truth cards in important card region is attached use sends to cutting ferrule, in order to cutting ferrule is more New cutting ferrule end Truth cards information list；Or at all or part of true in important card region of the open or close cutting ferrule of Truth cards manager After real card is attached the authority used, triggering the flow process that cutting ferrule end Truth cards information list updates, update mode is referred to aforesaid way one With the update mode of mode two, it is not described in detail in this.

In the more new data that above Truth cards manager sends in addition to comprising Truth cards manager end Truth cards information list, also comprise true Real card management device end identification list, in order to cutting ferrule obtains up-to-date identification list.

Four, the Truth cards chosen is determined:

Cutting ferrule obtains cutting ferrule end Truth cards information list, and wherein, cutting ferrule end Truth cards information list is the true of acquisition from Truth cards manager Real card management device end Truth cards information list；Specifically, optionally, before this step, it is also possible to perform cutting ferrule start, cutting ferrule logs in true The operation of real card management device, does not repeats them here, and specifically may refer to the start of above-mentioned relevant cutting ferrule and cutting ferrule logs in the relevant of Truth cards manager Describe.In this step, cutting ferrule obtains cutting ferrule end Truth cards information list, it is also possible to include that cutting ferrule updates cutting ferrule end Truth cards information list Step, also repeats no more at this, specifically may refer to above-mentioned cutting ferrule and updates the associated description of cutting ferrule end Truth cards information list.Cutting ferrule is from true card After the Truth cards manager end Truth cards information list obtained in sheet manager, store it in the memory area of cutting ferrule, true as cutting ferrule end Real card image list, when cutting ferrule needs prompting (such as display or speech play etc.) cutting ferrule end Truth cards information list, can be from this locality Directly obtain this cutting ferrule end Truth cards information list, improve the processing speed of cutting ferrule.

Cutting ferrule prompting cutting ferrule end Truth cards information list；Specifically, cutting ferrule utilizes the display device of self or by exterior display device display card Overlap end Truth cards information list, or cutting ferrule utilizes the voice playing device of self or by external voice playing device speech play (such as loudspeaker Play or by headset earpiece broadcasting etc.) cutting ferrule end Truth cards information list, select according to cutting ferrule end Truth cards information list for user Select the Truth cards needing to use when being traded, facilitate user to select, strengthen Consumer's Experience.

Cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；Specifically, the Truth cards that cutting ferrule receives selects instruction can be single Solely be arranged on what the selection physical button that card puts generated, or can be to select virtual key generation on the touch screen of cutting ferrule, or can be On cutting ferrule screen, the menu of display is chosen and represent what the menu item of selection function generated.Cutting ferrule receives Truth cards and selects instruction, determines choose true Real card, cutting ferrule realizes data transmission via Truth cards manager and the Truth cards chosen.Furthermore it is possible to realize in the following way determining choosing In Truth cards: cutting ferrule receives Truth cards and selects instruction, obtains and chooses mark, wherein, chooses and identifies for the Truth cards chosen of instruction； Cutting ferrule will choose mark to send to true card management device；Truth cards manager is according to choosing the true card identified from being connected with Truth cards manager In sheet, determine the Truth cards chosen corresponding with choosing mark；Wherein, choosing mark can be the part or all of information in Truth cards information, Such as: card number and/or Truth cards manager reading-writing port mark；Truth cards manager receives after choosing mark, can manage at Truth cards Device end Truth cards information list finds the Truth cards manager reading-writing port mark corresponding with choosing mark, in order to Truth cards manager is true Its reading-writing port fixed, thus carry out data interaction by this reading-writing port with the Truth cards chosen.

Five, data interaction:

Simulation card receives the data that transaction terminal sends, and after the data utilizing analog card bit end safe transmission double secret key to receive carry out the first process Send to cutting ferrule；Specifically, in data exchange process, (such as ATM, POS, mass transit card are supplemented with money with transaction terminal will to simulate card Machine etc.) it is attached (contact interface or non-contact interface), simulation card receives the data that transaction terminal sends, and these data can be to treat The data (such as withdraw funds, deducted amount, Truth cards information acquisition request etc.) processed.

After cutting ferrule receives simulates the data that card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, carry Show the data after the second process, and after receiving the confirmation instruction that the data after instruction the second process are correct, utilize cutting ferrule end the second safe transmission close Key sends to true card management device after the data after the second process are carried out the first process；Specifically, cutting ferrule can also show pending data, Can also the pending data of speech play (such as loudspeaker play or by headset earpiece broadcasting etc.), confirm these pending data for user The most correct, only after correct, after what reception user inputted indicates the confirmation instruction that pending data are correct, just the data that this is pending are sent out Deliver to Truth cards manager；If user confirms that these pending data are incorrect, then can directly cancel this secondary data mutual, with this, improve The safety of data interaction.What cutting ferrule received be used for the correct confirmation of the data after instruction second processes to instruct can be to be provided separately within card to put really Recognize what physical button generated, or can be that confirming on the touch screen of cutting ferrule selects in virtual key generation, or the menu shown on cutting ferrule screen Select and confirm what function generated, or can be that the voice that the voice acquisition device (such as Mike) of cutting ferrule receives is when confirming indicate and be verified rear Generate, or can be that the fingerprint acquisition device of cutting ferrule receives generation after fingerprint identification indicates and is verified, or can be the rainbow of cutting ferrule Film harvester receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, in the present invention It is not restricted.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Send to the Truth cards chosen after two process；Specifically, pending data are sent to the Truth cards chosen by Truth cards manager, in order to Pending data are processed by the Truth cards chosen.

Based on above-mentioned data interaction flow process, can be realized the function of multiple different types of Truth cards by a simulation card, user is carried out During data interaction, only need to carry simulation card and cutting ferrule, it is not necessary to carry Truth cards and i.e. can complete, improve convenience and safety.

Cutting ferrule can be pointed out needing the information confirmed in data exchange process, and thus, needing in data exchange process can be confirmed by user Information confirm after perform mutual again, thus ensure the verity of data interaction, improve safety.

In data transmission procedure, simulation card, carry out data interaction between cutting ferrule and Truth cards manager and all added by safe transmission key Deciphering and/or verification operation, thus ensure safety and the integrity that data transmit.

Additionally, due to can select to use the Truth cards mated with transaction terminal, user in prior art can be solved and do not carry and transaction terminal The Truth cards joined and the unnecessary expense expenditure (such as bank's inter-bank withdraw the money the fee etc.) that produces.

Six, supplement with money:

Utilize the data interaction framework of the present invention, it is also possible to realize supplementing operations such as (such as mass transit card, water card, electricity card are supplemented with money) with money, to facilitate use The cutting ferrule of the present invention is only carried at family and simulation card i.e. can realize supplementing with money of multiple variety classes Truth cards, facilitates user to carry, it is to avoid true The loss of assets caused lost by card.

The following provide a kind of concrete recharge procedure, but the invention is not limited in this:

Cutting ferrule prompting cutting ferrule end Truth cards information list；Specifically, cutting ferrule utilizes the display device of self or by exterior display device display card Overlap end Truth cards information list, or cutting ferrule utilizes the voice playing device of self or by external voice playing device speech play (such as loudspeaker Play or by headset earpiece broadcasting etc.) cutting ferrule end Truth cards information list, select according to cutting ferrule end Truth cards information list for user Select the Truth cards needing to use when supplementing with money, facilitate user to select, strengthen Consumer's Experience.

Cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；And simulation card receives the data that charging terminal sends, and utilize The data that analog card bit end safe transmission double secret key receives send to cutting ferrule after carrying out the first process；Specifically, the Truth cards that cutting ferrule receives selects Instruction can be to be provided separately within the selection physical button generation that card puts, or can be that the virtual key that selects on the touch screen of cutting ferrule generates, Or can be the menu of display to be chosen to represent that the menu item selecting function generates on cutting ferrule screen.Cutting ferrule receives Truth cards and selects instruction, Determining the Truth cards chosen, cutting ferrule realizes data transmission via Truth cards manager and the Truth cards chosen.It addition, during supplementing with money, With charging terminal (such as top-up machines etc.), simulation card is attached (contact interface or non-contact interface), and simulation card receives supplements with money The data that terminal sends, these data can be pending load value data (such as recharge amount etc.), in order to subsequent user confirms this pending filling Value Data is the most correct.Additionally, before simulation card receives the pending load value data that charging terminal sends, simulation card can also receive and fill The Truth cards information request of Truth cards that the acquisition that value terminal sends is chosen, cutting ferrule receives the data that simulation card sends, and utilizes cutting ferrule end the After the data that one safe transmission double secret key receives carry out the second process, the data after recycling cutting ferrule end the second safe transmission double secret key second processes are entered Row first sends after processing to true card management device, and Truth cards manager receives the data that cutting ferrule sends, and utilizes Truth cards manager end to pacify The data that full transmission double secret key receives send to the Truth cards chosen after carrying out the second process, and the Truth cards chosen receives Truth cards manager The data that end sends, and the Truth cards information obtained is sent to true card management device, Truth cards manager receives the Truth cards chosen and sends out The data sent, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the first process after send to cutting ferrule, cutting ferrule receives The data that Truth cards manager sends, and after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, recycling card Data after the second process of set end the first safe transmission double secret key send to simulating card after carrying out the first process, the number that simulation card receiving card set sends According to, and the data utilizing analog card bit end safe transmission double secret key to receive carry out the second process after send to charging terminal, thus, charging terminal obtains Get the Truth cards information of the Truth cards chosen, in order to follow-up supplement with money for this Truth cards.

After cutting ferrule receives simulates the data that card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, carry Show the data after the second process, and after receiving the confirmation instruction that the data after instruction the second process are correct, utilize cutting ferrule end the second safe transmission close Key sends to true card management device after the data after the second process are carried out the first process；Specifically, cutting ferrule can show pending load value data, Can also the pending load value data of speech play (such as loudspeaker play or by headset earpiece broadcasting etc.), confirm that this is pending for user Load value data is the most correct, only after correct, after what reception user inputted indicates the confirmation instruction that pending load value data is correct, just this is treated The load value data processed sends to true card management device；If user confirms that this pending load value data is incorrect, then can directly cancel this pen Supplement with money, with this, improve the safety supplemented with money.What cutting ferrule received be used for the correct confirmation of the data after instruction second processes to instruct can be to be separately provided Card set recognizes what physical button generated really, or can be that the confirmation virtual key on the touch screen of cutting ferrule generates, or aobvious on cutting ferrule screen The menu shown selects confirm what function generated, or can be that the voice that the voice acquisition device (such as Mike) of cutting ferrule receives confirms to indicate also Generate when being verified rear, or can be that the fingerprint acquisition device of cutting ferrule receives generation after fingerprint identification indicates and is verified, or can Think that the iris collection device of cutting ferrule receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, The most it is not restricted.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Send to the Truth cards chosen after two process；Specifically, pending load value data is sent to the Truth cards chosen by Truth cards manager, So that the Truth cards chosen processes (such as performing to supplement operation with money) to pending load value data.

Based on above-mentioned recharge procedure, can be realized the function of multiple different types of Truth cards by a simulation card, user supplements with money Time, only need to carry simulation card and cutting ferrule, it is not necessary to carry Truth cards and i.e. can complete to supplement with money, improve and supplement convenience and safety with money.

Cutting ferrule can need the information confirmed to point out during supplementing with money, thus, the information needing to confirm during supplementing with money can be entered by user Row performs to supplement with money after confirming again, thus ensures the verity supplemented with money, improves safety.

Additionally, due to can select to use the Truth cards mated with charging terminal, user in prior art can be solved and do not carry and charging terminal The Truth cards joined and the unnecessary expense expenditure (such as bank's inter-bank withdraw the money the fee etc.) that produces.

Seven, transaction:

Utilize the data interaction framework of the present invention, it is also possible to realize the operations such as transaction (such as ATM withdraw the money transfer accounts, POS is swiped the card), with Facilitate user only to carry the cutting ferrule of the present invention and simulation card i.e. can realize the transaction of multiple variety classes Truth cards, facilitate user to carry, it is to avoid Truth cards loses the loss of assets caused.

The following provide a kind of particular transactions flow process, but the invention is not limited in this:

Cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；And simulation card receives the data that transaction terminal sends, and utilize The data that analog card bit end safe transmission double secret key receives send to cutting ferrule after carrying out the first process；Specifically, the Truth cards that cutting ferrule receives selects Instruction can be to be provided separately within the selection physical button generation that card puts, or can be that the virtual key that selects on the touch screen of cutting ferrule generates, Or can be the menu of display to be chosen to represent that the menu item selecting function generates on cutting ferrule screen.Cutting ferrule receives Truth cards and selects instruction, Determining the Truth cards chosen, cutting ferrule realizes data transmission via Truth cards manager and the Truth cards chosen.It addition, in process of exchange, Simulation card is attached (contact interface or non-contact interface) with transaction terminal (such as ATM, POS etc.), simulates card Receiving the data that transaction terminal sends, these data can be pending transaction data (such as withdraw funds, deducted amount etc.), in order to follow-up use Family confirms that this pending transaction data is the most correct.Additionally, before simulation card receives the pending transaction data that transaction terminal sends, mould Intending card and can also receive the Truth cards information request of Truth cards that the acquisition that transaction terminal sends is chosen, cutting ferrule receives the number that simulation card sends According to, and after the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, recycle cutting ferrule end the second safe transmission double secret key Data after second process send after carrying out the first process to true card management device, and Truth cards manager receives the data that cutting ferrule sends, and utilizes The data that Truth cards manager end safe transmission double secret key receives send to the Truth cards chosen, the Truth cards chosen after carrying out the second process Receiving the data that Truth cards manager end sends, and send the Truth cards information obtained to true card management device, Truth cards manager connects Receive the data that the Truth cards chosen sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the first process after send out Deliver to cutting ferrule, cutting ferrule receive data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the After two process, the data after the second process of recycling cutting ferrule end the first safe transmission double secret key send to simulating card after carrying out the first process, analog card Sheet receive cutting ferrule send data, and the data utilizing analog card bit end safe transmission double secret key to receive carry out the second process after send to end of concluding the business End, thus, transaction terminal gets the Truth cards information of the Truth cards chosen, in order to follow-up be traded for this Truth cards.

After cutting ferrule receives simulates the data that card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, carry Show the data after the second process, and after receiving the confirmation instruction that the data after instruction the second process are correct, utilize cutting ferrule end the second safe transmission close Key sends to true card management device after the data after the second process are carried out the first process；Specifically, cutting ferrule can show pending transaction data, Can also the pending transaction data of speech play (such as loudspeaker play or by headset earpiece broadcasting etc.), confirm that this is pending for user This most correctly, only after correct, after the confirmation indicating pending transaction data correct of reception user's input instructs, is just treated by transaction data The transaction data processed sends to true card management device；If user confirms that this pending transaction data is incorrect, then can directly cancel this pen Transaction, with this, improves the safety of transaction.What cutting ferrule received be used for the correct confirmation of the data after instruction second processes to instruct can be to be separately provided Card set recognizes what physical button generated really, or can be that the confirmation virtual key on the touch screen of cutting ferrule generates, or aobvious on cutting ferrule screen The menu shown selects confirm what function generated, or can be that the voice that the voice acquisition device (such as Mike) of cutting ferrule receives confirms to indicate also Generate when being verified rear, or can be that the fingerprint acquisition device of cutting ferrule receives generation after fingerprint identification indicates and is verified, or can Think that the iris collection device of cutting ferrule receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, The most it is not restricted.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Send to the Truth cards chosen after two process；Specifically, pending transaction data is sent to the Truth cards chosen by Truth cards manager, So that pending transaction data is processed by the Truth cards chosen.

The Truth cards chosen receives the data that Truth cards manager end sends, and the data transmission that will obtain after trading processing after carrying out trading processing To true card management device；Specifically, pending transaction data is traded processing by the Truth cards chosen, and this trading processing is existing intelligence The scheme of the trading processing of card, does not repeats them here.

Truth cards manager receives the data that the Truth cards chosen sends, and utilizes Truth cards manager end safe transmission double secret key to receive Data send to cutting ferrule after carrying out the first process；

Cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process After, the data after the second process of recycling cutting ferrule end the first safe transmission double secret key send to simulating card after carrying out the first process；

Simulation card receiving card overlaps the data sent, and the data utilizing analog card bit end safe transmission double secret key to receive carry out transmission after the second process To transaction terminal.Specifically, after transaction terminal receives the data after Truth cards trading processing, can be completed this according to existing transaction flow Transaction, note output of such as withdrawing the money, transfer accounts, swipe the card and withhold.

Based on above-mentioned transaction flow, can be realized the function of multiple different types of Truth cards by a simulation card, user is traded Time, only need to carry simulation card and cutting ferrule, it is not necessary to carry Truth cards and i.e. can complete transaction, improve transaction convenience and safety.

Cutting ferrule can be pointed out needing the information confirmed in process of exchange, and thus, the information needing to confirm in process of exchange can be entered by user Row performs transaction again after confirming, thus ensures the verity of transaction, improves safety.

Certainly, above-mentioned implementing only discloses from transaction terminal to Truth cards, and the single data interaction of Truth cards to transaction terminal, in reality In application, it is understood that there may be repeatedly data interaction, interaction flow is similar to above-mentioned single data interaction, in repeatedly data interaction, and can be according to alternately Data the need of confirming to be arranged at cutting ferrule and whether point out mutual data to ensure the verity of interaction data.

Eight, application program update:

1, cutting ferrule application program update:

In the present invention, the application program that self can also have been installed by cutting ferrule is updated or installs new opplication program, in order to expand cutting ferrule Types of applications or existing application to cutting ferrule upgrade:

The present invention provides the specific implementation of a kind of cutting ferrule application program update, but the invention is not limited in this:

Fig. 8 shows the flow chart of cutting ferrule application program update, sees Fig. 8, and cutting ferrule application program update includes:

Cutting ferrule sends to updating platform to major general's cutting ferrule certificate；Specifically, safe renewal platform it is separately provided to complete cutting ferrule application program more Newly.Cutting ferrule certificate is sent to updating platform by cutting ferrule, in order to updates platform and knows which cutting ferrule needs to update, can also verify the body of cutting ferrule simultaneously Part；Cutting ferrule can also by need the application program identification updated or other inform that updating platform needs the information of application program updating or downloading to send out Deliver to update platform, in order to renewal platform is known to be needed to send which application program installation kit to cutting ferrule.

Update platform and generate the first renewal encryption key；Specifically, platform self generation is updated close for the renewal encryption encrypting application program installation kit Key, carries out the renewal encryption key of generation during application program update every time and can be the same or different, and difference is then possible to prevent to be cracked, and improves peace Quan Xing.

Updating platform utilizes the first renewal encryption key that cutting ferrule application program installation kit is encrypted acquisition the first installation kit ciphertext；Specifically, update Platform utilizes the renewal encryption keys cutting ferrule application program installation kit generated, thus ensures the safety that cutting ferrule application program installation kit transmits.

Updating platform utilizes renewal platform private key that the first installation kit ciphertext carries out signature acquisition the first installation kit signature；Specifically, platform is updated to the One installation kit ciphertext is signed, in order to the identity updating platform is verified by follow-up cutting ferrule.

Updating platform utilizes the cutting ferrule public key encryption first in cutting ferrule certificate to update encryption key, it is thus achieved that first updates encryption key ciphertext；Specifically, Updating platform utilizes cutting ferrule public key encryption to update encryption key, it is ensured that update the safety of encryption key transmission, simultaneously, it is ensured that only cutting ferrule is Renewal encryption key can be decrypted, improve the safety of application program installation kit transmission.

Update platform by cutting ferrule more fresh information send to cutting ferrule, wherein, cutting ferrule more fresh information includes: update platform credential, the first installation kit ciphertext, First installation kit signature and first updates encryption key ciphertext；Specifically, update platform send more fresh information in carry renewal platform credential so that Cutting ferrule is authenticated updating platform, carries the first installation kit ciphertext and ensure the safety of application program installation kit transmission, more fresh information in more fresh information In carry first installation kit signature with ensure follow-up cutting ferrule can to update platform identity legitimacy be authenticated, more fresh information carries renewal encryption Key ciphertext ensures to update the safety of encryption key transmission.

Cutting ferrule receives cutting ferrule and updates information, utilizes root certification authentication to update platform credential；Specifically, cutting ferrule prestores root certificate, utilizes this root to demonstrate,prove Book completes the checking updating platform credential, to ensure the follow-up safety using renewal platform credential.

After cutting ferrule checking renewal platform credential is passed through, utilize the renewal platform PKI updated in platform credential that the first installation kit signature is carried out sign test；Tool Body ground, cutting ferrule utilizes the platform PKI that updates in the renewal platform credential after being verified to verify the signature updating platform transmission, to guarantee number According to legitimate origin.

After cutting ferrule verifies that the first installation kit signature is correct, utilize cutting ferrule private key deciphering the first renewal encryption key ciphertext, it is thus achieved that the first decruption key；Tool Body ground, cutting ferrule utilizes cutting ferrule private key to decrypt decruption key, in order to subsequent decryption installation kit ciphertext obtains cutting ferrule application program installation kit.

Cutting ferrule utilizes first decryption key decryption the first installation kit ciphertext, it is thus achieved that cutting ferrule application program installation kit；

The data form of cutting ferrule checking cutting ferrule application program installation kit is the most correct；Specifically, the data of cutting ferrule application program installation kit also verified by cutting ferrule Form is the most correct, if the data form of cutting ferrule application program installation kit is incorrect, does not the most perform to install operation, if cutting ferrule application program is installed The data form of bag is correct, then perform installation.

If the data form of cutting ferrule checking cutting ferrule application program installation kit is correct, cutting ferrule is installed according to cutting ferrule application program installation kit.Specifically, If cutting ferrule is to be updated the application program installed, then can cover mounted application program, or mounted application program is entered The installation of new application program is carried out again, if cutting ferrule is newly installed application program, then after row upgrading, or the mounted application program of leading unloading This application program can be mounted directly.

The cutting ferrule based on the present invention renewal to application program, both can update mounted application program, it is also possible to download new application program and pacify Dress, has expanded the function of cutting ferrule, has been user-friendly to.

2, simulation card application program update:

In the present invention, the application program that self can also have been installed by simulation card is updated or installs new opplication program, in order to expand The types of applications of simulation card or the existing application to simulation card are upgraded:

The present invention provides a kind of specific implementation simulating card application program update, but the invention is not limited in this:

Fig. 9 shows the flow chart of simulation card application program update, sees Fig. 9, and simulation card application program update includes:

Cutting ferrule obtains simulation card certificate from simulation card, sends to updating platform to major general's analog card sheet certificate；Specifically, cutting ferrule can pass through Following manner obtains simulation card certificate from simulation card: after cutting ferrule is by contact or non-contact detection to simulation card, to simulating card Send the request obtaining simulation card certificate, after simulation card receives the request that cutting ferrule sends, simulation card certificate is sent to cutting ferrule；Or card After overlapping by contact or non-contact detection to simulation card, simulation card actively will simulation card certificate transmission to cutting ferrule.Optional alternative Case: after cutting ferrule is by contact or non-contact detection to simulation card, sends to simulation card and obtains simulation card uniquely identified and ask, mould After intending the request that card receives cutting ferrule transmission, uniquely being identified by simulation card and send to cutting ferrule, cutting ferrule receives after simulation card uniquely identifies also may be used With according to this simulation card uniquely identify from locally stored cutting ferrule end the first list of bindings obtain simulation card uniquely identify correspondence simulation card Certificate；Or after cutting ferrule is by contact or non-contact detection to simulation card, simulation card is actively uniquely identified transmission and extremely blocks by simulation card Set, cutting ferrule receives after simulation card uniquely identifies and uniquely can also identify from locally stored cutting ferrule end the first list of bindings according to this simulation card Obtain simulation card and uniquely identify the simulation card certificate of correspondence.It addition, be separately provided safe renewal platform to complete to simulate card application program Renewal.Simulation card certificate is sent to updating platform by cutting ferrule, in order to updates platform and knows which simulation card needs to update, simultaneously can also The identity of checking simulation card；Cutting ferrule can also by need update application program identification or other inform update platform need update or download The information of application program sends to updating platform, in order to renewal platform is known to be needed to send which application program installation kit to simulating card.

Update platform and generate the second renewal encryption key；Specifically, platform self generation is updated close for the renewal encryption encrypting application program installation kit Key, carries out the renewal encryption key of generation during application program update every time and can be the same or different, and difference is then possible to prevent to be cracked, and improves peace Quan Xing.

Updating platform utilizes the second renewal encryption key that simulation card application program installation kit is encrypted acquisition the second installation kit ciphertext；Specifically, Update platform and utilize the renewal encryption keys simulation card application program installation kit generated, thus ensure to simulate the transmission of card application program installation kit Safety.

Updating platform utilizes renewal platform private key that the second installation kit ciphertext carries out signature acquisition the second installation kit signature；Specifically, platform is updated to the Two installation kit ciphertexts are signed, in order to the identity updating platform is verified by follow-up simulation card.

Updating platform utilizes the simulation card public key encryption second in simulation card certificate to update encryption key, it is thus achieved that second updates encryption key ciphertext； Specifically, updating platform utilizes simulation card public key encryption to update encryption key, it is ensured that updates the safety of encryption key transmission, protects meanwhile Card only simulation card just can decrypt renewal encryption key, improves the safety of application program installation kit transmission.

Updating platform to send simulation card renewal information to cutting ferrule, wherein, simulation card updates information and includes: update platform credential, the second installation Bag ciphertext, the second installation kit signature and second update encryption key ciphertext；Specifically, update in the more fresh information of platform transmission and carry renewal platform Certificate, so that simulation card is authenticated updating platform, carries the second installation kit ciphertext and ensures the safety of application program installation kit transmission in more fresh information Property, carrying the second installation kit signature in more fresh information can be authenticated the legitimacy updating platform identity with the follow-up simulation card of guarantee, updates letter Breath carries and updates the safety that encryption key ciphertext ensures that renewal encryption key transmits.

Cutting ferrule receives simulation card and updates information, utilizes cutting ferrule end the first safe transmission double secret key simulation card to update after information carries out the first process and sends To simulating card；Specifically, cutting ferrule utilizes the safe transmission double secret key simulation card generated when setting up secure connection between cutting ferrule and simulation card to update Information is transmitted after processing, and can improve the safety of data transmission.

The data that simulation card receiving card set sends, after the data utilizing analog card bit end safe transmission double secret key to receive carry out the second process, it is thus achieved that Simulation card updates information；

Simulation card utilizes root certification authentication to update platform credential；Specifically, simulation card prestores root certificate, utilizes this root certificate to complete more The checking of new platform credential, to ensure the follow-up safety using renewal platform credential.

After simulation card checking renewal platform credential is passed through, utilize the renewal platform PKI updated in platform credential that the second installation kit signature is tested Sign；Specifically, simulation card utilizes the platform PKI that updates in the renewal platform credential after being verified to verify the signature updating platform transmission, To guarantee the legitimate origin of data.

After simulation card verifies that the second installation kit signature is correct, utilize simulation card private key deciphering the second renewal encryption key ciphertext, it is thus achieved that the second deciphering Key；Specifically, simulation card utilizes simulation card private key to decrypt decruption key, in order to subsequent decryption installation kit ciphertext obtains simulation card application Program installation kit.

Simulation card utilizes second decryption key decryption the second installation kit ciphertext, it is thus achieved that simulation card application program installation kit；

The data form of simulation card checking simulation card application program installation kit is the most correct；Specifically, simulation card application also verified by simulation card The data form of program installation kit is the most correct, if the data form of simulation card application program installation kit is incorrect, does not the most perform to install operation, If the data form of simulation card application program installation kit is correct, then perform installation.

If the data form of simulation card checking simulation card application program installation kit is correct, simulation card is according to simulation card application program installation kit Install.Specifically, if simulation card is to be updated the application program installed, then mounted application program can be covered, or Mounted application program is upgraded by person, or carries out the installation of new application program after the mounted application program of leading unloading again, if mould Intending card is newly installed application program, then can be mounted directly this application program.

The renewal of simulation card correspondence program based on the present invention, both can update mounted application program, it is also possible to download new application program And install, expand the function of simulation card, be user-friendly to.

3, Truth cards manager application updates:

In the present invention, the application program that self can also have been installed by Truth cards manager is updated or installs new opplication program, with Just expand the types of applications of Truth cards manager or the existing application to Truth cards manager upgraded:

The present invention provides the specific implementation that a kind of Truth cards manager application updates, but the invention is not limited in this:

Figure 10 shows the flow chart that Truth cards manager application updates, and sees Figure 10, and Truth cards manager application updates and includes:

Truth cards manager sends to updating platform to major general's Truth cards manager certificate；Specifically, be separately provided safe renewal platform so that Complete the renewal of Truth cards manager application.Truth cards manager certificate is sent to updating platform by Truth cards manager, in order to update Platform knows which Truth cards manager needs to update, and can also verify the identity of Truth cards manager simultaneously；Truth cards manager also may be used With by need the application program identification updated or other inform and update platform to need the information of the application program updating or downloading to send to updating flat Platform, in order to renewal platform is known to be needed to send which application program installation kit to true card management device.

Update platform and generate the 3rd renewal encryption key；Specifically, platform self generation is updated close for the renewal encryption encrypting application program installation kit Key, carries out the renewal encryption key of generation during application program update every time and can be the same or different, and difference is then possible to prevent to be cracked, and improves peace Quan Xing.

Updating platform utilizes the 3rd renewal encryption key that Truth cards manager application installation kit is encrypted acquisition the 3rd installation kit ciphertext；Tool Body ground, updates platform and utilizes the renewal encryption keys Truth cards manager application installation kit generated, thus ensure Truth cards manager The safety of application program installation kit transmission.

Updating platform utilizes renewal platform private key that the 3rd installation kit ciphertext carries out signature acquisition the 3rd installation kit signature；Specifically, platform is updated to the Three installation kit ciphertexts are signed, in order to the identity updating platform is verified by follow-up Truth cards manager.

Updating platform utilizes the Truth cards manager public key encryption the 3rd in Truth cards manager certificate to update encryption key, it is thus achieved that the 3rd renewal adds Decryption key ciphertext；Specifically, updating platform utilizes Truth cards manager public key encryption to update encryption key, it is ensured that update encryption key transmission Safety, simultaneously, it is ensured that only Truth cards manager just can decrypt renewal encryption key, improves the safety of application program installation kit transmission Property.

Updating platform to send Truth cards manager more fresh information to true card management device, wherein, Truth cards manager more fresh information includes: Update platform credential, the 3rd installation kit ciphertext, the 3rd installation kit signature and the 3rd renewal encryption key ciphertext；Specifically, update what platform sent More fresh information carries renewal platform credential so that Truth cards manager is authenticated updating platform, more fresh information carries the 3rd installation kit ciphertext Ensure the safety of application program installation kit transmission, more fresh information carries the 3rd installation kit signature to ensure that follow-up Truth cards manager can be to more The legitimacy of new platform identity is authenticated, and carries and update the safety that encryption key ciphertext ensures that renewal encryption key transmits in more fresh information.

Truth cards manager receives Truth cards manager more fresh information, utilizes root certification authentication to update platform credential；Specifically, Truth cards pipe Reason device prestores root certificate, utilizes this root certificate to complete the checking updating platform credential, to ensure the follow-up safety using renewal platform credential.

The checking of Truth cards manager updates after platform credential passes through, utilize the renewal platform PKI updated in platform credential the 3rd installation kit is signed into Row sign test；Specifically, the renewal platform PKI during Truth cards manager utilizes the renewal platform credential after being verified is to updating the label that platform sends Name is verified, to guarantee the legitimate origin of data.

After Truth cards manager checking the 3rd installation kit signature is correct, utilize Truth cards manager private key deciphering the 3rd renewal encryption key ciphertext, Obtain the 3rd decruption key；Specifically, Truth cards manager utilizes Truth cards manager private key to decrypt decruption key, in order to subsequent decryption is pacified Dress bag ciphertext obtains Truth cards manager application installation kit.

Truth cards manager utilizes the 3rd decryption key decryption the 3rd installation kit ciphertext, it is thus achieved that Truth cards manager application installation kit；

The data form of Truth cards manager checking Truth cards manager application installation kit is the most correct；Specifically, Truth cards manager The also data form of checking Truth cards manager application installation kit is the most correct, if the data of Truth cards manager application installation kit Form is incorrect, does not the most perform to install operation, if the data form of Truth cards manager application installation kit is correct, then performs installation.

If the data form of Truth cards manager checking Truth cards manager application installation kit is correct, Truth cards manager is according to true Card management device application program installation kit is installed.Specifically, if Truth cards manager is to be updated the application program installed, Then can cover mounted application program, or mounted application program is upgraded, or after the mounted application program of leading unloading again Carry out the installation of new application program, if Truth cards manager is newly installed application program, then can be mounted directly this application program.

The Truth cards manager based on the present invention renewal to application program, both can update mounted application program, it is also possible to download new answering By program and install, expand the function of Truth cards manager, be user-friendly to.

Nine, the application scenarios that data interaction framework is suitable for:

1, to account charging:

In a kind of application scenarios that the present embodiment provides, user is based on above-mentioned data interaction framework, it is possible to achieve supplement third party's account with money, example As to Alipay account charging.

Realization to this application scene is specifically described below, but the invention is not limited in this:

Cutting ferrule passes through network entry account platform；Specifically, cutting ferrule passes through wireless network logon account platform, in order to by the data interaction of the present invention Cutting ferrule and Truth cards manager in framework complete to supplement account with money.Wherein, account platform can be virtual third party's account platform, such as: E-commerce website account platform (such as Alipay etc.), paying electric charge platform, network finance platform (such as fund etc.).

Charging request is sent to account platform by cutting ferrule, and wherein, charging request includes: charging information；Specifically, charging request is sent extremely by cutting ferrule Account platform, in order to account platform supplements bag with money according to charging request feedback.Wherein, charging information includes: recharge amount etc., optionally, it is also possible to Including account to be supplemented with money, in order to account platform is known and for which account supplemented with money.

Cutting ferrule receives and supplements bag with money, wherein, supplements bag with money and is generated after receiving charging request by payment platform；Specifically, it is fastened in charging request transmission While account platform or again after it, also this charging request is sent to payment platform, or, after account platform receives charging request, Charging request is sent to payment platform, just pays with payment platform.After this payment platform receives charging request, also generate and supplement bag with money, its In, to supplement bag with money and include: the information such as recharge amount, account to be supplemented with money, payment platform will be supplemented bag with money and be sent to cutting ferrule, or payment platform will supplement bag with money Send to account platform, then by account platform will supplement with money bag send to cutting ferrule, in order to user carry out on cutting ferrule confirmation supplement with money wrap the most errorless.Wherein, Payment platform is the transaction platform corresponding with Truth cards, such as Net silver etc..

Bag is supplemented in cutting ferrule prompting with money, receives and supplements, for confirmation, the confirmation instruction that bag is errorless with money；Specifically, it is fastened in after receiving and supplementing bag with money, also will supplement with money Bag carries out showing or speech play, in order to the information supplemented with money in bag is confirmed by user, if user confirms errorless, confirms on cutting ferrule Operation (such as pressing confirmation button, select the modes such as the confirmation option in menu) generates supplements the confirmation instruction that bag is errorless, card socket with money for confirmation Receive this confirmation instruction, in order to cutting ferrule continues executing with subsequent operation；Certainly, if user confirms to supplement the problem of being surrounded by with money, then can take on cutting ferrule Disappear operation, in order to cancels this pen and supplements with money.What cutting ferrule received is used for confirming that the confirmation instruction supplementing bag with money errorless can be to be provided separately within the confirmation that card puts Physical button generates, or can be that confirming on the touch screen of cutting ferrule selects in virtual key generation, or the menu shown on cutting ferrule screen Confirm what function generated, or can be the voice that the voice acquisition device (such as Mike) of cutting ferrule receives life when confirming instruction and be verified rear Become, or can be that the fingerprint acquisition device of cutting ferrule receives generation after fingerprint identification indicates and is verified, or can be the iris of cutting ferrule Harvester receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, the most also It is not restricted.Certainly, while this step or before this step, cutting ferrule also needs to log in Truth cards manager, and is chosen as account and enters The Truth cards that row is supplemented with money, cutting ferrule logs in the operation of Truth cards manager and selects the operation of Truth cards to be referred to above-mentioned associated description, This no longer describes in detail.

Cutting ferrule utilizes cutting ferrule end the second safe transmission double secret key to supplement with money after bag carries out the first process and sends to true card management device, wherein, and cutting ferrule end Two safe transmission keys are cutting ferrule to be generated when setting up secure connection with Truth cards manager, Truth cards manager and at least one Truth cards phase Connect, and storage has Truth cards manager end Truth cards information list, Truth cards manager end Truth cards information list include and truly block The Truth cards information of the Truth cards that sheet manager connects；Specifically, cutting ferrule receives supplements bag with money, and supplement with money bag confirm errorless after, will supplement with money Bag sends after carrying out the first process to true card management device, improves and supplements bag transmission security with money, in order to Truth cards manager will supplement bag with money really Transmission to Truth cards processes.It addition, Truth cards manager end Truth cards information list includes true with what Truth cards manager was connected The Truth cards information of card, this Truth cards information may include that the information such as card number, card authentication information, and this card authentication information is that certification is true Whether real card is the card image that regular channel (such as bank, public transport company etc.) is issued；This Truth cards can be the bank card that bank issues Or function card (such as mass transit card, mess card, purchase card, member card, accumulating card etc.).Additionally, the life that cutting ferrule end the second safe transmission key is One-tenth mode is referred to the associated description of the generation of above-mentioned cutting ferrule end the second safe transmission key, is not described in detail in this.Optionally, Truth cards management Device could be arranged to preserve the Truth cards information of all or part of Truth cards in connected Truth cards, in order to user is according to true card Different setting is made in the security requirement of sheet, such as, can arrange the Truth cards letter not allowing to obtain some Truth cards on Truth cards manager Breath, thus ensure the safety of these Truth cards.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out the Sending to the Truth cards chosen after two process, wherein, Truth cards manager end safe transmission key is that cutting ferrule sets up peace with Truth cards manager Generating during full connection, the Truth cards chosen is: cutting ferrule prompting cutting ferrule end Truth cards information list, and receives after Truth cards selects instruction true Fixed Truth cards, cutting ferrule end Truth cards information list is the Truth cards manager end Truth cards information row obtained from Truth cards manager Table；Specifically, after Truth cards manager receives the data that cutting ferrule sends, the data received are carried out the second process, by true and complete number According to sending to Truth cards, it is ensured that the authenticity and integrity of the data that Truth cards processes, thus ensure the safety supplemented with money.Wherein, truly block The generating mode of sheet manager end safe transmission key is referred to the description of the generating mode of above-mentioned Truth cards manager end safe transmission key, This no longer describes in detail.The selection of the Truth cards chosen can refer to the associated description of the selection of above-mentioned Truth cards, is not described in detail in this.

The Truth cards chosen receives the data that Truth cards manager sends, and is traded the data received processing, it is thus achieved that supplement process bag with money； Specifically, after the Truth cards chosen receives the true and complete data that Truth cards manager sends, the data received are traded place Reason, in order to confirming to complete transaction, the process that the Truth cards chosen is traded processing is referred to existing smart card and is traded process Flow process, is not described in detail in this.

The Truth cards chosen will be supplemented process bag with money and be sent to true card management device；

Truth cards manager utilizes Truth cards manager end safe transmission double secret key to supplement with money after process bag carries out the first process and sends to cutting ferrule；

Cutting ferrule receives the data that Truth cards manager sends, after the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process Send to payment platform；Specifically, cutting ferrule receives the data after the Truth cards through choosing processes and sends it to payment platform, in order to Pay platform to pay.

Account platform receives the payment successful information that payment platform sends, and performs to supplement operation with money, and wherein, paying successful information is payment platform receiving card Generate after overlapping the data after the second process sent and performing trading processing operation.Specifically, payment platform, after completing to pay, generates and pays into Merit information, and this payment successful information is sent to account platform, in order to account platform is known payment and is completed, thus completes to supplement operation with money.Certainly, This payment successful information can also comprise checking information, in order to account platform is verified, only after being verified, just paying successful information Complete to supplement with money, improve safety.

Based on aforesaid way, the data interaction framework of the present invention can complete to supplement account platform with money, extends answering of data interaction framework of the present invention With, it is user-friendly to.

2, supplement with money to Truth cards:

In a kind of application scenarios that the present embodiment provides, user is based on above-mentioned data interaction framework, it is possible to achieve supplement Truth cards with money, such as Supplement with money to mass transit card.

Realization to this application scene is briefly described below, but the invention is not limited in this:

Cutting ferrule, from the Truth cards being connected with Truth cards manager, determines the Truth cards chosen；

Supplement platform with money and obtained the card image of the Truth cards chosen, wherein, card image by simulation card, cutting ferrule and Truth cards manager Including: the card number of the Truth cards chosen, card authentication information；

Supplement with money after platform determines successful payment, generate and supplement bag with money and send true to choose by simulation card, cutting ferrule and Truth cards manager Card, wherein, supplements bag with money and points out through cutting ferrule and confirm；

The Truth cards chosen receives the data that Truth cards manager sends, and performs to supplement operation with money.

Based on above-mentioned brief description, a kind of specific implementation presented below, but the invention is not limited in this:

Cutting ferrule logs in Truth cards manager, and wherein, Truth cards manager is connected with at least one Truth cards, and storage has Truth cards pipe Reason device end Truth cards information list, the Truth cards that Truth cards manager end Truth cards information list includes being connected with Truth cards manager Truth cards information；Specifically, above-mentioned cutting ferrule login step is referred to the associated description that above-mentioned cutting ferrule logs in, and is not described in detail in this.Optionally, Truth cards manager could be arranged to preserve the Truth cards information of all or part of Truth cards in connected Truth cards, is formed true Card management device end Truth cards information list, in order to user, such as can be truly according to the security requirement of Truth cards is made different setting The Truth cards information not allowing to obtain some Truth cards is set on card management device, thus ensures the safety of these Truth cards.

Cutting ferrule obtains cutting ferrule end Truth cards information list, and wherein, cutting ferrule end Truth cards information list is the true of acquisition from Truth cards manager Real card management device end Truth cards information list；Specifically, how cutting ferrule obtains Truth cards information list and is referred to the acquisition of above-mentioned cutting ferrule truly The associated description of card image list, is not described in detail in this.

Cutting ferrule prompting cutting ferrule end Truth cards information list；

Cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；Specifically, cutting ferrule determines that the Truth cards chosen is card to be supplemented with money, Such as mass transit cards etc., now, the simulation card in notebook data interworking architecture can use as card to be supplemented with money (such as mass transit card).

Simulation card receives supplements the card image acquisition request that platform sends with money, and card image obtains the card of the Truth cards that request at least includes choosing Number, card authentication information；Specifically, simulation card is attached with supplementing platform with money by user by contact or contactless mode, and this is supplemented with money Platform can include that processing platform is supplemented on front end top-up machines and backstage with money, such as: mass transit card supplements platform etc. with money, and simulation card receives supplements what platform sent with money Card image obtains request, in order to obtain the Truth cards information of the Truth cards chosen.

Simulation card utilizes analog card bit end safe transmission double secret key card image to obtain after request carries out the first process and sends to cutting ferrule, wherein, and simulation Card-terminal safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card；Specifically, simulation card receive card image obtain please After asking, utilize the safe transmission double secret key card image between cutting ferrule to obtain after request carries out the first process and send to cutting ferrule, improve data transmission peace Quan Xing.The generation process of analog card bit end safe transmission key is referred to the relevant of generation process of above-mentioned analog card bit end safe transmission key and retouches State, be not described in detail in this.

Cutting ferrule receives the data that simulation card sends, after the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, then profit Data after processing with cutting ferrule end the second safe transmission double secret key second send to true card management device after carrying out the first process, wherein, and cutting ferrule end the One safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card, and cutting ferrule end the second safe transmission key is cutting ferrule and Truth cards pipe Reason device generates when setting up secure connection；Specifically, cutting ferrule sends, to simulation card, the data come and carries out the second process, and sends out after carrying out the first process Deliver to Truth cards manager, it is provided that data transmission security, and so that Truth cards manager obtains card image and obtains request.Cutting ferrule end first Safe transmission key and cutting ferrule end the second safe transmission key are referred to above-mentioned cutting ferrule end the first safe transmission key and cutting ferrule end the second safe transmission The associated description of key generation process, is not described in detail in this.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Sending after process to the Truth cards chosen, wherein, Truth cards manager end safe transmission key is that cutting ferrule sets up safety with Truth cards manager Generate during connection；Specifically, the data that cutting ferrule is sent by Truth cards manager send to the Truth cards chosen after carrying out the second process, in order to The Truth cards chosen obtains card image and obtains request, thus card image is returned.The generation of Truth cards manager end safe transmission key Journey is referred to the associated description of the generation process of above-mentioned Truth cards manager end safe transmission key, is not described in detail in this.

The card image of the Truth cards chosen is sent to true card management device by the Truth cards chosen；

Truth cards manager utilizes the card image of the Truth cards chosen that Truth cards manager end safe transmission double secret key receives to carry out Send to cutting ferrule after one process；

Cutting ferrule receives the data that Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the second process, Data after the second process of recycling cutting ferrule end the first safe transmission double secret key send to simulating card after carrying out the first process；

Simulation card receiving card set send data, the data utilizing analog card bit end safe transmission double secret key to receive send after carrying out the second process to Supplement platform with money；Specifically, the card image got is sent to supplementing platform with money by simulation card, thus ensures that supplementing platform with money is known as which and truly blocks Sheet is supplemented with money.

Supplement with money after platform determines successful payment, generate and supplement bag with money and will supplement bag transmission with money to simulating card；Specifically, supplementing platform with money can be by as follows Mode determines successful payment: collecting cash, collect check, POS completes, the any-mode such as transfer accounts.Supplement with money after platform determines successful payment, Bag is supplemented in generation with money, in order to the Truth cards chosen carries out supplementing operation with money according to supplementing bag with money.Wherein supplement bag with money at least to include: recharge amount.

Simulation card receive supplement that platform sends with money supplement bag with money, utilize analog card bit end safe transmission double secret key to supplement with money after bag carries out the first process to send to Cutting ferrule；

Cutting ferrule receives the data that simulation card sends, after the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, prompting Data after second process；

Cutting ferrule receives the confirmation instruction that the data after instruction the second process are errorless, after utilizing cutting ferrule end the second safe transmission double secret key second to process Data send after carrying out the first process to true card management device；

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Send after process to the Truth cards chosen；

The Truth cards chosen receives the data after the second process that Truth cards manager sends, and performs to supplement operation with money.Specifically, that chooses is true Card gets after supplementing bag with money, supplements operation with money according to supplementing bag execution with money, thus completes to supplement with money.

Based on above-mentioned brief description, the present invention also provides for a kind of specific implementation supplemented with money by swiping the card, but the invention is not limited in this:

Cutting ferrule prompting cutting ferrule end Truth cards information list；

Cutting ferrule receives the first Truth cards and selects instruction, determines the first Truth cards chosen；Specifically, cutting ferrule determines the first Truth cards chosen For card of withholing, such as bank card etc., now, the simulation card in notebook data interworking architecture can use as card of withholing (such as bank card).

Simulation card receives the first card image acquisition request that payment platform sends, and the first card image obtains request and at least includes that choose first is true The card number of real card and card authentication information；Specifically, simulation card is carried out with payment platform by user by contact or contactless mode Connecting, this payment platform comprises terminal of withholing (such as POS etc.) and payment processes platform (such as bank backstage), will simulate card and be somebody's turn to do Terminal of withholing is connected, in order to withhold, and simulation card receives the first card image that payment platform sends and obtains request, in order to obtain the chosen The Truth cards information of one Truth cards.

Simulation card utilizes analog card bit end safe transmission double secret key the first card image to obtain after request carries out the first process and sends to cutting ferrule, wherein, Analog card bit end safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card；Specifically, simulation card receives the first card letter After breath obtains request, utilize safe transmission double secret key the first card image between cutting ferrule to obtain after request carries out the first process and send to cutting ferrule, carry High data transmission security.The generation process of analog card bit end safe transmission key is referred to the generation of above-mentioned analog card bit end safe transmission key The associated description of journey, is not described in detail in this.

Cutting ferrule receives the data that simulation card sends, after the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, then profit Data after processing with cutting ferrule end the second safe transmission double secret key second send to true card management device after carrying out the first process, wherein, and cutting ferrule end the One safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card, and cutting ferrule end the second safe transmission key is cutting ferrule and Truth cards pipe Reason device generates when setting up secure connection；Specifically, cutting ferrule sends, to simulation card, the data come and carries out the second process, and sends out after carrying out the first process Deliver to Truth cards manager, it is provided that data transmission security, and so that Truth cards manager obtains the first card image and obtains request.Cutting ferrule end First safe transmission key and cutting ferrule end the second safe transmission key are referred to above-mentioned cutting ferrule end the first safe transmission key and cutting ferrule end the second safety The associated description of transmission key generation process, is not described in detail in this.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Sending after process to the first Truth cards chosen, wherein, Truth cards manager end safe transmission key is that cutting ferrule is set up with Truth cards manager Generate during secure connection；Specifically, the data that cutting ferrule is sent by Truth cards manager send after carrying out the second process to first chosen truly blocks Sheet, in order to the first Truth cards chosen obtains the first card image and obtains request, thus card image is returned.Truth cards manager end safety The generation process of transmission key is referred to the associated description of the generation process of above-mentioned Truth cards manager end safe transmission key, the most detailed at this State.

The card image of the first Truth cards chosen is sent to true card management device by the first Truth cards chosen；

Truth cards manager utilizes the card image of the first Truth cards chosen that Truth cards manager end safe transmission double secret key receives to enter Row first sends to cutting ferrule after processing；

Simulation card receiving card set send data, the data utilizing analog card bit end safe transmission double secret key to receive send after carrying out the second process to Payment platform；Specifically, the card image of the first Truth cards got is sent to payment platform by simulation card, thus platform of guaranteeing payment obtains Know which Truth cards of use is withholdd.

Simulation card receives the request of withholing that payment platform sends, and utilizes the analog card bit end safe transmission double secret key request of withholing to send out after carrying out the first process Deliver to cutting ferrule；Specifically, the request of withholing can at least include deducted amount.

Cutting ferrule receives the data that simulation card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, and by the Data after two process are pointed out；Specifically, the request of withholing can be shown or speech play by cutting ferrule, in order to user is in the request of withholing Information confirm.

Cutting ferrule receives the confirmation instruction that the data after instruction the second process are correct, after utilizing cutting ferrule end the second safe transmission double secret key second to process Data send after carrying out the first process to true card management device；Specifically, if user confirms errorless, cutting ferrule is carried out confirm operation (such as Press confirmation button, select the modes such as the confirmation option in menu) generate for confirming the confirmation instruction that the request of withholing is errorless, cutting ferrule receives this confirmation Instruction, in order to cutting ferrule continues executing with subsequent operation；Certainly, if user confirms that the request of withholing is problematic, then can carry out cancelling operation on cutting ferrule, To cancel this transaction.What cutting ferrule received be used for the correct confirmation of the data after instruction second processes to instruct can be to be provided separately within card to put really Recognize what physical button generated, or can be that confirming on the touch screen of cutting ferrule selects in virtual key generation, or the menu shown on cutting ferrule screen Select and confirm what function generated, or can be that the voice that the voice acquisition device (such as Mike) of cutting ferrule receives is when confirming indicate and be verified rear Generate, or can be that the fingerprint acquisition device of cutting ferrule receives generation after fingerprint identification indicates and is verified, or can be the rainbow of cutting ferrule Film harvester receives generation after iris confirms instruction and is verified, it is, of course, also possible to generate for other any modes, in the present invention It is not restricted.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Send after process to the first Truth cards chosen；

Choose first Truth cards receive Truth cards manager send data, and the data received are traded process after by trading processing The data of rear acquisition send to true card management device；Specifically, the first Truth cards chosen receive that Truth cards manager sends true and After complete data, it is traded the data received processing, in order to confirming to complete transaction, the first Truth cards chosen is traded place The process of reason is referred to the flow process that existing smart card is traded processing, and is not described in detail in this.

Truth cards manager receives the data that the first Truth cards chosen sends, and utilizes Truth cards manager end safe transmission double secret key to receive To data carry out the first process after send to cutting ferrule；

Simulation card receiving card overlaps the data sent, and the data utilizing analog card bit end safe transmission double secret key to receive carry out transmission after the second process Operation of withholing is carried out to payment platform；Specifically, the number after payment platform receives the first Truth cards trading processing chosen that simulation card sends According to, and the operation that performs to withhold after being verified, certainly, after payment platform has performed to withhold operation, it is also possible to generation payment successful information, in order to Inform that user pays successfully.

Cutting ferrule prompting cutting ferrule end Truth cards information list；Specifically, supplementing with money after platform determines successful payment, user may select card (example to be supplemented with money Such as bank card), in order to supplement with money for card to be supplemented with money.

Cutting ferrule receives the second Truth cards and selects instruction, determines the second Truth cards chosen；Specifically, cutting ferrule determines the second Truth cards chosen For card to be supplemented with money, such as mass transit card etc., now, the simulation card in notebook data interworking architecture can be as card to be supplemented with money (such as mass transit card) Use.

Simulation card receives supplements the second card image acquisition request that platform sends with money, and the second card image obtains request and at least includes that choose second is true The real card number of card, card authentication information；Specifically, simulation card is carried out even with supplementing platform with money by user by contact or contactless mode Connecing, this supplements platform with money can include that processing platform is supplemented on front end top-up machines and backstage with money, such as: mass transit card supplements platform etc. with money, and simulation card receives supplements with money The second card image that platform sends obtains request, in order to obtain the Truth cards information of the second Truth cards chosen.

Simulation card utilizes analog card bit end safe transmission double secret key the second card image to obtain after request carries out the first process and sends to cutting ferrule, wherein, Analog card bit end safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card；Specifically, simulation card receives the second card letter After breath obtains request, utilize the safe transmission double secret key card image between cutting ferrule to obtain after request carries out the first process and send to cutting ferrule, improve number According to transmission security.The generation process of analog card bit end safe transmission key is referred to the generation process of above-mentioned analog card bit end safe transmission key Associated description, is not described in detail in this.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Sending after process to the second Truth cards chosen, wherein, Truth cards manager end safe transmission key is that cutting ferrule is set up with Truth cards manager Generate during secure connection；Specifically, the data that cutting ferrule is sent by Truth cards manager send to the Truth cards chosen after carrying out the second process, So that the second Truth cards chosen obtains card image and obtains request, thus card image is returned.Truth cards manager end safe transmission key Generation process be referred to the associated description of generation process of above-mentioned Truth cards manager end safe transmission key, be not described in detail in this.

The card image of the Truth cards chosen is sent to true card management device by the second Truth cards chosen；

Truth cards manager utilizes the card image of the second Truth cards chosen that Truth cards manager end safe transmission double secret key receives to enter Row first sends to cutting ferrule after processing；

Simulation card receiving card set send data, the data utilizing analog card bit end safe transmission double secret key to receive send after carrying out the second process to Supplement platform with money；Specifically, the card image of the second Truth cards got is sent to supplementing platform with money by simulation card, thus ensures that supplementing platform with money obtains Know and for which Truth cards supplement with money.

Simulation card receive supplement with money platform generate supplement bag with money；Specifically, supplement platform with money determine successful payment and get the second Truth cards chosen Card image after, generate supplement bag with money, in order to the second Truth cards chosen can carry out supplementing operation with money according to supplementing bag with money.Wherein supplement bag with money at least to wrap Include: recharge amount.

Simulation card utilizes analog card bit end safe transmission double secret key to supplement with money after bag carries out the first process and sends to cutting ferrule；

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Send after process to the second Truth cards chosen；

The second Truth cards chosen receives the data after the second process that Truth cards manager sends, and performs to supplement operation with money.Specifically, choose Second Truth cards gets after supplementing bag with money, supplements operation with money according to supplementing bag execution with money, thus completes to supplement with money.

Based on aforesaid way, the data interaction framework of the present invention can complete to supplement Truth cards with money, extends answering of data interaction framework of the present invention With, it is user-friendly to.

3, the second Truth cards is that the first Truth cards is supplemented with money:

In a kind of application scenarios that the present embodiment provides, user is based on above-mentioned data interaction framework, it is possible to achieve Truth cards is filled by Truth cards Value, such as being swiped the card by bank card is supplemented with money to mass transit card or swiped the card by bank card supplements with money to electricity card.In this application scene, the second Truth cards Different from the first Truth cards type, the second Truth cards is the Truth cards that can withhold, and the first Truth cards is Truth cards to be supplemented with money.

Cutting ferrule, from the Truth cards being connected with Truth cards manager, determines the first Truth cards chosen；

Supplement platform with money and obtained the card image of the first Truth cards chosen, wherein, card by simulation card, cutting ferrule and Truth cards manager Information includes: the card number of the first Truth cards chosen, card authentication information；

Cutting ferrule, from the Truth cards being connected with Truth cards manager, determines the second Truth cards chosen；

Payment platform carries out, with the second Truth cards chosen, process of withholing by cutting ferrule, Truth cards manager；

Supplement platform generation with money supplement bag with money and sent to the Truth cards chosen by simulation card, cutting ferrule and Truth cards manager, wherein, supplement with money Bag is pointed out through cutting ferrule and confirms；

Cutting ferrule prompting cutting ferrule end Truth cards information list；

Cutting ferrule receives the first Truth cards and selects instruction, determines the first Truth cards chosen；Specifically, cutting ferrule determines the first Truth cards chosen For card to be supplemented with money, such as mass transit card etc., now, the simulation card in notebook data interworking architecture can be as card to be supplemented with money (such as mass transit card) Use.

Simulation card receives supplements the first card image acquisition request that platform sends with money, and the first card image obtains request and at least includes that choose first is true The card number of real card and card authentication information；Specifically, simulation card is carried out with supplementing platform with money by user by contact or contactless mode Connecting, this supplements platform with money can include that processing platform is supplemented on front end top-up machines and backstage with money, such as: mass transit card supplements platform with money or platform etc. supplemented with money by electricity card, Simulation card is connected with this front end top-up machines, simulates card and receive the first card image acquisition request supplementing platform transmission with money, in order to acquisition is chosen The Truth cards information of the first Truth cards.

Simulation card receiving card set send data, the data utilizing analog card bit end safe transmission double secret key to receive send after carrying out the second process to Supplement platform with money；Specifically, the card image of the first Truth cards got is sent to supplementing platform with money by simulation card, thus ensures that supplementing platform with money obtains Know and for which Truth cards supplement with money.

Cutting ferrule receives the mark of supplementing with money supplementing platform transmission with money, display cutting ferrule end Truth cards information list；Specifically, cutting ferrule receives and supplements platform transmission with money Supplement mark with money, supplement with money being shown to be any card, prompting user is chosen as the second Truth cards that the first Truth cards (treating rechargeable card) is supplemented with money simultaneously (card of withholing).This supplements mark with money can comprise that the first Truth cards card number to be supplemented with money, order number, recharge amount etc. are a kind of or a combination thereof.

Cutting ferrule receives the second Truth cards and selects instruction, determines the second Truth cards chosen；Specifically, cutting ferrule determines the second Truth cards chosen For card of withholing, such as bank card etc..

Simulation card receives the second card image acquisition request that payment platform sends, and the second card image obtains request and at least includes that choose second is true The card number of real card and card authentication information；Specifically, simulation card is carried out with payment platform by user by contact or contactless mode Connecting, this payment platform comprises terminal of withholing (such as POS etc.) and payment processes platform (such as bank backstage), will simulate card and be somebody's turn to do Terminal of withholing is connected, in order to withhold, and simulation card receives the second card image that payment platform sends and obtains request, in order to obtain the chosen The Truth cards information of two Truth cards.

Simulation card utilizes analog card bit end safe transmission double secret key the second card image to obtain after request carries out the first process and sends to cutting ferrule, wherein, Analog card bit end safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card；Specifically, simulation card receives the second card letter After breath obtains request, utilize safe transmission double secret key the second card image between cutting ferrule to obtain after request carries out the first process and send to cutting ferrule, carry High data transmission security.The generation process of analog card bit end safe transmission key is referred to the generation of above-mentioned analog card bit end safe transmission key The associated description of journey, is not described in detail in this.

Cutting ferrule receives the data that simulation card sends, after the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, then profit Data after processing with cutting ferrule end the second safe transmission double secret key second send to true card management device after carrying out the first process, wherein, and cutting ferrule end the One safe transmission key is that cutting ferrule generates with simulating when secure connection set up by card, and cutting ferrule end the second safe transmission key is cutting ferrule and Truth cards pipe Reason device generates when setting up secure connection；Specifically, cutting ferrule sends, to simulation card, the data come and carries out the second process, and sends out after carrying out the first process Deliver to Truth cards manager, it is provided that data transmission security, and so that Truth cards manager obtains the second card image and obtains request.Cutting ferrule end First safe transmission key and cutting ferrule end the second safe transmission key are referred to above-mentioned cutting ferrule end the first safe transmission key and cutting ferrule end the second safety The associated description of transmission key generation process, is not described in detail in this.

Truth cards manager receives the data that cutting ferrule sends, and the data utilizing Truth cards manager end safe transmission double secret key to receive carry out second Sending after process to the second Truth cards chosen, wherein, Truth cards manager end safe transmission key is that cutting ferrule is set up with Truth cards manager Generate during secure connection；Specifically, the data that cutting ferrule is sent by Truth cards manager send after carrying out the second process to second chosen truly blocks Sheet, in order to the second Truth cards chosen obtains the second card image and obtains request, thus card image is returned.Truth cards manager end safety The generation process of transmission key is referred to the associated description of the generation process of above-mentioned Truth cards manager end safe transmission key, the most detailed at this State.

The card image of the second Truth cards chosen is sent to true card management device by the second Truth cards chosen；

Simulation card receiving card set send data, the data utilizing analog card bit end safe transmission double secret key to receive send after carrying out the second process to Payment platform；Specifically, the card image of the second Truth cards got is sent to payment platform by simulation card, thus platform of guaranteeing payment obtains Know which Truth cards of use is withholdd.

Simulation card receives the request of withholing that payment platform sends, and utilizes the analog card bit end safe transmission double secret key request of withholing to send out after carrying out the first process Deliver to cutting ferrule；Specifically, the request of withholing can at least include deducted amount and the first Truth cards card number.

Choose second Truth cards receive Truth cards manager send data, and the data received are traded process after by trading processing The data of rear acquisition send to true card management device；Specifically, the second Truth cards chosen receive that Truth cards manager sends true and After complete data, it is traded the data received processing, in order to confirming to complete transaction, the second Truth cards chosen is traded place The process of reason is referred to the flow process that existing smart card is traded processing, and is not described in detail in this.

Truth cards manager receives the data that the second Truth cards chosen sends, and utilizes Truth cards manager end safe transmission double secret key to receive To data carry out the first process after send to cutting ferrule；

Simulation card receiving card overlaps the data sent, and the data utilizing analog card bit end safe transmission double secret key to receive carry out transmission after the second process To payment platform；

Simulation card utilizes analog card bit end safe transmission double secret key to pay after successful information carries out the first process and sends to cutting ferrule, wherein, pays successfully Information is to generate after payment platform successful execution pays；Specifically, payment platform number after receiving the second Truth cards trading processing chosen According to, after being verified, performing to withhold operation, after the operation that performed to withhold, generate payment successful information, this payment successful information can include selecting In the first Truth cards card number or other be expressed as which information of supplementing with money of card, as long as supplementing with money, platform is follow-up to be known for withholing into which card is supplemented with money Merit performs.

Cutting ferrule receives the data that simulation card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process, cue card Set end Truth cards information list；

Cutting ferrule receives the first Truth cards and selects instruction, determines the first Truth cards chosen；Specifically, user chooses the first Truth cards again, To complete the first Truth cards is supplemented with money operation.

Simulation card receive supplement with money platform send supplement bag with money, wherein, supplement with money bag by supplement with money platform receive payment successful information after generate；Specifically, Payment successful information can also directly be sent to supplementing platform with money by payment platform, or payment successful information is sent to supplementing platform with money by cutting ferrule, in order to fills Value platform is known and is paid successfully, and generates and supplement bag with money, in order to supplements this with money bag and sends to the first Truth cards chosen and complete to supplement with money.

First Truth cards receives the data that Truth cards manager sends, and performs to supplement operation with money.Specifically, the first Truth cards chosen gets After supplementing bag with money, supplement operation with money according to supplementing bag execution with money, thus complete to supplement with money.

Based on aforesaid way, the data interaction framework of the present invention can complete to utilize the second Truth cards to supplement the first Truth cards with money, extends this The application of invention data interaction framework, is user-friendly to.

4, account is supplemented with money to Truth cards:

In a kind of application scenarios that the present embodiment provides, user is based on above-mentioned data interaction framework, it is possible to achieve Truth cards is supplemented with money by account, Such as supplemented with money to mass transit card by Alipay or Net silver.

Cutting ferrule logs in payment platform, and payment platform obtains after supplementing mark with money and carries out process of withholing；

After supplementing the payment successful information that platform receives payment platform generation with money, generate and supplement bag with money and managed by simulation card, cutting ferrule and Truth cards Device sends to the Truth cards chosen, and wherein, supplements bag with money and points out through cutting ferrule and confirm；

Cutting ferrule prompting cutting ferrule end Truth cards information list；

Cutting ferrule logs in payment platform；Specifically, cutting ferrule can log in payment platform, and this payment platform can be Alipay, or Net silver, in order to complete Become withhold operation, such as user to log in Alipay directly to withhold from Alipay, or user logs in Net silver and directly withholds from Net silver, or user logs in Alipay is also withholdd by the Net silver bound with Alipay.

Cutting ferrule receives the payment successful information that payment platform sends, and wherein, pays successful information and is generated after performing delivery operation by payment platform；Tool Body ground, payment platform can generate payment successful information after completing to pay, and this payment successful information is sent to cutting ferrule, in order to user knows payment Success.Payment platform, before performing delivery operation, also obtains and supplements mark with money, and this is supplemented mark with money and can obtain in the following way: mode one, mould Intend card receive supplement that platform sends with money supplement mark with money, utilize analog card bit end safe transmission double secret key to supplement mark with money and carry out sending to card after the first process Set, cutting ferrule receives the data that simulation card sends, and the data utilizing cutting ferrule end the first safe transmission double secret key to receive carry out the second process and supplemented with money Mark, and sent to payment platform by cutting ferrule.Wherein, supplement with money to be designated and supplement what platform generated after receiving the data after simulation card second processes with money, Specifically, after supplementing the card image that platform gets the first Truth cards that simulation card sends with money, can generate and supplement mark with money, so which to be designated as Truth cards carries out supplementing with money and recharge amount, and this supplements mark with money can be that this supplements the order number etc. of generation with money.Mode two, supplement with money platform receive Generate after data after the second process of simulation card and supplement mark with money, directly supplement this with money mark and send to payment platform.It addition, payment platform is according to filling Value mark pays, in order to knows and for which Truth cards carries out paying and payment.

Simulation card receive supplement with money platform send supplement bag with money, wherein, supplement with money wrap by supplement with money platform receive payment platform generate payment successful information Rear generation；Specifically, payment successful information is also sent to supplementing platform with money by payment platform, or payment platform will pay successful information and send to cutting ferrule, And sent to supplementing platform with money by cutting ferrule, in order to supplement platform with money and know and pay successfully, and generate and supplement bag with money, in order to supplement this with money bag and send true to choose Real card completes to supplement with money.

Truth cards receives the data that Truth cards manager sends, and performs to supplement operation with money.Specifically, the Truth cards chosen gets after supplementing bag with money, Supplement operation with money according to supplementing bag execution with money, thus complete to supplement with money.

Based on aforesaid way, the data interaction framework of the present invention can complete to utilize account to supplement Truth cards with money, extend data interaction of the present invention The application of framework, is user-friendly to.

In all embodiments of the invention, all of normal data interaction between cutting ferrule and simulation card, simulation card is respectively positioned on having of cutting ferrule In effect communication range, if cutting ferrule detects the simulation card efficient communication scope beyond cutting ferrule, then cutting ferrule can be pointed out, or cutting ferrule will Information sends and points out to user terminal (such as smart mobile phone, panel computer etc.) place, in order to prompting user simulates the position of card to be occurred Abnormal, thus improve simulation card safety in utilization.

In flow chart or at this, any process described otherwise above or method description are construed as, and represent and include that one or more is for reality The module of code, fragment or the part of the executable instruction of the step of existing specific logical function or process, and the model of the preferred embodiment of the present invention Enclose and include other realization, wherein can not by order that is shown or that discuss, including according to involved function by basic mode simultaneously or by phase Anti-order, performs function, and this should be understood by embodiments of the invention person of ordinary skill in the field.

Should be appreciated that each several part of the present invention can realize by hardware, software, firmware or combinations thereof.In the above-described embodiment, multiple Step or method can realize with software or the firmware that storage in memory and is performed by suitable instruction execution system.Such as, if using hardware Realize, with the most the same, can realize by any one in following technology well known in the art or their combination: there is use In the discrete logic of the logic gates that data signal is realized logic function, there is the special IC of suitable combination logic gate circuit, Programmable gate array (PGA), field programmable gate array (FPGA) etc..

Those skilled in the art are appreciated that realizing all or part of step that above-described embodiment method carries can be by program The hardware that instruction is relevant completes, and described program can be stored in a kind of computer-readable recording medium, and this program is upon execution, real including method One or a combination set of step executing example.

Additionally, each functional unit in each embodiment of the present invention can be integrated in a processing module, it is also possible to be the independent physics of unit Exist, it is also possible to two or more unit are integrated in a module.Above-mentioned integrated module both can realize to use the form of hardware, it is possible to To use the form of software function module to realize.If described integrated module realizes and as independent production marketing using the form of software function module Or when using, it is also possible to it is stored in a computer read/write memory medium.

Storage medium mentioned above can be read only memory, disk or CD etc..

In the description of this specification, reference term " embodiment ", " some embodiments ", " example ", " concrete example " or " some examples " Deng description means to combine this embodiment or example describes specific features, structure, material or feature be contained at least one embodiment of the present invention Or in example.In this manual, the schematic representation to above-mentioned term is not necessarily referring to identical embodiment or example.And, the tool of description Body characteristics, structure, material or feature can combine in any one or more embodiments or example in an appropriate manner.

Although above it has been shown and described that embodiments of the invention, it is to be understood that above-described embodiment is exemplary, it is impossible to it is right to be interpreted as The restriction of the present invention, those of ordinary skill in the art in the case of without departing from the principle of the present invention and objective within the scope of the invention can on State embodiment to be changed, revise, replace and modification.The scope of the present invention is limited by claims and equivalent thereof.

Claims

1. a data interactive method, it is characterised in that including:

Cutting ferrule sets up secure connection with simulation card, it is thus achieved that the cutting ferrule end first carrying out Security Data Transmission between described cutting ferrule and described simulation card is pacified Full transmission key and analog card bit end safe transmission key, and described cutting ferrule sets up secure connection with Truth cards manager, it is thus achieved that described cutting ferrule with Cutting ferrule end the second safe transmission key and the Truth cards manager end safe transmission that carry out Security Data Transmission between described Truth cards manager are close Key；

Described cutting ferrule obtains cutting ferrule end Truth cards information list, and wherein, described cutting ferrule end Truth cards information list is that described cutting ferrule is from Truth cards The Truth cards manager end Truth cards information list obtained in manager, described Truth cards manager end Truth cards information list includes and institute State the Truth cards information of the Truth cards that Truth cards manager connects；

Described cutting ferrule end Truth cards information list pointed out by described cutting ferrule；

Described cutting ferrule receives Truth cards and selects instruction, determines the Truth cards chosen；And described simulation card receives the data that transaction terminal sends, And the data utilizing described analog card bit end safe transmission double secret key to receive carry out the first process after send to cutting ferrule；

Described cutting ferrule receives the data that described simulation card sends, and the data utilizing described cutting ferrule end the first safe transmission double secret key to receive carry out the After two process, the data after prompting the second process, and after receiving the confirmation instruction that the data after indicating described second to process are correct, utilize described Data after second process described in cutting ferrule end the second safe transmission double secret key send to described Truth cards manager after carrying out the first process；

Described Truth cards manager receives the data that described cutting ferrule sends, and utilizes described Truth cards manager end safe transmission double secret key to receive Data carry out the second process after send to described in the Truth cards chosen.

Method the most according to claim 1, it is characterised in that also include:

The Truth cards that described Truth cards manager pair is connected with described Truth cards manager detects；

Described Truth cards manager, after the Truth cards being connected with described Truth cards manager being detected, obtains the true card of described Truth cards Sheet information, wherein, described Truth cards information at least includes: card number；

After described Truth cards manager obtains the Truth cards information of described Truth cards, generate Truth cards manager end Truth cards information row Table.

Method the most according to claim 2, it is characterised in that also include:

Described Truth cards manager also generates Truth cards manager end identification list, the mark in described Truth cards manager end identification list with Truth cards information one_to_one corresponding in described Truth cards manager end Truth cards information list.

Method the most according to claim 1, it is characterised in that described cutting ferrule receives Truth cards and selects instruction, determines the true card chosen Sheet；Including:

Described cutting ferrule receives Truth cards and selects instruction, obtains and chooses mark, wherein, described in choose and identify the Truth cards chosen described in indicate；

Described cutting ferrule chooses mark to send to described Truth cards manager by described；

Described Truth cards manager according to described in choose mark from the described Truth cards being connected with described Truth cards manager, determine with described Choose the Truth cards chosen described in mark correspondence.

Method the most according to claim 1, it is characterised in that

Secure connection is set up, it is thus achieved that between described cutting ferrule and described Truth cards manager, carry out data at described cutting ferrule and described Truth cards manager Before cutting ferrule end the second safe transmission key of safe transmission and Truth cards manager end safe transmission key, also include:

Described cutting ferrule sends logging request to described Truth cards manager；

Secure connection is set up, it is thus achieved that between described cutting ferrule and described Truth cards manager, carry out data at described cutting ferrule and described Truth cards manager After cutting ferrule end the second safe transmission key of safe transmission and Truth cards manager end safe transmission key, also include:

Described cutting ferrule sends to described true card after carrying out the first process by the login password that described cutting ferrule end the second safe transmission double secret key receives Sheet manager；

Described Truth cards manager receives the data that described cutting ferrule sends, and utilizes described Truth cards manager end safe transmission double secret key to receive Data verify the correctness of the data after the second process after carrying out the second process；

After described Truth cards manager data after checking described second processes are passed through, described cutting ferrule logs in described Truth cards manager.

Method the most according to claim 5, it is characterised in that described Truth cards manager utilizes described Truth cards manager end safety The correctness of data after the transmission data that receive of double secret key verify the second process after carrying out the second process includes:

After the data that described Truth cards manager utilizes described Truth cards manager end safe transmission double secret key to receive carry out the second process, it is thus achieved that Password to be verified；

Described Truth cards manager judges whether described password to be verified is alarm cipher；

If described password to be verified is alarm cipher, the most described Truth cards manager determines that described password authentification to be verified is passed through, and performs warning Operation；

If described password to be verified is not alarm cipher and is login password, the most described Truth cards manager determines that described password authentification to be verified is led to Cross.

7. according to the method described in claim 5 or 6, it is characterised in that after described cutting ferrule logs in described Truth cards manager, also include:

Cutting ferrule end identification list searched by described cutting ferrule；

If described cutting ferrule finds described cutting ferrule end identification list, then utilize cutting ferrule end identity column described in described cutting ferrule end the second safe transmission double secret key Table sends after carrying out the first process to described Truth cards manager, and described Truth cards manager receives the data that described cutting ferrule sends, and utilizes described After the data that Truth cards manager end safe transmission double secret key receives carry out the second process, it is judged that the data after the second process and described Truth cards The Truth cards manager end identification list of manager storage is the most identical, if it is not the same, the most described Truth cards manager utilizes described true card Sheet manager end safe transmission double secret key updates instruction and more new data carries out sending after the first process to described cutting ferrule, described cutting ferrule receive described very The data that real card management device sends, after the data utilizing described cutting ferrule end the second safe transmission double secret key to receive carry out the second process, update described Cutting ferrule end Truth cards information list；

If described cutting ferrule does not finds described cutting ferrule end identification list, then utilize described cutting ferrule end the second safe transmission double secret key to preset mark and carry out Sending after one process to described Truth cards manager, described Truth cards manager receives the data that described cutting ferrule sends, utilizes described Truth cards After the data that manager end safe transmission double secret key receives carry out the second process, described Truth cards manager determine the data after the second process for When instruction cutting ferrule end does not stores cutting ferrule end identification list, utilize described Truth cards manager end safe transmission double secret key to update instruction and more new data enters Row first sends to described cutting ferrule after processing, and described cutting ferrule receives the data that described Truth cards manager sends, and utilizes described cutting ferrule end second to pacify After the data that full transmission double secret key receives carry out the second process, update described cutting ferrule end Truth cards information list.

8. according to the method described in claim 5 or 6, it is characterised in that after described cutting ferrule logs in described Truth cards manager, also include:

Described Truth cards manager utilizes described true cutting ferrule manager end safe transmission double secret key Truth cards manager end identification list to carry out Send to described cutting ferrule after one process；

Described cutting ferrule receives the data that described Truth cards manager sends, and the data utilizing cutting ferrule end the second safe transmission double secret key to receive carry out the After two process, it is judged that the data after the second process are the most identical with the cutting ferrule end identification list that described cutting ferrule stores；

If it is not the same, the most described cutting ferrule sends more newly requested to described Truth cards manager；

Described Truth cards manager receive described in more newly requested, utilize described Truth cards manager end safe transmission double secret key update instruction and update Data send to described cutting ferrule after carrying out the first process；

Described cutting ferrule receives the data that described Truth cards manager sends, and utilizes the data that described cutting ferrule end the second safe transmission double secret key receives After carrying out the second process, update described cutting ferrule end Truth cards information list.

Method the most according to claim 1, it is characterised in that described cutting ferrule also includes heart beating park mode, wherein, described heart beating dormancy Pattern is the non-operating mode of low-power consumption, and described method also includes:

Described it is fastened under heart beating park mode, sends detection information every the first Preset Time to described Truth cards manager；

Described Truth cards manager receives described detection information, sends response message to described cutting ferrule；

Do not receive described response message in being fastened in the second Preset Time described in if, then disconnect between described cutting ferrule and described Truth cards manager Secure connection；

Receive described response message in being fastened in the second Preset Time described in if, then keep the institute that described cutting ferrule is set up with described Truth cards manager State secure connection.

Method the most according to claim 9, it is characterised in that

Receive in being fastened in the second Preset Time described in if in described response message, and described response message and also comprise renewal information, described side Method also includes:

Described cutting ferrule stores described renewal information；

After described cutting ferrule is entered mode of operation by heart beating park mode, described cutting ferrule sends to described Truth cards manager and updates the request of triggering；

Described Truth cards manager receives described renewal and triggers request, utilizes and truly blocks described in described Truth cards manager end safe transmission double secret key Sheet manager end identification list sends to described cutting ferrule after carrying out the first process；

Described cutting ferrule receives the data that described Truth cards manager sends, and the data utilizing described cutting ferrule end the second safe transmission double secret key to receive are entered After row second processes, it is judged that the data after the second process are the most identical with the cutting ferrule end identification list that described cutting ferrule stores；

11. methods according to claim 9, it is characterised in that

Described cutting ferrule stores described renewal information；

After described cutting ferrule is entered mode of operation by heart beating park mode, described cutting ferrule utilizes described cutting ferrule end the second safe transmission double secret key cutting ferrule end mark Know after list carries out the first process and send to described Truth cards manager；

Described Truth cards manager receives the data that described cutting ferrule sends, and utilizes described Truth cards manager end safe transmission double secret key to receive After data carry out the second process, it is judged that the Truth cards manager end identification list that the data after the second process and described Truth cards manager store is No identical；

If it is not the same, the most described Truth cards manager utilizes described Truth cards manager end safe transmission double secret key to update instruction and more new data Send to described cutting ferrule after carrying out the first process；

12. methods according to claim 1, it is characterised in that described cutting ferrule is set up secure connection with simulation card and included:

Described cutting ferrule sends the first secure connection instruction setting up secure connection for instruction, wherein, described first secure connection to described simulation card Instruction includes: described cutting ferrule utilizes the simulation card PKI in simulation card certificate random to the first connection of cutting ferrule end the first binding factor and generation The factor is encrypted the first connection ciphertext of acquisition, and described cutting ferrule utilizes cutting ferrule private key to connect described cutting ferrule end the first binding factor and described first Random factor carries out the first connection signature that signature obtains；

Described simulation card receives described first secure connection instruction, utilizes simulation card private key to connect ciphertext to described first and is decrypted, it is thus achieved that card Set end first is bound decryption factor and first and is connected the decryption random factor；

Described simulation card utilizes the cutting ferrule PKI in cutting ferrule certificate, described cutting ferrule end first to bind decryption factor and described first connection decryption random Described in factor pair, the first connection signature is verified；

Described simulation card checking described first connect signature correct after, verify described cutting ferrule end first bind decryption factor and the binding of analog card bit end because of Son is the most identical；

Described simulation card verify described cutting ferrule end first bind decryption factor identical with described analog card bit end binding factor after, generate second connect with The machine factor；

Described simulation card utilizes the described cutting ferrule PKI in described cutting ferrule certificate to connect the decryption random factor and described second connection to described first Random factor is encrypted acquisition the second connection ciphertext, utilizes simulation card private key to connect the decryption random factor and described second to described first and connects Random factor carries out signature and obtains the second connection signature；

Described simulation card sends the first secure connection response to described cutting ferrule, and wherein, described first secure connection response includes: described second connects Ciphertext and described second connects signature；

Described cutting ferrule receives described first secure connection response, utilizes described cutting ferrule private key to connect ciphertext to described second and is decrypted, it is thus achieved that after deciphering First connection the decryption random factor and second connect the decryption random factor；

Described cutting ferrule utilizes the first connection decryption random factor after the described simulation card PKI in described simulation card certificate, described deciphering and described Second connects the second connection signature described in decryption random factor pair verifies；

Described cutting ferrule checking described second connect signature correct after, verify after described deciphering the first connection decryption random factor be connected with described first with The machine factor is the most identical；

After described cutting ferrule verifies that the first connection decryption random factor after described deciphering is identical with described first connection random factor, at least with described the Two connect the decryption random factor generates described cutting ferrule end the first safe transmission key between described cutting ferrule and described simulation card；Described simulation card is at least Utilize described second to connect random factor and generate the described analog card bit end safe transmission key between described cutting ferrule and described simulation card.

13. methods according to claim 1, it is characterised in that described cutting ferrule is set up secure connection with simulation card and included:

The 3rd connection random factor and simulation card that the described simulation card that the described cutting ferrule described simulation card of reception sends generates uniquely identify；

Described cutting ferrule sends the second secure connection instruction setting up secure connection for instruction, wherein, described second secure connection to described simulation card Instruction includes: cutting ferrule uniquely identifies, described cutting ferrule utilizes the simulation card PKI in simulation card certificate to connect random factor and life to the described 3rd The 4th connection random factor become be encrypted the 3rd connection ciphertext, described cutting ferrule of acquisition utilize cutting ferrule private key connect the described 3rd random factor with And described 4th connect random factor carry out signature obtain the 3rd connection signature；

Described simulation card receives described second secure connection instruction, it is judged that described cutting ferrule uniquely identifies whether in analog card bit end list of bindings；

If described cutting ferrule uniquely identifies in described analog card bit end list of bindings, described simulation card utilizes simulation card private key to the described 3rd even Connect ciphertext to be decrypted, it is thus achieved that the 3rd connects the decryption random factor and the 4th connects the decryption random factor；

Described simulation card utilize the cutting ferrule PKI in cutting ferrule certificate, described 3rd connect the decryption random factor and described 4th connect decryption random because of Son connects signature to the described 3rd and verifies；

Described simulation card checking the described 3rd connect signature correct after, verify the described 3rd connect the decryption random factor be connected with the described 3rd random because of Son is the most identical；

If it is identical that the described 3rd connection decryption random factor connects random factor with the described 3rd, described simulation card utilizes described simulation card private key Connect the decryption random factor to the described 3rd and the described 4th connection decryption random factor carries out signature and obtains the 4th connection signature；

Described simulation card sends the second secure connection response to described cutting ferrule, and wherein, described second secure connection response includes: the described 4th connects Signature；

Described cutting ferrule receives described second secure connection response, utilizes the described simulation card PKI in described simulation card certificate, the 3rd connection random The factor and the described 4th connects random factor and verifies described 4th connection signature；

After the described 4th connection signature of described cutting ferrule checking is correct, connects random factor at least with the described 4th and cutting ferrule end the first binding factor is raw Become described cutting ferrule end the first safe transmission key between described cutting ferrule and described simulation card；Described simulation card connects random at least with the described 4th Decryption factor and analog card bit end binding factor generate the described analog card bit end safe transmission key between described cutting ferrule and described simulation card；

Described cutting ferrule utilizes the 3rd connection random factor described in described cutting ferrule end the first safe transmission double secret key and described 4th connection random factor to enter Row first sends to described simulation card after processing；Described simulation card utilizes the 3rd connection described in described analog card bit end safe transmission double secret key random Decryption factor and the described 4th connects the decryption random factor and carries out transmission extremely described cutting ferrule after the first process；

Described cutting ferrule receives the data that described simulation card sends, and the data utilizing described cutting ferrule end the first safe transmission double secret key to receive carry out the Two process, compare the data after the second process be connected with the described 3rd random factor and described 4th connection random factor the most identical；Described simulation Card receives the data that described cutting ferrule sends, and the data utilizing described analog card bit end safe transmission double secret key to receive carry out the second process, compare Data after second process are connected the decryption random factor with the described 3rd and the described 4th connection decryption random factor is the most identical.

14. methods according to claim 1, it is characterised in that described cutting ferrule is set up secure connection with Truth cards manager and included:

Described cutting ferrule sends the 3rd secure connection instruction setting up secure connection for instruction, wherein, described 3rd peace to described Truth cards manager Full link order includes: described cutting ferrule utilize Truth cards manager PKI in Truth cards manager certificate to cutting ferrule end the second binding factor and Generate the 5th connection random factor be encrypted acquisition the 5th connection ciphertext, described cutting ferrule utilize cutting ferrule private key described cutting ferrule end second is bound because of Sub and described 5th connects random factor carries out the 5th connection signature that signature obtains；

Described Truth cards manager receives described 3rd secure connection instruction, utilizes Truth cards manager private key to connect ciphertext to the described 5th and carries out Deciphering, it is thus achieved that cutting ferrule end second is bound decryption factor and the 5th and connected the decryption random factor；

Described Truth cards manager utilize the cutting ferrule PKI in cutting ferrule certificate, described cutting ferrule end second bind decryption factor and described 5th connect with Machine decryption factor connects signature to the described 5th and verifies；

After the described 5th connection signature of described Truth cards manager checking is correct, verify that described cutting ferrule end second binds decryption factor and Truth cards pipe Reason device end binding factor is the most identical；

Described Truth cards manager verify described cutting ferrule end second bind decryption factor identical with described Truth cards manager end binding factor after, give birth to Become the 6th connection random factor；

Described Truth cards manager utilizes described cutting ferrule PKI in described cutting ferrule certificate to connect the decryption random factor and described the to the described 5th Six connect random factor is encrypted acquisition the 6th connection ciphertext, utilizes described Truth cards manager private key to connect the decryption random factor to the described 5th And described 6th connect random factor carry out signature obtain the 6th connection signature；

Described Truth cards manager sends the 3rd secure connection response to described cutting ferrule, and wherein, described 3rd secure connection response includes: described the Six connect ciphertext and the described 6th connects signature；

Described cutting ferrule receives described 3rd secure connection response, utilizes described cutting ferrule private key to connect ciphertext to the described 6th and is decrypted, it is thus achieved that after deciphering The 5th connection the decryption random factor and the 6th connect the decryption random factor；

Described cutting ferrule utilizes the 5th connection RANDOM SOLUTION after the described Truth cards manager PKI in described Truth cards manager certificate, described deciphering The close factor and the described 6th connects the 6th connection signature described in decryption random factor pair and verifies；

Described cutting ferrule checking the described 6th connect signature correct after, verify the after described deciphering the 5th connection decryption random factor be connected with the described 5th with The machine factor is the most identical；

After described cutting ferrule verifies that the 5th connection decryption random factor after described deciphering is identical with described 5th connection random factor, at least with described the Six connect the decryption random factor generates described cutting ferrule end the second safe transmission key between described cutting ferrule and described Truth cards manager；Described true card Sheet manager connects random factor at least with the described 6th and generates the described Truth cards manager between described cutting ferrule and described Truth cards manager End safe transmission key.

15. methods according to claim 1, it is characterised in that described cutting ferrule is set up secure connection with Truth cards manager and included:

Described cutting ferrule receives the 7th connection random factor and Truth cards of the described Truth cards manager generation that described Truth cards manager sends Manager uniquely identifies；

Described cutting ferrule sends the 4th secure connection instruction setting up secure connection for instruction, wherein, described 4th peace to described Truth cards manager Full link order includes: cutting ferrule uniquely identifies, described cutting ferrule utilizes the Truth cards manager PKI in Truth cards manager certificate to the described 7th The 8th connection random factor connecting random factor and generation is encrypted the 7th connection ciphertext of acquisition, described cutting ferrule utilizes cutting ferrule private key to described The 7th connection that 7th connection random factor and described 8th connection random factor carry out signature acquisition is signed；

Described Truth cards manager receives described 4th secure connection instruction, it is judged that described cutting ferrule uniquely identifies whether to tie up at Truth cards manager end Determine in list；

If described cutting ferrule uniquely identifies in described Truth cards manager end list of bindings, described Truth cards manager utilizes Truth cards to manage Device private key connects ciphertext to the described 7th and is decrypted, it is thus achieved that the 7th connects the decryption random factor and the 8th connects the decryption random factor；

Described Truth cards manager utilizes the cutting ferrule PKI in cutting ferrule certificate, the described 7th connection decryption random factor and the described 8th to connect random Decryption factor connects signature to the described 7th and verifies；

After the described 7th connection signature of described Truth cards manager checking is correct, verify that the described 7th connection decryption random factor is connected with the described 7th Random factor is the most identical；

If it is identical that the described 7th connection decryption random factor connects random factor with the described 7th, described Truth cards manager utilizes described true card Sheet manager private key connects the decryption random factor to the described 7th and the described 8th connection decryption random factor carries out signature and obtains the 8th connection signature；

Described Truth cards manager sends the 4th secure connection response to described cutting ferrule, and wherein, described 4th secure connection response includes: described the Eight connect signature；

Described cutting ferrule receive described 4th secure connection response, utilize the described Truth cards manager PKI in described Truth cards manager certificate, 7th connection random factor and the described 8th connects random factor and verifies described 8th connection signature；

After the described 8th connection signature of described cutting ferrule checking is correct, connects random factor at least with the described 8th and cutting ferrule end the second binding factor is raw Become described cutting ferrule end the second safe transmission key between described cutting ferrule and described Truth cards manager；Described Truth cards manager is at least with described 8th connect the decryption random factor and Truth cards manager end binding factor generate between described cutting ferrule and described Truth cards manager described very Real card management device end safe transmission key；

Described cutting ferrule utilizes the 7th connection random factor described in described cutting ferrule end the second safe transmission double secret key and described 8th connection random factor to enter Row first sends to described Truth cards manager after processing；Described Truth cards manager utilizes described Truth cards manager end safe transmission key Connect the decryption random factor to the described 7th and the described 8th connection decryption random factor carries out transmission extremely described cutting ferrule after the first process；

Described cutting ferrule receives the data that described Truth cards manager sends, and utilizes the data that described cutting ferrule end the second safe transmission double secret key receives Carry out the second process, compare the data after the second process be connected with the described 7th random factor and described 8th connect random factor the most identical；Institute State Truth cards manager and receive the data that described cutting ferrule sends, and utilize the data that described Truth cards manager end safe transmission double secret key receives Carry out the second process, compare the data after the second process and be connected with the described 7th whether the decryption random factor and the described 8th connects the decryption random factor Identical.

16. according to the method described in claim 12 or 13, it is characterised in that before cutting ferrule sets up secure connection with simulation card, also include:

Described cutting ferrule performs bindings with described simulation card.

17. methods according to claim 16, it is characterised in that described cutting ferrule performs bindings with simulation card and includes:

The reception of described cutting ferrule carries out the trigger command bound for instruction and described simulation card；

Described cutting ferrule sends the first binding instruction to described simulation card, and wherein, described first binding instruction includes: the first of described cutting ferrule generation is tied up Determine random factor, cutting ferrule certificate and cutting ferrule uniquely to identify；

Described simulation card receives described first binding instruction, utilizes root certificate to verify described cutting ferrule certificate；

After described simulation card verifies that described cutting ferrule certificate is legal, generate the second binding random factor；

Described simulation card utilizes the cutting ferrule PKI in described cutting ferrule certificate to described first binding random factor and described second binding random factor It is encrypted acquisition the first binding ciphertext, utilizes simulation card private key that described first binding random factor and described second binding random factor are carried out Signature obtains the first binding signature；

Described simulation card sends the first binding response to described cutting ferrule, and wherein, described first binding response includes: described first binding ciphertext, institute State the first binding signature, simulation card certificate and simulation card uniquely to identify；

Described cutting ferrule receives described first binding response, utilizes root certificate to verify described simulation card certificate；

After described cutting ferrule verifies that described simulation card certificate is legal, utilize described cutting ferrule private key that described first binding ciphertext is decrypted, it is thus achieved that first The binding decryption random factor and the second binding decryption random factor；

Described cutting ferrule utilize the simulation card PKI in described simulation card certificate, described first binding the decryption random factor and described second binding with Described first binding signature is verified by machine decryption factor；

After the described first binding signature of described cutting ferrule checking is correct, verify that the described first binding decryption random factor with described first binding random factor is No identical；

After the described first binding decryption random factor of described cutting ferrule checking is identical with described first binding random factor, described simulation card is pointed out uniquely to mark Know；

Described cutting ferrule receives for confirming that described simulation card uniquely identifies correct trigger command, utilize described cutting ferrule private key to described first binding with The machine factor and described second binding the decryption random factor sign, it is thus achieved that second binding signature, and store described simulation card uniquely identify, Described simulation card certificate and cutting ferrule end the first binding factor are to cutting ferrule end the first list of bindings, and wherein, described cutting ferrule end the first binding factor is institute State the second binding decryption random factor；

Described cutting ferrule sends described second binding signature to described simulation card；

Described simulation card receive described second binding signature, utilize the described cutting ferrule PKI in described cutting ferrule certificate, first binding random factor and Described second binding signature is verified by described second binding random factor；

After the described second binding signature of described simulation card checking is correct, store described cutting ferrule uniquely identify, described cutting ferrule certificate and analog card bit end Binding factor is to analog card bit end list of bindings, and wherein, described analog card bit end binding factor is described second binding random factor.

18. according to the method described in claims 14 or 15, it is characterised in that before cutting ferrule sets up secure connection with Truth cards manager, Also include:

Described cutting ferrule performs bindings with described Truth cards manager.

19. methods according to claim 18, it is characterised in that described cutting ferrule and Truth cards manager perform bindings and include:

The reception of described cutting ferrule carries out the trigger command bound for instruction and described Truth cards manager；

Described cutting ferrule sends the second binding instruction by wireless network to described Truth cards manager, and wherein, described second binding instruction includes: institute The 3rd binding random factor, cutting ferrule certificate and the cutting ferrule of stating cutting ferrule generation uniquely identify；

Described Truth cards manager receives described second binding instruction, utilizes root certificate to verify described cutting ferrule certificate；

After described Truth cards manager verifies that described cutting ferrule certificate is legal, generate the 4th binding random factor；

Described Truth cards manager utilize cutting ferrule PKI in described cutting ferrule certificate to described 3rd binding random factor and described 4th binding with The machine factor is encrypted acquisition the second binding ciphertext, utilizes Truth cards manager private key to described 3rd binding random factor and described 4th binding Random factor carries out signature and obtains the 3rd binding signature；

Described Truth cards manager sends the second binding response by wireless network to described cutting ferrule, and wherein, described second binding response includes: institute State the second binding ciphertext, described 3rd binding signature, Truth cards manager certificate and Truth cards manager uniquely to identify；

Described cutting ferrule receives described second binding response, utilizes root certificate to verify described Truth cards manager certificate；

After described cutting ferrule verifies that described Truth cards manager certificate is legal, utilize described cutting ferrule private key that described second binding ciphertext is decrypted, obtain Obtain the 3rd binding decryption random factor and the 4th binding decryption random factor；

Described cutting ferrule utilizes the Truth cards manager PKI in described Truth cards manager certificate, the described 3rd binding decryption random factor and institute State the 3rd binding signature described in the 4th binding decryption random factor pair to verify；

After the described 3rd binding signature of described cutting ferrule checking is correct, verify that the described 3rd binding decryption random factor with described 3rd binding random factor is No identical；

After the described 3rd binding decryption random factor of described cutting ferrule checking is identical with described 3rd binding random factor, point out described Truth cards manager Unique mark；

Described cutting ferrule receives for confirming that described Truth cards manager uniquely identifies correct trigger command, utilizes described cutting ferrule private key to the described 3rd Binding random factor and the described 4th binding decryption random factor are signed, it is thus achieved that the 4th binding signature, and store the management of described Truth cards Device uniquely identifies, described Truth cards manager certificate and cutting ferrule end the second binding factor be to cutting ferrule end the second list of bindings, wherein, described cutting ferrule Holding the second binding factor is the described 4th binding decryption random factor；

Described cutting ferrule sends described 4th binding signature to described Truth cards manager；

Described Truth cards manager receive described 4th binding signature, utilize the described cutting ferrule PKI in described cutting ferrule certificate, the 3rd binding random because of Described 4th binding signature is verified by sub and described 4th binding random factor；

After the described 4th binding signature of described Truth cards manager checking is correct, store described cutting ferrule uniquely identify, described cutting ferrule certificate and true Card management device end binding factor is to true card management device end list of bindings, and wherein, described Truth cards manager end binding factor is the described 4th Binding random factor.

20. according to the method described in any one of claim 1 to 19, it is characterised in that also include:

Described cutting ferrule sends to updating platform to cutting ferrule certificate described in major general；

Described renewal platform generates the first renewal encryption key；

Described renewal platform utilizes described first to update encryption key and cutting ferrule application program installation kit is encrypted acquisition the first installation kit ciphertext；

Described renewal platform utilizes renewal platform private key that described first installation kit ciphertext carries out signature and obtains the first installation kit signature；

Described renewal platform utilizes the described cutting ferrule public key encryption first in described cutting ferrule certificate to update encryption key, it is thus achieved that the first renewal encryption key is close Literary composition；

Cutting ferrule more fresh information is sent to described cutting ferrule by described renewal platform, and wherein, described cutting ferrule more fresh information includes: update platform credential, described First installation kit ciphertext, described first installation kit signature and described first update encryption key ciphertext；

Described cutting ferrule receives described cutting ferrule more fresh information, utilizes renewal platform credential described in root certification authentication；

After described cutting ferrule verifies that described renewal platform credential is passed through, utilize the renewal platform PKI in described renewal platform credential to described first installation kit Signature carries out sign test；

After the described first installation kit signature of described cutting ferrule checking is correct, described cutting ferrule private key deciphering described first is utilized to update encryption key ciphertext, it is thus achieved that First decruption key；

Described cutting ferrule utilizes the first installation kit ciphertext described in described first decryption key decryption, it is thus achieved that described cutting ferrule application program installation kit；

Described cutting ferrule verifies that the data form of described cutting ferrule application program installation kit is the most correct；

If the data form that described cutting ferrule application program installation kit verified by described cutting ferrule is correct, described cutting ferrule is according to described cutting ferrule application program installation kit Install.

21. according to the method described in any one of claim 1 to 19, it is characterised in that also include:

Described cutting ferrule obtains described simulation card certificate from described simulation card, sends to updating platform to simulating card certificate described in major general；

Described renewal platform generates the second renewal encryption key；

Described renewal platform utilizes described second to update encryption key and simulation card application program installation kit is encrypted acquisition the second installation kit ciphertext；

Described renewal platform utilizes renewal platform private key that described second installation kit ciphertext carries out signature and obtains the second installation kit signature；

Described renewal platform utilizes the described simulation card public key encryption second in described simulation card certificate to update encryption key, it is thus achieved that the second renewal adds Decryption key ciphertext；

Simulation card is updated information transmission extremely described cutting ferrule by described renewal platform, and wherein, described simulation card updates information and includes: update platform card Book, described second installation kit ciphertext, described second installation kit signature and described second update encryption key ciphertext；

Described cutting ferrule receives described simulation card and updates information, utilizes simulation card described in described cutting ferrule end the first safe transmission double secret key to update information and enters Row first sends to described simulation card after processing；

Described simulation card receives the data that described cutting ferrule sends, and the data utilizing described analog card bit end safe transmission double secret key to receive carry out second After process, it is thus achieved that described simulation card updates information；

Described simulation card utilizes renewal platform credential described in root certification authentication；

After described simulation card verifies that described renewal platform credential is passed through, utilize the renewal platform PKI in described renewal platform credential to the second installation kit Signature carries out sign test；

After the described second installation kit signature of described simulation card checking is correct, described simulation card private key deciphering described second is utilized to update encryption key close Literary composition, it is thus achieved that the second decruption key；

Described simulation card utilizes the second installation kit ciphertext described in described second decryption key decryption, it is thus achieved that described simulation card application program installation kit；

Described simulation card verifies that the data form of described simulation card application program installation kit is the most correct；

If the data form that described simulation card application program installation kit verified by described simulation card is correct, described simulation card is according to described analog card Sheet application program installation kit is installed.

22. according to the method described in any one of claim 1 to 19, it is characterised in that also include:

Described Truth cards manager sends to updating platform to Truth cards manager certificate described in major general；

Described renewal platform generates the 3rd renewal encryption key；

Described renewal platform utilizes the described 3rd to update encryption key and Truth cards manager application installation kit is encrypted acquisition the 3rd installation Bag ciphertext；

Described renewal platform utilizes renewal platform private key that described 3rd installation kit ciphertext carries out signature and obtains the 3rd installation kit signature；

Described renewal platform utilizes the described Truth cards manager public key encryption the 3rd in described Truth cards manager certificate to update encryption key, obtains Obtain the 3rd renewal encryption key ciphertext；

Truth cards manager more fresh information is sent to described Truth cards manager by described renewal platform, and wherein, described Truth cards manager is more Fresh information includes: update platform credential, described 3rd installation kit ciphertext, described 3rd installation kit signature and described 3rd renewal encryption key ciphertext；

Described Truth cards manager receives described Truth cards manager more fresh information, utilizes renewal platform credential described in root certification authentication；

After described Truth cards manager verifies that described renewal platform credential is passed through, utilize the renewal platform PKI in described renewal platform credential to described 3rd installation kit signature carries out sign test；

After the described 3rd installation kit signature of described Truth cards manager checking is correct, utilize the deciphering of described Truth cards manager private key described the depth of the night New encryption key ciphertext, it is thus achieved that the 3rd decruption key；

Described Truth cards manager utilizes the 3rd installation kit ciphertext described in described 3rd decryption key decryption, it is thus achieved that described Truth cards manager application Program installation kit；

Described Truth cards manager verifies that the data form of described Truth cards manager application installation kit is the most correct；

If the data form that described Truth cards manager application installation kit verified by described Truth cards manager is correct, described Truth cards pipe Reason device is installed according to described Truth cards manager application installation kit.

23. according to the method described in any one of claim 1 to 19, it is characterised in that

Described first process includes: encryption, and described second process includes: decryption processing；Or

Described first process includes: verification calculating processes, and described second process includes: verification verifies that calculating processes；Or

Described first process includes: encrypts and verifies calculating and process, and described second process includes: deciphers and verifies checking calculating and process.

24. according to the method described in any one of claim 1 to 19, it is characterised in that described Truth cards manager is according to the peace of Truth cards Full property grade, what the access limit of the Truth cards information of the Truth cards being connected with described Truth cards manager was opened and/or closed sets Put.

25. according to the method described in any one of claim 1 to 19, it is characterised in that described cutting ferrule detects that described simulation card is beyond described During the efficient communication scope of cutting ferrule, carry out safety instruction.

26. according to the method described in any one of claim 1 to 25, it is characterised in that described cutting ferrule is mobile device.

27. according to the method described in any one of claim 1 to 25, it is characterised in that described cutting ferrule is mobile device and electronic signature equipment, Or described cutting ferrule is electronic signature equipment.