CN110366161B - Card opening method and device, related equipment and storage medium - Google Patents

Abstract

The invention discloses a card opening method, a card opening device, a terminal, an intelligent card and a storage medium. Wherein the method comprises the following steps: the terminal acquires authentication information from the smart card by calling a corresponding native Application Programming Interface (API) of the terminal operating system and based on a case2 type message format in an Application Protocol Data Unit (APDU) command; sending the authentication information to a platform; the authentication information is used for authenticating the smart card; receiving card data sent by the platform; the card data is sent after the platform successfully authenticates the smart card; sending the card data to the smart card by calling the API and based on a case3 type message format in an APDU command; the sent card data is used for the smart card to write; the terminal can establish a secure connection with the smart card by calling the API; and the interaction between the terminal and the intelligent card is realized through the established safe connection.

Description

Card opening method, device, related equipment and storage medium

technical field

The invention relates to the field of smart cards in communication, in particular to a card opening method, device, terminal, smart card and storage medium.

Background technique

The Subscriber Identity Module (including UIM (User Identity Module) card and SIM (Subscriber Identity Module) card) is an important physical identification of the user's mobile identity and an important resource held by the operator. The subscriber identity module card is an independent security carrier, which can carry security-related card applications, such as card shield (i.e. realize the function of U-shield on the card), etc.

At present, there are mainly two ways for users to open a card by themselves:

The first is to use the user identification application development tool (STK) function of the smart card (which can be a UIM card or a SIM card) to write the card, but this method has security risks.

The second way is to use the Open Mobile API to write cards. However, this method requires the terminal to be integrated with the OpenMobile API. However, most terminals do not integrate the Open Mobile API, so it is not conducive to promotion.

To sum up, there are certain defects in the card opening methods of related technologies.

Contents of the invention

In order to solve the existing technical problems, embodiments of the present invention provide a card opening method, device, terminal, smart card and storage medium.

The technical scheme of the embodiment of the present invention is realized like this:

An embodiment of the present invention provides a method for opening a card, which is applied to a terminal, and the method includes:

Obtain authentication information from the smart card by calling the corresponding native application programming interface (API, Application Programming Interface) of the terminal operating system, and based on the message format of case2 type in the application protocol data unit (APDU, Application Protocol DataUnit) command;

Send the authentication information to the platform; the authentication information is used to authenticate the smart card;

receiving the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated;

Send the card data to the smart card based on the message format of case3 in the APDU command by calling the API; the sent card data is used for the smart card to perform card writing operations; wherein,

The terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

In the above scheme, the message format based on the case2 type in the APDU command is used to obtain authentication information from the smart card, including:

Based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card;

Receive the authentication information sent by the smart card.

In the above solution, the sending of the card data to the smart card through the message format based on the case3 type in the APDU command includes:

Based on the message format of the case3 type in the APDU command, send a card write message instruction carrying the card data to the smart card.

In the above scheme, the method also includes:

receiving the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of the case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, based on the message format of the case2 type in the APDU command, send a command to obtain the writing status of the smart card to the smart card;

receiving the card writing status returned by the smart card based on the acquire writing card status command.

The embodiment of the present invention also provides a method for opening a card, which is applied to a smart card, and the method includes:

Based on the message format of the case2 type in the APDU command, provide authentication information for the terminal; the authentication information is used to authenticate the smart card;

Based on the message format of the case3 type in the APDU command, receive the card data sent by the terminal;

Using the card data, write card operation.

In the above solution, the message format based on the case2 type in the APDU command provides authentication information for the terminal, including:

Based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

In the above solution, the receiving of the card data sent by the terminal based on the message format of the case3 type in the APDU command includes:

Based on the message format of the case3 type in the APDU command, receive a card write message instruction carrying the card data sent by the terminal.

In the above scheme, the method also includes:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing state sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

An embodiment of the present invention provides a card opening device, including:

The obtaining unit is used to obtain authentication information from the smart card by calling the corresponding native API of the terminal operating system and based on the message format of case2 type in the APDU command; send the authentication information to the platform; and use the authentication information for Authenticating the smart card; and receiving the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated;

The first card writing unit is used to send the card data to the smart card based on the message format of case3 in the APDU command by calling the API; the sent card data is used for the smart card to perform card writing operations ;in,

The terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

In the above solution, the acquisition unit is specifically used for:

Based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card;

Receive the authentication information sent by the smart card.

In the above solution, the first card writing unit is specifically used for:

Based on the message format of the case3 type in the APDU command, send a card write message instruction carrying the card data to the smart card.

In the above solution, the first card writing unit is also used for:

receiving the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of the case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, based on the message format of the case2 type in the APDU command, send a command to obtain the writing status of the smart card to the smart card;

receiving the card writing status returned by the smart card based on the acquire writing card status command.

The embodiment of the present invention also provides a card opening device, including:

A providing unit, configured to provide authentication information for the terminal based on the message format of the case2 type in the APDU command; the authentication information is used to authenticate the smart card;

The second card writing unit is configured to receive the card data sent by the terminal based on the message format of case3 in the APDU command; and use the card data to perform a card writing operation.

In the above solution, the providing unit is specifically used for:

Based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

In the above solution, the second card writing unit is specifically used for:

Based on the message format of the case3 type in the APDU command, receive a card write message instruction carrying the card data sent by the terminal.

In the above solution, the second card writing unit is also used for:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing state sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

An embodiment of the present invention further provides a terminal, including: a first processor and a first memory for storing a computer program that can run on the first processor,

Wherein, when the first processor is used to run the computer program, it executes:

Obtain authentication information from the smart card by calling the corresponding original port API of the terminal operating system, and based on the message format of case2 type in the APDU command;

Send the authentication information to the platform; the authentication information is used to authenticate the smart card;

receiving the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated;

Send the card data to the smart card based on the message format of case3 in the APDU command by calling the API; the sent card data is used for the smart card to perform card writing operations; wherein,

The terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

In the above solution, when the first processor is configured to run the computer program, execute:

Based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card;

Receive the authentication information sent by the smart card.

In the above solution, when the first processor is configured to run the computer program, execute:

Based on the message format of the case3 type in the APDU command, send a card write message instruction carrying the card data to the smart card.

In the above solution, the first processor is further configured to execute when running the computer program:

receiving the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of the case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, based on the message format of the case2 type in the APDU command, send a command to obtain the writing status of the smart card to the smart card;

receiving the card writing status returned by the smart card based on the acquire writing card status command.

An embodiment of the present invention also provides a smart card, including: a second processor and a second memory for storing a computer program that can run on the second processor,

Wherein, when the second processor is used to run the computer program, it executes:

Based on the message format of the case2 type in the APDU command, provide authentication information for the terminal; the authentication information is used to authenticate the smart card;

Based on the message format of the case3 type in the APDU command, receive the card data sent by the terminal;

Using the card data, write card operation.

In the above solution, when the second processor is configured to run the computer program, execute:

Based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

In the above solution, when the second processor is configured to run the computer program, execute:

Based on the message format of the case3 type in the APDU command, receive a card write message instruction carrying the card data sent by the terminal.

In the above solution, the second processor is also configured to execute when running the computer program:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing state sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

The embodiment of the present invention further provides a storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of any method on the terminal side are realized, or the steps of any method on the smart card side are realized.

In the card opening method, device, terminal, smart card and storage medium provided by the embodiments of the present invention, the terminal obtains authentication information from the smart card based on the message format of case2 type in the APDU command by calling the corresponding native API of the terminal operating system; The terminal sends the authentication information to the platform; and receives the card data sent by the platform; here, the card data is sent by the platform after the smart card is successfully authenticated, and the terminal calls the API , and based on the message format of case3 in the APDU command, send the card data to the smart card; after receiving the card data, the smart card uses the card data to perform a card writing operation. The solution provided by the embodiment of the present invention uses the native API of the terminal operating system to realize the interaction with the smart card, and this interaction process is protected by a security mechanism, so that it can ensure that the information in the card writing process will not be obtained, tampered with, or accessed by other applications. Delete, improve the security of writing cards, and use widely promotion. At the same time, the card writing process is realized through the combination of case2 and case3 type instructions, and the case2 and case3 type instructions can be accurately recognized by the baseband chip of the terminal, so that the APP can accurately obtain the execution result from the smart card, so that the success of writing the card can be greatly improved Rate.

Description of drawings

FIG. 1 is a schematic flow chart of a method for opening a card at a terminal side according to an embodiment of the present invention;

Fig. 2 is a schematic flow chart of a method for opening a smart card on the side of the smart card according to an embodiment of the present invention;

Fig. 3 is a schematic flow chart of a method for opening a card according to an embodiment of the present invention;

Fig. 4 is a schematic diagram of a card opening process of an application embodiment of the present invention;

Fig. 5 is a schematic diagram of the state of the smart card in the application embodiment of the present invention;

Fig. 6 is a schematic structural diagram of a card opening device according to an embodiment of the present invention;

Fig. 7 is a schematic structural diagram of another card opening device according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present invention;

Fig. 9 is a schematic structural diagram of a smart card according to an embodiment of the present invention;

Fig. 10 is a schematic structural diagram of a card opening system according to an embodiment of the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

The process of using the STK function of the smart card (which can be a UIM card or SIM) to write the card includes: using the address book function of the STK on the smart card, the application program (APP) of the terminal writes the card writing instruction in the address book of the STK, and then The smart card obtains the card writing command and executes the card writing operation, and writes the card writing result to the communication specific area after the card writing is completed; the APP then obtains the card writing result from this area. In this method, writing the card and obtaining the result are asynchronous processes, and the APP needs to obtain it periodically, and STK’s address book allows other APPs to access it, so there is a risk that other applications may obtain, delete, and tamper with the card writing instruction and the card writing result. In other words, the book is a security risk.

The process of writing a card using the Open Mobile API mainly includes:

The smart card (which can be a UIM card or SIM card) provided by the Open Mobile API provides an interface for sending APDU commands, which can be called by third-party applications, and the card writing process can be completed by calling the Open Mobile API to send the card writing command; but the Open Mobile API is open source The third-party solution needs to be integrated in the system before the terminal leaves the factory, that is, the Open Mobile API needs to be prefabricated before the terminal leaves the factory. Except for Near Field Communication (NFC, Near Field Communication) terminals in the current market, most of the terminals do not have Open Mobile API, so this card opening method is not conducive to widespread promotion.

On the other hand, the APIs that come with some operating systems can provide interfaces for accessing smart cards (such as UIM cards or SIM cards), so that third-party applications can send APDU instructions to smart cards by calling these standard APIs. In this way, the interactive operation of Open Mobile can solve the problem that Open Mobile requires terminal factory prefabrication and the asynchronous interactive operation of STK.

At the same time, these interfaces can provide a mandatory access control (ACE, Access Control Enforce) mechanism, that is, provide a security mechanism. In this mechanism, only the APP authorized on the smart card can access the smart card through this API. The risk of other applications obtaining, deleting and tampering with instructions and results during the card writing process, that is to say, the security of writing cards can be improved through this mechanism.

In the third aspect, it is necessary to consider improving the success rate of writing the card, and you can use the APDU command to write the card. Among them, the APDU command has four types of formats, namely: case1, case2, case3 and case4. These four types of commands are analyzed below.

In the case1 type of command, no data is sent to the smart card, and no data is returned from the smart card to the terminal. However, during the process of writing the card, there is data interaction between the terminal and the smart card, so this type of command is not suitable for the process of writing the card. middle.

In case2 type commands, no data is sent to the smart card, and data is returned from the smart card, and the baseband chip platform of the terminal can correctly process case2 type APDU commands.

In case3 type commands, data is sent to the smart card, but no data is returned from the smart card, and the baseband chip platform of the terminal can correctly process case3 type APDU commands.

In the command of Case4 type, both data is sent to the smart card and data is returned to the terminal from the smart card. For this type of command, when the baseband chip of the terminal processes the command of case4 type, there are individual differences in the baseband chip of each manufacturer, and some baseband chips cannot correctly process this type of command, so that the APP cannot be downloaded from the smart card according to the prefabrication. The execution result of the command is obtained on the above, which leads to the inability to complete the card writing operation using the case4 type command.

Based on the above analysis, in various embodiments of the present invention: use the API of the operating system that can provide a security mechanism to interact with the smart card, and realize the card writing process through the combination of case2 and case3 type instructions.

The solution provided by the embodiment of the present invention uses the API of the operating system that can provide a security mechanism to interact with the smart card, so that the information in the card writing process can be guaranteed not to be acquired, tampered with or deleted by other applications, and the security of the card writing is improved, and Take advantage of widespread promotion. At the same time, the card writing process is realized through the combination of case2 and case3 type instructions, and the case2 and case3 type instructions can be accurately recognized by the baseband chip of the terminal, so that the APP can accurately obtain the execution result from the smart card, so that the success of writing the card can be greatly improved Rate.

The embodiment of the present invention provides a method for writing a card, which is applied to a terminal, as shown in Figure 1, the method includes:

Step 101: Obtain authentication information from the smart card by calling the corresponding native API of the terminal operating system and based on the message format of case2 type in the APDU command;

Specifically, based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card .

Receive the authentication information sent by the smart card.

That is to say, the format of the initialization card writing instruction is a message format of case2 type.

Here, since the format of the command sent by the terminal to the smart card is a case2 type message format, the data structure of the authentication information sent by the smart card is also corresponding to the case2 type message format, and can also be understood as matching .

The communication path between the terminal and the smart card is: the terminal calls the corresponding native API of its own operating system, and the native API interacts with the baseband chip of the terminal, and the baseband chip communicates with the smart card.

The native API can be understood as an (existing) API that comes with the operating system.

Wherein, in actual application, the operating system may be Android, iOS or the like.

In actual application, the smart card is a blank card.

Step 102: Send the authentication information to the platform;

Here, the authentication information is used to authenticate the smart card.

In practical application, the authentication information may include the empty card serial number of the smart card, a random number written to the card, and the like.

Step 103: receiving the card data sent by the platform;

Here, the card data is sent after the platform successfully authenticates the smart card.

In actual application, the card data returned by the platform is encrypted, and the terminal sends the encrypted card data to the smart card, and the smart card decrypts the card data and performs card writing operation.

Step 104: Send the card data to the smart card by calling the API and based on the message format of case3 in the APDU command.

Here, the sent card data is used for the smart card to perform a card writing operation.

It should be noted that: the terminal can establish a secure connection with the smart card by calling the API; the above interaction process between the terminal and the smart card is realized through the established secure connection.

In actual application, as long as the operating system can provide a security access mechanism. In actual application, this security mechanism can be various. For example: when the API is called, the operating system of the terminal sends the verification information of the APP calling the API to the smart card, and the smart card uses the verification information to verify the corresponding APP. After verification, the operating system allows the corresponding APP to call the API after the verification is successful.

Another example: access control rules are stored on the smart card, and the operating system obtains the access control rules from the smart card. When the API is called, the operating system uses the obtained access control rules to determine whether the corresponding APP that calls the API has access to the smart card. Permission, when it is determined according to the access control rule that the corresponding APP has the access right to the smart card, allowing the corresponding APP to call the API.

For the above two examples, when the operating system allows the corresponding APP to call the API, it indicates that the secure connection between the terminal and the smart card has been established.

It should be noted that in actual application, the security mechanism may also be implemented in other ways, which is not limited in this embodiment of the present invention.

In an embodiment, the terminal sends a card write message instruction carrying the card data to the smart card based on the message format of case3 in the APDU command, so as to send the card data to the smart card.

That is to say, the format of the write card message command is a message format of case3 type.

In actual application, the smart card will feed back the execution status of card writing to the terminal, so as to inform the terminal whether the card writing is successful.

Based on this, in an embodiment, the method may also include:

The terminal receives the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, the terminal sends a command to obtain the writing status of the smart card to the smart card based on the message format of the case2 type in the APDU command;

The terminal receives the card writing status returned by the smart card based on the acquire writing card status command.

Here, the data structure of the card writing status returned by the smart card also corresponds to the message format of the case2 type.

Correspondingly, the embodiment of the present invention also provides a method for writing a card, which is applied to a terminal, as shown in Figure 2, the method includes:

Step 201: Based on the message format of the case2 type in the APDU command, provide authentication information for the terminal;

Specifically, based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

That is to say, after the smart card receives the initialization card writing instruction, it enters the card writing initialization state, so as to wait for the command corresponding to the card data sent by the terminal, and when other commands are received, the smart card enters the idle state. state.

Here, the authentication information is used to authenticate the smart card.

Step 202: Based on the message format of case3 in the APDU command, receive the card data sent by the terminal;

Specifically, based on the message format of the case3 type in the APDU command, the card write message instruction carrying the card data sent by the terminal is received.

In actual application, the card data received by the smart card is encrypted, and the encrypted card data needs to be decrypted before writing to the card.

Step 203: Use the card data to perform a card writing operation.

In actual application, the smart card will feed back the execution status of card writing to the terminal, so as to inform the terminal whether the card writing is successful.

Based on this, in an embodiment, the method may also include:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing state sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

The embodiment of the present invention also provides a method for writing a card, as shown in Figure 3, the method includes:

Step 301: The terminal obtains authentication information from the smart card by calling the corresponding native API of the terminal operating system and based on the message format of case2 type in the APDU command;

In other words, the smart card provides authentication information for the terminal based on the message format of case2 in the APDU command.

Step 302: the terminal sends the authentication information to the platform;

Here, the authentication information is used to authenticate the smart card.

Step 303: the terminal receives the card data sent by the platform;

Here, the card data is sent after the platform successfully authenticates the smart card.

Step 304: the terminal sends the card data to the smart card based on the message format of case3 in the APDU command by calling the API;

Step 305: After receiving the card data, the smart card uses the card data to perform a card writing operation.

Wherein, the terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

It should be noted that: the specific processing process of the terminal and the smart card has been described in detail above, and will not be repeated here.

In the card opening method provided by the embodiment of the present invention, the terminal obtains the authentication information from the smart card based on the message format of case2 type in the APDU command by calling the corresponding native API of the terminal operating system; the terminal sends the authentication information to the platform; and receive the card data sent by the platform; here, the card data is sent by the platform after the smart card is successfully authenticated, and the terminal calls the API based on the case3 type in the APDU command send the card data to the smart card; after receiving the card data, the smart card uses the card data to write to the card. The solution provided by the embodiment of the present invention uses the native API of the terminal operating system to realize the interaction with the smart card, and this interaction process is protected by a security mechanism, so that it can ensure that the information in the card writing process will not be obtained, tampered with, or accessed by other applications. Delete, improve the security of writing cards, and use widely promotion. At the same time, the card writing process is realized through the combination of case2 and case3 type instructions, and the case2 and case3 type instructions can be accurately recognized by the baseband chip of the terminal, so that the APP can accurately obtain the execution result from the smart card, so that the success of writing the card can be greatly improved Rate.

In addition, during the whole process, the smart card only performs corresponding operations after receiving specific instructions, thus further ensuring the security of writing the card.

The present invention will be described in more detail below in conjunction with an application example.

In this application embodiment, an Android system (above Android 5.1) is used as an example for illustration. The solution of the embodiment of the present invention is realized by means of software, which is called APP in this application embodiment. The smart card can be a SIM card or a UIM card, etc.

It should be noted that: before writing the card, the APP has established a secure connection with the smart card through the API of the Android system, that is to say, the APP is an APP authorized on the smart card, that is, an APP with access rights. .

The process of writing the card in this application embodiment, as shown in Figure 4, includes the following steps:

Step 401: APP sends an initialization card writing command in the format of case2 to the smart card;

Among them, the initialization card writing instruction (APDU instruction)-B5010000 instruction format of the case2 type format is defined as shown in Table 1:

Table 1

Step 402: After receiving the instruction, the smart card enters the initialization state of writing the card, and returns the card information required for writing the card to the APP;

Here, the card information required for writing the card is the authentication information.

In actual application, the card information may include: the serial number of the empty card, the random number for writing the card, and the like.

The data structure of the card information returned by the smart card is shown in Table 2:

Table 2

Here, in actual application, the smart card will use the two dispersion factors of the empty card serial number and the random number of writing the card, and the skey of the card to generate the writing card session key encrypted with the writing card package name, which is used for subsequent decryption of card data.

Step 403: After receiving the card information, the APP sends the card information of the smart card to the card writing platform;

Step 404: After receiving the card information, the card writing platform finds the skey of the smart card according to the serial number of the empty card, and generates a session secret key by using the two dispersion factors of the serial number of the empty card and the random number of writing the card and the skey of the smart card, and uses the The secret key encrypts and writes the card message, and then sends it to the APP;

Step 405: After receiving the encrypted card writing message, the APP sends a card writing message command in case3 format to the smart card;

Here, after the card writing message command is sent, it indicates that the smart card enters the card writing state.

Among them, the definition of the card writing message command in the case3 format - A50000XX+Data format is shown in Table 3:

table 3

the code Value (Hex) INS 0xA5 P1 0x00 P2 0x00 P3 0xXX: XX is the length of Data data Data Write card message generated by encryption

Step 406: After the smart card receives the card writing instruction, it completes the card writing operation according to the card data issued by the instruction;

Specifically, the smart card will judge whether the length of Data in the command is 0xXX bytes of P3, and if the length of the card writing message is correct, use the generated session key to decrypt the card data in the Data part of the command, and write the card data into the smart card , to complete the card writing operation.

Step 407: After the smart card completes the card writing operation, return the card writing execution status to the APP;

Here, the corresponding write card execution state data structure is shown in Table 4:

Table 4

Step 408: After the APP receives 9E0X, the APP sends a command to obtain the card writing state in the format of case2 to the smart card;

Here, the command to obtain and write card status in the format of case2 - A900000X, where X refers to the X in 9E0X, which represents the corresponding number of bytes returned by the card.

Step 409: The smart card returns the card writing status to the APP after receiving the command to obtain the card writing status.

Here, the corresponding write card status data structure is shown in Table 5:

table 5

return value meaning 0x00+MAC check value Write card successfully 0x02+MAC check value Write card data MAC error 0x03+MAC check value Data writing to the card is abnormal (wrong tag, etc.)

At this point, the card writing process is completed. In this process, the APP interacts with the smart card by calling the API of the Android system.

In addition, in this process, as shown in Figure 5, the smart card has three states, specifically,

In the first state, after power-on, the smart card enters the IDLE state;

In the second state, in the IDLE state, the smart card receives a specific instruction (write card initialization state instruction, specifically the B5010000 instruction) and after the execution is completed, it enters the write card initialization state;

After entering the card writing initialization state, when receiving the card writing message command (that is, A50000XX+Data command), the card writing operation is performed, and it enters the third state after completion.

If other instructions are received, the smart card returns to the IDLE state.

In the third state, a specific instruction (card writing message instruction, namely A50000XX+Data instruction) is received during the card writing initialization state, and enters the card writing completion state after execution is completed.

Wherein, when a specific command (obtaining a card writing state command, ie A900000X command) is received in the card writing completion state, the card writing result can be obtained. When the smart card is powered off and restarted, the result of writing to the card will be lost.

As can be seen from the above description, the solution provided by the embodiment of the present invention implements the card writing process through the combination of case2 and case3 commands; Security, it is not necessary to preset other third-party solutions before the terminal leaves the factory, and the secure interaction between the two can be realized, avoiding information tampering, deletion, etc., so it is widely used. Moreover, the card writing is realized through the combination of case2 and case3 commands. The entire card writing process has a rigorous interactive process and a smart card status protection mechanism. In this way, the success rate of card writing is greatly improved.

In order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides a card opening device, which is set on the terminal, as shown in Figure 6, the device includes:

The obtaining unit 61 is used to obtain the authentication information from the smart card based on the message format of case2 type in the APDU command by calling the corresponding native API of the terminal operating system; the authentication information is sent to the platform; the authentication information is used To authenticate the smart card; and receive the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated;

The first card writing unit 62 is used to send the card data to the smart card based on the message format of the case3 type in the APDU command by calling the API; the card data sent is used for the smart card to write the card operation; among them,

The terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

Wherein, the communication path between the terminal and the smart card is: the terminal calls the corresponding native API of its own operating system, and the native API interacts with the baseband chip of the terminal, and the baseband chip communicates with the smart card.

The native API can be understood as an (existing) API that comes with the operating system.

In an embodiment, the acquiring unit 61 is specifically configured to:

Based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card;

Receive the authentication information sent by the smart card.

That is to say, the format of the initialization card writing instruction is a message format of case2 type.

In one embodiment, the first card writing unit is specifically used for:

Based on the message format of the case3 type in the APDU command, send a card write message instruction carrying the card data to the smart card.

That is to say, the format of the write card message command is a message format of case3 type.

In actual application, the smart card will feed back the execution status of card writing to the terminal, so as to inform the terminal whether the card writing is successful.

Based on this, in one embodiment, the first card writing unit 62 is also used for:

receiving the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of the case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, based on the message format of the case2 type in the APDU command, send a command to obtain the writing status of the smart card to the smart card;

receiving the card writing status returned by the smart card based on the acquire writing card status command.

In actual application, the acquisition unit 61 and the first card writing unit 62 may be implemented by a processor in the card opening device.

It should be noted that: when the card opening device provided by the above-mentioned embodiment performs card opening, the division of the above-mentioned program modules is used as an example for illustration. In practical applications, the above-mentioned processing can be allocated by different program modules according to needs. That is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the card opening device and the card opening method embodiment provided by the above embodiment belong to the same idea, and the specific implementation process thereof is detailed in the method embodiment, and will not be repeated here.

In order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides a card opening device, which is set on the smart card, as shown in Figure 7, the device includes:

The providing unit 71 is configured to provide authentication information for the terminal based on the message format of the case2 type in the APDU command; the authentication information is used to authenticate the smart card;

The second card writing unit 72 is configured to receive the card data sent by the terminal based on the message format of case3 in the APDU command; and use the card data to perform a card writing operation.

In one embodiment, the providing unit 71 is specifically used for:

Based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

In one embodiment, the second card writing unit 72 is specifically used for:

Based on the message format of the case3 type in the APDU command, receive a card write message instruction carrying the card data sent by the terminal.

In actual application, the smart card will feed back the execution status of card writing to the terminal, so as to inform the terminal whether the card writing is successful.

Based on this, in one embodiment, the second card writing unit 72 is also used for:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing state sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

In actual application, the providing unit 71 and the second card writing unit 72 can be implemented by a processor in the card opening device.

It should be noted that: when the card opening device provided by the above-mentioned embodiment performs card opening, the division of the above-mentioned program modules is used as an example for illustration. In practical applications, the above-mentioned processing can be allocated by different program modules according to needs. That is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the card opening device and the card opening method embodiment provided by the above embodiment belong to the same idea, and the specific implementation process thereof is detailed in the method embodiment, and will not be repeated here.

Based on the hardware implementation of the above device, and in order to implement the terminal-side method of the present invention, an embodiment of the present invention also provides a terminal, as shown in FIG. 8 , the terminal 80 includes:

The first communication interface 81 is capable of information interaction with other devices;

The first processor 82 is connected to the first communication interface 81 to implement information interaction with other devices, and is used to execute the methods provided by one or more technical solutions on the terminal side when running the computer program. The computer programs that can run on the first processor 82 are stored on the first processor 81 .

Specifically, when the first processor 82 is used to run the computer program, execute:

Obtain authentication information from the smart card by calling the corresponding original port API of the terminal operating system, and based on the message format of case2 type in the APDU command;

Send the authentication information to the platform; the authentication information is used to authenticate the smart card;

receiving the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated;

Send the card data to the smart card based on the message format of case3 in the APDU command by calling the API; the sent card data is used for the smart card to perform card writing operations; wherein,

The terminal can establish a secure connection with the smart card by calling the API; the interaction between the terminal and the smart card is realized through the established secure connection.

In one embodiment, when the first processor 82 is configured to run the computer program, execute:

Based on the message format of the case2 type in the APDU command, send an initialization card writing instruction to the smart card; the initialization card writing instruction is used to instruct the smart card to enter the card writing initialization state, and obtain the authentication information of the smart card;

Receive the authentication information sent by the smart card.

In one embodiment, when the first processor 82 is configured to run the computer program, execute:

Based on the message format of the case3 type in the APDU command, send a card write message instruction carrying the card data to the smart card.

In one embodiment, the first processor 82 is also configured to, when running the computer program, execute:

receiving the card writing execution status returned by the smart card; the card writing execution status returned by the smart card is generated based on the message format of the case3 type in the APDU command;

When the execution state of writing the card indicates that the writing of the smart card is successful, based on the message format of the case2 type in the APDU command, send a command to obtain the writing status of the smart card to the smart card;

receiving the card writing status returned by the smart card based on the acquire writing card status command.

The specific processing process of the first processor 82 can be understood with reference to the method, and will not be repeated here.

Certainly, in actual application, the terminal 80 may further include: a user interface 84 . Various components in the terminal 80 are coupled together through a bus system 85 . It can be understood that the bus system 85 is used to realize connection and communication between these components. In addition to the data bus, the bus system 85 also includes a power bus, a control bus and a status signal bus. However, the various buses are labeled as bus system 85 in FIG. 8 for clarity of illustration.

Wherein, the number of the first processor 82 is at least one.

The user interface 84 may include buttons, a touch pad, or a touch screen, among others.

The first memory 83 in the embodiment of the present invention is used to store various types of data to support the operation of the terminal 80 . Examples of such data include: any computer program for operating on terminal 80 .

The methods disclosed in the foregoing embodiments of the present invention may be applied to the first processor 82 or implemented by the first processor 82 . The first processor 82 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the first processor 82 or an instruction in the form of software. The aforementioned first processor 82 may be a general-purpose processor, a digital signal processor (DSP, Digital Signal Processor), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, and the like. The first processor 82 may implement or execute various methods, steps and logic block diagrams disclosed in the embodiments of the present invention. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, and the storage medium is located in the first memory 83, and the first processor 82 reads the information in the first memory 83, and completes the steps of the aforementioned method in combination with its hardware.

In an exemplary embodiment, the terminal 80 may be implemented by one or more Application Specific Integrated Circuits (ASIC, Application Specific Integrated Circuit), DSP, Programmable Logic Device (PLD, ProgrammableLogic Device), Complex Programmable Logic Device (CPLD, Complex Programmable Logic Device), field-programmable gate array (FPGA, Field-Programmable Gate Array), general-purpose processor, controller, microcontroller (MCU, Micro Controller Unit), microprocessor (Microprocessor), or other electronic components to achieve , used to execute the aforementioned method.

Based on the hardware realization of the above-mentioned device, and in order to implement the method on the smart card side of the present invention, the embodiment of the present invention also provides a smart card, as shown in FIG. 9 , the smart card 90 includes:

a second processor 91 and a second memory 92 for storing a computer program capable of running on said second processor,

Wherein, when the second processor 91 is used to run the computer program, execute:

Based on the message format of the case2 type in the APDU command, provide authentication information for the terminal; the authentication information is used to authenticate the smart card;

Based on the message format of the case3 type in the APDU command, receive the card data sent by the terminal;

Using the card data, write card operation.

In one embodiment, when the second processor 91 is configured to run the computer program, execute:

Based on the message format of the case2 type in the APDU command, receive the initialization card writing instruction sent by the terminal;

In response to the initialization card writing instruction, enter the card writing initialization state, and return the authentication information to the terminal.

In one embodiment, when the second processor 91 is configured to run the computer program, execute:

Based on the message format of the case3 type in the APDU command, receive a card write message instruction carrying the card data sent by the terminal.

In one embodiment, the second processor 91 is further configured to execute the computer program when executing:

Based on the message format of the case3 type in the APDU command, return the card writing execution status to the terminal; the writing card execution status indicates that the smart card writing card is successful;

Based on the message format of the case2 type in the APDU command, receive the command to obtain the card writing status sent by the smart card;

Responding to the command of obtaining the card writing status, returning the card writing status to the terminal.

The specific processing process of the second processor 91 can be understood with reference to the method, and will not be repeated here.

Of course, in actual application, the smart card 90 may also include a second communication interface 93 to interact with the terminal. Various components in the smart card 90 are coupled together through a bus system 94 . It can be understood that the bus system 94 is used to realize connection and communication between these components. In addition to the data bus, the bus system 94 also includes a power bus, a control bus and a status signal bus. However, the various buses are labeled as bus system 94 in FIG. 9 for clarity of illustration.

The second memory 92 in the embodiment of the present invention is used to store various types of data to support the operation of the smart card 90 . Examples of such data include any computer programs for operating on smart card 90 .

The methods disclosed in the foregoing embodiments of the present invention may be applied to the second processor 91 or implemented by the second processor 91 . The second processor 91 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the second processor 91 or instructions in the form of software. The aforementioned second processor 91 may be a general-purpose processor, DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, and the like. The second processor 91 may implement or execute various methods, steps and logic block diagrams disclosed in the embodiments of the present invention. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present invention can be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, and the storage medium is located in the second memory 92, and the second processor 91 reads information in the second memory 92, and completes the steps of the foregoing method in combination with its hardware.

In an exemplary embodiment, the smart card 90 may be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general purpose processors, controllers, MCUs, Microprocessors, or other electronic components for performing the aforementioned methods.

It can be understood that the memories (the first memory 83 and the second memory 92 ) in this embodiment of the present invention may be volatile memories or nonvolatile memories, and may also include both volatile and nonvolatile memories. Wherein, the non-volatile memory can be a read-only memory (ROM, Read Only Memory), a programmable read-only memory (PROM, Programmable Read-Only Memory), an erasable programmable read-only memory (EPROM, Erasable Programmable Read-Only Memory) Memory), Electrically Erasable Programmable Read-Only Memory (EEPROM, Electrically Erasable Programmable Read-Only Memory), Magnetic Random Access Memory (FRAM, ferromagnetic random access memory), Flash Memory (Flash Memory), magnetic surface memory, optical disc, Or CD-ROM (Compact Disc Read-Only Memory); magnetic surface storage can be disk storage or tape storage. The volatile memory may be random access memory (RAM, Random Access Memory), which is used as an external cache. By way of illustration and not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM, Static Random Access Memory), Synchronous Static Random Access Memory (SSRAM, Synchronous Static Random Access Memory), Dynamic Random Access Memory ( DRAM, Dynamic Random Access Memory), Synchronous Dynamic Random Access Memory (SDRAM, Synchronous Dynamic Random Access Memory), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM, Double Data Rate Synchronous Dynamic Random Access Memory), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM, Enhanced Synchronous Dynamic Random Access Memory), Synchronous Link Dynamic Random Access Memory (SLDRAM, SyncLink Dynamic Random Access Memory), Direct Memory Bus Random Access Memory (DRRAM, Direct Rambus Random Access Memory). The memory described by embodiments of the present invention is intended to include, but not be limited to, these and any other suitable types of memory.

In order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides a card opening system, as shown in Figure 10, the system includes:

The terminal 101 is used to obtain authentication information from the smart card 102 based on the message format of case2 type in the APDU command by calling the corresponding native API of the terminal operating system; the authentication information is sent to the platform; the authentication information is used To authenticate the smart card; receive the card data sent by the platform; the card data is sent by the platform after the smart card is successfully authenticated; and call the API based on the case3 type in the APDU command message format, send the card data to the smart card 102;

The smart card 102 is configured to use the card data to write to the card after receiving the card data.

It should be noted that: the specific processing procedures of the terminal 101 and the smart card 102 have been described in detail above, and will not be repeated here.

In an exemplary embodiment, the embodiment of the present invention also provides a storage medium, that is, a computer storage medium, specifically a computer-readable storage medium, for example, including a first memory 83 storing a computer program, and the above-mentioned computer program can be executed by the terminal 80 The first processor 82 executes to complete the steps described in the foregoing method. Another example includes the second memory 92 storing computer programs, and the above computer programs can be executed by the second processor 91 of the smart card 90 to complete the steps in the aforementioned method. The computer-readable storage medium may be memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM.

It should be noted that: the technical solutions described in the embodiments of the present invention can be combined arbitrarily if there is no conflict.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (25)

1. A card opening method is applied to a terminal, and the method comprises the following steps:

acquiring authentication information from the smart card by calling a corresponding native Application Programming Interface (API) of the terminal operating system and based on a case2 type message format in an Application Protocol Data Unit (APDU) command;

sending the authentication information to a platform; the authentication information is used for authenticating the smart card;

receiving card data sent by the platform; the card data is sent after the platform successfully authenticates the smart card;

sending the card data to the smart card by calling the API and based on a case3 type message format in an APDU command; the sent card data is used for the smart card to write; wherein,

the terminal can establish a secure connection with the smart card by calling the API; and the interaction between the terminal and the intelligent card is realized through the established safe connection.

2. The method according to claim 1, wherein the obtaining the authentication information from the smart card based on a case2 type message format in the APDU command comprises:

sending an initialization card writing instruction to the smart card based on a case2 type message format in the APDU command; the initialization card writing instruction is used for indicating the intelligent card to enter a card writing initialization state and acquiring the authentication information of the intelligent card;

and receiving the authentication information sent by the intelligent card.

3. The method according to claim 1, wherein said sending the card data to the smart card by a message format based on a case3 type in an APDU command comprises:

and sending a card writing message instruction carrying the card data to the smart card based on a case3 type message format in the APDU command.

4. The method of claim 1, further comprising:

receiving a card writing execution state returned by the smart card; the card writing execution state returned by the intelligent card is generated based on the case3 type message format in the APDU command;

when the card writing execution state represents that the smart card is successfully written, sending a card writing state acquisition command to the smart card based on a case2 type message format in an APDU command;

and receiving the card writing state returned by the smart card based on the card writing state acquisition command.

5. A card opening method is applied to a smart card, and comprises the following steps:

based on the case2 type message format in the APDU command, providing authentication information for the terminal; the authentication information is used for authenticating the smart card;

receiving card data sent by the terminal based on a case3 type message format in an APDU command;

and performing card writing operation by using the card data.

6. The method according to claim 5, wherein the providing the authentication information for the terminal based on the case2 type message format in the APDU command comprises:

receiving an initialization card writing instruction sent by the terminal based on a case2 type message format in an APDU command;

and responding to the initialized card writing instruction, entering a card writing initialization state, and returning the authentication information to the terminal.

7. The method according to claim 5, wherein the receiving card data sent by the terminal based on a case3 type message format in an APDU command comprises:

and receiving a card writing message instruction which is sent by the terminal and carries the card data based on a case3 type message format in the APDU command.

8. The method of claim 5, further comprising:

returning a card writing execution state to the terminal based on a case3 type message format in the APDU command; the card writing execution state represents that the card writing of the smart card is successful;

receiving a card writing state acquisition command sent by the smart card based on a case2 type message format in the APDU command;

and responding to the command for acquiring the card writing state, and returning the card writing state to the terminal.

9. A card opening device, characterized in that the device comprises:

the acquiring unit is used for acquiring the authentication information from the smart card by calling a corresponding native API of the terminal operating system and based on a case2 type message format in the APDU command; sending the authentication information to a platform; the authentication information is used for authenticating the smart card; receiving card data sent by the platform; the card data is sent after the platform successfully authenticates the smart card;

the first card writing unit is used for sending the card data to the smart card by calling the API and based on a case3 type message format in an APDU command; the sent card data is used for the smart card to write the card; wherein,

the terminal can establish a secure connection with the smart card by calling the API; and the interaction between the terminal and the intelligent card is realized through the established safe connection.

10. The apparatus according to claim 9, wherein the obtaining unit is specifically configured to:

sending an initialization card writing instruction to the smart card based on a case2 type message format in the APDU command; the initialization card writing instruction is used for indicating the intelligent card to enter a card writing initialization state and acquiring authentication information of the intelligent card;

and receiving the authentication information sent by the intelligent card.

11. The apparatus of claim 9, wherein the first card writing unit is specifically configured to:

and sending a card writing message instruction carrying the card data to the smart card based on a case3 type message format in the APDU command.

12. The apparatus of claim 9, wherein the first card writing unit is further configured to:

receiving a card writing execution state returned by the smart card; the card writing execution state returned by the intelligent card is generated based on the case3 type message format in the APDU command;

when the card writing execution state represents that the smart card is successfully written, sending a card writing state acquisition command to the smart card based on a case2 type message format in an APDU command;

and receiving the card writing state returned by the smart card based on the card writing state acquiring command.

13. A card opening device, characterized in that the device comprises:

a providing unit, configured to provide authentication information for the terminal based on a case2 type message format in the APDU command; the authentication information is used for authenticating the smart card;

a second card writing unit, configured to receive card data sent by the terminal based on a case3 type message format in the APDU command; and performing card writing operation by using the card data.

14. The apparatus according to claim 13, wherein the providing unit is specifically configured to:

receiving an initialization card writing instruction sent by the terminal based on a case2 type message format in an APDU command;

and responding to the initialized card writing instruction, entering a card writing initialization state, and returning the authentication information to the terminal.

15. The apparatus of claim 13, wherein the second card writing unit is specifically configured to:

and receiving a card writing message instruction which is sent by the terminal and carries the card data based on a case3 type message format in the APDU command.

16. The apparatus of claim 13, wherein the second card writing unit is further configured to:

returning a card writing execution state to the terminal based on a case3 type message format in the APDU command; the card writing execution state represents that the card writing of the intelligent card is successful;

receiving a card writing state acquisition command sent by the smart card based on a case2 type message format in the APDU command;

and responding to the command for acquiring the card writing state, and returning the card writing state to the terminal.

17. A terminal, characterized in that the terminal comprises: a first processor and a first memory for storing a computer program capable of running on the first processor,

wherein the first processor, when executing the computer program, is configured to perform:

acquiring authentication information from the smart card by calling a corresponding native port API of the terminal operating system and based on a case2 type message format in an APDU command;

sending the authentication information to a platform; the authentication information is used for authenticating the smart card;

receiving card data sent by the platform; the card data is sent after the platform successfully authenticates the smart card;

sending the card data to the smart card by calling the API and based on a case3 type message format in an APDU command; the sent card data is used for the smart card to write; wherein,

the terminal can establish a secure connection with the smart card by calling the API; and the interaction between the terminal and the intelligent card is realized through the established safe connection.

18. The terminal according to claim 17, wherein the first processor, when executing the computer program, is configured to perform:

sending an initialization card writing instruction to the smart card based on a case2 type message format in the APDU command; the initialization card writing instruction is used for indicating the intelligent card to enter a card writing initialization state and acquiring the authentication information of the intelligent card;

and receiving the authentication information sent by the intelligent card.

19. The terminal according to claim 17, wherein the first processor, when executing the computer program, is configured to perform:

and sending a card writing message instruction carrying the card data to the smart card based on a case3 type message format in the APDU command.

20. The terminal of claim 17, wherein the first processor, when executing the computer program, is further configured to perform:

receiving a card writing execution state returned by the smart card; the card writing execution state returned by the intelligent card is generated based on the case3 type message format in the APDU command;

when the card writing execution state represents that the smart card is successfully written, sending a card writing state acquisition command to the smart card based on a case2 type message format in an APDU command;

and receiving the card writing state returned by the smart card based on the card writing state acquiring command.

21. A smart card, characterized in that the smart card comprises: a second processor and a second memory for storing a computer program capable of running on the second processor,

wherein the second processor, when executing the computer program, is configured to perform:

based on the case2 type message format in the APDU command, providing authentication information for the terminal; the authentication information is used for authenticating the smart card;

receiving card data sent by the terminal based on a case3 type message format in an APDU command;

and performing card writing operation by using the card data.

22. The smart card of claim 21, wherein the second processor, when executing the computer program, is configured to perform:

receiving an initialization card writing instruction sent by the terminal based on a case2 type message format in an APDU command;

and responding to the initialized card writing instruction, entering a card writing initialized state, and returning the authentication information to the terminal.

23. The smart card of claim 21, wherein the second processor, when executing the computer program, is configured to perform:

and receiving a card writing message instruction which is sent by the terminal and carries the card data based on a case3 type message format in the APDU command.

24. The smart card of claim 21, wherein the second processor, when executing the computer program, is further configured to perform:

returning a card writing execution state to the terminal based on a case3 type message format in the APDU command; the card writing execution state represents that the card writing of the smart card is successful;

receiving a card writing state acquisition command sent by the smart card based on a case2 type message format in the APDU command;

and responding to the command for acquiring the card writing state, and returning the card writing state to the terminal.

25. A computer storage medium on which a computer program is stored, the computer program, when being executed by a processor, implementing the steps of a method according to any one of claims 1 to 4, or implementing the steps of a method according to any one of claims 5 to 8.

Images