CN207070088U

CN207070088U - A kind of identity card cloud identifies Verification System

Info

Publication number: CN207070088U
Application number: CN201720317262.XU
Authority: CN
Inventors: 易青松
Original assignee: Individual
Current assignee: Individual
Priority date: 2017-03-29
Filing date: 2017-03-29
Publication date: 2018-03-02
Anticipated expiration: 2027-03-29

Abstract

It the utility model is related to a kind of identity card cloud identification Verification System, a kind of identity card cloud identifies Verification System, including cloud management central server, cloud identification decoder and some identification terminals, wherein, the cloud management central server and the cloud identification wired or wireless connection of decoder, the cloud identification decoder includes CPU, memory, controller and SAM ponds, some identification terminals include at least one identifier and read processing module, and identification terminal passes through network connection with cloud management central server.The system have concentrate decoding identification, rapidly and efficiently, securely and reliably, substantially reduce the advantages of cost.

Description

A kind of identity card cloud identifies Verification System

Technical field

The utility model belongs to technical field of the computer network, more particularly to a kind of identity card cloud identification Verification System.

Background technology

Currently, China's resident identification card uses non-contact IC card fabrication techniques, is stored up in identity card chip 46 resident informations, these information use digital anti-counterfeiting confidential technique, and one key of every card, the information of write-in is according to safety etc. Level partitioned storage, has higher security, reading identity card information to be equipped with the private identity card peace of Ministry of Public Security's mandate Full processing module（SAM）Safety certification can be just passed through, the personal information data in chip is read, decoding is completed, shows The function such as show, store, inquiring about.However, there are the following problems for identity card identification at present：Each device end must a built-in peace Full unit（SAM）Module, this may result in identification terminal quantity and must constantly be increased according to business demand, and separate unit terminal into This is more than thousands of members, holistic cost is too high；The secure processing module that the Ministry of Public Security authorizes（SAM）Manufacturer only has one, production Measure wretched insufficiency so that the cycle from placing an order shipment is more than 6 months；Needed as the development of third generation identity card updates, When iteration updates, identity card identification terminal and secure processing module（SAM）Large area renewal, cycle length, generation certainly will be faced Valency is high.Nowadays, anti-terrorism safety, block trade, communications and transportation, harmful influence management, remotely open an account, industry and commerce is handled, communicate open card, In the multiple fields such as Report on Network, on-line approval, all there is an urgent need to more preferable authentication idses mode.

The content of the invention

The purpose of this utility model is to be directed to above-mentioned the deficiencies in the prior art, there is provided one kind realizes peace using computer network Full identity card rapid authentication, without in identification terminal built-in security processing module（SAM）Identity card cloud identification Verification System.

Technical scheme is used by realize the purpose of this utility model：A kind of identity card cloud identifies Verification System, bag Cloud management central server, cloud identification decoder and some identification terminals are included, wherein, the cloud management central server is known with cloud The other wired or wireless connection of decoder, the operation that cloud management central server is mainly used in whole system is managed, described Cloud identification decoder includes CPU, memory, controller and SAM ponds, is mainly used in decoding ID card information, if described Dry identification terminal includes at least one identifier and reads processing module, and reading processing module is mainly used in the identity to collecting Card information carries out encryption and decryption processing and decoded identity card cleartext information is sent into identifier, identification terminal with cloud management Central server passes through network connection.

The SAM ponds are provided with least one secure processing module（SAM）.

The identifier is the mobile phone provided with NFC module, tablet personal computer or the electronics based on RFID ISO14443-B agreements Equipment is read, is mainly used in the collection of ID card information and receive information and shows.

A kind of identity card cloud identification Verification System, employs the mode of high in the clouds Collective qualification made of such scheme, multiple Identification terminal is connected in special decoding server by internet, and each identification terminal is without built-in security processing module again （SAM）Securely and reliably identity card can be just identified, realize multiple identification terminals and share a secure processing module （SAM）, greatly reduce buying, maintenance and upgrade cost.Identification terminal is also using existing common device such as mobile phone, PDA, flat The equipment such as plate, without separately purchasing, the unrestricted expansion of terminal quantity is reduced, further reduce repeating buying and maintenance cost. Concentration identification, Batch sending are carried out to ID card information at the same time it can also batch, significantly improve the synchronous efficiency of on-line authentication. With concentrate decoding identification, rapidly and efficiently, securely and reliably, substantially reduce the advantages of cost.

Brief description of the drawings

Fig. 1 is system architecture diagram of the present utility model；

Fig. 2 is decoding identification process figure of the present utility model.

Embodiment

Below by way of preferred embodiment, the utility model is described in further detail, but protection model of the present utility model Enclose and be not limited thereto.

Referring to Fig. 1, a kind of identity card cloud identification Verification System of the present utility model, including cloud management central server 2, cloud Decoder 3 and some identification terminals 1 are identified, wherein, the cloud management central server 2 and cloud identification decoder 3 be wired or nothing Line is connected, and the operation that cloud management central server 2 is mainly used in whole system is managed, and the cloud identification decoder 3 wraps Include CPU（Do not show in figure）, memory（Do not show in figure）, controller（Do not show in figure）With SAM ponds 3-1, it is mainly used in identity card Information is decoded, and the SAM ponds 3-1 is provided with least one secure processing module（SAM）3-1-1.Some identification terminals 1 Including at least one identifier 1-1 and processing module 1-2 is read, it is the meter with identifier communication connection to read processing module 1-2 Calculation machine or smart machine, it is mainly used in carrying out the ID card information that collects encryption and decryption processing and by decoded proof of identification Literary information is sent to identifier 1-1, and identification terminal 1 passes through network connection with cloud management central server 2.The identifier 1-1 For the mobile phone provided with NFC module, tablet personal computer or e-reading devices based on RFID ISO14443-B agreements, it is mainly used in The collection of ID card information and receive information are simultaneously shown.

Referring to Fig. 1, Fig. 2, when user is read out using mobile phone to identity card, by NFC module using contactless Collection information is read out to identity card, in gatherer process is read, radiofrequency signal is sent to identity by the NFC module of mobile phone The ID card information of its storage inside is issued NFC module by card, identity card by radiofrequency signal；The body that NFC module will collect Part card information data is exchanged to the reading processing module operated on mobile phone, read processing module according to presetting partly or The information all read is encrypted and repacked, then passes through service end of the forwarded to high in the clouds；Service end will Read and obtain ID card information after the encrypted message packet that processing module is sent is decrypted and be sent to cloud identification decoder, cloud is known Other decoder passes through the secure processing module in SAM ponds（SAM）Obtain identity card cleartext information and be sent to genuinely convinced in cloud management It is engaged in the service end of device, service end will identity card cleartext information be secondary encrypts and after repacking, then is sent by network to reading Processing module, after reading processing module is decrypted, obtain identity card cleartext information simultaneously makes user read identity by mobile phone Demonstrate,prove information.

Identification step is as follows：

（1）After opening identification terminal 1, NFC module or RFID radio frequencies on identifier 1-1, which are in, looks for identity card state, When user's operation picks up identity card close to identifier, detection immediately is found to identity card, and identifier 1-1 starts to read captured identity Demonstrate,prove information data；

（2）The ID card information data that processing module 1-2 gets identifier 1-1 collections are read, and the data are used AES is encrypted with random number combination and recombinates packing, then is sent to cloud management central server 2 by network, The encrypted result that AES is used to transmit every time is different from, and improves the security in data transmission procedure；

（3）Cloud management central server 2 is to step（2）The encryption data sent is decrypted, and obtains ID card information simultaneously It is sent to cloud identification decoder 3；

（4）Cloud identifies decoder 3 by calling the secure processing module in the 3-1 of SAM ponds（SAM）3-1-1, identity card is believed Breath carries out decoding and obtains identity cleartext information, and beams back cloud management central server 2；

（5）Cloud management central server 2 is by step（4）The identity cleartext information of acquisition is using AES and random array Conjunction mode is encrypted and recombinates packing again, is retransmited to reading processing module 1-2；

（6）Processing module 1-2 is read to step（5）After the encryption information sent is decrypted, obtains identity card and believe in plain text Breath, the information is shown by identifier 1-1 to user, and reading operations, identity card plaintext packet are read so as to complete identity card Include but be not limited only to writings and image.

A kind of identity card cloud identification Verification System of the present utility model, by by interaction scenarios and secure processing module （SAM）Separated, realize the function of the Unified Network centralization certification of identity card.By secure processing module（SAM）Place It is divided into two parts on cloud server, and by interaction scenarios, a part is positioned over the server of cloud management central server End, simulation is completed and secure processing module（SAM）Interaction, a part be positioned over cloud management central server reading processing mould Block and identification terminal, processing and interacting between radio frequency, and data interaction is carried out by network between two parts, to reach identity Card and secure processing module（SAM）Between interactive communication.The ID card information of acquisition is sent to cloud and identifies decoding by identification terminal Device, unified identification decoding is carried out to ID card information by SAM ponds, and pass through the mobile phone provided with NFC module, tablet personal computer or base Equipment is read in the smart electronicses of RFID ISO14443-B agreements identity information is carried out to check reading.Know with decoding is concentrated Not, rapidly and efficiently, securely and reliably, substantially reduce the advantages of cost.

The technical solution of the utility model is not restricted in the range of embodiment described in the utility model.This practicality is new The technology contents of the not detailed description of type are known technology.

Claims

1. a kind of identity card cloud identifies Verification System, it is characterised in that：Including cloud management central server, cloud identification decoder and Some identification terminals, wherein, the cloud management central server and the cloud identification wired or wireless connection of decoder, cloud management center The operation that server is mainly used in whole system is managed, and the cloud identification decoder includes CPU, memory, controller With SAM ponds, it is mainly used in decoding ID card information, some identification terminals include at least one identifier and reading Processing module, identifier are mainly used in captured identity card information and send it to reading processing module, and reading processing module will The information received is encrypted, and being sent to cloud management central server by network decrypts and decode, decoded identity Card cleartext information, which is encrypted to return again by network, delivers to identification terminal, by reading processing module decryption reduction identity Prove text and show.

A kind of a kind of 2. identity card cloud identification Verification System according to claim 1, it is characterised in that：The SAM ponds are set There is at least one secure processing module（SAM）.

A kind of a kind of 3. identity card cloud identification Verification System according to claim 1, it is characterised in that：The identifier is Mobile phone, tablet personal computer provided with NFC module or the e-reading devices based on RFID ISO14443-B agreements, are mainly used in body The collection of part card information and receive information are simultaneously shown.