KR100583244B1 - Service applet of smart card for off-line - Google Patents

Abstract

The present invention relates to a service applet for offline use and a service method therefor that does not affect the offline service infrastructure even if a new offline service applet is added to a smart card mounted in a wireless terminal.

The offline service applet according to the present invention includes a service list management information area in which a service list mounted on a smart card and a service that can be processed in a dongle are shared and stored, and an offline service required in selecting an offline service. Service profile area in which information about access information, method, service scenario, etc. to be used for authentication and service authentication for service providing server is stored and processed, and data area in which user and service related information necessary for processing actual service are stored. It is composed.

Smart card, wireless terminal, smart applet, service scenario, offline.

Description

Offline service applet for wireless terminal with smart card and service method using same {Service applet of smart card for off-line}

1 is a network diagram of a typical smart card-based service.

2 is a block diagram of a conventional smart card applet.

3 is a functional configuration diagram of the service list management applet available in the smart card.

4 is a configuration diagram of a wireless terminal module.

5 is a block diagram of the dongle inner module.

6 is a block diagram of a smart applet according to the present invention.

7A and 7B are flowcharts of a service method using a smart applet according to the present invention.

<Description of the symbols for the main parts of the drawings>

10: wireless terminal 10a: smart card

12: Dongle 14: Card approval terminal (CAT)

16: value added network (VAN) 18: offline service providing server

100: smart applet 102: service list management information area

104: service profile area 106: data area

The present invention relates to a service applet for offline use and a service method therefor that does not affect the offline service infrastructure even if a new offline service applet is added to a smart card mounted in a wireless terminal.

The wireless terminal equipped with smart card (integrated or detached) allows the owner (user) of the wireless terminal to easily use various off-line services including payment, payment, transportation, and authentication with one wireless terminal. Has eliminated the inconvenience of having multiple service cards in the user's wallet for daily offline service.

In addition, with the advent of JAVA-based smart cards (hereinafter referred to as smart cards), even after a smart card has been physically issued, a service applet (Applet, an application written in JAVA language) for a desired service is provided to the smart card by the user's needs. You can add it or delete it from your smart card.

This series of tasks is called post issuing. When adding or deleting service applets, you can safely add or delete service applets by authenticating and encrypting the server that manages users and service applets.

This post-issuance process (process) of smart card enables service reconfiguration (add, delete, change) according to user's request even after the user is physically issued a smart card. It is expected to serve as a driving force for continuous new service development by motivating the service provider or service developer who plans to plan and provide smart card-based value-added services. have.

As such, post-issuance is a major feature of smart card-based services.

In order to provide the offline service desired by the user when a new concept of service is added by using the post-issuance procedure, the wireless terminal 10 equipped with the smart card 10a and the dongle (Dongle) as shown in FIG. 12) a device for converting IrDA or RF communication into RS232-C serial communication to interface a mobile phone payment service between the wireless terminal 10 and the value-added communication network (VAN 16) or the card approval terminal (CAT 14). An offline service infrastructure such as a credit authentication terminal (CAT), a VAN 16, and an offline service providing server 18 must support a newly added service to a user's smart card.

However, the offline service infrastructure configured up to now has a structure that cannot operate flexibly as new services are added.

 This is due to the structural characteristics of the service method in which a scenario associated with a particular service is stored in the wireless terminal 10 of FIG. 4 or the dongle 12 of FIG. 5, which is an offline service infrastructure device, and the service applet depends on the offline service infrastructure device. As a result, when adding a new service, there is no problem but to upgrade the offline service infrastructure.

However, there is no alternative to the method that can effectively update the offline service infrastructure to date to support the added service immediately and efficiently.

In fact, the concept of post-issuance has not been introduced in the offline service environment up to now, especially in the dongle 12 or the card approval terminal 14, so that a person directly works whenever an update is required.

In addition, there may be a difference between the service provided by the offline service infrastructure and the service provided by the smart card 10a of the user having the actual wireless terminal 10, and there is no automated identification procedure for the service before the service is executed. There is an inconvenience in that the user must identify each service that can be actually provided by the infrastructure.

The wireless terminal 10 equipped with the smart card 10a is easy to carry, enables integrated management of services, and can be thoroughly personalized by configuring services in consideration of characteristics of each customer.

These features will continue to increase customer demand for new service usage, and as such, will continue to add and change required service applets through post-issuance, even after physically issued smart cards, resulting in the renewal of this offline service infrastructure. Must occur more frequently.

If there is no fundamental solution to this problem, the cost (time, manpower) of updating the offline infrastructure will continue to be incurred every time a service is added. none.

The present invention is to fundamentally solve such a problem, and an object of the present invention is to minimize the number of updates incurred by updating the offline service infrastructure by minimizing the number of updates of the existing offline service infrastructure due to the addition of the service applet to the first one. In the case of newly constructed offline service infrastructure, even if new services are developed and applied in a service independent configuration that is not affected by the addition of new services, it is possible to provide new offline services without updating the separate offline service infrastructure. It is to configure an applet and provide an offline service method (scenario) based on the configured applet.

In order to achieve the above object, the present invention provides a service list management information area in which a service mounted on a smart card and a service that can be processed in a dongle are compared and shared, and a usable service list is stored;

A service profile area in which information about access information, a method, a service scenario, and the like to be used for authentication and user authentications for an offline service providing server required in selecting an offline service is stored and processed;                         

A data area for storing user and service related information necessary for processing an actual service;

To provide an offline service applet for a wireless terminal equipped with a smart card comprising a.

In order to achieve the above object, the present invention, in order to use the offline service as a wireless terminal equipped with a smart card, the dongle and the card approval terminal (CAT) is connected to the offline service providing server through a value-added communication network (VAN), wireless In the terminal, the service via a system provided with a relevant module to enable short-range communication between the smart card and the dongle;

Comparing and sharing the services mounted on the smart card and services that can be processed in the dongle from the smart card to the service comparison step of storing the available service list,

A service selection step of receiving a list of available services from a smart card in a wireless terminal and selecting one, and receiving and storing a service scenario in a smart card based on index information of the selected service;

The present invention aims to provide a service method using an offline service applet for a wireless terminal equipped with a smart card, which comprises a service execution step of analyzing a service scenario in a wireless terminal and executing a selected service based on the service scenario.

Hereinafter, the configuration and operation of the present invention will be described with reference to the accompanying drawings.                     

In the present invention, the system includes a user, a wireless terminal 10 equipped with a smart card 10a, a dongle 12 which is a contact point of an offline service infrastructure, a card approval terminal (CAT) 14, a value-added communication network (VAN); Value Added Network (16), offline service providing server (18), the service scenario is a service comparison (Service Negotiation) step (S100), Service Selection (Service Selection) step (S200), Service Running (Service Running) It consists of three steps of step S300.

The user must mount the smart applet 100 in the smart card through the pre-issue or post-issue, the smart applet is configured as shown in FIG.

That is, the service list management information (Negotiation Management Information) area 102 for storing the result generated in the service comparison step (S100) and the authentication and user authentication for the offline service providing server 18 in the service execution step (S200). A user required for processing the actual service by the service profile area S104 and offline service providing server 18 in which information about access information and method (algorithm, algorithm), service scenario, etc. to be used and the like are stored and processed; It consists of a data area 106 in which service related information (eg, user ID, credit card number) is stored.

The service scenario is stored in the service profile area 104 of the smart applet 100, and the dongle 12 and the wireless terminal 10 support only a function capable of analyzing and executing the actual service scenario. 10), the development of the dongle 12 is enabled, even if a new service is added to the smart card (10a), the wireless terminal 10 and the dongle 12 is based on the service scenarios stored in the smart applet 100 to perform offline services Since it can be provided, it is not necessary to update separately according to the service addition.

In addition, if the service scenario stored in the smart applet 100 accepts the existing offline service scenario, it is possible to apply a new service without changing the infrastructure of the value-added communication network 16 or offline service providing server 18 of the existing offline service infrastructure. .

In order to use the offline service with the wireless terminal 10 equipped with the smart card 10a, the dongle 12 and the card approval terminal 14 must be connected to the offline service providing server 18 through the value-added communication network 16. In addition, the wireless terminal 10 should support a related module to enable short-range communication (eg, IrDA, RF) between the smart card 10a and the dongle 12.

The dongle 12 may store a list of all offline services supported by the dongle, or may obtain relevant information through a communication interface of the card approval terminal 14.

7A and 7B are flowcharts of a service method using a smart applet according to the present invention.

In the service comparison step S100 of FIG. 7A, when the user approaches the smart card 10a as the contact point of the offline service infrastructure, the dongle 12 is connected to the smart card 10a via the wireless terminal 10. Attempt to short-range communication to form a channel (S102).

The dongle 12 requests a service list from the card approval terminal 14 (S104) and receives the received service list (S106). The obtained service list or the service list stored in the dongle internal storage (Buffer) can be provided by the wireless terminal. It transmits to the smart card (10a) (10) (S108).

The smart card 10a compares and shares a service mounted on the smart card 10a with a service that can be processed by the dongle 12 to share an available service list with service list management information of the smart applet 100. It is stored in the (Negotiation Management Information) area 102 (S110).

In the service comparison step (S100), the user drives the wireless terminal 100 to use an offline service (here, a menu button of the wireless terminal to move to a screen where an additional service menu is displayed for the purpose of using a service desired by the user). It is effective to do this before (i.e. implicitly) the user's recognition).

If the short-range communication between the smart card 10a and the dongle fails to generate a usable service list in step S102, the smart card 10a services all service lists that can be provided by the smart card. The list management information area 102 is stored (S112).

Through the service comparison step (S100), a user may omit the procedure of visually identifying and identifying a service that can be provided by the dongle 12 at the time of using the service, thereby automating the service identification process.

If the user drives the wireless terminal 10 in the service selection step (S200) (S202), the wireless terminal 10 requests the available service list from the smart card (10a) (S204).

The wireless terminal 10 receives the available service list from the smart card 10a (S206), outputs it to the screen of the wireless terminal (S208), and requests a user's selection.

At this time, by checking whether the number of services included in the output available service list is the singular, the service is automatically selected in the singular (S211).

That is, in the case of singular, the user's selection procedure may be omitted.

If the number of services is plural, the user selects one service (S218).

Finally, when the index information of the service selected by the user or automatically is stored in the wireless terminal 10 (S212), the wireless terminal requests a service scenario to the smart card 10a based on the service index information (S212). S214), the service scenario is received from the smart card, and the information is stored in the wireless terminal (S216).

In the service execution step S300 of FIG. 7B, the wireless terminal 10 analyzes a service scenario transmitted from the smart card 10a and executes a service based on the service scenario.

In the service scenario, the functions to be performed by the wireless terminal 10 and the dongle 12 are defined, which must be delivered to each function performing entity. The wireless terminal can deliver the service scenario to the dongle.

The wireless terminal 10 checks the user based on the service scenario (S302-306), and the dongle 12 uses the smart card based on the scenario transmitted to the dongle 12 or at the request of the wireless terminal 10. Authentication (S308-S318).                     

That is, when a user inputs a PIN (Personal Information Number) to the wireless terminal 10 (S302), the wireless terminal 10 requests verification of the PIN input to the smart card 10a (S304), the smart card ( 10a) transmits the verification result to the wireless terminal 10 (S306).

When the wireless terminal transmits a service code to the dongle and requests random number generation (S308), the dongle 12 generates a random number and transmits the random number value generated to the wireless terminal 10 (S310).

The wireless terminal transmits a random number value to the smart card, and requests for authentication message authentication code (MAC) and service data (S312).

The smart card 10a transmits the authentication MAC and service data to the wireless terminal 10 (S314), and the wireless terminal 10 receives it and transmits it to the dongle 12 (S316).

The dongle 12 checks the MAC to authenticate the smart card (S318).

When the user and the card authentication is completed as described above, the dongle stores information (service data, that is, service code and credit card data) stored in the data area 106 of the smart applet 100 required for service provision. Transmit to (S320).

The card approval terminal 14 generates the full text based on the service code (S322) and transmits service related information to the final offline service providing server 18 through the additional service communication network 16 (S324), and provides the offline service. The server approves the service related information (S326) and transmits the result to the card approval terminal 14 through the value-added communication network 16 (S328).

The card approval terminal 14 outputs a slip and notifies the user of the result.                     

Scenarios applied to the service execution step (S300) may be designed to reflect the characteristics of each service, the scenario may vary depending on the service.

As described above, according to the present invention, the number of renewal of the existing offline service infrastructure due to the addition of the service applet can be minimized to the first time, thereby minimizing the cost incurred by the update of the offline service infrastructure, and the new offline service to be constructed in the future. In the case of infrastructure, it is possible to provide new offline service without renewing the offline service infrastructure even if new service is developed and applied as a service independent configuration that is not affected by the addition of new service.

Claims (10)

A service list management information area for comparing and sharing a service mounted on a smart card with a service that can be processed by the dongle, and storing a list of available services; A service profile area in which information about access information, a method, a service scenario, and the like to be used for authentication and user authentications for an offline service providing server required in selecting an offline service is stored and processed; A data area for storing user and service related information necessary for processing an actual service; A computer-readable recording medium having recorded an offline service applet for a wireless terminal including a. A wireless terminal equipped with a smart card, the dongle and a card approval terminal (CAT) are connected to an offline service providing server through a value-added communication network (VAN), and the wireless terminal can perform short-range communication between the smart card and the dongle. CLAIMS What is claimed is: 1. A method of servicing a system, the system comprising: a system equipped with an associated module; Comparing and sharing the services mounted on the smart card and services that can be processed in the dongle from the smart card to the service comparison step of storing the available service list, A service selection step of receiving a list of available services from a smart card in a wireless terminal and selecting one, and receiving and storing a service scenario in a smart card based on index information of the selected service; A service method using an offline service applet for a wireless terminal equipped with a smart card, characterized by comprising a service execution step of analyzing a service scenario in a wireless terminal and executing a selected service based on the service scenario. The method of claim 2, wherein the service comparison step, Accessing the smart card to the dongle, attempting short-range communication with the smart card through the wireless terminal in the dongle to form a channel; Requesting and receiving a service list from the dongle to the CAT; Transmitting the service list acquired through CAT from the dongle or the dongle internal storage to the smart card through the wireless terminal; Using the offline service applet for the wireless terminal equipped with a smart card, characterized in that the smart card is equipped with a step of comparing and sharing the services mounted on the smart card and the services that can be processed in the dongle, the available service list How to service. 4. The offline service applet for a wireless terminal equipped with a smart card according to claim 3, wherein when the short range communication between the smart card and the dongle fails, all service lists provided by the smart card are stored in the smart card. Service method used. The method of claim 2, wherein the service selection step, Requesting a list of available services from the wireless terminal by the wireless terminal to the smart card; Receiving a list of services available in the wireless terminal from the smart card and outputting to the screen, Selecting one of the services included in the output available service list; Storing index information of the selected service in a wireless terminal; Receiving and transmitting a service scenario to the smart card based on the service index information in the wireless terminal; A service method using an offline service applet for a wireless terminal equipped with a smart card, characterized in that the step of storing the service scenario information in a wireless terminal. The service method of claim 5, wherein the service applet for a wireless terminal equipped with a smart card is automatically selected when the number of services included in the available service list displayed on the screen of the wireless terminal is one. The method of claim 2, wherein the service execution step, Verifying a user by verification of a personal information number (PIN) based on the service scenario; Authenticating the smart card by verifying the MAC (Message Authentication Code) based on the request of the wireless terminal in the dongle or the service scenario delivered to the dongle; The offline service for the smart terminal equipped with a smart card, characterized in that the step of generating the full text in the CAT to deliver the service-related information to the offline service providing server through the VAN to obtain the approval and inform the user of the result. Service method using applet. The method of claim 7, wherein the user confirmation step, The user entering a PIN into the wireless terminal; Requesting verification of a PIN entered into a smart card in a wireless terminal; A service method using an offline service applet for a wireless terminal equipped with a smart card, characterized in that the smart card is configured to transmit the verification result to the wireless terminal. The method of claim 7, wherein the smart card authentication step, Transmitting a service code to the dongle in the wireless terminal and requesting random number generation; Generating random numbers from the dongle and transmitting the generated random numbers to the wireless terminal; The wireless terminal sends a random number to the smart card, and requesting authentication MAC and service data; Transmitting the authentication MAC and service data from the smart card to the wireless terminal; Receiving it from the wireless terminal and transmitting it to the dongle; The method of using an offline service applet for a wireless terminal equipped with a smart card, characterized in that the step of authenticating the smart card by identifying the MAC in the dongle. The method of claim 7, wherein obtaining the approval regarding the service-related information and notifying the result thereof, Transmitting the information (service data) necessary for providing the service from the dongle to the CAT; Generating the full text based on the service code in the CAT, and transmitting the service related information to the final offline service providing server through the VAN; Approving the service-related information in the offline service providing server and transmitting the approval result to the CAT through the VAN, A service method using an offline service applet for a wireless terminal equipped with a smart card, characterized in that the step of outputting the slip from the CAT to notify the user of the result.

Images