KR101089805B1 - Smart card having ISO 7816 reader and communication connector - Google Patents

Abstract

The present invention relates to a smart card, and more particularly, to a smart card that can integrate access authentication and security authentication.

Smart card according to the present invention is a card-shaped housing, a loop antenna formed inside the housing along the outer periphery of the housing, a connector formed on one side of the housing and connected to the external terminal, and controls the interface of the external terminal through the connector And a smart chip mounted in the housing, electrically connected to the loop antenna and the interface controller, and processing an authentication request through the interface controller and a wireless authentication request through the loop antenna.

According to this aspect of the present invention, not only the user's access can be controlled by using a single smart card, but also user authentication for the use of an external device such as a computer can be performed.

Smart Card, Combi Card, Contact, Contactless, Connector, USB

Description

Smart card having ISO 7816 reader and communication connector

TECHNICAL FIELD The present invention relates to a smart card, and more particularly, to a smart card having a communication connector and an ISO 7816 reader capable of integrating access authentication and security authentication.

In general, a smart card is a card with an integrated circuit (IC) embedded therein and refers to all cards in which one or more such ICs are embedded.

Unlike a general magnetic card, such a smart card can store a large amount of information, and its own program can be provided to provide a number of application service functions. In addition, a smart card is a software or hardware-implemented cryptographic module that is essentially embedded, so that access to important information is not possible without the password set by the holder. Medical, financial, electronic payment, telephone, secure access It is widely used in traffic and transportation.

In particular, companies that require security issue smart cards to workers who work in the company to control outsiders from entering the company. Workers who receive smart cards enter and exit the company using smart cards issued to them. On the other hand, companies not only control access inside the company through smart cards, but also perform security management to prevent the company's information from being exposed to the outside.

For example, a worker may use a smart card issued to him or her from a computer to share information or enter information using a computer within the enterprise. Accordingly, the computer reads the authentication information of the presented smart card, checks whether the user is the correct user, and allows the worker access.

However, in order to check the connection permission of the computer using the smart card, a reader for reading the authentication information of the smart card and transmitting the read authentication information to the computer must be separately provided. In other words, if a company has hundreds of computers, a number of readers need to be purchased and installed separately, thereby incurring a lot of purchase and maintenance costs. In addition, it is inconvenient to separately install a drive program for the reader in the computer so that readers connected to each of the plurality of computers can operate.

The present invention aims to solve such a problem, and aims to perform common authentication such as access control and computer security using one smart card.

Furthermore, the smart card according to the present invention is directly connected to an external terminal such as a computer for the purpose of performing data communication.

Furthermore, the smart card according to the present invention aims to be used as a common authentication and portable memory.

Furthermore, the smart card according to the present invention is intended to enable data communication with a contact or contactless terminal.

The foregoing technical problem is achieved by the characteristic aspects of the present invention described below. Smart card according to the present invention is a card-shaped housing, a loop antenna formed inside the housing along the outer periphery of the housing, a connector formed on one side of the housing and connected to the external terminal, and controls the interface of the external terminal through the connector And a smart chip mounted in the housing, electrically connected to the loop antenna and the interface controller, and processing an authentication request through the interface controller and a wireless authentication request through the loop antenna.

The housing according to a further aspect of the present invention is formed with a recess inwardly formed on one side, and the connector is formed in the recess with a length that does not protrude outside the extension line of the side on which the recess is formed.

According to an additional aspect of the present invention, an interface controller may include: a data input / output controller for controlling data output of a smart chip according to a data request received through an interface of an external terminal; and reading data from a smart chip according to a control command of the data input / output controller; Includes a chip reader unit.

According to an aspect of the present invention, a smart chip includes a communication unit performing data communication with an interface controller and a loop antenna, a memory storing user authentication related information and a control program, and a control program and user authentication related information stored in the memory. It includes a control unit for processing the authentication request received through the communication unit.

According to this aspect of the present invention, the smart card not only controls the access of the user by wireless communication with the contactless terminal, but also can perform user authentication for the use of an external device, for example, a computer, and a connector mounted on the smart card. Is formed in a concavely recessed portion on one side of the housing forming the outline of the smart card, thereby protecting it from mechanical damage caused by external physical or electrical forces.

The smart card according to an additional aspect of the present invention further includes a contact card interface exposed outside the surface of the housing and electrically connected with the smart chip to transmit and receive electrical signals related to the contact authentication with the smart chip.

According to an aspect of the present invention, a smart chip includes a communication unit performing data communication through an interface control unit, a loop antenna, and a contact card interface, a memory storing user authentication related information and a control program, a control program stored in the memory, and a user authentication. And a control unit for processing an authentication request received through the communication unit using the related information.

The smart card according to an additional aspect of the present invention further includes a USB network for storing data received from an external terminal, and the interface controller includes a USB terminal connecting the USB terminal of the external terminal to a single interface, and a single through the USB terminal. And a UBS memory access unit configured to control access to an external terminal connected to an interface of the UBS network, and a UBS network access unit that physically accesses the UBS network according to a control command of the UBS network controller.

According to this aspect of the invention, the smart card can control the access of the user through the data communication not only the contactless terminal but also the contact terminal, can be used as a general USB memory.

As described above, the present invention not only controls access of a user using a single smart card, but can also perform user authentication for use of an internal device, for example, a computer.

Furthermore, the smart card according to the present invention not only can communicate with the contact / contactless terminal that controls access, but also performs user authentication by inserting a connector mounted on the smart card into a computer, thereby allowing the user to use the computer in the enterprise. There is no need to provide a separate authentication device, thereby reducing the purchase cost and maintenance costs. In addition, the connector mounted on the smart card is formed in a recessed portion in one side of the housing forming the outer shape of the smart card, it can be protected from mechanical damage by external physical or electrical forces.

As such, the smart card capable of communicating with the contact / contactless terminal according to the present invention is more convenient because it can be used as a portable memory such as a USB memory as well as integrating common authentication such as access control and computer security of the user. Can be used as a multipurpose card with enhanced security.

The foregoing and further aspects of the present invention will become apparent from the following examples. Hereinafter, with reference to the preferred embodiments described with reference to the accompanying drawings of the present invention will be described in detail to enable those skilled in the art to easily understand and reproduce.

1 is an exemplary view of a smart card according to an embodiment of the present invention.

As shown in FIG. 1, the smart card includes a housing 100, a loop antenna 200, a connector 300, an interface controller 400, a smart chip 500, and a USB bus 600.

The housing 100 having a size of a general card shape and made of a material such as a flexible plastic is formed of a plurality of layers, and a loop antenna 200, a connector 300, and an interface controller 400 to be described later between the layers and the layers. , Smart chip 500 is mounted. The housing 100 follows a length and length standard such as ISO 7816, and is preferably formed to the same thickness as the thickness of the connector 300.

The loop antenna 200 is formed inside the housing 100 along the outside of the housing 100. The loop antenna 200 is an element capable of transmitting or receiving signals in the form of electromagnetic waves in accordance with the principle of electromagnetic induction in an electromagnetic field, and effectively transmits and receives signals while satisfying the requirements of a small thin film. As such, the technology in which the loop antenna 200 is mounted or configured in the housing 100 of the smart card is a well-known technology, and thus a detailed description thereof will be omitted. Connector 300 is a USB (Universal Serial Bus: USB) connector, is formed on one side of the housing 100 is connected to an external terminal such as a computer (PC, peripherals supporting the USB). That is, one side of the housing 100 is formed with a recess 10 which is dug inward, and the connector 300 is formed in the recess 10 which is dug inward on one side of the housing 100. At this time, the connector 300 is preferably formed in the concave portion 10 to a length that does not protrude out of the extension line of the side where the concave portion 10 is formed. Accordingly, the user may physically connect the external terminal with the connector 300 formed in the recess 10 of the housing 100 using the extension cable.

As such, the recess 10 is formed in one side of the housing 100, and the connector 300 is formed in the recess 10 to be mechanically formed by external physical or electrical forces. Can be protected from breakage.

However, the present invention is not limited thereto, and the connector 300 may be directly connected to an external terminal as illustrated in FIGS. 2 to 4.

2 is an exemplary view of a smart card according to another embodiment of the present invention.

As shown, the connector 300 is formed to protrude from one of the four corners of the housing 100, the housing 100 includes a cover portion 110 to protect the protruding connector 300. The cover part 110 is formed to be completely separated from the housing 100 to protect the protruding connector 300. That is, when the user connects the connector 300 to the USB terminal of the computer, the cover unit 110 coupled to the housing 100 is separated, and the connector 300 exposed to the outside is directly inserted into the USB terminal of the computer. . Accordingly, the connector 300 may be directly connected to the external terminal without a separate extension cable. On the other hand, when the connection between the external terminal and the connector 300 is terminated, the connector 300 may be protected from the outside by being inserted into the cover 110 completely separated from the housing 100.

3 is an exemplary view of a smart card according to another embodiment of the present invention.

As shown, the connector 300 protrudes from one of four corners of the housing 100. As described above, the cover 110 protects the connector 300 protruding from the corner of one end of the housing 100, one end of the cover 110 is composed of a hinge (Hinge). Accordingly, the cover 110 is not completely separated from the housing 100, and the other end not configured as a hinge is separated from the housing 100.

As such, one end of the cover part 110 protecting the connector 300 and the housing 100 are connected to each other by a hinge, thereby preventing the cover part 110 from being lost.

4 is an exemplary view of a smart card according to another embodiment of the present invention.

As shown, the connector 300 is configured in the interior of one end of the housing 100, the housing 100 projects the connector 300 inserted in the housing 100 in the form of a slide or the housing A slide protrusion 120 for insertion into the 100. The slide protrusion 120 is connected to the connector 300. When a force is applied to the slide protrusion 120 in the forward direction, the connector 300 inserted into the housing 100 protrudes to the outside, and the slide protrusion ( When a force is applied rearward 120, the connector 300 protruding to the outside is inserted into the housing 100. As such, the connector 300 protrudes or is inserted into the housing 100 in the form of a slide, and thus does not need to form a separate cover 110 as shown in FIGS. 2 and 3.

As such, when the connector 300 formed in the housing 100 is physically connected to the external terminal, the interface controller 400 controls the interface of the external terminal to control the external terminal and the smart chip 500 or the external terminal and the USB memory ( The control unit 600 facilitates data communication through the connector 300. The smart chip 500 mounted inside the housing 100 is electrically connected to the loop antenna 200 and the interface control unit 400, and requests authentication through the interface control unit 400 and wireless authentication through the loop antenna 200. Process the request. The USB memory 600 in which received data is stored according to a request of an external terminal may include various memories such as erasable programmable read only memory (EPROM), static random access memory (SRAM), or flash memory (Flash memory). The device can be applied. That is, the interface controller 400 controls an interface of an external terminal physically connected to the connector 300 to process an authentication request of the smart chip 500 or to access the USB memory 600. Each configuration of the interface controller 400 and the smart chip 500 will be described in detail below.

5 is a block diagram of an interface controller according to an embodiment of the present invention.

As illustrated, the interface controller 400 includes a USB hub 410, a data input / output controller 420, a chip reader 430, a USB memory controller 440, and a USB memory access unit 450. The interface controller 400 according to an embodiment of the present invention operates in a USB system. The interface controller 400 connects the external memory and the smart chip device through a single USB port. The USB hub 410 connects a plurality of embedded devices to one serial bus.

The USB hub 410 is connected to the USB memory controller 440 that operates as an external mass memory, and a data input / output controller 420 that operates as an input / output device. When the control command related to the authentication performance request of the smart chip 500 of the external terminal is received from the USB hub 410 through the connector 300, the data input / output controller 420 performs authentication of the smart chip 500 of the external terminal. The data output of the smart chip 500 is controlled according to the request. Accordingly, the chip reader 430 reads authentication related data according to the control command of the data input / output controller 420 from the smart chip 500. The chip reader 430 may be an ISO 7816 card reader chip, and transmits the authentication related data read from the smart chip 500 to the data input / output controller 420 to be transmitted to an external terminal.

Meanwhile, as a single interface is connected to the external terminal through the USB hub 410, the USB storage controller 440, which is a mass storage class, controls access to the USB memory 600. In accordance with the access control command of the USB memory controller 440, the USB memory access unit 450 physically accesses the USB memory 600 to communicate data between the external terminal of the USB memory controller 400 and the USB memory 600. This is done.

That is, when the connector 300 and the external terminal are physically connected, the external terminal accesses the USB memory 600 through the USB memory controller 440 and the USB memory access unit 450 to access data that is operated by the external terminal. Stored in the memory 600, or the request to receive the data stored in the USB memory (600).

In accordance with a further aspect of the present invention, the smart card includes a contact card interface 700. The contact card interface 700 is exposed to the outside of the surface of the housing 100 and electrically connected to the smart chip 500 to transmit and receive electrical signals related to the contact authentication with the smart chip 500. That is, as the smart card contacts the contact terminal, the contact card interface 700 receives the authentication related data request information received from the contact terminal and receives the authentication data related thereto from the smart chip 500. Send to the terminal.

Meanwhile, the smart chip 500 that processes the authentication request through the above-described loop antenna 200, the interface controller 400, or the contact card interface 700 may be configured as shown in FIG. 6.

6 is a configuration diagram of a smart chip according to an embodiment of the present invention.

As illustrated, the smart chip 500 includes a communication unit 510, a memory 540, and a controller 520.

The communication unit 510 performs data communication with the loop antenna 200, the interface control unit 400, and the contact card interface 700. The memory 540 stores user authentication related information and a control program. The memory 540 may be configured as a nonvolatile memory. Here, the user authentication related information stored in the memory preferably includes access related information and security related authentication information for controlling the use of an external terminal. The control program is a program for controlling data communication between the loop antenna 200, the interface controller 400, the contact card interface 700, and an external terminal (a contact / contactless terminal, a computer, and a peripheral device supporting a USB). desirable.

The controller 520 processes an authentication request received through the communication unit 510 using a control program stored in the memory 540 and user authentication related information. The controller 520 includes an access management processor 521 and a connection authentication processor 523. The access management processor 521 processes the contact / contactless terminal and access management through the communication unit 510. According to an embodiment, when the contact terminal is installed at the entrance of the building, the user inserts the smart card provided to the user into the contact terminal. When the smart card is inserted into the contact terminal, the contact card interface 700 communicates with the contact terminal, and the communication unit 510 requests a user authentication request from the contact terminal through the contact card interface 700. Receive information. When the user authentication request information is received, the access management processor 521 transmits the access program included in the control program and the user authentication related information stored in the memory 540 to the contact card interface 700 through the communication unit 510. . Thereafter, the contact terminal receives the access related information included in the control program and the user authentication related information from the contact card interface 700 for data communication, reads whether the information is correct information, and permits the user to access.

On the other hand, when the contactless reader is installed in the doorway of the building, the user approaches the smart card paid to him within a certain range of the contactless terminal. When the smart card is approached within a certain range of the contactless terminal, the smart card communicates wirelessly with the contactless terminal by the loop antenna 200, and thus, the access management processor 521 authenticates from the contactless terminal through the communication unit 510. Receive the user authentication request information requesting. When the user authentication request information is received, the access management processor 521 transmits access control information stored in the memory 540 and access related information included in the user authentication related information to the loop antenna 200 through the communication unit 510. Thereafter, the contactless terminal receives the access related information included in the control program and the user authentication related information from the loop antenna 200 for data communication wirelessly, reads whether the information is the correct information, and allows the user to enter and exit.

The connection authentication processing unit 523 processes connection authentication with an external terminal (a computer or a peripheral device supporting USB) through the communication unit 510. First, when the connector 300 is physically connected to the external terminal, the interface controller 400 controls the interface of the external terminal so that data communication is performed between the connector 300 and the external terminal. Accordingly, when security related authentication request information for controlling the use of an external terminal is received through the connector 300, the interface controller 400 may include the above-mentioned USB hub 410, the data input / output controller 420, and the chip reader unit ( The security-related authentication request information received through 430 is transmitted to the smart chip 500. Accordingly, the smart chip 500 receives the security-related authentication request information of the external terminal through the communication unit 510, the connection authentication processing unit 523 is included in the control program and user authentication-related information stored in the memory 540 The security-related authentication information is transmitted to the interface controller 400 through the communication unit 510. Thereafter, the interface control unit 400 transmits the received security related authentication information to the connector 300. Accordingly, the external terminal receives security related authentication included in the control program and user authentication related information from the connector 300 that is physically connected. Receive the information and read the correct user to allow user authentication.

As described above, the present invention not only performs access authentication through data communication with the contact / contactless terminal using one smart card, but also performs security authentication according to the use of an external terminal. Furthermore, the smart card according to the present invention can be used as a portable memory for storing data of external terminals.

So far I looked at the center of the preferred embodiment for the present invention.

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

1 is an exemplary diagram of a smart card according to an embodiment of the present invention;

2 is an exemplary view of a smart card according to another embodiment of the present invention;

3 is an exemplary view of a smart card according to another embodiment of the present invention;

4 is an exemplary view of a smart card according to another embodiment of the present invention;

5 is a block diagram of an interface controller according to an embodiment of the present invention;

6 is a block diagram of a smart chip according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

10: recess 100: housing

110: cover portion 120: slide projection

200: loop antenna 300: connector

400: interface control unit 410: USB hub

420: data input and output control unit 430: chip reader unit

440: USB memory access unit 450: USB memory access unit

500: smart chip 510: communication unit

520 control unit 521 access control processing unit

523: connection authentication processing unit 540: memory

600: US memory 700: access card interface

Claims (9)

A housing in the form of a card; A loop antenna formed inside the housing along an outside of the housing; A connector formed at one side of the housing and connected to an external terminal; An interface controller for controlling an interface of the external terminal through the connector; And a smart chip mounted to the housing and electrically connected to the loop antenna and the interface controller, the smart chip processing an authentication request through the interface controller and a wireless authentication request through the loop antenna. The interface control unit: A data input / output controller configured to control data output of the smart chip according to a data request received through an interface of the external terminal; And a chip reader unit for reading data from the smart chip according to a control command of the data input / output controller. The smart chip is: A communication unit performing data communication with the interface control unit and the loop antenna; A memory in which user authentication related information and a control program are stored; A controller configured to process an authentication request received through the communication unit by using a control program and user authentication related information stored in the memory; Smart card that includes. The method of claim 1, wherein the housing: Inwardly formed recesses on one side, And the connector is formed in the recess with a length that does not protrude outside the extension line of the side where the recess is formed. delete The method of claim 1, wherein the smart card is: A contact card interface exposed outside the surface of the housing and electrically connected to the smart chip to transmit and receive electrical signals related to contact authentication with the smart chip; Smart card containing more. The method of claim 1, wherein the smart card is: Further comprising; USBI memory for storing the data received from the external terminal, The interface control unit A USB hub connecting the USB terminal of the external terminal to a single interface; A USB memory controller configured to control access between the external terminal connected to the single interface through the USB hub and the USB memory; A USB memory access unit configured to physically access the USB memory according to a control command of the USB memory controller; Smart card that includes. delete The method of claim 4, wherein the communication unit: And further perform data communication via said contact card interface. The method of claim 1, wherein the control unit: An access management processor configured to process contact / contactless terminals and access management through the communication unit; Smart card that includes. The method of claim 7 or 8, wherein the control unit: A connection authentication processor configured to process connection authentication with the external terminal through the communication unit; Smart card that includes.

Images