KR101704249B1 - Method for Controlling Integrated Circuit Chip by using Distributed Processing - Google Patents

Abstract

The present invention relates to a method for controlling an IC chip by using distributed processing. The method for controlling an IC chip by using distributed processing according to an embodiment of the present invention includes the steps of: performing a procedure to remotely interoperate a terminal side application with a server side application; setting an encryption key; determining a terminal side parameter; outputting a message to induce an interface of the IC chip according to the interface state of the IC chip and transmitting the terminal side parameter to the server side application; remotely configuring command data to be injected into the IC chip; supplying encrypted command data to the terminal side application by encrypting the command data; effectively receiving and processing the encrypted command data according to the interface state of the IC chip and outputting an error message or wasting the encrypted command data which is received; and injecting the command data supplied from the server side application into the IC chip. Therefore, the present invention can safely use the IC chip through a wireless terminal.

Description

[0001] The present invention relates to a method for controlling an IC chip using distributed processing,

The present invention provides a method for executing a method through a server communicating with a wireless terminal to which an IC chip possessed by a user is interfaced, the method comprising the steps of: The server-side application establishes an encryption key for encrypting command data to be injected into the IC chip as a result of the remote interaction procedure, The terminal side application determines a terminal side parameter for configuring command data to be injected into the IC chip through the server side app when the command data is injected from the wireless terminal to the IC chip, If the state of the interface of the IC chip is not confirmed by confirming the state where the IC chip is interfaced with the terminal, Side parameter to the server-side application under a condition that the IC chip is interfaced with the wireless terminal, and transmits the message to the server-side application, Side parameter from the terminal-side application and remotely configures command data to be injected into the IC chip by using the received terminal-side parameter, and the server-side application transmits the configured command data using the encryption key Encrypts the encrypted command data and provides the encrypted command data to the terminal side application, and the terminal side application performs valid reception processing on the encrypted command data received from the server side app under a condition that the IC chip is interfaced with the wireless terminal, The interface state of the IC chip is confirmed at the time of receiving the encrypted command data Side application is not interfaced with an IC chip that is in an interfaced state with the wireless terminal when the encrypted command data is validly received, The present invention relates to an IC chip control method using distributed processing for injecting command data provided by a server-side application.

Generally, IC chips are known as a medium safe from the threat of hacking in existing information recording media. However, even if the IC chip is safe from the threat of hacking, if the terminal interlocked with the IC chip is hacked or tampered with or tampered with, the terminal intercepts the process of interlocking with the IC chip, inquires information recorded on the IC chip, It is possible to do.

Conventionally, a terminal such as a CAT / ATM fabricated for interlocking with an IC chip is physically disconnected from an external network such as the Internet. Therefore, unless the terminal is physically opened and modulated, It is impossible to hack.

Recently, attempts have been made to interface IC chips to user-owned wireless terminals such as smart phones for various services. However, unlike a terminal such as a CAT / ATM, a user's own wireless terminal such as a smart phone is connected to an open network such as the Internet, and a malicious program is installed at any time to expose the terminal itself to the risk of being hacked or tampered . Therefore, even if the IC chip is safe, even if the wireless terminal connected to the IC chip is exposed to the risk of hacking or tampering, the IC chip may be hacked, There is a risk of inquiry and seizure of information, but the proposed method has difficulties to overcome such a danger.

In order to solve the above-mentioned problems, an object of the present invention is to provide a method for executing a method executed by a server communicating with a wireless terminal to which an IC chip possessed by a user is interposed, A first step of performing a procedure of remotely interworking with a server-side application distributed on a server side in order for a terminal-side application to interoperate with the IC chip; A second step of setting an encryption key for encrypting command data to be transmitted to the IC chip, and a second step of, when the command data is injected from the wireless terminal into the IC chip, A third step of determining a terminal side parameter for constituting the IC chip, and a third step of checking whether the IC chip is interfaced with the wireless terminal, When the interface state of the IC chip is not confirmed, outputs a message for instructing the interface of the IC chip after waiting for transmission of the terminal side parameter, Side parameter to the server-side application; and a fourth step of transmitting the command data to be injected to the IC chip by the server-side application using the received terminal-side parameter from the terminal- And encrypting the generated command data using the encryption key and providing the encrypted command data to the terminal-side application; and a sixth step of the terminal-side application interfacing the IC chip to the wireless terminal Side application, the encrypted command data received from the server- A step of outputting an error message or discarding the received encrypted command data if the interface state of the IC chip is not confirmed at the time of receiving the encrypted command data, And a step of injecting command data provided by the server-side application into an IC chip in which the terminal-side application maintains a state interfaced with the wireless terminal, when the data is validly received. And a control method.

A method of controlling an IC chip using a distributed process according to the present invention is a method executed by a server that communicates with a wireless terminal to which an IC chip possessed by a user is to be interfaced, A first step of performing a procedure of remotely interworking with a server-side application distributed on a server side in order for a terminal-side application to interoperate with the IC chip; A second step of setting an encryption key for encrypting command data to be transmitted to the IC chip, and a second step of, when the command data is injected from the wireless terminal into the IC chip, A third step of determining a terminal side parameter for constituting the IC chip; and a third step of checking whether the IC chip is interfaced with the wireless terminal, Outputting a message for instructing the interface of the IC chip after waiting for transmission of the terminal side parameter when the interface state of the C chip is not confirmed, Side parameters; and a fourth step of transmitting the terminal-side parameters to the server-side application; and a fourth step of receiving command data to be inserted into the IC chip using the received terminal- A sixth step of remotely configuring the terminal-side application, and a sixth step of the server-side application encrypting the command data using the encryption key and providing the encrypted command data to the terminal side application, The encrypted command data received from the server-side app under the condition that it is confirmed to be interfaced Outputting an error message or discarding the received encrypted command data if the interface state of the IC chip is not confirmed at the time of receiving the encrypted command data; And a step of injecting command data provided by the server-side application into an IC chip which is maintained in a state of being interfaced with the wireless terminal when the data is received effectively.

According to the present invention, in the first step, the terminal-side application constructs a terminal-side identification value for simultaneously identifying itself with the installed wireless terminal and transmits the terminal-side identification value to the server-side application, And receiving and storing the terminal side identification value.

According to the present invention, in the first step, when the IC chip is interfaced to the wireless terminal, the terminal-side app confirms the IC chip information received from the interfaced IC chip and transmits the information to the server-side app .

According to the present invention, the second step may further include providing the decryption information including the decryption key for decrypting the encrypted command data to the terminal-side application by the server-side application. Meanwhile, the second step may further include encrypting and storing the decryption key in the designated storage area in the wireless terminal. Meanwhile, in the second step, when the IC chip is interfaced to the wireless terminal, the terminal-side app may further include providing the decryption key to the IC chip and recording the decryption key.

According to the present invention, the second step may further include setting an integrity verification rule for verifying the integrity of the terminal-side application in real time, and the third step may include: And generating an integrity verification value for verifying its integrity through the side application, wherein the fourth step further includes the step of the terminal-side application transmitting the integrity verification value to the server-side application And the server-side application may verify the integrity of the terminal-side application by reading the integrity verification value through the integrity verification rule. Meanwhile, the integrity verification value may include a value obtained by hashing at least a part of the terminal-side application or the terminal-side application with a specified hash algorithm. The integrity verification value may further include at least one of the unique information stored in the memory unit of the wireless terminal, the extracted information extracted from the IC chip interfaced with the wireless terminal, and the dynamic information dynamically determined by the wireless terminal.

According to the present invention, in the fourth step, the terminal-side application further includes checking whether the IC chip is interfaced with the wireless terminal, and if the interface state of the IC chip is not confirmed, And outputting a message for instructing the interface state of the IC chip after waiting for transmission of the terminal side parameter to the server side application.

According to the present invention, the fifth step includes the steps of: confirming a server-side parameter for constructing command data to be injected into the IC chip; determining a command to be injected into the IC chip using the terminal- And constructing the data.

According to the present invention, the seventh step may further include checking that the IC chip is interfaced with the wireless terminal.

According to the present invention, in the eighth step, the terminal-side application embeds the encrypted command data into the interfaced IC chip, and the encrypted command data can be decrypted through the IC chip .

According to the present invention, the ninth step may include a step of decrypting the encrypted command data by the terminal side application, and a step of injecting the decrypted command data into the interface IC chip by the terminal side app have.

According to the present invention, in the eighth step, the terminal-side application first decodes the encrypted command data (or at least a part of the command data), and the terminal-side app transmits the primary decoded command data to the terminal- And injecting the data into the interfaced IC chip, wherein the primary decoded instruction data can be finally decoded through the IC chip.

According to the present invention, since the command data to be injected into the IC chip interfaced to the wireless terminal is configured on the server side physically separated from the wireless terminal, even when the wireless terminal interfaced with the IC chip is hacked or modulated, There is an advantage in that the IC chip can be safely used.

FIG. 1 is a diagram showing a configuration of a wireless terminal according to a distributed processing-based IC chip control according to an embodiment of the present invention.
FIG. 2 is a diagram showing a functional configuration of a terminal-side application and a server-side application according to an embodiment of the present invention.
3 is a diagram illustrating a process of interfacing a terminal-side application and a server-side application according to an embodiment of the present invention and injecting command data into an IC chip interfaced to a wireless terminal.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. For example, it is possible that a configuration provided on the server side is implemented on the terminal side, or conversely, a configuration portion provided on the terminal side is implemented on the server side.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a configuration of a wireless terminal 100 for controlling a distributed processing-based IC chip 140 according to an embodiment of the present invention.

1 shows an embodiment in which a program code for controlling the IC chip 140 to be interfaced with the wireless terminal 100 is distributed and implemented on the wireless terminal side and the server side. In the technical field of the present invention, Those skilled in the art will be able to refer to and modify various aspects of the functionality of the wireless terminal 100 in accordance with the present invention, And the technical characteristics thereof are not limited only by the method shown in FIG. Preferably, the wireless terminal 100 of FIG. 1 may include at least one of various smartphones, tablet PCs, PDAs, and mobile phones.

1, the wireless terminal 100 includes a control unit 105, a memory unit 165, a screen output unit 110, a user input unit 115, a sound processing unit 120, a wireless network communication unit 160, A local area network communication unit 155, an NFC unit 130, a USIM reader unit 135, and a USIM 150, and has a battery for power supply.

The control unit 105 is a general term for controlling the operation of the wireless terminal 100. The control unit 105 includes at least one processor and an execution memory, BUS). According to the present invention, the control unit 105 loads at least one program code included in the wireless terminal 100 into the execution memory through the processor, and outputs the result through at least one configuration And controls the operation of the wireless terminal 100. FIG.

The memory unit 165 is a generic term of the nonvolatile memory included in the wireless terminal 100 and includes at least one program code executed through the control unit 105 and at least one data set used by the program code And stores it. The memory unit 165 basically includes a system program code and a system data set corresponding to the operating system of the wireless terminal 100, a communication program code and a communication data set for processing a wireless communication connection of the wireless terminal 100, The program code and data set corresponding to the terminal-side application 200 of the present invention are also stored in the memory unit 165, and the terminal-side application 200 executes The terminal-side application 200 is loaded into the control unit 105. [

The screen output unit 110 includes a screen output unit (e.g., an LCD (Liquid Crystal Display) or the like) and a drive module for driving the screen output unit 110. The screen output unit 110 is interlocked with the control unit 105, And outputs an operation result corresponding to the output to the screen output device.

The user input unit 115 is composed of one or more user input devices such as a button, a keypad, a touch pad, a touch screen interlocked with the screen output unit 110, and a drive module for driving the touch screen. And inputs a command for instructing various operations of the control unit 105 or data necessary for the operation of the control unit 105. [

The sound processing unit 120 is composed of a speaker and a microphone and a driving module for driving the speaker and microphone. The sound processing unit 120 decodes an operation result corresponding to a sound output from various operation results of the control unit 105, And outputs the sound signal through the speaker or the sound signal input through the microphone to the controller 105.

The wireless network communication unit 160 is a collective term for a communication unit that connects the wireless terminal 100 to a wireless communication network via a base station and includes an antenna for transmitting and receiving a radio frequency signal of a specific frequency band, Processing module, and is connected to the control unit 105 to transmit operation results corresponding to wireless communication among various operation results of the control unit 105 through a wireless communication network or receive data through a wireless communication network To the control unit 105, and performs the connection, registration, communication, and handoff procedures of the wireless communication. Preferably, the wireless network communication unit 160 includes a mobile communication structure that performs at least one of connection to a mobile communication network, location registration, call processing, call connection, data communication, and handoff according to the CDMA / WCDMA / LTE standard.

The short-range network communication unit 155 collectively refers to a communication unit that connects a communication session using a radio frequency signal within a predetermined distance (e.g., 10 m) as a communication medium and connects the wireless terminal 100 to a communication network based on the communication session. , The wireless terminal 100 may be connected to the communication network through at least one of Wi-Fi communication, Bluetooth communication, public wireless communication, and UWB.

The NFC unit 130 may be configured to receive at least one of at least one of a bidirectional proximity wireless communication, a full-duplex proximity wireless communication, and a half-duplex proximity wireless communication using a radio frequency signal as a communication medium at a close distance As a general term, it is possible to process the proximity wireless communication according to the NFC (Near Field Communication) standard of the 13.56 Mz frequency band.

The NFC unit 130 may be connected to an IC chip 140 (for example, a noncontact IC card 145 carried by a user, a combi card (Non-contact interface) with a chip such as an NFC card 145, an NFC card 145, and the like.

The USIM reader 135 is a generic term of a configuration for exchanging at least one data set with a universal subscriber identity module that is mounted or detached from the wireless terminal 100 based on the ISO / IEC 7816 standard , And the data set is exchanged in a half duplex communication manner through an APDU (Application Protocol Data Unit).

The USIM 150 is an SIM type medium having an IC chip 140 according to the ISO / IEC 7816 standard, and includes an input / output interface including at least one contact connected to the USIM reader 135, A chip memory for storing one chip program code and a data set; and a processor for computing the chip program code according to at least one command transmitted from the wireless terminal (100) or extracting the data set And transmitting the processed data to the input / output interface.

According to an embodiment of the present invention, the USIM reader 135 implements the function of the interface 125 to interface with the IC chip 140 of the USIM 150.

The wireless terminal 100 may access the IC chip 140 (for example, an IC chip (not shown) of the card 145 held by the user) from a designated application providing server And the IC chip 140 of the USIM 150) and the terminal-side application 200 are driven according to a designated procedure.

The terminal-side application 200 communicates with the server-side application 245 provided in the server 170 specified through the local area network communication unit 155 and / or the wireless network communication unit 160, ) Implements one side of an application for controlling the IC chip 140 interfaced with the wireless terminal 100 through the interface unit 125. The server side application The control unit 245 implements another side of the application that controls the IC chip 140 interfaced to the wireless terminal 100 through the interface unit 125. [

FIG. 2 is a diagram showing a functional configuration of a terminal-side application 200 and a server-side application 245 according to an embodiment of the present invention.

2 shows a functional configuration of the terminal-side application 200 installed to control the IC chip 140 interfaced with the wireless terminal 100 and the server-side application 245 provided on the specified server side A user of the present invention will be able to refer to and / or modify the drawing 2 to obtain a variety of functional configurations of the terminal-side application 200 and the server-side application 245 It is to be understood that the present invention is not limited to the embodiment (s), but it is to be understood that the invention may be practiced otherwise than as specifically described herein, The technical characteristics thereof are not limited.

An application for controlling the IC chip 140 to be interfaced with the wireless terminal 100 via the interface unit 125 of the wireless terminal 100 may be configured to communicate with the wireless terminal 100 that interfaces with the IC chip 140 Side application 200 installed in the mobile terminal 100 and a server-side application 245 provided in the server side communicating with the mobile terminal 100. [

Referring to FIG. 2, the terminal-side application 200 is connected to the server-side application 245 distributedly implemented on the server side to control the IC chip 140 interfaced with the wireless terminal 100 And the server side application 245 is connected to the terminal side application 200 provided in the wireless terminal 100 to be interfaced with the IC chip 140 And a server-side interlocking unit 250 for performing an interlocking procedure.

Side interworking unit 205 of the terminal-side application 200 may be connected to the terminal-side interworking unit 205 when the terminal-side application 200 is operated for the first time (or before remote coupling between the terminal-side application 200 and the server- Side application 245 and a server 170 provided with the server-side application 245 to form a security session for communication between the server-side application 245 and the server-side application 245, The interworking unit 250 forms a security session for communication between the terminal-side application 200 and the app. Here, the secure session between the terminal-side application 200 and the server-side application 245 is a function of inter-process communication in a single terminal via the terminal-side application 200 and the server-side application 245 ). ≪ / RTI > A process not allowed in the inter-process communication is blocked from accessing the communication, and the security session has a function of blocking a third party from accessing the session other than the terminal-side application 200 and the server-side application 245 do. For example, the terminal-side application 200 and the server-side application 245 may establish a secure session using a tunneling method or the like.

According to an embodiment of the present invention, it is preferable that the terminal-side application 200 and the server-side application 245 are combined in an equidistant communication structure in a state where the security session is formed, Side application 245 by transmitting an information request signal (e.g., a signal including a terminal-side identification value described below) to the server-side application 245 periodically. That is, in a typical client server structure, when information is transmitted from the terminal side to the server side, the server side provides information for providing the service to the terminal side. As a result, the terminal side application 200 and the server side application (For example, periodically transmit an information request signal from the terminal-side application 200 to the server-side application 245) to provide command data to the terminal side from the server side without requesting the terminal side . For example, when the server-side application 245 intends to inject command data into the IC chip 140 without requesting the terminal-side application 200, the server-side application 245 inserts the command data into the IC chip 140 The command data may be provided to the terminal-side application 200 according to an information request signal of the terminal-side application 200. In this case,

The terminal side interlocking unit 205 may determine whether a security session is established between the terminal-side application 200 and the server-side application 245, (E.g., the hardware configuration of the terminal 100 and / or the software configuration of the wireless terminal 100) and at the same time identifies the software configuration of the terminal-side application 200 installed in the wireless terminal 100 Side identification value and transmits it to the server-side application 245 through the secure session. For example, the terminal-side identification value may include at least one identifier of various universal identifiers such as UUID (Universal Unique IDentifier) or UDID (Universally Unique Identifier) for the terminal-side application 200, And may include a separately defined identification code for identifying the wireless terminal 100 and the terminal-side application 200 at the same time. That is, in the inter-process communication, each process that communicates through the PID (Process ID) is identified. In the present invention, the terminal-side identification value corresponds to the terminal-side application 200 installed in the wireless terminal 100 Identify the process to be performed. However, the terminal side identification value of the present invention uniquely identifies the terminal-side application 200 installed in the wireless terminal 100, and at the same time, the terminal-side application 200 identifies the terminal- And uniquely identifies the executed wireless terminal (100).

Side interworking unit 250 receives the terminal-side identification value from the terminal-side application 200 and stores the received terminal-side identification value in a designated storage medium, so that the terminal- Side application 200 can be uniquely identified.

According to the embodiment of the present invention, the terminal-side interworking unit 205 may store unique information of the predetermined wireless terminal 100 in the wireless terminal 100 in which the terminal-side application 200 is installed (for example, The server side interworking unit 250 can transmit the mobile terminal 100 from the terminal-side application 200 to the mobile terminal 100 through the mobile terminal 100. The server side interworking unit 250 can transmit the mobile terminal 100, phone number, International Mobile Subscriber Identity (IMSI), International Mobile Equipment Identity (IMEI) Specific information can be received and stored in a designated storage medium.

Side interworking unit 205 of the terminal-side application 200 when the IC chip 140 is interfaced to the wireless terminal 100 in which the terminal-side application 200 is executed, according to the embodiment of the present invention, The IC chip 140 can recognize the IC chip 140 information received from the interfaced IC chip 140. Here, the information of the IC chip 140 may include information that identifies the IC chip 140 from information that can be provided from the IC chip 140 without using command data generated through the server-side application 245 . For example, the information on the IC chip 140 may include information included in an ATR (Answer To Reset), a serial number of the IC chip 140, and the like. When the IC chip 140 information is received from the IC chip 140, the terminal side interlocking unit 205 can transmit the IC chip 140 information to the server side application 245, Side interworking unit 250 can receive the IC chip 140 information from the terminal-side application 200 and store the IC chip 140 information in a designated storage medium.

The server side interlocking unit 250 generates an encryption key for encrypting command data (for example, APDU (Application Protocol Data Unit) command) to be injected into the IC chip 140 and / 200) to determine the encryption key, and store the generated / determined encryption key in a designated storage medium. If the information on the IC chip 140 received from the IC chip 140 interfaced with the wireless terminal 100 is confirmed, the server side interlock part 250 uses the IC chip 140 information to encrypt (Or decryption key) mapped to the IC chip 140 information from the designated database. Meanwhile, according to another embodiment of the present invention, the terminal-side application 200 and the server-side application 245 exchange information designated at the time of injecting command data into the IC chip 140 interfaced with the wireless terminal 100 The server side linking unit 250 may not generate / determine the encryption key in advance and store the encryption key in the storage medium.

According to an embodiment of the present invention, when the encryption key is generated / determined, the server-side interworking unit 250 configures decryption information including a decryption key for decrypting the encrypted command data, 200). If the encryption key is determined through an information exchange procedure between the terminal-side application 200 and the server-side application 245 and a decryption key matching the encryption key of the server side is determined in the terminal-side application 200, The server-side interlocking unit 250 may not provide the decryption information to the terminal-side application 200.

In the case where the terminal side application 200 decodes the command data encrypted and provided by the server side application 245 according to the first arm / decryption method of the present invention, (Or confirms the decryption key determined through the information exchange procedure specified with the server-side application 245) included in the decryption information received from the application 245, and encrypts the decryption key according to the specified encryption method And store it in the memory unit 165 of the wireless terminal 100.

When the command data encrypted and provided by the server side application 245 according to the second arm / decryption method of the present invention is decoded by the IC chip 140 interfaced with the wireless terminal 100, A command for injecting the decryption key into the IC chip 140 from the terminal-side application 200 (in this case, a command for injecting the decryption key into the IC chip 140) It can be omitted if data can be generated). Side interlocking unit 205 confirms the decryption key included in the decryption information received from the server-side application 245 (or decrypts the decryption key determined through a specified information exchange procedure with the server-side application 245) And the decryption key is injected into the IC chip 140 based on the command data included in the decryption information (or the command data generated in the terminal-side application 200) To be recorded. Meanwhile, even if the command data is decrypted in the IC chip 140, the decryption key can be generated in the IC chip 140 without injecting the decryption key into the IC chip 140, (Or receive from the server-side application 245) a key value for generating the decryption key in the IC chip 140 according to the received information.

The server side interworking unit 250 establishes an integrity verification rule for verifying the integrity of the terminal-side application 200 during a process of remotely combining with the terminal-side application 200. Preferably, the integrity verification rule may be mapped to the terminal side identification value.

According to an embodiment of the present invention, the terminal-side application 200 encodes the terminal-side app 200 (or at least a part of the constituent parts constituting the terminal-side app 200) for integrity verification, Side application 200 (or at least a part of the constituent unit that constitutes the terminal-side application 200), or transmits the integrity verification value including the hashed value to the terminal-side application 200 At least one of the unique information stored in the memory unit 165, the extraction information extracted from the IC chip 140 interfaced with the wireless terminal 100, and the dynamic information dynamically determined by the wireless terminal 100, The server side interworking unit 250 may generate the integrity verification value including the hash value through the hash algorithm and transmit the integrity verification value to the server side interworking unit 250. The server side interworking unit 250 transmits the information about the terminal side application 200 And generates an integrity authentication value to be compared with an integrity verification value to be generated in the terminal-side application 200 (or to perform a specified verification operation to derive a predicted result) in association with the integrity authentication value The integrity verification rule for verifying the integrity of the terminal-side application 200 can be set.

2, the terminal-side application 200 includes a status checking unit 210 for checking whether the IC chip 140 is interfaced to the wireless terminal 100, A verification value generation unit 215 for generating an integrity verification value for verifying the integrity of the application 200, a verification value generation unit 215 for generating an integrity verification value for verifying the integrity of the application 200, And transmits the integrity verification value and the terminal side parameter to the server side application (245) while confirming the interface between the IC chip (140) and the wireless terminal (100) And an instruction request unit 225 for requesting command data to be injected into the IC chip 140.

When the command data is injected into the IC chip 140, the state checking unit 210 checks whether the IC chip 140 to which the command data is to be injected is interfaced to the wireless terminal 100. The verification value generation unit 215 determines that the IC chip 140 to which command data is to be injected is interfaced to the wireless terminal 100 through the status confirmation unit 210, And generates an integrity verification value for verifying the integrity of the terminal-side application 200 through

According to the embodiment of the present invention, the verification value generation unit 215 encodes the terminal-side application 200 (or at least a part of the constituent units constituting the terminal-side application 200) An integrity verification value including a value can be generated. Meanwhile, the verification value generation unit 215 generates a verification value, based on the verification method, together with the terminal-side application 200 (or at least a part of the constituent units configuring the terminal-side application 200) , The extracted information extracted from the IC chip 140 interfaced with the wireless terminal 100, and the dynamic information dynamically determined by the wireless terminal 100, or through a specified hash algorithm An integrity verification value including a hash value can be generated.

The parameter determination unit 220 determines that the IC chip 140 to which the command data is to be injected is interfaced to the wireless terminal 100 through the status confirmation unit 210 and transmits the server side application 245 Side parameters for configuring command data to be injected into the IC chip 140 through the terminal-side parameters. For example, the terminal-side parameter may include information selected through ATR, a value for selecting a specific applet or file in the IC chip 140, a value for selecting specific applet or file from the IC chip 140 A value to be transmitted, a value to be recorded in the IC chip 140, and the like.

The parameter determination unit 220 may determine whether the application is linked to the operation procedure of the terminal-side application 200 (or the application associated with the terminal-side application 200) The terminal side parameters for constructing the command data to be transmitted can be determined. For example, when it is necessary to extract authentication information from the IC chip 140 while performing a predetermined authentication procedure in the terminal-side application 200 (or an application associated with the terminal-side application 200) The control unit 220 can determine the terminal side parameters for extracting the authentication information from the IC chip 140. [

The command request unit 225 transmits the verification value to the verification value generation unit 215 in a state that the IC chip 140 to which command data is to be injected is interfaced to the wireless terminal 100 through the status verification unit 210, Side application 245 by constructing command request information including the integrity verification value generated through the parameter determination unit 220 and the terminal side parameter determined through the parameter determination unit 220, And requests command data to be injected into the IC chip 140.

According to the embodiment of the present invention, the command requesting unit 225 determines that the IC chip 140 to which command data is to be injected is interfaced to the wireless terminal 100 through the status checking unit 210 Side application 245. The server-side application 245 may communicate with the server 170 to form a secure session, and send the command-request information including the integrity verification value and the terminal- As shown in FIG.

According to an embodiment of the present invention, the command request unit 225 may include the terminal side identification value in the command request information, so that the server side application 245 transmits the command request information The terminal-side application 200 and the wireless terminal 100 can be identified.

According to the embodiment of the present invention, when the command request information is transmitted to the server-side application 245, the IC chip (140) for injecting command data to the wireless terminal (100) through the status checking unit (For example, the IC chip 140 is a chip of the noncontact card 145, the noncontact card 145 is out of the noncontact interface range), the command request unit 225 may output a message for waiting for the integrity verification value and the terminal side parameter to the server side application 245 and for inducing the interface state of the IC chip 140. The IC chip 140 And transmits the command request information to the server-side application 245 in a state where it is confirmed that the interface is connected.

Referring to FIG. 2, the server-side application 245 includes an instruction request confirmation unit 255 for receiving an integrity verification value and a terminal-side parameter transmitted through the terminal-side application 200, 200), an integrity verification unit (260) for verifying the integrity of the terminal-side application (200) by reading the integrity verification value through an integrity verification rule for the terminal-side application (200) An encryption unit (275) for encrypting the command data using the encryption key, an encryption unit (275) for encrypting the encrypted command data using the encryption key, And a parameter verifying unit 265 for verifying a server-side parameter for constructing command data to be injected into the IC chip 140 .

The command request confirmation unit 255 of the server-side application 245 receives command request information including an integrity verification value and a terminal-side parameter transmitted through the terminal-side application 200. Meanwhile, according to another embodiment of the present invention, the terminal-side application 200 and the server-side application 245 can communicate with each other equally. In this case, the command- Side application 245 (or a request from a server-side application or a separate server associated with the server-side application 245) to the IC chip 140 even if the command request information is not received from the server-side application 245 Command data can be configured.

Upon receiving the integrity verification value through the command request verifying unit 255, the integrity verifying unit 260 checks the integrity verification rule for the terminal-side application 200 that transmitted the integrity verification value, The integrity verification value is read based on the verification rule to verify integrity corresponding to the fact that the terminal-side application 200 is not up / modulated.

If the integrity verification of the terminal-side application 200 is verified through the integrity verification value, the command configuration unit 270 determines whether the terminal-side application (200) (E.g., an APDU command) to be injected into the IC chip 140 interfaced with the wireless terminal 100 in execution.

According to the embodiment of the present invention, the parameter check unit 265 of the server-side application 245 can check the server-side parameters for configuring command data to be injected into the IC chip 140. [ For example, the server-side parameters include a value for selecting a specific applet or file in the IC chip 140, a value to be transferred to the IC chip 140 to receive specific information from the IC chip 140, A value to be recorded in the memory 140, and the like. When the terminal side parameter is confirmed through the command request confirmation unit 255 and the server side parameter is confirmed through the parameter verification unit 265, the command configuration unit 270 sets the terminal side parameter and the server side parameter The command data to be injected into the IC chip 140 can be configured.

Meanwhile, according to another embodiment of the present invention, even if the terminal side parameter is not confirmed, the command configuration unit 270 uses the server side parameter confirmed at the server side via the parameter determination unit 265 to determine whether the IC chip The command data to be injected into the memory 140 can be configured.

According to the first command data configuration example of the present invention, the command configuration unit 270 determines a header area (e.g., CLA, INS, P1, P2) of command data to be injected into the IC chip 140 And the command data composed of the header area can be configured without a separate body. Preferably, the command configuration unit 270 may use the terminal-side parameter and / or the server-side parameter in the process of determining the header area of the command data in the command data configuration example of the present invention.

According to the second command data configuration example of the present invention, the command configuration unit 270 determines a header area of command data to be injected into the IC chip 140, (E.g., CLA, INS, P1, P2) and a body region (e.g., Le) after determining the maximum expected data size (e.g. Le of APDU) Data can be configured. The command configuration unit 270 may determine the maximum data size (e.g., Le) expected in the response of the IC chip 140 in the command data configuration example of the present invention, And / or server-side parameters.

According to the third command data configuration example of the present invention, the command configuration unit 270 determines a header area of command data to be injected into the IC chip 140, and stores the terminal side parameter and / (For example, CLA, INS, P1, P2) after constructing a data area of the body area (for example, data of the APDU) and calculating the size of the data area (for example, Lc of the APDU) And body regions (e.g., Lc, Data).

According to the fourth command data configuration example of the present invention, the command configuration unit 270 determines a header area of command data to be injected into the IC chip 140, and stores the terminal side parameter and / (For example, Lc) of the data area and a maximum data size (for example, Lc) expected in a response of the IC chip 140 to the command (Lc, Data, Le), and then configure the command data including the header area (e.g., CLA, INS, P1, P2) and the body area (e.g., Lc, Data, Le).

The encryption processing unit 275 identifies an encryption key to encrypt the command data. Preferably, the encryption processing unit 275 can confirm the encryption key obtained through the server-side interlocking unit 250, and transmits the server-side application 245 (or the server-side application 245) (E.g., the IC chip 140 interfaced to the wireless terminal 100), and confirm the encryption key to encrypt the command data.

The encryption processing unit 275 encrypts the command data configured according to at least one of the first to fourth command data configuration embodiments using the encryption key.

According to the first encryption scheme of the present invention, the encryption processing unit 275 can encrypt the entire area of the configured command data.

According to the second encryption scheme of the present invention, the encryption processing unit 275 can selectively encrypt some of the configured command data (e.g., the body area).

According to the third encryption example of the present invention, the encryption processing unit 275 can selectively encrypt values of some of the configured command data (for example, Data of the body area).

According to the method of the present invention, the encryption processing unit 275 can encrypt the command data by combining at least one or two or more of the first to third encryption embodiments. For example, the encryption processing unit 275 may encrypt the encrypted command data in the terminal-side application 200 so that the encrypted command data can be decrypted. Alternatively, the encryption processing unit 275 can encrypt the encrypted command data in the IC chip 140 interfaced with the wireless terminal 100 so that the encrypted command data can be decrypted. Alternatively, the encryption processing unit 275 first decodes the encrypted command data (or a part of the encrypted command data) in the terminal-side application 200, and transmits the encrypted command data (or encryption (E.g., encrypting more than one time or encrypting more than one region) to secondary decrypt the received command data.

When the command data constituted through the command configuration unit 270 is encrypted through the encryption processing unit 275, the command providing unit 280 transmits the command data to the terminal-side app 200 through a secure session with the terminal- 200), and the terminal-side application (200) receives the encrypted command data.

According to the method of the present invention, the command providing unit 280 may encrypt and transmit the encrypted command data in accordance with the encryption / decryption procedure of the communication interval established in the secure session.

2, the terminal-side application 200 includes an instruction receiving unit 230 for receiving the encrypted instruction data from the server-side application 245, 140) and the wireless terminal (100).

The command receiving unit 230 of the terminal-side application 200 receives the encrypted command data from the server-side app 245 through a secure session with the server-side app 245. If the encrypted command data is doubly encrypted according to the encryption / decryption procedure of the communication interval established in the secure session, the command receiver 230 decrypts the double encrypted command data and transmits the decrypted command data to the server side application 245 The encryption processing unit 275 can confirm the encrypted command data.

According to an embodiment of the present invention, the status verifying unit 210 may send the command data to the server-side application 245 through the command request unit 225, And checks whether the IC chip 140 is interfaced with the wireless terminal 100 at the time of receiving the data.

If the interface state of the IC chip 140 is released during the reception of the command data after requesting the command data to the server side application 245, the command data can not be injected into the IC chip 140 . Therefore, the status check unit 210 checks whether the interface state of the IC chip 140 is released during the reception of the command data after requesting the command data to the server-side application 245, 140) is released, an error message is output.

If the interface state of the IC chip 140 is released at the point of time when the command data is received, the state checking unit 210 may determine that the interface state of the IC chip 140 is released, At the same time as outputting the error message, discard the command data received through the command receiver 230 and initialize the command data injection procedure. In particular, when the command data corresponds to an operation having a high level of importance, such as recording certain information in the IC chip 140 or extracting financial information, the status checking unit 210 discards the command data, Is initialized. In this case, when command data is injected into the IC chip 140, it is preferable to newly start the procedure of interfacing the IC chip 140 to the wireless terminal 100.

According to another embodiment of the present invention, when the interface state of the IC chip 140 is released at the time of receiving the command data, the state check unit 210 May output the error message including the contents of the message for guiding the interface of the IC chip 140. If the interface of the IC chip 140 is confirmed, the command data may be transmitted to the IC chip 140 Injection procedure can be performed.

On the other hand, although the IC chip 140 is interfaced with the command data at the time of receiving the command data, the command data is requested to the server side application 245, The IC chip 140 can not guarantee that the IC chip 140 is a valid IC chip to which the command data is to be injected. Therefore, the status checking unit 210 requests command data to the server-side application 245, and checks whether there is a history in which the interface state of the IC chip 140 is released at least once during receiving the command data And outputs an error message if there is a history in which the interface state of the IC chip 140 is released.

According to an embodiment of the present invention, after the interface maintenance state has not been confirmed, the command data is requested to the server-side application 245 and then the interface of the IC chip 140 If there is a history of releasing the state, the state checking unit 210 outputs the error message and discards the command data received through the command receiving unit 230 and initializes the command data injecting procedure . In particular, when the command data corresponds to an operation having a high level of importance, such as recording certain information in the IC chip 140 or extracting financial information, the status checking unit 210 discards the command data, Is initialized. In this case, when command data is injected into the IC chip 140, it is preferable to newly start the procedure of interfacing the IC chip 140 to the wireless terminal 100.

According to another aspect of the present invention, after the interface maintenance state is not yet confirmed, the IC chip 140 requests command data to the server-side application 245 and then transmits the command data to the IC chip 140 while receiving the command data. If there is a history in which the interface state is released, the state checking unit 210 may output a message for confirming whether the IC chip 140 is a legitimate IC chip 140 in the error message, And the command data may be injected into the interfaced IC chip 140. For example, when the user does not refuse the IC chip 140 with a valid IC chip 140 or refuse injection of the command data into the IC chip 140, You can perform the procedure to inject data

Referring to FIG. 2, the terminal-side application 200 includes an instruction injection unit 235 for performing a procedure of injecting instruction data provided by the server-side application 245 into the interfaced IC chip 140, And a response confirmation unit 240 for receiving response data according to the injection of command data from the IC chip 140.

The command injection unit 235 performs a series of procedures for injecting command data received through the command receiving unit 230 into the IC chip 140 interfaced with the wireless terminal 100.

According to the first instruction injection embodiment of the present invention, the command injection unit 235 transmits command data constituted and encrypted by the server-side application 245 to the IC chip 140 interfaced with the wireless terminal 100 Can be injected. In this case, the encrypted command data can be decrypted through the IC chip 140.

According to the second instruction injection embodiment of the present invention, the command injection unit 235 identifies a decryption key for decrypting the command data constituted and encrypted by the server-side application 245, The decrypted command data may be decrypted and the decrypted command data may be injected into the IC chip 140 interfaced to the wireless terminal 100.

According to the third instruction injection embodiment of the present invention, the instruction injection unit 235 decodes the instruction data (or a part of the encrypted instruction data) constituted and encrypted by the server-side application 245, Decrypts the encrypted command data (or a part of the encrypted command data) by using the decryption key, and simultaneously transmits the primary decoded command data to the IC Chip 140 as shown in FIG. In this case, the primary decoded instruction data can be finally decoded through the IC chip 140. [

After the command data constituted by the server-side application 245 is injected into the IC chip 140 interfaced with the wireless terminal 100 through the command injection unit 235, Receives response data corresponding to the command data from the IC chip 140 according to the half-duplex communication structure of the chip 140, and receives response data corresponding to the command data from the IC chip 140.

According to the embodiment of the present invention, the response data is used to provide a service designated by the terminal-side application 200 (or an application on the terminal side associated with the terminal-side application 200) 220) can be used as the terminal side parameter of the next command data.

3 is a diagram illustrating a process of interfacing a terminal-side application 200 and a server-side application 245 in accordance with an embodiment of the present invention and injecting command data into an IC chip 140 interfaced with the wireless terminal 100 to be.

3 shows command data to be injected into the IC chip 140 in the server-side application 245 interlocked with the terminal-side application 200 installed on the wireless terminal side that is interfaced with the IC chip 140 , The terminal-side application 200 injects command data formed in the server-side application 245 into the IC chip 140 interfaced with the wireless terminal 100, and FIG. It is possible to refer to and / or modify the FIG. 3 to infer various implementations of the command data injection process (e.g., omitting some steps or changing the order) However, the present invention is not limited to the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 3, the terminal-side application 200 installed on the wireless terminal performs a procedure of interlocking with the server-side application 245 provided on the designated server side through a communication network. The terminal-side application 200 may be connected to the server-side application 245 in a manner that the terminal-side application 200 and the terminal-side application 200 simultaneously identify the wireless terminal 100 in which the terminal- Side application 245 to establish an encryption key for encrypting the command data and / or perform an integrity verification for verifying the integrity of the terminal-side application 200 according to an embodiment of the present invention A terminal-side procedure can be performed in conjunction with a procedure for setting a rule. The server-side application 245 performs a procedure of interlocking with the terminal-side application 200 remotely through a communication network (300). The server-side application 245 receives the terminal-side identification value from the terminal-side application 200 and encrypts command data to be injected into the IC chip 140 to be interfaced with the wireless terminal 100 (305), and / or establishes an integrity verification rule (305) for verifying the integrity of the terminal-side app (200). Then, the terminal-side application 200 and the server-side application 245 interoperate with each other to perform a procedure of injecting command data into the IC chip 140 interfaced with the wireless terminal 100.

The terminal-side application 200 transmits the command data to the wireless terminal 100 via the interface 140. That is, when the terminal-side application 200 receives the instruction data from the IC chip 140, (310). If the IC chip 140 is interfaced with the wireless terminal 100, the terminal-side application 200 checks whether or not to inject command data into the IC chip 140 while performing a specified operation procedure (315).

If the command data is injected into the IC chip 140 interfaced with the wireless terminal 100, the terminal-side application 200 verifies the integrity of the terminal-side application 200 through the server-side application 245 And determines a terminal side parameter for configuring command data to be injected from the server-side application 245 into the IC chip 140 (320).

If the integrity verification value is generated and the IC chip 140 remains interfaced with the wireless terminal 100 at the time when the terminal side parameter is determined, the terminal-side application 200 transmits the server- 245 to the server side application 245 by requesting command data to be injected into the IC chip 140 by providing the integrity verification value and the terminal side parameter (325).

The server-side application 245 transmits the integrity verification value for verifying the integrity of the terminal-side application 200 and the command data to be injected to the IC chip 140 from the terminal- (330), and verifies the integrity of the terminal-side application (200) by reading the integrity verification value through the integrity verification rule for the terminal-side application (200) (335). If the integrity of the terminal-side application 200 is not verified, the server-side application 245 provides an error message for the integrity verification to the terminal-side application 200 (340) 200 outputs the error message and initializes a procedure for injecting command data into the IC chip 140 (step 385).

Meanwhile, if the integrity of the terminal-side application 200 is verified, the server-side application 245 can configure command data to be injected into the IC chip 140 using the terminal-side parameter (350). Or the server-side application 245 checks (345) a server-side parameter for configuring command data to be injected into the IC chip 140, and transmits the server-side parameter to the IC chip 140 (350). ≪ / RTI > Meanwhile, according to another embodiment of the present invention, the server-side application 245 does not receive the terminal-side parameter from the terminal-side application 200 (but can perform the integrity verification procedure) Side parameter to configure the command data to be injected into the IC chip 140 according to the procedure, and in this case, the server-side application 245 acquires the server-side parameter from the IC chip 140 (350). ≪ / RTI >

When the command data to be injected into the IC chip 140 is configured, the server-side application 245 encrypts the configured command data using the designated encryption key (355) And provides encrypted command data (360).

The terminal-side application 200 receives (365) the encrypted command data from the terminal server-side application 245, and when the command data is received, the IC chip 140 transmits the command data to the wireless terminal 100 Whether the IC chip 140 is in the interfaced state or the interfaced state is continuously maintained. If the IC chip 140 is not in the interfaced state or the interfaced state is continuously maintained at the time of receiving the command data The terminal-side application 200 may output an error message and initialize the command data injection procedure at the same time as discarding the command data received from the server-side application 245 (385).

On the other hand, if the IC chip 140 is interfaced with the wireless terminal 100 at the time of receiving the command data or if the interfaced state is continuously maintained, the terminal-side application 200 transmits the encrypted (Or at least a part of the command data) of the command data to the IC chip 140 interfaced with the wireless terminal 100, To the IC chip 140 that is interfaced with the IC chip 140 (step 370). When the encrypted command data (or at least a part of the encrypted command data) is injected into the IC chip 140, the encrypted command data (or at least a part of the encrypted command data) Lt; / RTI >

When the command data is injected into the IC chip 140 interfaced to the wireless terminal 100, the terminal-side application 200 waits for the response data corresponding to the command data from the IC chip 140 , And receives response data corresponding to the command data from the IC chip 140 (375). The terminal-side application 200 performs (380) a service providing procedure (for example, a payment procedure or an authentication procedure) using the response data received from the IC chip 140, (380) using the received response data as terminal side parameters for constructing command data to be injected into the next IC chip (140).

100: wireless terminal 125:
140: IC chip 200: terminal side application
205: terminal side interlocking unit 210: status check unit
215: verification value generator 220:
225: command requesting unit 230: command receiving unit
235: instruction injection unit 240: response confirmation unit
245: server-side app 250:
255: command request confirmation unit 260: integrity verification unit
265: Parameter Verification Unit 270: Command Configuration Unit
275: Encryption processor 280:

Claims (15)

CLAIMS 1. A method executed by a server that communicates with a wireless terminal that interfaces with an IC chip held by a user,
A first step of remotely interworking with a server-side application distributed on a server side in order to interoperate with the IC chip, the terminal-side application provided on the wireless terminal side for interlocking with the IC chip;
A second step of the server-side application setting an encryption key for encrypting command data to be injected into the IC chip as a result of the remote interworking procedure;
A third step of, when the wireless terminal injects command data into the IC chip, determining a terminal side parameter for configuring command data to be injected from the terminal side app to the IC chip through the server side app;
The terminal-side application confirms the state of the IC chip being interfaced with the wireless terminal, and waits for transmission of the terminal-side parameter when the interface state of the IC chip is not confirmed, A fourth step of transmitting the terminal-side parameter to the server-side application under a condition that the wireless terminal is confirmed to be interfaced with the IC chip;
A server-side application receiving the terminal-side parameter from the terminal-side application and remotely configuring command data to be injected into the IC chip using the received terminal-side parameter;
The server-side application encrypts the configured command data using the encryption key and provides the encrypted command data to the terminal-side app;
Wherein the terminal-side application performs effective reception processing of the encrypted command data received from the server-side app under a condition that the IC chip is interfaced with the wireless terminal, and when receiving the encrypted command data, A seventh step of outputting an error message or discarding the received encrypted command data if the interface state of the IC chip is not confirmed; And
And a step of injecting command data provided from the server-side application into an IC chip that is maintained in a state of being interfaced with the wireless terminal, when the encrypted command data is received effectively Process Control Method for Ischip Control.

2. The method according to claim 1,
Configuring and transmitting to the server-side application a terminal-side identification value for simultaneously identifying the terminal-side application and the wireless terminal installed and executed by the terminal-side application; And
And receiving and storing the terminal side identification value by the server side application.
2. The method according to claim 1,
And if the IC chip is interfaced to the wireless terminal, the terminal-side app verifies the IC chip information received from the interfaced IC chip and transmits it to the server-side app. The method of controlling the IC chip used.
2. The method according to claim 1,
Further comprising the step of providing the decryption information including the decryption key for decrypting the encrypted command data to the terminal side application by the server side application.
5. The method according to claim 4,
Further comprising encrypting and storing the decryption key in a designated storage area of the wireless terminal by the terminal-side application.
5. The method according to claim 4,
Further comprising the step of providing the decryption key to the IC chip when the IC chip is interfaced with the wireless terminal, and recording the decryption key to the IC chip and recording the IC chip.
The method according to claim 1,
Wherein the second step further comprises setting an integrity verification rule for real-time verification of the integrity of the terminal-side application by the server-side application,
The third step may further include generating an integrity verification value for the terminal-side application to verify its integrity through the server-side application,
The fourth step may further include transmitting the integrity verification value to the server-side application by the terminal-side application,
And the server-side application verifying the integrity of the terminal-side application by reading the integrity verification value through the integrity verification rule.
8. The method of claim 7,
And a value obtained by hashing at least a part of the terminal-side application or the terminal-side application by a specified hash algorithm.
9. The method of claim 8,
Further comprising at least one of the unique information stored in the memory unit of the wireless terminal, the extracted information extracted from the IC chip interfaced with the wireless terminal, and the dynamic information dynamically determined by the wireless terminal. How to control the IC chip.
delete The method as claimed in claim 1,
Confirming a server-side parameter for constructing command data to be injected into the IC chip; And
And constructing command data to be injected into the IC chip using the terminal side parameter and the server side parameter.
The method as claimed in claim 1,
Further comprising checking that the IC chip is interfaced with the wireless terminal by the terminal-side application.
The method as claimed in claim 1,
Side application transmits the encrypted command data to the interface IC chip,
And the encrypted command data is decrypted through the IC chip.
The method as claimed in claim 1,
Decrypting the encrypted command data by the terminal-side application; And
And injecting the decoded instruction data into the interface IC chip by the terminal-side application.
The method as claimed in claim 1,
The terminal-side application first decrypting the encrypted command data (or at least a part of the command data); And
And the terminal-side application injects the primary decoded command data into the interface IC chip,
Wherein the primary decoded instruction data is finally decoded through the IC chip.

Images