KR102125159B1 - 스마트 카드 응용을 위한 보안 검증 방법 및 디바이스 - Google Patents

스마트 카드 응용을 위한 보안 검증 방법 및 디바이스 Download PDF

Info

Publication number
KR102125159B1
KR102125159B1 KR1020187022639A KR20187022639A KR102125159B1 KR 102125159 B1 KR102125159 B1 KR 102125159B1 KR 1020187022639 A KR1020187022639 A KR 1020187022639A KR 20187022639 A KR20187022639 A KR 20187022639A KR 102125159 B1 KR102125159 B1 KR 102125159B1
Authority
KR
South Korea
Prior art keywords
smart card
security
card application
application
service
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
KR1020187022639A
Other languages
English (en)
Korean (ko)
Other versions
KR20180109919A (ko
Inventor
차오 시우
레이 왕
천지에 시
Original Assignee
알리바바 그룹 홀딩 리미티드
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 알리바바 그룹 홀딩 리미티드 filed Critical 알리바바 그룹 홀딩 리미티드
Publication of KR20180109919A publication Critical patent/KR20180109919A/ko
Application granted granted Critical
Publication of KR102125159B1 publication Critical patent/KR102125159B1/ko
Assigned to 어드밴스드 뉴 테크놀로지스 씨오., 엘티디. reassignment 어드밴스드 뉴 테크놀로지스 씨오., 엘티디. 권리의 전부이전등록 Assignors: 어드밴티지어스 뉴 테크놀로지스 씨오., 엘티디.
Assigned to 어드밴티지어스 뉴 테크놀로지스 씨오., 엘티디. reassignment 어드밴티지어스 뉴 테크놀로지스 씨오., 엘티디. 권리의 전부이전등록 Assignors: 알리바바 그룹 홀딩 리미티드
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352—Contactless payments by cards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4016—Transaction verification involving fraud or risk level assessment in transaction processing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/61—Time-dependent
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/63—Location-dependent; Proximity-dependent

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Finance (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Signal Processing (AREA)
  • Telephone Function (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
KR1020187022639A 2016-01-05 2016-12-27 스마트 카드 응용을 위한 보안 검증 방법 및 디바이스 Active KR102125159B1 (ko)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN201610006062.2A CN106940767A (zh) 2016-01-05 2016-01-05 一种智能卡应用安全验证方法及装置
CN201610006062.2 2016-01-05
PCT/CN2016/112265 WO2017118315A1 (zh) 2016-01-05 2016-12-27 一种智能卡应用安全验证方法及装置

Publications (2)

Publication Number Publication Date
KR20180109919A KR20180109919A (ko) 2018-10-08
KR102125159B1 true KR102125159B1 (ko) 2020-06-22

Family

ID=59273243

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020187022639A Active KR102125159B1 (ko) 2016-01-05 2016-12-27 스마트 카드 응용을 위한 보안 검증 방법 및 디바이스

Country Status (10)

Country Link
US (1) US11127019B2 (https=)
EP (1) EP3401823B1 (https=)
JP (1) JP2019501461A (https=)
KR (1) KR102125159B1 (https=)
CN (1) CN106940767A (https=)
MY (1) MY197570A (https=)
PH (1) PH12018501427A1 (https=)
SG (1) SG11201805753QA (https=)
TW (1) TWI744267B (https=)
WO (1) WO2017118315A1 (https=)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11704663B2 (en) * 2017-03-31 2023-07-18 Vijay Madisetti Method and system for blockchain-based vehicle identifiers and wallets for decentralized payments
CN108734005B (zh) * 2018-02-09 2021-02-09 深圳市微付充科技有限公司 一种安全/身份验证方法、移动设备及存储装置
US10998937B2 (en) 2019-04-30 2021-05-04 Bank Of America Corporation Embedded tag for resource distribution
US11234235B2 (en) * 2019-04-30 2022-01-25 Bank Of America Corporation Resource distribution hub generation on a mobile device
US11196737B2 (en) 2019-04-30 2021-12-07 Bank Of America Corporation System for secondary authentication via contactless distribution of dynamic resources
WO2021022204A1 (en) * 2019-07-31 2021-02-04 Iigc, Inc. Image-based authorization and transmission of stored value or sim cards
TWI726488B (zh) * 2019-11-19 2021-05-01 元太科技工業股份有限公司 非接觸式智慧卡及其操作方法
CN111682883A (zh) * 2020-06-05 2020-09-18 桂林微网互联信息技术有限公司 独立安全卡以及用于使用独立安全卡的终端设备
CN114726407B (zh) * 2022-05-17 2022-08-26 北京紫光青藤微系统有限公司 用于获取异常信息的方法、装置、控制器及存储介质
CN119255211B (zh) * 2024-09-30 2025-07-25 支付宝(杭州)信息技术有限公司 交通工具搭乘业务处理方法、装置以及设备

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120295588A1 (en) * 2011-05-19 2012-11-22 Chi Mei Communication Systems, Inc. Mobile device and nfc service protection method of the mobile device
US20150142595A1 (en) * 2013-03-15 2015-05-21 Allowify Llc System and Method for Enhanced Transaction Authorization

Family Cites Families (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4899274B2 (ja) * 2001-08-30 2012-03-21 富士通株式会社 携帯型端末及び機能抑制方法
KR100582389B1 (ko) * 2004-11-08 2006-05-23 주식회사 팬택앤큐리텔 Ｒｆ 결제시 중간 이벤트를 차단하는 모바일 커머스무선통신 단말기 및 그 방법
US20130332343A1 (en) * 2005-10-06 2013-12-12 C-Sam, Inc. Multi-tiered, secure mobile transactions ecosystem enabling platform comprising a personalization tier, a service tier, and an enabling tier
FR2934910B1 (fr) * 2008-08-05 2013-08-16 Inside Contactless Procede de securisation d'une transaction executee au moyen d'un dispositif portable programmable.
CN101789151A (zh) * 2009-12-31 2010-07-28 中兴通讯股份有限公司 移动终端电子钱包的应用方法及移动终端
JP2012088952A (ja) * 2010-10-20 2012-05-10 Nec Casio Mobile Communications Ltd 携帯端末、決済システム、決済方法、およびプログラム
US20120166332A1 (en) * 2010-12-22 2012-06-28 Ebay Inc. Bill splitting system
US20120197793A1 (en) * 2011-01-31 2012-08-02 Bank Of America Corporation Dependent notification alert
CN102855560B (zh) * 2011-06-29 2018-07-17 国民技术股份有限公司 一种移动支付方法及系统
CN103065240B (zh) * 2013-01-11 2018-04-27 中兴通讯股份有限公司 一种移动支付处理方法和系统
MX2015014917A (es) * 2013-04-25 2016-06-02 Offla Selfsafe Ltd Auto autenticacion.
CN104182870B (zh) * 2013-05-24 2017-12-15 中国银联股份有限公司 一种基于手机钱包的安全支付方法以及支付系统
US9811830B2 (en) * 2013-07-03 2017-11-07 Google Inc. Method, medium, and system for online fraud prevention based on user physical location data
US9390242B2 (en) * 2014-02-07 2016-07-12 Bank Of America Corporation Determining user authentication requirements based on the current location of the user being within a predetermined area requiring altered authentication requirements
CN104132870B (zh) 2014-07-10 2017-03-15 上海大学 表面张力和表面面积粘性测定装置
CN104504568A (zh) * 2014-12-26 2015-04-08 网易宝有限公司 支付模式控制方法和设备
CN104751329A (zh) * 2015-02-28 2015-07-01 深圳市中兴移动通信有限公司 一种移动支付终端、移动支付系统及移动支付方法
CN104794615A (zh) * 2015-05-11 2015-07-22 易联支付有限公司 一种手机支付安全验证方法

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120295588A1 (en) * 2011-05-19 2012-11-22 Chi Mei Communication Systems, Inc. Mobile device and nfc service protection method of the mobile device
US20150142595A1 (en) * 2013-03-15 2015-05-21 Allowify Llc System and Method for Enhanced Transaction Authorization

Also Published As

Publication number Publication date
MY197570A (en) 2023-06-26
EP3401823A1 (en) 2018-11-14
PH12018501427A1 (en) 2019-01-28
WO2017118315A1 (zh) 2017-07-13
KR20180109919A (ko) 2018-10-08
CN106940767A (zh) 2017-07-11
US20180315048A1 (en) 2018-11-01
TW201730804A (zh) 2017-09-01
EP3401823B1 (en) 2022-10-12
EP3401823A4 (en) 2018-11-14
US11127019B2 (en) 2021-09-21
SG11201805753QA (en) 2018-08-30
JP2019501461A (ja) 2019-01-17
TWI744267B (zh) 2021-11-01

Similar Documents

Publication Publication Date Title
KR102125159B1 (ko) 스마트 카드 응용을 위한 보안 검증 방법 및 디바이스
US10719599B2 (en) Verification code generation to improve recognition accuracy by a person and recognition difficulty by a computer program
US11080706B2 (en) Blocking fraudulent transactions in an NFC device
TWI724326B (zh) 業務授權的方法、裝置及設備
CN107278313B (zh) 支付手段操作支持方法和用于支持该方法的电子设备
KR101552587B1 (ko) 휴대용 전자 디바이스에 대한 위치-기반 액세스 제어
US20160275486A1 (en) Device, system, and method for creating virtual credit card
US11282002B2 (en) Method and apparatus for secure check-in
US11113684B2 (en) Device, system, and method for creating virtual credit card
CN112926089B (zh) 一种基于隐私保护的数据风险防控方法、装置及设备
CN109636401A (zh) 一种基于用户微表情的支付方法及系统
US11004080B2 (en) Fraud deterrence and/or identification using multi-faceted authorization procedures
CN106850503A (zh) 一种免登录身份认证方法及装置
CN104424028A (zh) 终端设备以及切换方法
CN107704849A (zh) 双重验证功能的人脸识别方法及系统
CN105577678B (zh) 账户的实名认证方法及装置
CN107862518A (zh) 一种基于终端位置的支付方法及系统
CN107506721A (zh) 一种多虹膜采集方法及系统
Sanchez-Reillo et al. Strengths, weaknesses and recommendations in implementing biometrics in mobile devices
CN107563162A (zh) 一种隐秘解锁方法及系统
CN109872148A (zh) 基于tui的可信数据处理方法、装置以及移动终端
CN118656816B (zh) 一种业务验证系统、方法、装置、存储介质及电子设备
HK1238741A1 (en) Security verification method and device for smart card application
HK1238741A (en) Security verification method and device for smart card application
CN108184248A (zh) 一种终端的数据处理方法及系统

Legal Events

Date Code Title Description
PA0105 International application

St.27 status event code: A-0-1-A10-A15-nap-PA0105

A201 Request for examination
E13-X000 Pre-grant limitation requested

St.27 status event code: A-2-3-E10-E13-lim-X000

P11-X000 Amendment of application requested

St.27 status event code: A-2-2-P10-P11-nap-X000

P13-X000 Application amended

St.27 status event code: A-2-2-P10-P13-nap-X000

PA0201 Request for examination

St.27 status event code: A-1-2-D10-D11-exm-PA0201

PG1501 Laying open of application

St.27 status event code: A-1-1-Q10-Q12-nap-PG1501

D13-X000 Search requested

St.27 status event code: A-1-2-D10-D13-srh-X000

D14-X000 Search report completed

St.27 status event code: A-1-2-D10-D14-srh-X000

E902 Notification of reason for refusal
PE0902 Notice of grounds for rejection

St.27 status event code: A-1-2-D10-D21-exm-PE0902

E13-X000 Pre-grant limitation requested

St.27 status event code: A-2-3-E10-E13-lim-X000

P11-X000 Amendment of application requested

St.27 status event code: A-2-2-P10-P11-nap-X000

P13-X000 Application amended

St.27 status event code: A-2-2-P10-P13-nap-X000

E701 Decision to grant or registration of patent right
PE0701 Decision of registration

St.27 status event code: A-1-2-D10-D22-exm-PE0701

GRNT Written decision to grant
PR0701 Registration of establishment

St.27 status event code: A-2-4-F10-F11-exm-PR0701

PR1002 Payment of registration fee

St.27 status event code: A-2-2-U10-U12-oth-PR1002

Fee payment year number: 1

PG1601 Publication of registration

St.27 status event code: A-4-4-Q10-Q13-nap-PG1601

PN2301 Change of applicant

St.27 status event code: A-5-5-R10-R11-asn-PN2301

PN2301 Change of applicant

St.27 status event code: A-5-5-R10-R14-asn-PN2301

PN2301 Change of applicant

St.27 status event code: A-5-5-R10-R14-asn-PN2301

R18-X000 Changes to party contact information recorded

St.27 status event code: A-5-5-R10-R18-oth-X000

PR1001 Payment of annual fee

St.27 status event code: A-4-4-U10-U11-oth-PR1001

Fee payment year number: 4

PR1001 Payment of annual fee

St.27 status event code: A-4-4-U10-U11-oth-PR1001

Fee payment year number: 5

PR1001 Payment of annual fee

St.27 status event code: A-4-4-U10-U11-oth-PR1001

Fee payment year number: 6

U11 Full renewal or maintenance fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U11-OTH-PR1001 (AS PROVIDED BY THE NATIONAL OFFICE)

Year of fee payment: 6