KR20070033709A - Interfacing Method between Handheld Wireless Terminal and Smart Card - Google Patents

Abstract

The present invention relates to an interfacing method between a portable terminal and a removable SIM card. When security is required, the terminal configures a security information request command and transmits the security information request command to the SIM card, and receives the security information request command. In response, the SIM card includes a step of constructing a response command including predetermined security information and transmitting the same to the terminal. As such, the present invention proposes a mechanism capable of performing security-related functions on a SIM card, thereby providing a wider range of services to a user.

SIM, smart card, SAT, security

Description

Interfacing method between portable wireless terminal and smart card {APPARATUS AND METHOD INTERFACING BETWEEN MOBILE EQUIPMENT AND SMART CARD}

1 is a block diagram of a portable radio terminal according to an embodiment of the present invention.

2 is a diagram illustrating an operation procedure of a terminal according to an embodiment of the present invention.

3 is a diagram illustrating an operation procedure of the SIM card 150 according to the embodiment of the present invention.

The present invention relates to a method for interfacing between a portable wireless terminal and a smart card, and more particularly, to a method for interfacing security related information between a portable wireless terminal and a smart card.

In recent years, portable wireless terminals are indispensable for modern people regardless of gender, age and age, and the demand for such portable wireless terminals is expected to increase further. Accordingly, service providers and terminal manufacturers are competitively developing products (or services) to differentiate themselves from others.

The memory function, which is one of functions provided by the portable wireless terminal, allows a user to store a plurality of desired phone numbers and other necessary user information (schedule schedule, anniversary, memo, picture, etc.) in the terminal and check them as necessary. .

Meanwhile, recently, a portable wireless terminal equipped with a smart card has been developed, and user information and various data are stored in a flash memory of the smart card.

One of the typical uses of a smart card is to provide a roaming service of a terminal by embedding a terminal user identification module. The smart card for the terminal user identification module may include a subscriber identity module (SIM) card of a global system for mobile communication (GSM) system, a universal subscriber identity module (USIM) card of a universal mobile telecommunication system (UMTS), and a universal IC (UICC). Card, User Division Module (UIM) card of Code Division Multiple Access (CDMA) system, and Removal User Identity Module (RUIM) card, and the like, and a smart card with a user identification module is provided for sharing information with a terminal. By default, contact smart cards are used a lot. The following description will take an example of a SIM card.

More specifically, the GSM system, which is a European mobile communication system, uses the above-described SIM card as a subscriber identity module, which can be referred to as an interface between a terminal and a network, in order to cope with a change of a terminal or a change in a carrier. The SIM card has a microprocessor and a memory chip mounted therein so that all the information necessary for operating the terminal is embedded. In addition, user information as well as related information such as a telephone number and a network number are embedded.

In the future, the SIM card is expected to provide a number of additional functions by gradually increasing information transfer speed and memory capacity. One of them is related to security. The SIM card includes a secret code for authorizing a specific application of a terminal or a user authorized to access a specific server or an algorithm (for example, A3 / A8) for generating a security code. Can be transplanted to

Standards organizations have proposed the SAT (Sim Application Toolkit) as a toolkit for delivering specific applications to SIM cards. However, in the conventional SAT, a command for extracting security related information stored in the SIM card is not defined. Therefore, there is a problem that security related information in the SIM card cannot be used by using the conventional SAT command.

Accordingly, an object of the present invention is to provide an interfacing method between a portable wireless terminal and a smart card.

Another object of the present invention is to provide a method for interfacing supplementary related information between a portable wireless terminal and a smart card.

Another object of the present invention is to provide a SAT command for extracting supplementary information stored in a smart card.

According to an aspect of the present invention for achieving the above object, the method of interfacing with a smart card in a portable terminal, the process of checking whether security is required when executing a specific application, and, if the security is required, security information request command And transmitting the security information to the smart card, and obtaining security information from the response command when receiving a response command for the security information request command.

According to another aspect of the present invention, a method of interfacing with a terminal in a smart card includes: checking whether a security information request command is received from the terminal, and reading preset security information from a memory when the security information request command is received. And forming a response command including the read security information and transmitting the response command to the terminal.

Hereinafter, in describing the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In general, the SAT (Sim Application Toolkit) is composed of a combination of a proactive command (send from the SIM card to the mobile equipment (ME)) and the envelope command (envelop command) sent from the terminal to the SIM card have. Hereinafter, an envelope command for extracting security information stored in a SIM card or calculated in a SIM card will be referred to as a security information request.

Structure of the security information request message transmitted from the terminal according to the present invention to the SIM card (TLV: Type / Length / Value) as shown in Table 1 below.

Description M / O / C Length (Byte) Command tag M One Length M X Device identities M A Security Algorithm O B EF File ID O C Challenge data O D

 In Table 1, the command tag is a tag for distinguishing that the security information request is set to one of D8 to DE values. Length represents the length after the length field and can be calculated as A + B + C + D (byte). Device Identities is a field indicating the direction of the command. The Security Algorithm is an optional field that indicates the type of algorithm required to construct security information data. The file identification (EF File ID) indicates an identifier of an element file in which security information data is stored. Challenge Data represents parameter values that can be entered into the security algorithm.

Meanwhile, the structure (TLV) of the response message (security information response message) to the security information request message is shown in Table 2 below.

Description M / O / C Length (Byte) Security information data M X

 In <Table 2>, security information data (Security information data) represents the security information data sent from the SIM card to the terminal.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a portable wireless terminal equipped with a SIM card according to an embodiment of the present invention. In the following description, the portable radio terminal is a cellular phone, a personal communication system (PCS), a personal digital assistant (PDA), an international mobile communication-2000 (IMT2000) terminal, a fourth generation. It is meant to include both the broadband system terminal and the like, the following description will be described with the general configuration of the above examples.

Referring to FIG. 1, the controller 100 controls the overall operation of the terminal. For example, it performs processing and control for voice call and data communication, and transmits a security information request message to the SIM card 150 when security or authentication is required according to the present invention in addition to the usual functions, and secured in response. Receive and process information response messages. In the following description, description of the processing and control of the conventional control unit 100 will be omitted.

The memory includes a program memory 102, a data memory 104, a nonvolatile memory 106, and the like. The program memory 102 stores a program for controlling the overall operation of the terminal. The program memory 102 may use a flash memory. The data memory 104 temporarily stores data generated during the operation of the terminal. The data memory 104 may use a random access memory (RAM). The nonvolatile memory 106 stores system parameters and other storage data (telephone number, SMS message, image data, etc.). The nonvolatile memory 106 may use an EEPROM.

Key pad 108 has a 4 × 3 button matrix for text entry, a menu button, a cancel button (clear), an OK button, a call button (TALK), an end button (END), and an internet access button. And a plurality of function keys such as direction buttons (up / down / left / right), and provide input data corresponding to a button pressed by the user to the controller 100. The display 110 displays status information (or indicators), numbers and characters, moving pictures, still pictures, and the like, generated during the operation of the terminal. The display unit 110 may use a color liquid crystal display (LCD).

An audio codec (Coder-Decoder) 112 connected to the controller 100, a speaker 116 and a microphone 114 connected to the codec 112 are voice input / output blocks used for a voice call. The codec 112 converts the PCM data provided from the controller 100 into an analog voice signal and transmits the same through the speaker 116 and converts the voice signal received through the microphone 114 into PCM data. Provided to the controller 100.

The RF unit 120 lowers the radio frequency (RF) signal received through the antenna 118 to the baseband processor 122 and provides the baseband processor 122 with a baseband from the baseband processor 122. The signal is raised in frequency and transmitted through the antenna 118. The baseband processor 122 processes a baseband signal transmitted and received between the RF unit 120 and the controller 100. For example, when using the CDMA communication method, it performs channel coding and spreading of data to be transmitted in case of transmission, and despreading and channel decoding of received signal in case of reception. decoding).

On the other hand, the SIM card 150, which can be attached to and detached from the terminal, is composed of a microprocessor and a memory chip, and a user identification module and applications for supporting various services are mounted. The SIM card 150 and the terminal interface using commands defined in the SAT. According to the present invention, when the SIM card 150 receives a security information request message (Table 1) from the terminal, the SIM card 150 transmits a security information response message (Table 2) including security information data to the terminal in response thereto. .

Hereinafter, a description will be given on the assumption that only specific SIM users access to an application server having access authority and receive a specific service.

2 illustrates an operation procedure of a terminal according to an embodiment of the present invention.

Referring to FIG. 2, first, in step 201, the controller 100 checks whether a setup menu command is received from the SIM card 150. If the setup menu command is not received, the controller 100 proceeds to step 219 to perform the corresponding mode. If the setup menu command is received, the controller 100 proceeds to step 203 and configures a menu according to the received setup menu command and displays it on the display window. For example, it may be displayed as '1: weather 2: stock 3: bank 4: news'.

After displaying the menu provided from the SIM card 150, the control unit 100 checks whether a specific menu item is selected by the user's key operation in step 205. When the selection of the particular menu item is detected, the controller 100 checks whether a service according to the selected menu item is required in step 207.

If the security is not required, the control unit 100 proceeds to step 221 to perform general processing according to the menu item selection. If the security is required, the control unit 100 proceeds to step 209 to configure a security information request command as shown in Table 1 and transmits to the SIM card 150.

After transmitting the security information request command, the controller 100 checks whether a response command (security information response command, Table 2) to the security information request command is received in step 211. Upon receiving the security information response command, the controller 100 proceeds to step 213 to extract security information from the received security information response command.

In operation 215, the controller 100 creates a message (eg, an SMS message) including the extracted security information, and transmits the created message to the corresponding application server in operation 217. The application server receiving the message performs authentication using the security information, and provides a corresponding service (eg, weather information) to the terminal using SMS (Short Message System) upon successful authentication.

3 illustrates an operation procedure of the SIM card 150 according to an embodiment of the present invention.

Referring to FIG. 3, first, in step 301, the microprocessor of the SIM card 150 checks whether a security information request command is received from the terminal. Upon reception of the security information request command, the microprocessor proceeds to step 303 and checks whether a security information generation algorithm is specified in the received security information request command.

If the security generation algorithm is specified, the microprocessor proceeds to step 305 to generate security information using the specified algorithm and proceeds to step 309. If the security generation algorithm is not specified, the microprocessor proceeds to step 307 to read the preset security information from the memory and proceeds to step 309.

After obtaining the security information as described above, the microprocessor constructs a response command including the obtained security information in step 309 and transmits the response command to the terminal.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

As described above, the present invention proposes a mechanism capable of performing security-related functions on a SIM card, thereby providing a wider range of services to users safely.

Claims (8)

A method for interfacing with a smart card in a portable terminal, Checking whether security is required when executing a specific application, When the security is required, constructing a security information request command and transmitting the same to the smart card; And receiving security information from the response command when receiving a response command to the security information request command. In the method for interfacing with a terminal in a smart card, Checking whether a security information request command is received from the terminal; Reading preset security information from a memory when the security information request command is received; And constructing a response command including the read security information and transmitting the response command to the terminal. The method according to claim 1 or 2, The smart card is any one of a Subscriber Identity Module (SIM) card, a Universal Subscriber Identity Module (USIM) card, a Universal IC Card (UICC), a User Identity Module (UIM) card, and a Removal User Identity Module (RUIM) card. How to feature. The method according to claim 1 or 2, The command exchanged between the portable terminal and the smart card is a SAT (Sim Application toolkit) command. The method according to claim 1 or 2, And the security information request command includes command direction information. The method of claim 5, The security information request command includes at least one of security information generation algorithm information, file information in which the security information is stored, and parameter information input to the security information generation algorithm. The method of claim 2, If a security information generation algorithm is specified in the received security information request command, generating security information using the specified security information generation algorithm; And constructing a response command including the generated security information and transmitting the response command to the terminal. In the interfacing method between a portable terminal and a removable SIM card, If the security is required, the terminal, the security information request command to configure the step of transmitting to the SIM card, And receiving, by the SIM card, a response command including predetermined security information and transmitting the response command to the terminal when the security information request command is received.

Images