KR20180077843A - Method for Performing Secure NFC - Google Patents

Abstract

The present invention relates to a security NFC communication apparatus and method for supporting various security modules. In the security NFC communication apparatus, signals inputted to and outputted from an NFC communication unit are converted to be suitable for a protocol of a security module in a protocol conversion unit. The NFC communication unit interfaces according to an S2C protocol, and the security module can transmit authentication information or perform authentication according to a protocol of a contact/non-contact type smart card core chip. Accordingly, the authentication information of a user managed in various security authentication modules can be easily compatible.

Description

TECHNICAL FIELD [0001] The present invention relates to an NFC secure communication control apparatus,

The present invention relates to NFC (Near Field Communication), and more particularly to a contactless /

The present invention relates to an NFC communication apparatus and method capable of supporting general security modules such as a card core chip.

1 is a block diagram of a conventional secure NFC communication device 100. As shown in FIG. Referring to FIG. 1, the secure NFC communication apparatus 100 includes an NFC

(110) and a security module (120).

The NFC communication unit 110 may be controlled by a host processor such as a mobile communication terminal,

(SigIn, SigOut) according to the S2C (SigIn-SigOut-Connection) interface. The security module 120

Such as a Subscriber Identity Module (SIM), and may store authentication information for user identification. The S2C interface

Has been developed by Philips for communication between the NFC communication unit 110 and the security module 120.

The secure NFC apparatus 100 may be installed in a portable terminal, for example, a mobile communication terminal. The secure NFC communication

For example, a user who wishes to pass through a security gate may authenticate a user of the security gateway by using the secure NFC

By approaching the portable terminal on which the communication device 100 is mounted, by way of the antenna 111 of the secure NFC communication device 100

The authentication information can be transmitted to the main body for the user authentication. As a result, the body for the user authentication succeeds in authentication

The user may pass through the security gate.

In addition, a portable terminal equipped with the secure NFC communication apparatus 100 may be brought close to a reader

By allowing the reader to succeed in authentication, he or she can make the user use the transportation system or make payment for shopping.

have.

In the conventional secure NFC communication apparatus 100, the NFC communication unit 110 and the NFC communication unit 110 communicate with each other according to the S2C interface.

0.0 > 120 < / RTI > Accordingly, as the security module 120, a contact type or an ISO 14443 protocol

In the case of using another security authentication module such as a contactless smart card core chip based on a token, an interface with the NFC communication unit 110

(Eg, authentication information, etc.) for the modules to be used because the face specification does not match,

There is a problem in that the management is inconvenient.

In addition, when the NFC communication unit 110 receives the predetermined data such as the authentication information and is managed by the security module 120

However, since the mobile communication terminal does not support data transmission / reception between peer-to-peer terminals,

It is difficult to manage personal information such as an electronic business card managed in the mobile communication terminal.

Therefore, the present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide an NFC

In order to allow other security authentication modules such as a contactless smart card to be compatible in NFC communication,

And to perform mutual protocol conversion between protocols of different security authentication modules.

Another object of the present invention is to provide a method and system for transmitting a signal according to the S2C protocol of the NFC communication to another security authentication module such as a contactless smart card

In accordance with the protocol of FIG.

As described above, in the secure NFC communication apparatus according to the present invention, the signal according to the S2C protocol of the NFC communication is transmitted to the non-

Cards, etc., so that various security authentication modules can be provided to the secure NFC communication device

The authentication information of the user managed by the various security authentication modules can be easily compatible with each other.

In addition, since data communication between portable devices such as mobile communication terminals, that is, peers is free, electronic business cards,

Personal information such as registered telephone numbers and the like can be easily managed.

1 is a block diagram of a secure NFC communication device.

According to an aspect of the present invention, there is provided a secure NFC communication apparatus including:

And transmits the information corresponding to the signal in the non-contact type short distance communication method,

An NFC communication unit for generating a second signal from the beam according to the first protocol; And transmitting a signal according to the second protocol to the first protocol

And converting the second signal according to the first protocol into a signal according to the second protocol

A protocol conversion unit; And a security module for receiving or outputting a signal according to the second protocol.

According to another aspect of the present invention, there is provided a protocol converter for NFC communication,

An input signal according to the second protocol is output as a signal according to the first protocol,

A code conversion unit for converting and outputting the code; Converting the bypassed signal output from the code conversion unit into an analog signal,

And converting the analog input signal according to the second protocol into a digital signal,

A signal type conversion unit for outputting the input signal as an input signal; And converting the size of the analog signal output from the signal type conversion unit

And converting the size of the analog signal according to the second protocol output from the external module,

And a waveform shaping unit for outputting the analog input signal according to the second protocol to the original signal type conversion unit.

While the preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings and the accompanying drawings,

The embodiments are not limited or limited by the embodiments. Like reference symbols in the drawings denote like elements.

2 is a block diagram of a secure NFC communication device 200 according to an embodiment of the present invention. Referring to FIG. 2, the NFC communication apparatus 200 includes:

A protocol conversion unit 220 and a security module 230. The secure NFC communication device 200 may be installed in a portable terminal such as a mobile communication terminal. The secure NFC communication

As shown in FIG. 10, the apparatus 200 can perform functions such as a traffic card, a smart card, and the like through communication with a reader. In addition,

, As shown in FIG. 11, personal information is exchanged between peers equipped with the secure NFC apparatus 200, that is, mobile communication terminals

.

In particular, the conventional secure NFC communication processor only supports communication with a specific security authentication module communicating in accordance with the S2C interface

In contrast, in the present invention, the security module 230 is a contact type according to the ISO 7816 protocol or an ISO 14443 protocol

The protocol conversion unit 220 may be included to allow all other security authentication modules such as a non-contact smart card core chip to be used

.

The NFC communication unit 210 is an NFC communication processor that interfaces non-contact type short distance communication with the other party NFC communication apparatus.

The NFC communication unit 210 is controlled by a host processor such as a mobile communication terminal equipped with the secure NFC communication apparatus 200

Oh, it can work.

The NFC communication unit 210 receives the baseband first signal SigIn according to the S2C protocol from the protocol conversion unit 220

And generates RF (Radio Frequency) information corresponding to the first signal SigIn. The NFC communication unit 210 receives

And transmits the generated information to a reader or a correspondent terminal in a non-contact type short distance communication method, i.e., an NFC method.

The NFC communication unit 210 can receive certain RF information from the reader or the counterpart terminal in the NFC scheme. remind

The NFC communication unit 210 processes the received RF information to generate a baseband second signal SigOut according to the S2C protocol,

To the base protocol converter 220. [

The protocol conversion unit 220 converts the signal input / output signals between the NFC communication unit 210 and the security module 230

We deliver RotoCol. For example, the protocol conversion unit 220 converts the S2C protocol from the NFC communication unit 210,

Converts the second signal SigOut according to the protocol of the input signal to the security module 230 into a signal LA-

And outputs it to the security module 230. In addition, the protocol conversion unit 220 converts the protocol information received from the security module 230

Converts the call (LA-LB) into a first signal (SigIn) according to the S2C protocol, and outputs the first signal (SigIn) to the NFC communication unit 210.

The security module 230 may be a contactless smart card according to the ISO 7816 protocol or a non-contact smart card core according to the ISO 14443 protocol.

Chips, and the like. For example, the security module 230 may be configured to input to a contactless smart card core chip

(LA-LB) terminal, and can output the authentication information and the like stored therein to the LA-LB terminal.

3 is a specific block diagram of the security module 230 of FIG. Referring to FIG. 3, the security module 230 includes a CPU

231, a ROM (Read Only Memory) 232, a RAM (Random Access Memory) 233,

And an EEPROM (Electrically Erasable ROM) 234. The CPU 231 controls the overall control of the security module 230

. The ROM 232 stores an overall system program for the operation of the security module 230,

The RAM 233 stores temporary data necessary for calculation of internal data. The EEPROM 234 may be an external card reader,

And authentication information for transmitting / receiving data.

4 is a detailed block diagram of the protocol conversion unit 220 of FIG. 4, the protocol conversion unit 220 includes an input /

A code conversion unit 222, a signal type conversion unit 223, and a waveform shaping unit 224. The waveform shaping unit 224, as shown in FIG.

The input / output unit 221 buffers a second signal SigOut input from the NFC communication unit 210 and outputs the second signal SigOut to the code conversion unit 222,

And outputs the buffered signal SigIn to the NFC communication unit 210 by buffering the output signal from the code conversion unit 222

Output.

First, the protocol conversion unit 220 transmits the second signal SigOut of the S2C scheme from the NFC communication unit 210 to the security module 230,

Format signal will be described with reference to Fig.

When the code conversion unit 222 receives an input signal according to the S2C protocol from the input / output unit 221 (S610)

And outputs it to the signal type conversion unit 223 (S620). Accordingly, the signal type conversion unit 223 converts the signal

The signal SigOut from the code conversion unit 222 is converted into a digital signal from the digital signal conversion unit 222 into an analog signal and outputted to the waveform shaping unit 224 in step S630. As shown in the figure below,

The analog signal output to the waveform shaping unit 224 is in a digital form,

And has a modulated and coded signal form according to the equation. As shown in FIG. 7, the signal type conversion unit 223 converts the signal

The peak-to-peak level of a certain frequency is changed according to the logic state of the digital signal SigOut from the code converter 222

To an analog signal. That is, a digital signal in a logic high state is an analog signal having a large peak-peak level

And converts the digital signal in a logical low state into an analog signal having a small peak-to-peak level. Miller way

7, a signal having a logic low state at an initial portion of a predetermined period is referred to as data " 0 &

And a signal having a logical low state in the middle of the positive period as data " 1 ". Manchester way

As shown in FIG. 7, the signal according to the present invention has a coding scheme in which a digital value of a Miller method is modulated into a subcarrier shape.

5 is a specific circuit diagram of the waveform shaping section 224 of FIG. Referring to FIG. 5, the waveform shaping unit 224 includes a diode

a first diode D1, a first resistor R1, a second resistor R2, a first capacitor C1, a second capacitor C2, and a third capacitor C3. 5

The circuit representing the waveform shaping section 224 of the waveform shaping section 224 is merely an example, and various various circuits for waveform shaping can be used.

The diode D1 is connected between the first terminal LAA connected to the signal type conversion unit 223 and the first node ND1. Prize

The first resistor R1 is connected between the first terminal LAA connected to the signal type conversion unit 223 and the ground GND. The first

The capacitor C1 is connected between the first terminal LAA connected to the signal type conversion unit 223 and the ground GND. The second

The resistor R2 is connected to the second terminal LBB connected to the signal type conversion unit 223 and the first terminal LA connected to the security module 230. [

Respectively. The second capacitor C2 is connected between the first node ND1 and the first terminal LA connected to the security module 230,

Lt; / RTI > The third capacitor C3 is connected between the first terminal LA connected to the security module 230 and the ground GND

All. Here, the ground GND is connected as the second terminal LB of the security module 230.

As described above, the first terminal (LAA) of the signal type conversion unit 223 is connected to the cathode side of the diode D1,

The other terminal of the second resistor R2 connected to the first terminal LA of the signal module converting unit 230 is connected to the second terminal

(LBB). Therefore, the general operation of the diode D1 and the circuit operation of the R-C filter type of the waveform shaping unit 224

The signals LA-LB of the terminals connected to the security module 230 are reduced in the waveform shaping unit 224,

And the signal LAA-LBB from the signal type conversion section 223 is output from the waveform shaping section 224,

And is output to the security module 230.

That is, the amplitude of the analog signal is converted according to the waveform shaping in the waveform shaping unit 224, and is transmitted to the security module 230

(S650). In particular, the waveform shaping unit 224 may be configured such that the signal LA-LB transmitted to the security module 230 is transmitted to the signal type conversion unit 223

Is larger than the signal LAA-LBB (S640). For example, a signal transmitted to the signal type conversion unit 223

(LAA-LBB) has a peak-to-peak of about 3 V (Volt), and the signal LA-LB transmitted to the security module 230 is

And has a peak-peak of about 12 to 13 V.

7 illustrates a case where the protocol conversion unit 220 receives the second signal SigOut of the S2C scheme from the NFC communication unit 210,

(LA-LB) output to the security module 230 in the process of converting the first signal

This is a waveform chart showing an example. As shown in FIG. 7, the second signal SigOut according to the S2C scheme from the NFC communication unit 210,

After being converted into an analog signal by the arc type transforming unit 223, the waveform shaping unit 224 transforms the waveform to a predetermined peak-

And transmitted to the security module 230.

Next, the protocol conversion unit 220 converts the signal (LA-LB) from the security module 230 into a first signal SigIn of the S2C scheme

To the NFC communication unit 210 will be described with reference to FIG.

When the waveform shaping unit 224 receives the signal LA-LB output from the security module 230 (S810), the waveform shaping unit 224 adjusts the peak-

And outputs it to the signal type conversion unit 223 (S820). Accordingly, the signal type conversion unit 223 converts

The Manchester-type analog signal (the signal whose LA-LB waveform is shaped in FIG. 9) is sampled at a predetermined frequency from the waveform shaping unit 224

And outputs the digital signal to the code conversion unit 222 (S830).

When the code conversion unit 222 receives the Manchester-coded signal from the signal type conversion unit 223,

Into a first signal SigIn coded in a Miller method (S840). The signal (SigIn) converted by the code conversion unit 222 is supplied to the

The secure NFC communication apparatus 200 as shown in FIG. 2 according to the present invention is mounted on the mobile communication terminal 210 as shown in FIG. 10, and is transmitted to the NFC communication unit 210 via the input / output unit 221 (S850) leader

and can communicate with a reader.

For example, a user who wishes to pass through a security gate has a body for authenticating a user installed in the security gate, that is,

The security NFC communication apparatus 200 is moved closer to the mobile communication terminal 200,

The authentication information can be transmitted to the reader for the user authentication through the tena 211. [ That is, in the secure NFC communication apparatus 200

When information requested for authentication in the reader is received via the antenna 211, information based on the received signal is transmitted to the reader

And may be transmitted to the security module 230 through the NFC communication unit 210 and the protocol conversion unit 220. At this time,

The control unit 230 reads the authentication information stored in the EEPROM 234 under the control of the CPU 231, for example,

And extracts the extracted authentication information from the protocol conversion unit 220 and the NFC communication unit 210

And can be transmitted to the reader. Accordingly, if the reader succeeds in the authentication, the user can pass through the security gate.

In addition, when a schedule reader for using transportation means or shopping payment is used, the secure NFC server

The mobile communication terminal on which the new device 200 is mounted is brought close to the reader,

So that the user can make the payment or the like.

2, the secure NFC apparatus 200 according to the present invention may be installed in different mobile communication terminals as shown in FIG.

So that the terminals can communicate with each other (peer-to-peer).

For example, most users today store electronic business cards, photographs, videos, or phone number lists on their mobile communication terminals

use. However, when the terminal is replaced, such personal information must be newly input or downloaded,

The user can use the above personal information like the previous terminal.

However, in the present invention, in the security module 230 of the secure NFC communication device 200 mounted in the mobile communication terminal,

Information can be managed. When the personal information is managed by the security module 230, communication between the mobile communication terminals

It is possible to move personal information to the other party's terminal.

For example, by moving the mobile communication terminals equipped with the secure NFC communication apparatus 200 close to each other,

The NFC apparatus 200 transmits the authentication information and the personal information

To the other terminal. The counterpart terminal transmits the control signal to the secure NFC communication apparatus 200 through the antenna 211,

When the authentication information and the personal information are received, information based on the received signals is transmitted to the NFC communication unit 210 and the protocol

And may be transmitted to the security module 230 through the conversion unit 220. At this time, the security module 230, under the control of the CPU 231,

And the personal information included in the received signals is stored in the EEPROM 234 when the authentication is successful

Can be managed.

As described above, in the value security NFC communication apparatus 200 according to the present invention,

(SigIn, SigOut) are converted in accordance with the protocol of the security module 230 in the protocol conversion unit 220. The NFC communication unit 210

S2C protocol, and the security module 230 interfaces according to the protocol of the contact / contactless smart card core chip

Authentication information can be transmitted or authentication can be performed.

Although the present invention has been described in connection with the preferred embodiments and drawings, the present invention is not limited to the above embodiments

And various modifications and changes may be made thereto by those skilled in the art to which the present invention belongs. therefore,

It should be understood that the scope of the present invention is not limited to the described embodiments,

It should be decided by equal things.

Claims (1)

And transmits the information corresponding to the first signal according to the first protocol in a non-contact type short distance communication method,
An NFC communication unit for generating a second signal according to the first protocol from information received through a communication scheme;
Converting a signal according to a second protocol into the first signal according to the first protocol,
A protocol converter for converting a signal into a signal according to the second protocol; And
A security module for receiving or outputting a signal according to the second protocol;
Wherein the secure NFC communication apparatus comprises:

Images