TW202026933A - Data security system and operation method thereof - Google Patents

Abstract

A data security system and an operation method thereof are provided. The system provides a security means of a chip card, and the chip card includes an application module and a target module, and the data security system comprises: an application write card module which is used in a card writing process inputting a feature data required for the chip card to the application module; and a security write card module configured to input a target data group for protecting the feature data to the target module in the card writing process, wherein the target data group includes a feature data portion and a key portion, the feature data portion is used to store the feature data, and the key portion is used to protect the feature data portion. By this design, when the card checking process is performed, the key portion is verified to confirm whether the chip card is a counterfeit.

Description

Data preservation system and its use method

The invention discloses a data security system, in particular a data security system that can be used in a composite chip card and a method of use thereof.

With the advancement of technology and information, in the past, as identity authentication (such as ID card, health insurance card, student ID, library card, or other) or electronic documents (such as Uyou card), credit card or financial card for financial transactions, gradually integrated into one A composite chip card (or co-branded card) to provide users (or consumers) with the convenience of multi-card integration, and the demand for use is increasing.

Due to cost issues or other principles of trust for users (or consumers), chip card manufacturers often neglect to establish a security mechanism for chip cards, which leads to incidents in which the chip card is forged or copied by interested parties, causing the chip The card server is troubled, so if the multi-card integrated chip card cannot effectively prevent the occurrence of counterfeiting or copying, it will cause social problems such as fraud. Therefore, how to effectively prevent the occurrence of counterfeiting or copying of chip cards has become an urgent issue in today's society.

In view of the above-mentioned shortcomings, the industry has now proposed a verification method that uses fingerprint recognition, coupled with the protection of encryption keys to improve the chip The security of the card, but the cost of the inspection equipment required by this method is extremely high, so it cannot increase the penetration rate, and this method cannot know whether the chip card data is forged.

Furthermore, the industry also proposes a method to manage hidden areas, which is to protect data from arbitrary access through the control mechanism of the sector label. However, this method is to establish data concealment rather than the integrity and undeniability of the data itself. Therefore, it is impossible to combine the key of the chip card issuer with the certificate of the agent issuer (or fair third party).

In addition, the industry has even proposed a digital signature technology that uses digital signatures to verify the integrity and non-repudiation of the data at the card issuance stage, although this method can be verified at the agency issuing end (or a fair third party) at the card writing stage The legality of the source of the chip card, but the reliability of the data (such as changed data or forged data) written in the chip card during the read phase cannot be controlled.

Therefore, how to inspect the chip card easily and safely has become an urgent issue to be solved.

In order to solve the aforementioned problems, the present invention provides a data security system for providing a chip card security mechanism, and the chip card includes an application module and a target module, and the data security system includes: application writing card The module is used to write the characteristic data required by the chip card into the application module during the writing operation; and the secure writing module is the target data group used to protect the characteristic data during the writing operation Write in the target module, where the target data group includes a characteristic data group and a key mechanism, the characteristic data group is used to store the characteristic data, and the key mechanism is used to preserve the characteristic data group.

The aforementioned data security system further includes a card reader module, which is used to read the characteristic data of the chip card's application module during card verification.

The aforementioned data security system further includes a card verification module, which is used to verify the characteristic data of the application module and the characteristic data group of the target module of the chip card in the card verification operation. For example, the card verification module is verified through the Nonce value.

In the aforementioned data preservation system, the characteristic data is unchangeable public data.

In the aforementioned data preservation system, the characteristic data group is written into the target module with the master hash code.

In the aforementioned data security system, the key mechanism includes an active authentication data group and a passive authentication data group. The active authentication data group has public key data, and an auxiliary hash code is calculated based on the public key data to serve as the Passive authentication data group.

In the aforementioned data security system, the chip card is a composite type.

The present invention further provides a method for using a data security system, which includes a card writing operation, which includes: providing a chip card and the data security system, the data security system includes a card writing device and an electronic device, and the chip card includes There are application modules and target modules, where the chip card is configured with private key data; the feature data required by the chip card is written into the application module by the card writing device to form a feature data group; The characteristic data is calculated by the card writing device using the hash method to form the main hash code, and the first auxiliary hash code is compiled into the main hash code to form the characteristic value; the card writing device is based on Store the characteristic data group in the target module of the chip card according to the characteristic value; establish an active authentication data group in the card writing device, wherein the active authentication data group has public key data; The device combines the public key data with the characteristic value to generate a second auxiliary hash code for use as a passive authentication data group; and stores the active authentication data group and the passive authentication data group in the target module of the chip card.

In the aforementioned method of use, the characteristic data is unchangeable public data.

The aforementioned method of use further includes a card verification operation, which includes: reading the target data group of the chip card by the electronic device; making the electronic device create a Nonce value based on the target data group; and transmitting the Nonce value To the chip card to combine the private key data with the Nonce value, and then perform calculations to return the calculated result data to the electronic device; make the electronic device obtain the public key data from the target module for further Verify the validity of the result data; make the electronic device verify the passive authentication data group to confirm the trusted certificate of the chip card; and make the electronic device perform the comparison of the master hash code. For example, the passive authentication data group has signature certificate data, so that the electronic device verifies the signature certificate data to confirm the trusted certificate of the chip card. Further, the application module has a root certificate, which can be used as a signature through the signature certificate data.

It can be seen from the above that the data security system and its use method of the present invention mainly use the security write card module of the electronic device to write the target data group, which is produced in accordance with ICAO (International Civil Aviation Organization) 9303 Key mechanism and store the private key data in Write the public key data in the chip card to establish a protection mechanism by calculating the characteristic data and the characteristic value of the application module of the chip card. In the subsequent card verification operations, the card verification module can be used The PA data group and the AA data group are verified according to the ICAO 9303 standard to confirm whether the chip card is a copy or a counterfeit. Therefore, the card issuer or merchant can easily and safely confirm the chip through the data protection system of the present invention The legality of the card.

1‧‧‧Data Security System

10‧‧‧Chip Card

10’‧‧‧Target

10a‧‧‧chip

110‧‧‧Application Module

120‧‧‧Target Module

130‧‧‧AA Data Group

140‧‧‧Characteristic Data Group

150‧‧‧PA Data Group

20‧‧‧Card writing device

210‧‧‧Application card writing module

220‧‧‧Security write card module

30‧‧‧Electronic device

310‧‧‧Card Reader Module

320‧‧‧Card Verification Module

Please refer to the detailed description of the present invention and its accompanying drawings to further understand the technical content of the present invention and its objectives and effects; the relevant drawings are as follows: Figure 1 is the structure and structure of the card writing device of the data security system of the present invention The schematic diagram of the chip card configuration; Figure 2 is a schematic diagram of the structure of the target group of the present invention; Figure 3 is a schematic diagram of the card writing operation process of the use method of the data security system of the present invention; Figure 4 is the present invention The structure of the electronic device of the data security system and the configuration diagram of the chip card; and Figure 5 is a schematic diagram of the card verification operation of the method of use of the data security system of the present invention.

In order to make the objectives, technical solutions and advantages of the present invention clearer, the following further describes the present invention in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, but not used to limit the present invention.

Note, the structure, proportion, and size shown in the drawings in this manual Etc., are only used to cooperate with the contents disclosed in the manual for the understanding and reading of those who are familiar with the art. They are not used to limit the limited conditions for the implementation of this creation, so they have no technical significance. Any structural modification, The change of the proportional relationship or the adjustment of the size should still fall within the scope of the technical content disclosed in this creation without affecting the effects and goals that the creation can produce. At the same time, the terms such as "上" and "一" cited in this manual are only for ease of description and are not used to limit the scope of implementation of this creation. Changes or adjustments in their relative relationships are not Substantial changes to the technical content should also be regarded as the scope of the creation that can be implemented.

Please refer to FIG. 1, which is a schematic diagram of the structure of the card writing device 20 and the configuration of the chip card 10 of the data protection system 1 for cross-card application services of the present invention.

As shown in Figure 1, the manufacturer will manufacture the chip card 10 according to the needs of the card issuer to meet the market demand for smart chip cards and composite (multi-card-in-one) chip cards 10. In this embodiment, the chip card 10 is a composite or multiple cards in one form, but it is not limited to this.

For example, the composite chip card 10 manufactured by the manufacturer may include an application module 110 (such as an application with a library card, an application for a U-Travel card, an application for a student card, etc.), and each feature data of the application module 110 is stored In the database (the figure omitted) corresponding to the chip 10a of the chip card 10, it is stored in each database in the form of a master hash code through the hash method, wherein the master hash code can be a manufacturing The merchant uses the root certificate in the application module 110 to generate it through the hash method to strengthen the anti-counterfeiting protection mechanism. Specifically, the application module 110 can be any writable card, credit card, student card, etc. The type of the module entered into the database, and the characteristic data required by the application module 110 is unchangeable public data, such as name, card number, ID number, birthday, etc. It should be understood that each of the database can also be provided in the application module 110.

The card writing device 20 includes a plurality of application card writing modules 210 (for example, the 1st to Nth application card writing modules, and N is a positive integer greater than 1) for the manufacturer to follow the application module 110 The required feature data is correspondingly written in the application module 110 by the application card writing module 210 and stored in the database (such as the first to the Nth database).

The card writing device 20 further includes at least one security writing card module 220, which is used to protect the characteristic data of each application module 110 and can read the characteristic data of each application module 110 for the chip A feature data group 140 is built in the target module 120 of the card 10 to protect the feature data of each application module 110.

In this embodiment, as shown in Figure 2, when the target module 120 is built, it will follow the ICAO (International Civil Aviation Organization, ICAO) chip specifications (such as ICAO 9303), and will actively authenticate An Active Authentication (AA) data group 130 and a Passive Authentication (PA) data group 150 are established in the target module 120 to protect each characteristic data of the application module 110. For example, the active authentication data group 130 includes a public key data, and the private key data formed by the built-in key production function of the chip card 10 is stored in the chip 10a of the chip card 10, and the chip card 10 10 card issuers (or issuers) will write a signature certificate into the passive authentication In the data group 150, the identity of the user (or consumer) is identified.

Please refer to FIG. 3, which is a schematic diagram of the card writing operation of the card writing device 20 of the present invention.

As shown in Figure 3, first, in step S31, the manufacturer writes the characteristic data of each card type (such as a library card, a travel card, student card, or other) through the application card writing module 210 of the card writing device 20 Into the application module 110 (or database) of the chip card 10; then, in step S32, the security card writing module 220 of the card writing device 20 reads the database of the chip card 10 about the application Each feature data of the module 110 is to read the main hash code, so that the secure card writing module 220 uses the hash method (Hash) again to add a first auxiliary hash code (such as a hash code) to each main hash code. Group random numbers) to strengthen the protection mechanism, and generate feature values by calculating the first auxiliary hash codes.

After that, in steps S33 to S35, the security card writing module 220 respectively establishes a target data group in the target module 120 of the chip card 10, such as the active authentication data group (AA data group) 130, corresponding to the application module The characteristic data group 140 and the passive authentication data group (PA data group) 150 of the group 110, etc. Specifically, the security card writing module 220 stores the characteristic data of the application module 110 and the characteristic value in the target module of the chip card 10 according to the calculated characteristic value (from the first auxiliary hash code). 120 to form the characteristic data group 140, then combine the public key data of the AA data group 130 with the characteristic value and use the hash method to generate a second auxiliary hash code to form the PA data group 150, and The AA data group 130 and the PA data group 150 are stored in the target module 120 of the chip card 10. With this, the manufacturing The vendor completes the production of the chip card 10.

In subsequent applications, when the user (or consumer) uses the chip card 10, if the application terminal (such as a merchant or a fair third party) needs to verify the authenticity of the chip card 10, an electronic device 30 can be used (As shown in Fig. 4) Read each of the application modules 110 in the chip card 10 to perform inspection operations.

The electronic device 30 includes a card reading module 310 and a card verification module 320.

In this embodiment, the card reading module 310 is used to read the characteristic data of the application module 110, and the card verification module 320 is used to analyze the characteristic data of the application module 110 and the target The target data group in the module 120 (such as the characteristic data group 140, the PA data group 150 and the AA data group 130 as shown in Fig. 2) establishes a password value based on the target data group retrieved or read ( Namely, Nonce) for verification, where the Nonce value can be an 8-byte value.

Specifically, in information security, the Nonce is a number that can only be used once in encrypted communication, and in authentication protocols, it is often a random or pseudo-random number to avoid retransmission attacks; , Nonce is also used for streaming encryption to ensure security. Therefore, if you need to use the same key to encrypt more than one message, you need to use Nonce to ensure that the different message is not the same as the key stream encrypted by the key.

Furthermore, when a consumer uses the chip card 10, the electronic device 30 only reads one of the characteristic data of the application module 110 through the card reader module 310. On the other hand, if the merchant doubts the authenticity of the chip card 10, the card verification module 320 can be used for card verification.

Further, please refer to FIG. 5, which is a schematic diagram of the card verification operation of the electronic device 30 of the present invention for the target 10' (such as the chip card suspected by the merchant).

As shown in Figure 5, first, in step S51, the card verification module 320 is made to read the target data group in the target module 120, so that the Nonce value created by the card verification module 320 is transmitted to the The passive authentication data group 150 in the target module 120, so that the AA data group 130 combines the private key data in the chip 10a of the target 10' with the Nonce value, and then performs calculations through the commands in the AA data group 130 The result data after the calculation is returned to the card verification module 320, wherein the calculation process can be regarded as the same encryption behavior.

Then, in step S52, the card verification module 320 obtains the public key data of the AA data group 130 from the target module 120 to further verify whether the result data is valid. Specifically, since the private key data of each chip card 10 is protected by the hardware of the chip card 10 (such as the chip 10a), any content of the private key data cannot be obtained even through copying or software tampering. , So when the Nonce value cannot be combined with the private key data of the target 10', the public key data will not be able to verify the result data, so this situation can be expressed as the data in the target 10' is untrustworthy ( That is, the possibility of forgery is extremely high).

On the other hand, in step S53, when the Nonce value (or the result data) is verified, the card verification module 320 verifies the signature certificate in the PA data group 150 to confirm that the signature certificate is from A trusted certificate issued by an agent (or a third party). Specifically, because the manufacturer is During the card manufacturing process, the root certificate of the application module 110 will be signed with the signature certificate for the master hash code, so when the signature certificate is verified by the card verification module 320, it means the target object The certificate chain formed within 10' can be trusted.

Finally, in step S54, the card verification module 320 compares the master hash code of the application module 110. In this embodiment, if the master hash code of the application module 110 after the comparison is the same as the master hash code of the manufacturer when the chip card 10 is made, it means that the data of the target 10' does not belong to Duplicators or falsifiers means that each characteristic data group 140 is in a trusted state, and the authenticity of the characteristic value of the application module 110 can also be confirmed by comparing each of the second auxiliary hash codes, that is, confirming the The target 10' is a chip card 10 made by a manufacturer.

In summary, the data preservation system 1 of the present invention writes the target data group (AA data group 130, characteristic data group 140, PA data group 150 or others, etc.) into the data group by the security card writing module 220 The target module 120 of the chip card 10 enhances the ability of encryption and anti-counterfeiting, and enables anyone to perform inspection operations with the electronic device 30. Therefore, compared with the conventional technology, the data security system 1 of the present invention can not only be popularized It can ensure that the data in the chip card 10 is complete and correct to verify the non-repudiation of the data in the chip card 10, thereby improving the verification reliability of the multi-card-in-one chip card 10.

The above-mentioned embodiments are used to exemplify the principles and effects of the present invention, but not to limit the present invention. Anyone familiar with this technique can modify the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the rights of the present invention should be listed in the scope of patent application described later.

1‧‧‧Data Security System

10‧‧‧Chip Card

10a‧‧‧chip

110‧‧‧Application Module

120‧‧‧Target Module

20‧‧‧Card writing device

210‧‧‧Application card writing module

220‧‧‧Security write card module

Claims (13)

A data security system is used to provide a security mechanism for a chip card, and the chip card includes an application module and a target module. The data security system includes: an application card writing module, which is used in the card writing operation. The characteristic data required by the chip card is written into the application module; and the secure card writing module writes the target data group used to protect the characteristic data into the target module during the writing operation, wherein: The target data group includes a characteristic data group and a key mechanism, the characteristic data group is used to store the characteristic data, and the key mechanism is used to preserve the characteristic data group. For example, the data security system described in item 1 of the scope of patent application further includes a card reader module, which is used to read the characteristic data of the chip card's application module during card verification. For example, the data security system described in item 1 of the scope of patent application further includes a card verification module, which is used to verify the characteristic data of the application module and the characteristic data group of the target module of the chip card during the card verification operation. For example, in the data protection system described in item 3 of the scope of patent application, the card verification module is verified by the Nonce value. For example, in the data preservation system described in item 1 of the scope of patent application, the characteristic data is unchangeable public data. For example, the data preservation system described in item 1 of the scope of patent application, wherein the characteristic data group is written into the target module with a master hash code. Such as the data protection system described in item 1 of the scope of patent application, wherein the The key mechanism includes an active authentication data group and a passive authentication data group. The active authentication data group has public key data, and an auxiliary hash code is calculated based on the public key data to serve as the passive authentication data group. Such as the data protection system described in item 1 of the scope of patent application, wherein the chip card is a composite type. A method for using a data security system includes a card writing operation, which includes: providing a chip card and the data security system, wherein the data security system includes a card writing device and an electronic device, and the chip card contains applications Module and target module, the chip card is configured with private key data; the feature data required by the chip card is written into the application module by the card writing device to form a feature data group; The card device uses the hash method to calculate the characteristic data to form a main hash code, so that the first auxiliary hash code is compiled into the main hash code to form a characteristic value; the card writing device stores the characteristic data group in the characteristic value according to the characteristic value. In the target module of the chip card; an active authentication data group is established in the card writing device, wherein the active authentication data group has public key data; the public key data is combined with the characteristic value by the card writing device Generating a second auxiliary hash code for use as a passive authentication data group; and storing the active authentication data group and the passive authentication data group in the target module of the chip card. Such as the use method described in item 9 of the scope of patent application, wherein The collected information is unalterable public information. For example, the use method described in item 9 of the scope of patent application includes card verification operations, which include: reading the target data group of the chip card by the electronic device; making the electronic device create a nonce based on the target data group Value; transfer the Nonce value to the chip card, so that the private key data is combined with the Nonce value, and then perform calculations to return the calculated result data to the electronic device; make the electronic device from the target module Obtain the public key data to further verify the validity of the result data; make the electronic device verify the passive authentication data group to confirm the trusted certificate of the chip card; and make the electronic device perform the comparison of the master hash code. For example, the use method described in item 11 of the scope of patent application, wherein the passive authentication data group has signature certificate data, so that the electronic device verifies the signature certificate data and confirms the trusted certificate of the chip card. Such as the use method described in item 12 of the scope of patent application, wherein the application module has a root certificate, and the signature certificate data is used as a signature.

Images