TWI464688B - Dynamic adjustment of the operation of the function of the card reader and its adjustment method - Google Patents

Description

Card reader for dynamically adjusting operation function and adjustment method thereof

The present invention relates to a card reader, and more particularly to a card reader that cooperates with a security access module to dynamically adjust an operational function and an adjustment method thereof.

IC Cards, also known as Smart Cards, have been widely used in human daily life, such as credit cards, financial cards, MRT cards, stored value cards, or some identification of personal data. Cards, etc., by using different types of wafer cards, people's food, clothing, housing, and travel are becoming more and more convenient.

However, depending on the environmental conditions of use, the manufacturer needs to configure different card readers to read the wafer data of different kinds of wafer cards, that is, usually the card reader can only read certain chip cards. Therefore, in the case that the operation function of the reader is not updated or increased, if the environmental conditions are changed, the operator needs to replace the hardware of different types of card reader devices, thereby causing waste of cost when the device is replaced.

The invention provides a card reader which can improve the operation function without replacing the hardware of the device.

According to the above object, the present invention provides a card reader that dynamically adjusts an operation function. The card reader includes a component configuration module, a security access module, a computing module, and a card reading interface. The secure access module stores at least one additional functional data, and the secure access module is configured to be removed from or removed from the component configuration module. The computing module is electrically coupled to the component configuration module. When the security access module is configured in the component configuration module, the computing module is linked to the secure access module, and performs additional functional data when the link is successful. The card reader interface is electrically coupled to the computing module, and the card reading interface is configured to read the wafer data of a wafer card.

According to the above object, the present invention also provides a dynamic adjustment operation function of a card reader. The applicable card reader includes a component configuration module and an operation module electrically coupled to each other. The method includes: configuring a secure access module in the component configuration module; using the computing module to link the secure access module through the component configuration module; and determining whether to execute the secure access module according to the link result One of the additional features.

The effects obtained by using the present invention are:

1. Without replacing the card reader hardware device, the operator can pre-store the program instructions that can identify or read the chip card chip data in the additional function data, so when the computing module link security access module is successful, The new operation function of the card reader can be added (for example, the card reader can read different types of wafer cards), thereby avoiding the waste of the card reader hardware device replacement.

2. In different operating environment conditions, the user only needs to configure the corresponding function security access module to the card reader, and the card reader can drive the functional components or programs included in the security access module to respond to different work. demand.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The preferred embodiments of the present invention will be described in detail below with reference to the drawings.

Please refer to FIG. 1. FIG. 1 is a schematic diagram of a card reader according to an embodiment of the present invention. In this embodiment, the card reader (Card Reader) 1 includes a component configuration module 11, a security access module 12, a computing module 13, and a card reading interface 14.

The security access module 12 stores at least one additional function data 120. The security access module 12 is configured to be removed from the component configuration module 11 or removed from the component configuration module 11. The computing module 13 is electrically coupled to the component configuration module 11. When the security access module 12 is disposed in the component configuration module 11, the computing module 13 is linked to the secure access module 12, and when the link is successful, The computing module 13 executes additional functional data 120. The card reader interface 14 is electrically coupled to the computing module 13, and the card reading interface 14 is, for example, an RFID wireless sensing interface, a slot interface or a brush slot interface for reading the wafer data 20 of the user's chip card 2, The chip card 2 is, for example, a user's credit card, a financial card, a MRT card, a stored value card, or some identification card with personal data.

The component configuration module 11 and the security access module 12 are components of a corresponding structure. For example, when the security access module 12 is a chip card (eg, an RFID data card or a SAM data card), component configuration The module 11 is a chip socket or a chip configuration slot; or the security access module 12 is an external function interface card (Extend Function Card), and the component configuration module 11 is an interface card socket (slot), but not To this end, as long as the structure corresponds to each other.

The computing module 13 is electrically coupled to the component configuration module 11 and configured to determine whether the secure access module 12 is disposed in the component configuration module 11. When the computing module 12 determines that the secure access module 12 is configured in the component configuration module 11, the component security module 12 is linked through the component configuration module 11 to perform secure access when the link is successful. Additional functional data 120 of module 12. One of the features is that the program instructions for identifying or reading the wafer card 2 chip data 20 can be stored in the additional function data 120 in advance, so that when the computing module 12 links the secure access module 12, the reading is successful. The card device 1 can run a new functional service without replacing the hardware device to read another type of wafer data contained in the different types of wafer cards of the user, that is, the card reader 1 can read Different types of wafer cards.

Conversely, if the link fails, the computing module 13 runs the original functional service.

Please refer to FIG. 2. FIG. 2 is a schematic diagram of a card reader according to another embodiment of the present invention. In this embodiment, the card reader 1 further includes a storage module 15 for storing more than one function data 150. When the card reader 1 is started, this function data 150 is read and executed.

However, when the security access module 12 is disposed in the component configuration module 11 of the card reader 1, the computing module 13 links the secure access module 12, and has different execution modes according to the link result, as illustrated below. :

(1) When the computing module 13 fails to link the secure access module 12, the computing module 13 does not read the additional function data 120. Moreover, the computing module 13 performs the original function of the card reader 1. Information 150.

(2) When the computing module 13 links the secure access module 12 successfully, and the function data 150 and the additional function data 120 are different data types, the computing module 13 performs the function data 150 and the additional function data according to requirements. 120.

(3) When the operation module 13 links the secure access module 12 successfully, and the function data 150 and the additional function data 120 are the same data type, the operation module 13 analyzes the data version of the function data 150 and the additional function data 120. Choose from one to read and execute. For example, when the data version of the function data 150 is new to the data version of the additional function data 120, the operation module 13 reads and executes the function data 150. On the other hand, when the data version of the additional function data 120 is newer than the data version of the function data 150, the operation module 13 reads and executes the additional function data 120.

(4) When the secure access module 12 is not disposed in the component configuration module 11, the function module 150 is read and executed by the computing module 13.

When the computing module 13 links the secure access module 12, the secure access module 12 is authenticated. There are several types of authentication modes (but not limited to them, and related authentication modes are also available), as explained below:

(1) Please refer to FIG. 3A. FIG. 3A is a schematic diagram of an authentication mode of a security module by a computing module according to an embodiment of the present invention.

The secure access module 12 includes additional functional data 120 and identification data 121, and the identification data 121 records the device code (or wafer code) of the secure access module 12. The storage module 15 of the card reader 1 stores a device identification table 151. The storage module 15 records a plurality of device codes (ie, device codes of the security access module 12 that can be disposed in the card reader 1). During the operation of the computing module 13 and authentication of the secure access module 12, the computing module 13 analyzes and matches the identification data 121 by using the device identification table 151. When the matching is successful, the computing module 13 determines that the link is successful. The additional function data 120 is read and executed. Otherwise, the link is determined to have failed. In addition, the device identification table 151 further records one function usage permission data corresponding to each identification data 121, and the card reader 1 can activate the corresponding function service according to the category to which the person belongs and the work unit.

Example (Function Service Planning): The A unit includes the A1 area, the A2 area, and the A3 area. Each area is configured with a card reader R1, a card reader R2, and a card reader R3. However, the network equipment in the A1 area requires the function data F1 and the function data F2. The network equipment in the A2 area needs the function data F2 and the function data F3, and the network equipment in the A3 area needs the function data F3. At this time, the secure access module 12 having the function data F1 and the function data F2 is disposed in the card reader R1, and the secure access module 12 having the function data F2 and the function data F3 is disposed in the card reader R2. The secure access module 12 having the function data F3 is disposed in the card reader R3. At this time, the card reader R1 can run the function data F1 and the function data F2, but does not have the ability to run the function data F3; the card reader R2 can run the function data F2 and the function data F3, but does not have the running function data F1 The ability of the card reader R3 to run the function data F3, but does not have the ability to run the function data F1 and the function data F2. In this way, the functions and usage rights that can be used by the card reader 1 in each area can be restricted.

For example, the A unit includes the A1 area, the A2 area, and the A3 area. Each of the areas is provided with an access sensor, and each access sensor is connected to a card reader 1. When the staff of the A unit opens the A1 area and the A2 area for the B unit personnel to enter and exit freely, only one security access module 12 needs to be configured in the card reader 1. The security access module 12 includes the B unit authentication mechanism data and Additional function data 120, when the B unit personnel go to the A1 area or the A2 area, the access control sensor of the A1 area or the A2 area will sense the authentication card of the B unit personnel (for example, the wafer card 2), and cooperate with the card reader 1 to Upon completion of the authentication of the wafer material 20, the card reader 1 will activate the additional function data 120 to provide the associated functional services. Conversely, when the B unit personnel go to the A3 area, the sensor in the A3 area will sense the certification card of the B unit personnel, but the B unit personnel do not have the authority to enter the A3 area, so the card reader 1 will determine not to allow the authentication. The B unit personnel enters the A3 area and does not activate the associated additional function data 120.

Moreover, the card reader 1 is one of the servo devices 3 at the rear end of the link, which provides the aforementioned device identification table 151 to the card reader 1.

(2) Please refer to FIG. 3B. FIG. 3B is a schematic diagram of an authentication mode of a security module by a computing module according to another embodiment of the present invention. In this embodiment, the security access module 12 includes an identification code generation module 122, and the operation module 13 includes an identification logic data 152. When the computing module 13 authenticates the secure access module 12, the identification code generating module 122 is executed to obtain an identification data, and the identification data is analyzed by the identification logic data 152 to determine whether to execute the additional function data 120.

Example (Key Authentication Mechanism): The card reader 1 includes a certificate key data, which drives the secure access module 12 while providing authentication key data to the identification code generation module 122. The ID generation module 122 generates a response code corresponding to the key, and the operation module 13 analyzes the response code by using the identification logic 152 to determine whether the linked security access module 12 can be used by the card reader 1. When the computing module 13 determines that the linked secure access module 12 is correct and can be used, the additional functional data 120 included in the secure access module 12 is enabled; otherwise, the computing module 13 determines the linked The secure access module 12 is incorrect and cannot be used by the card reader 1, i.e., the additional functional data 120 included in the secure access module 12 is not enabled.

Moreover, the card reader 1 is a servo device 3 at the back end of the link, which provides the aforementioned identification logic 152 (or further including authentication key data) to the card reader 1.

After the computing module 13 analyzes the identification data, an analysis result is transmitted to the servo device 3, and the servo device 3 analyzes the analysis result to transmit the function usage authority data corresponding to the identification data to the computing module 13, so that the computing module 13 It is determined whether or not to execute the additional function data 120 based on the function usage authority data.

Moreover, the function usage permission data record has a startup function permission, and the operation module 13 executes the permission function data according to the function to execute the partial function unit of the additional function data 120, which corresponds to the permission of the identification data, that is, the card reader 1 can use the additional The authority of the function data 120.

(3) Referring to FIG. 3C, FIG. 3C is a schematic diagram of an authentication mode of a security module by a computing module according to another embodiment of the present invention. The embodiment is different from the authentication mode shown in FIG. 3A and FIG. 3B. The difference is that the security access module 12 further includes a device identification module 123, and the card reader 1 further includes a device profile 153. When the secure access module 12 is powered by the card reader 1, the device identification module 123 is executed. The device identification module 123 identifies the device data 153, determines whether the installed card reader 1 conforms to the specifications of the executable security access module 12, and determines whether to open the additional function data 120 for the operation module 13 to read according to the determination result. Take and execute. This prevents the secure access module 120 from being stolen and placed in any of the card readers 1 to prevent the additional function data 120 of the secure access module 12 from being used arbitrarily, and at the same time achieve the purpose of authority control.

In addition, the card reader 1 can be configured with a plurality of component configuration modules 11 for simultaneously arranging a plurality of security access modules 12, and the card reader 1 can simultaneously run a plurality of additional function data 120 to provide various additional function services. For example, the card reader 1 can run a new functional service without reading the hardware device to read the wafer data 20 of the different types of wafer cards 2 of the above-mentioned users. The configuration mode of the single component configuration module 11 is similar to that of the configuration mode.

Please refer to FIG. 4A. FIG. 4A is a schematic diagram of a dynamic adjustment operation function of a card reader according to an embodiment of the present invention. Please refer to FIG. 1 to FIG. 3C at the same time for understanding, and the method is as follows:

A secure access module 12 is disposed in the component configuration module 11 (step S110). As described above, the component configuration module 11 and the security access module 12 are components of a corresponding structure. For example, when the security access module 12 is a chip card (eg, an RFID data card, a SAM data card), the component The configuration module 11 is a chip socket or a chip configuration slot; or the security access module 12 is an external function interface card (Extend Function Card), and the component configuration module 11 is an interface card socket (slot), but Not limited to this, as long as the structure corresponds to each other.

The computing module 13 is used to link the secure access module 12 through the component configuration module 11 (step S120). The computing module 13 is electrically coupled to the component configuration module 11 and is configured to determine whether the secure access module 12 is disposed in the component configuration module 11. When the computing module 13 determines that the secure access module 12 is configured When the module 11 is configured, the module 11 is configured to securely access the module 12 through the component configuration module 11.

Based on the link result, it is determined whether or not to execute an additional function profile 120 of the secure access module 12 (step S130). There are different execution modes depending on the link result, as explained below:

(1) when the computing module 13 successfully links the secure access module 12, the additional function data 120 of the secure access module 12 is executed; otherwise, when the computing module 13 fails to link the secure access module 12, The computing module 13 does not read the additional function data 120. Moreover, the computing module 13 executes the original function data 150 of the card reader 1.

(2) When the computing module 13 links the secure access module 12 successfully, and the function data 150 and the additional function data 120 are different data types, the computing module 13 performs the function data 150 and the additional function data according to requirements. 120.

(3) When the operation module 13 links the secure access module 12 successfully, and the function data 150 and the additional function data 120 are the same data type, the operation module 13 analyzes the data version of the function data 150 and the additional function data 120. , choose to read and execute from it.

Please refer to FIG. 4B as a schematic diagram of data version comparison of the card reader according to an embodiment of the present invention. The computing module 13 compares the data versions of the function data 150 and the additional function data 120 to determine whether the data version of the additional function data 120 is newer (step S150).

When the data version of the function data 150 is new to the data version of the additional function data 120, the arithmetic module 13 reads and executes the function data 150 (step S151).

On the other hand, when the data version of the additional function data 120 is newer than the data version of the function data 150, the arithmetic module 13 reads and executes the additional function data 120 (step S152).

(4) When the secure access module 12 is not disposed in the component configuration module 11, the function module 150 is read and executed by the computing module 13.

Please refer to FIG. 4C, FIG. 4D, FIG. 4E and FIG. 4F for a schematic diagram of the authentication of the card reader embodiment of the present invention. During the operation of the security module 12 by the computing module 13, the security access module 12 is authenticated as follows:

The secure access module 12 is authenticated by the arithmetic module 13 (step S161). There are several types of authentication modes (but not limited to them, and related authentication modes are also available), as explained below:

The first authentication method: the operation module 121 reads one of the identification data 121 of the secure access module 12 (step S171). Referring to FIG. 4D and FIG. 3A simultaneously, the secure access module 12 includes additional functional data 120 and identification data 121, and the identification data 121 records the device code (or wafer code) of the secure access module 12. The storage module 15 of the card reader 1 stores a device identification table 151 in which a plurality of device codes (ie, device codes of the secure access module 12 of the card reader 1) are recorded.

The identification module 121 is analyzed by the arithmetic module 13 based on the device identification table 151 (step S172). During the operation of the computing module 13 and authentication of the secure access module 12, the computing module 13 analyzes and matches the identification data 121 using the device identification table 151. Regardless of the analysis and matching result, the calculation result is recorded by the arithmetic module 13 as the authentication result (step S173).

The second authentication method: Referring to FIG. 4E and FIG. 3B simultaneously, the security access module 12 includes an identification code generation module 122, and the operation module 13 includes an identification logic data 152. When the computing module 13 authenticates the secure access module 12, the computing module 13 executes the identification code generating module 122 to obtain an identification data (step S181). The computing module 13 then analyzes the identification data using an identification logic 152 (step S182). Finally, the analysis result is formed by the arithmetic module 13 to form an authentication result (step S183).

Example (Key Authentication Mechanism): The card reader 1 includes a certificate key data, which drives the secure access module 12 while providing authentication key data to the identification code generation module 122. The ID generation module 122 generates a response code corresponding to the key, and the operation module 13 analyzes the response code by using the identification logic 152 to determine whether the linked security access module 12 can be used by the card reader 1.

However, as shown in FIG. 4F, when the card reader 1 links the servo device 3 at the rear end, step S173 further includes: transmitting the analysis result to the servo device 3 by the operation module 13 (step S191). The analysis result transmitted by the card reader 1 is analyzed by the servo device 3 to transmit the function usage authority data corresponding to the identification data to the operation module 13 (step S192). Finally, the function usage permission data is formed by the operation module 13 to form an authentication result (step S193).

Regardless of the authentication mode, the arithmetic module 13 records the authentication result to form a link result (step S162).

In addition, when the reader 1 links the servo device 3 at the back end, and the computing module 13 decides to execute the additional function data 120, the computing module 13 performs the additional function data 120 according to the function usage authority data transmitted by the servo device 3. Local functional unit.

It can be seen that the features of the card reader and the adjustment method thereof for dynamically adjusting the operation function of the present invention are as follows:

1. Without replacing the card reader hardware device, the operator can pre-store the program instructions that can identify or read the chip card chip data in the additional function data, so when the computing module link security access module is successful, The new operation function of the card reader can be added (for example, the card reader can read different types of wafer cards), thereby avoiding the waste of the card reader hardware device replacement.

2. In different operating environment conditions, the user only needs to configure the corresponding function security access module to the card reader, and the card reader can drive the functional components or programs included in the security access module to respond to different work. demand.

3. When the security access module is damaged, or the additional function data is abnormal, the user only needs to replace the new security access module without damaging the operation of the card reader.

4. The card reader disclosed in the present invention can be combined with rights management to install different security access modules in different units of the card reader, so that the card reader can only operate the program or component of the corresponding unit.

5. The identity verification mechanism for identifying the consumer financial card and the credit card can be pre-established in the secure access module, and the card reader can perform an identity confirmation mechanism to simplify the electronic transaction behavior when configuring the secure access module (network) Identity authentication for transactions, electronic payments, item rentals, etc., and can reduce the number of data transfers to accelerate electronic trading.

In the above, it is merely described that the present invention is an embodiment or an embodiment of the technical means for solving the problem, and is not intended to limit the scope of implementation of the present invention. That is, the equivalent changes and modifications made in accordance with the scope of the patent application of the present invention or the scope of the invention are covered by the scope of the invention.

1. . . Card reader

11. . . Component configuration module

12. . . Secure access module

120. . . Additional function data

121. . . Identification data

122. . . Identification code generation module

123. . . Device identification module

13. . . Computing module

14. . . Card reader interface

15. . . Storage module

150. . . Functional data

151. . . Equipment identification table

152. . . Identification logic

153. . . Device data

2. . . Wafer card

20. . . Wafer data

3. . . Servo device

1 is a schematic diagram of a card reader according to an embodiment of the present invention;

2 is a schematic diagram of a card reader according to another embodiment of the present invention;

FIG. 3A is a schematic diagram of an authentication mode of a security module by a computing module according to an embodiment of the invention; FIG.

FIG. 3B is a schematic diagram of an authentication mode of a security module by a computing module according to another embodiment of the present invention; FIG.

3C is a schematic diagram of an authentication mode of a security module by a computing module according to another embodiment of the present invention;

4A is a schematic diagram of a dynamic adjustment operation function of a card reader according to an embodiment of the present invention;

4B is a schematic diagram showing a comparison of data versions of a card reader according to an embodiment of the present invention;

4C, 4D, 4E and 4F are schematic diagrams showing the authentication of the card reader embodiment of the present invention.

1. . . Card reader

11. . . Component configuration module

12. . . Secure access module

120. . . Additional function data

13. . . Computing module

14. . . Card reader interface

2. . . Wafer card

20. . . Wafer data

Claims (26)

A card reader for dynamically adjusting an operation function, comprising: a component configuration module; a security access module storing at least one additional function data, wherein the security access module is configured to be configured in the component configuration module or The component configuration module is removed; an operation module is electrically coupled to the component configuration module, and when the security access module is configured in the component configuration module, the computing module is linked to the secure access a module, and performing the additional function data when the link is successful; and a card reading interface electrically coupled to the computing module, the card reading interface for reading a wafer data of a wafer card, wherein the reading The card device further includes a storage module, and at least one function data is stored in the storage module. The card reader of claim 1, wherein the computing module reads and executes the function data. The card reader of claim 1, wherein the computing module reads and executes the function data when the link fails. The card reader of claim 1, wherein the function data and the additional function data are the same data type, and the operation module analyzes the function data and the data version of the additional function data, and selects the data version. Take and execute. The card reader of claim 4, wherein when the data version of the function data is new to the data version of the additional function data, the operation The calculation module reads and executes the function data. The card reader of claim 4, wherein the computing module reads and executes the additional function data when the data version of the additional function data is new to the data version of the function data. The card reader of claim 1, wherein when the computing module links the secure access module, the secure access module is authenticated to determine whether to execute the additional functional data. The card reader of the seventh aspect of the invention, wherein the security access module further comprises an identification data, the card reader further comprising a storage module for storing a device identification table, the operation module authenticating When the module is securely accessed, the device identification table is used to analyze the identification data to determine whether to execute the additional function data. The card reader of claim 8, further comprising a servo device that links the card reader, the card reader obtaining the device identification table provided by the servo device. The card reader of claim 8, wherein the device identification table further records one function usage authority data corresponding to each identification data. The card reader of claim 7, wherein the security access module further comprises an identification code generating module, the computing module further comprising an identification logic data, the operation module authenticating the secure access In the module, the identification code generating module is executed to obtain an identification data, and the identification data is analyzed by the identification logic data to determine whether to execute the additional function data. For example, the card reader described in claim 11 further includes a servo The device device links the card reader, and the card reader obtains the identification logic data provided by the server device. The card reader of claim 11, wherein the computing module analyzes the identification data, and transmits an analysis result to a servo device linked to the card reader, wherein the servo device analyzes the analysis result. Transmitting the function usage authority data corresponding to the identification data to the operation module, and causing the operation module to determine whether to execute the additional function data according to the function usage authority data. The card reader of claim 13, wherein when the operation module executes the additional function data, the local function unit of the additional function data corresponding to the authority to identify the data is further executed according to the function usage authority data. The card reader of claim 1, wherein the security access module further comprises a device identification module, the card reader further comprising a device profile, the security access module being configured in the component configuration mode In the group, the device is powered to execute the device identification module, and the device identification module identifies the device data to determine whether the operation module reads the additional function data. The card reader of claim 1, wherein when the computing module successfully links the secure access module and executes the additional function data, the card reader interface is further configured to read another chip data. . A method for dynamically adjusting a function of a card reader, the card reader comprising a component configuration module and a computing module and a storage module electrically coupled to each other, at least one function data is stored in the storage module, The method includes: configuring a security access module in the component configuration module; Using the computing module to link the security access module through the component configuration module; and determining whether to execute an additional function data of the secure access module according to the link result, and using the computing module to read and Execute this function data. The method of claim 17, wherein the card reader further comprises a storage module, and at least one function data is stored in the storage module, wherein the method further comprises the following steps: when the computing module is successfully chained When the security access module is connected, the additional function data is executed; and when the computing module fails to link the security access module, the function data stored by the storage module is read. The method of claim 17, wherein the card reader further comprises a storage module, and at least one function data is stored in the storage module, wherein the method further comprises the following steps: when the computing module is successfully chained When the security access module is connected, the computing module is used to analyze the functional data of the functional data and the additional functional data, and select and execute the data. The method of claim 19, wherein the computing module reads and executes the functional data when the data version of the functional data is new to the data version of the additional functional data. The method of claim 19, wherein the computing module reads and executes the additional functional data when the data version of the additional functional data is new to the data version of the functional data. The method of claim 17, wherein the step of using the computing module to link the secure access module to the module includes: authenticating the secure access module by using the computing module; And document the certification results to form the link results. The method of claim 22, wherein the card reader further comprises a storage module for recording a device identification table, and the step of authenticating the secure access module by using the computing module comprises: utilizing the operation The module reads the identification data of the security access module; the computing module analyzes the identification data according to the device identification table; and the analysis result is recorded by the operation module as the authentication result. The method of claim 22, wherein the secure access module further comprises an identification code generating module, and the step of authenticating the secure access module by using the computing module comprises: The group executes the identification code generation module to obtain an identification data; the operation module analyzes the identification data by using an identification logic data; and the analysis result forms the verification result by the operation module. The method of claim 24, wherein the step of forming, by the computing module, the analysis result to form the authentication result comprises: transmitting, by the computing module, the analysis result to the link card reader a servo device; the analysis result is analyzed by the servo device to transmit a function usage permission data corresponding to the identification data to the operation module; and the operation module uses the permission data to form the authentication result. The method of claim 24, wherein the step of determining whether to execute the additional function data of the secure access module according to the link result comprises: when the computing module decides to execute the additional function data The local functional unit of the additional function data corresponding to the authority to identify the data is executed according to the function usage permission data.