TWI526938B - Multi-core parallel processing of non - contact chip card reader - Google Patents

Description

Multi-core parallel processing non-contact wafer card reader

The invention relates to a non-contact type wafer card reader/writer, and more particularly to a non-contact type wafer card reader/writer which has a quick response one-to-many communication architecture for a security controller.

1 shows a system architecture of a conventional contactless chip card reader 10. The card reader 10 has 1 to 4 sets of security access modules (SAMs) 11 and the security access module 11 is The secure access module card provided by the different ticket operating system is inserted into a slot 111, so the access mode, command and password may be different, so the card reader 10 accesses the secure access module 11 for access operation. Only one-to-many can be used. At the same time, the authentication code and transaction authentication code of the card 16 can only be obtained for one of the security access modules 11 , and the operation time is about 0.2 to 0.3 seconds.

Further, the card reader 10 enters the sensing range when the non-contact wafer card 16 enters (possibly multiple non-contact wafer cards enter the sensing range at the same time, but the system selects one for operation), and applies an antenna unit. 13 reading the card type identification data of the non-contact type chip card 16, and determining the card type by a card type identification unit 14 to obtain the card number, and transmitting the card number through the main control unit 15 through a secure access module interface controller 12 The card authentication code (Key; security key) is calculated in cooperation with one of the secure access modules 11, and then the non-contact wafer card 16 confirms whether the authentication code calculated by the main control unit 15 is correct, such as according to the first group of secure access. When the module 11a calculates that the authentication code is correct, the correspondence between the contactless chip card 16 and the first group of security access modules 11a and the transaction access rights to the contactless chip card 16 can be confirmed; however, if it is incorrect, Then, the non-contact type wafer card 16 and the secure access module 11 are sequentially confirmed by the second group, the third group, and the fourth group of security access modules (11b, 11c, 11d) in the simplex mode S. If the authentication code calculated by the group 4 security access module 11d and the contactless chip card 16 confirm the correspondence, the card transaction is performed by four sets of secure access. The operation time of the module plus the transaction time is about 1.2~1.6 seconds. Such processing time has exceeded the time allowed by the transportation system inspection card. After the public security module of different ticket operating organizations is added, the processing time is even more unbearable. Therefore, such a card reader incorporating multiple sets of secure access modules will be limited in applications where fast authentication is required to obtain card content.

For the above problems of the contactless chip card reader, after the inventor of the present invention developed, the certificate number I408608 "Multi-group secure access module synchronous verification non-contact type chip card reading and writing module" was proposed to solve the problem. The read/write module includes a plurality of secure access module interface controllers, and each of the secure access module interface controllers is disposed corresponding to each of the secure access modules, and the main control unit is provided to obtain a non-contact wafer. After the Kaka number, the multiplexer checks the individual authentication codes synchronously, and then uses the authentication codes one by one to mutually authenticate with the non-contact chip card to obtain a set of authentication codes that can access the non-contact wafer card. The batch operation verification individual authentication code and the non-contact wafer card batch operation authentication code structure can greatly reduce the overall operation time, and the security access module of each ticket operation system does not increase the calculation authentication code. The time, not to delay the entire ticketing schedule, fully meet the application of fast certification to obtain the card content. However, the main control unit is used to process the ticket card reading program (ie, the ticket card reader software) and the authentication code (security key) of all the ticket operating systems, which causes the inconvenience of the reading and writing module in software modification. And there may be some unsafe questions about the management of authentication reads. Specifically, the access mode, command and password of the security access module card of each ticket operating system are different. If one of the ticket operating systems is to be modified or added to the secure key exchange system, or each new one is added When the ticket operation system is used, it is necessary to modify the software and ticket processing operations of the main control unit, which takes a long time, and it is also difficult to quickly track and overcome when the ticket processing is wrong.

The present inventors have in view of this, and have carefully developed and designed the present invention. Accordingly, the main object of the present invention is to provide a multi-core parallel processing non-contact wafer card reader/writer, wherein each set of security access module interface controllers of the reader/writer includes a separate processor for processing corresponding Secure access module ticket reader program (ie ticket card reader software) and authentication code (security key), to achieve faster certification of multiple different ticket operating organizations, and can The security of high authentication reads and the convenience of key mechanism modification.

The multi-core parallel processing non-contact wafer card reader/writer of the present invention is used for mutual authentication of a non-contact wafer card to obtain a card content and a ticket operating system thereof, the non-contact wafer card reader/writer comprising a plurality of secure accesses And a plurality of security access module interface controllers, an antenna unit, a card type identification unit and a main controller respectively connected to the plurality of security access modules. Each of the secure access module interface controllers corresponds to one of the plurality of secure access modules, and each of the secure access module interface controllers includes a separate processor for processing the corresponding secure access module. Ticket card reader program (ie: ticket card reader software) and authentication code (security key). The antenna unit can receive and transmit wireless signals with the contactless chip card to read the card type of the contactless chip card. The card type identification unit is electrically connected to the antenna unit, and confirms that the card type of the non-contact type wafer card read by the antenna unit is obtained. The main controller is electrically connected to the card type identification unit and the plurality of security access module interface controllers, so that the card number data obtained by the card type identification unit can be transmitted to each by the main controller in a multiplex mode. Secure access module interface controller, and process the ticket reader program of the corresponding secure access module by using the processor of each secure access module interface controller (ie: ticket card reader software) And calculating an authentication code (security key), and then testing the non-contact wafer card in sequence with the authentication codes, finding a set of authentication codes that can access the non-contact wafer card, and reading the non-contact wafer card The content and the ticket operating system belong to the communication interface of one of the main controllers.

The multi-core parallel processing non-contact wafer card reader/writer constructed according to the present invention achieves the effect that the main controller of the reader/writer has a quick response to the complex security access module interface controller. The communication architecture, therefore, when the reader/writer of the present invention reads the card number of a non-contact wafer card, the individual authentication codes can be checked multiplexly and synchronously, and the authentication codes are used one by one to communicate with the non-contact wafer card. Mutual verification, a set of authentication codes that can access the contactless chip card can be quickly obtained in a very short time of about 0.5 to 0.6 seconds to complete the card transaction; further, each group of security access module interface control Each of the devices includes a separate processor for processing the ticket reading program (ie, the ticket reader software) and the authentication code (security key) of the corresponding secure access module (ie, each type of ticket). Achieve faster certification of multiple different ticket operating organizations, and improve the security of authentication reads and the convenience of key mechanism modifications. In addition, Each additional security system of the operating system does not increase the time for calculating the authentication code, and it does not drag the entire ticketing time course, which can meet the application of fast authentication to obtain the card content.

Other objects, advantages and features of the present invention will become apparent from

10‧‧‧ card reader

11‧‧‧Safe Access Module

11a‧‧‧Group 1 Secure Access Module

11b‧‧‧Group 2 Secure Access Module

11c‧‧‧Group 3 Secure Access Module

11d‧‧‧Group 4 Secure Access Module

111‧‧‧Slot

12‧‧‧ Secure Access Module Interface Controller

13‧‧‧Antenna unit

14‧‧‧ card type identification unit

15‧‧‧Main control unit

16‧‧‧ cards

S‧‧‧ Simplex mode

[This creation part]

20‧‧‧Reader

21‧‧‧Safe Access Module

21a‧‧‧Group 1 Secure Access Module

21b‧‧‧Group 2 Secure Access Module

21c‧‧‧Group 3 Secure Access Module

21d‧‧‧Group 4 Secure Access Module

21e‧‧‧Group 5 Secure Access Module

21f‧‧‧Group 6 Secure Access Module

21g‧‧‧Group 7 Secure Access Module

21h‧‧‧Group 8 Secure Access Module

211‧‧‧ slots

22‧‧‧ Secure Access Module Interface Controller

22a‧‧‧Group 1 Secure Access Module Interface Controller

22b‧‧‧Group 2 Secure Access Module Interface Controller

22c‧‧‧Group 3 Secure Access Module Interface Controller

22d‧‧‧Group 4 Secure Access Module Interface Controller

22e‧‧‧Group 5 Secure Access Module Interface Controller

22f‧‧‧Group 6 Secure Access Module Interface Controller

22g‧‧‧Group 7 Secure Access Module Interface Controller

22h‧‧‧Group 8 Secure Access Module Interface Controller

23‧‧‧Antenna unit

24‧‧‧ card type identification unit

25‧‧‧Main controller

251‧‧‧Communication interface

26‧‧‧ Processor

30‧‧‧Contactless chip card

31‧‧‧ wafer

32‧‧‧Coil Antenna

D‧‧‧Content and the operating system to which it belongs

M‧‧‧Multiplex mode

FIG. 1 is a schematic diagram showing the system architecture of a prior art contactless chip card reader.

2 is a schematic diagram showing the system architecture of the contactless chip card reader/writer of the present invention.

2 shows the system architecture of the multi-core parallel processing non-contact wafer card reader/writer 20 of the present invention. The non-contact wafer card reader/writer 20 is used for mutual authentication with the non-contact wafer card 30 to obtain the non-contact wafer. The content of the card 30 and its associated ticket system D, the non-contact wafer card 30 is packaged with a wafer 31 and a coil 32. In this embodiment, the non-contact type wafer card reader/writer 20 includes a plurality of security access modules 21 (in this embodiment, eight sets of security access modules 21a, 21b, 21c, 21d, 21e, 21f, 21g, 21h) For example, a plurality of secure access module interface controllers 22 (in this embodiment, eight secure access module interface controllers 22a, 22b, 22c, 22d, 22e, 22f, 22g, 22h are taken as an example), an antenna The unit 23, a card type identification unit 24 and a main controller (Arbiter MCU) 25.

Each security access module 21 can electrically connect a secure access module card (either directly soldered or using a secure access module card slot 211 for inserting a secure access module card of a different ticket system) ), or directly burn a secure access module application.

Each of the security access module interface controllers (Issuer SAM Conterller) 22 is electrically connected to a security access module 21 of the plurality of security access modules 21 to obtain information about the corresponding security access module 21 . Moreover, each of the secure access module interface controllers 22 includes a separate processor 26 for processing the ticket card reader program of the corresponding secure access module 21 (ie, ticket card reader software) and authentication. Code (security key).

The antenna unit 23 can receive and transmit wireless signals to read the card type of the contactless chip card 30. The card type identification unit 24 is electrically connected to the antenna unit 23, It can be confirmed whether the card type of the non-contact type wafer card 30 read by the antenna unit 23 conforms to the card type that can be processed by the reader/writer 20, and the card number is obtained after confirmation. In the present embodiment, the card type identification unit 24 controls the wafer using a wireless frequency card reader.

The main controller 25 is electrically connected to the card type identification unit 24 and each of the security access module interface controllers 22, so that the card number data obtained by the card type identification unit 24 can be multiplexed through the main controller 25. The mode M is transmitted to each of the secure access module interface controllers 22 for processing, and the processor 26 of the plurality of secure access module interface controllers 22 can use the card number plus the security of the corresponding secure access module 21. The certification related data is used to calculate an authentication code (security key). For example, the processor 26 of the first group of security access module interface controllers 22a calculates a first authentication code according to the card number and the first group of security access modules 21a; and the second group of security access module interface controllers at the same time. The processor 26 of 22b calculates a second authentication code based on the card number and the second group of security access modules 21b; and the processor 26 of the third group of security access module interface controllers 22c simultaneously performs the card number and the third group. The security access module 21c calculates a third authentication code; at the same time, the processor 26 of the fourth group of security access module interface controllers 22d calculates a fourth authentication code based on the card number and the fourth group of security access modules 21d. And so on, and to the last group, the processor 26 of the time group 8 security access module interface controller 22h calculates an eighth authentication code based on the card number and the eighth group security access module 21h. Then, the plurality of authentication codes generated by the operation of the complex processor 26 are transmitted to the card type identification unit 24 through the main controller 25 for testing, that is, the complex authentication code is modulated to conform to the card. The data type packet that can be received by the type is transmitted to the coil antenna 32 of the non-contact type wafer card 30 through the antenna unit 23, and the correctness of the wafer 31 of the non-contact type wafer card 30 is confirmed and reported to the Reader/writer 20. If one of the authentication codes can be accepted, it indicates that the non-contact wafer card 30 is a legal card, and the card type identification unit 24 reads the information of the non-contact wafer card 30, and the contactless chip card can be known. The ticket operating system of the 30, and the content of the contactless chip card 30 and the data of the ticket operating system D can be transmitted to the connected application system via the communication interface 251 of the main controller 25 (in the figure) Not shown) to perform further applications.

In this embodiment, the contactless chip card 30 can be a card type or an IC-TOKEN type. In addition, the communication interface between the main controller 25 and the plurality of secure access module interface controllers 22 is a sequence peripheral interface.

Through the description of the above embodiments, the present invention is characterized in that the main controller 25 has a fast response one-to-many communication architecture for the complex secure access module interface controller 22, and thus, when the present invention reads and writes After the machine 20 reads the card number of the non-contact type wafer card 30, the individual authentication codes can be checked multiplexly and synchronously, and then the authentication codes are used to verify the mutual authentication with the non-contact type wafer card 30, which is about 0.5. A set of authentication codes that can access the contactless chip card are quickly obtained in a very short time of ~0.6 seconds to complete the card transaction.

Moreover, each group of security access module interface controllers 22 includes a separate processor for processing the ticket card reading procedures of the corresponding secure access modules 21 (ie, each type of ticket) (ie, ticket cards). The card reader software and the authentication code (security key) are used to improve the security of the authentication read and the convenience of the modification of the key mechanism. Specifically, when one of the ticket operating systems is to be modified or added to the secure key exchange system, there is no need to modify the software of the main controller 25, and there is no need to change the security control module interface control of other ticket operating systems. The device 22 only needs to modify the ticket card reading program (ie, the ticket card reader software) of the processor 26 of the secure access module interface controller 22 to be changed, and thus, for the unmodified ticket The operating system provider does not need to re-execute the security certification (safety verification of the code), and the modification time is reduced; in addition, when the ticket processing error occurs, it can be quickly tracked and overcome.

In the foregoing specification, the invention has been described in terms of a particular embodiment, and various changes or modifications may be made in accordance with the features of the invention. Therefore, obvious substitutions and modifications may be made by those skilled in the art, and will still be incorporated in the scope of the claimed invention.

20‧‧‧Reader

21‧‧‧Safe Access Module

21a‧‧‧Group 1 Secure Access Module

21b‧‧‧Group 2 Secure Access Module

21c‧‧‧Group 3 Secure Access Module

21d‧‧‧Group 4 Secure Access Module

21e‧‧‧Group 5 Secure Access Module

21f‧‧‧Group 6 Secure Access Module

21g‧‧‧Group 7 Secure Access Module

21h‧‧‧Group 8 Secure Access Module

211‧‧‧ slots

22‧‧‧ Secure Access Module Interface Controller

22a‧‧‧Group 1 Secure Access Module Interface Controller

22b‧‧‧Group 2 Secure Access Module Interface Controller

22c‧‧‧Group 3 Secure Access Module Interface Controller

22d‧‧‧Group 4 Secure Access Module Interface Controller

22e‧‧‧Group 5 Secure Access Module Interface Controller

22f‧‧‧Group 6 Secure Access Module Interface Controller

22g‧‧‧Group 7 Secure Access Module Interface Controller

22h‧‧‧Group 8 Secure Access Module Interface Controller

23‧‧‧Antenna unit

24‧‧‧ card type identification unit

25‧‧‧Main controller

251‧‧‧Communication interface

26‧‧‧ Processor

30‧‧‧Contactless chip card

31‧‧‧ wafer

32‧‧‧Coil Antenna

D‧‧‧Content and the operating system to which it belongs

M‧‧‧Multiplex mode

Claims (2)

A multi-core parallel processing non-contact wafer card reader/writer, which is used for mutual authentication of a contactless chip card to obtain a card content and a ticket operating system thereof, the non-contact wafer card reader/writer comprising: a plurality of secure memory The module is corresponding to a plurality of different ticket operating systems; the plurality of secure access module interface controllers, each of the secure access module interface controllers correspond to one of the plurality of secure access modules, each The secure access module interface controller includes a separate processor for processing a ticket card reading program and an authentication code of the security access module of the corresponding ticket operating system; an antenna unit capable of The non-contact type chip card performs wireless signal reception and transmission to read the card type of the non-contact type wafer card; a card type identification unit electrically connected to the antenna unit and confirms that the non-contact reading of the antenna unit is met The card number is obtained after the card type of the contact type chip card; and a main controller, and the card type identification unit and the plurality of security access module interface controllers are individually charged Connecting, so that the card number data obtained by the card type identification unit can be transmitted to the security access module interface controllers through the main controller in a multiplex mode; wherein the processor systems of the security access module interface controllers are Processing the ticket card reading program of the security access module of the corresponding ticket operating system and calculating the authentication code, and then testing the non-contact chip card in sequence with the authentication codes to find that the non-contact wafer card can be accessed. An authentication code, and reading the non-contact wafer card content and the belonging ticket operating system, and outputting to a communication interface connected to the main controller. According to the patent application scope, the core parallel processing non-contact wafer card reader/writer, wherein each security access module adopts a corresponding secure access module card slot type and is inserted into different ticket operation systems. The security access module card is composed of.