TWI572220B - Time information based authentication method, integrated circuit film, sim card or sd card - Google Patents

Description

Time information based verification method, integrated circuit patch, user identification module card Or secure digital card

The invention relates to a verification method in a mobile device, an integrated circuit chip, a user identification module card or a security digital card, and particularly relates to a time information based verification method and a time information based method. Verify the integrated circuit chip, user identification module card or secure digital card.

With the development of mobile device technology, various services are available on mobile devices. For example, a user may utilize a mobile device as a tool to implement a security service or verification purpose for a payment service or access control. In this case, the verification mechanism on the mobile device becomes more and more important. General authentication mechanisms such as dynamic password (OTP), time-based OTP, counter-based OTP, or open challenge response algorithm (OATH challenge response algorithm) , is widely used.

The invention relates to a verification method based on time information and an integrated body Circuit patch, user identification module card or secure digital card. The verification method of the present invention can generate a verification code based on a piece of information and a time information obtained from an external device.

According to an embodiment of the present invention, a method for verifying based on time information is provided. The time information based verification method includes the following steps. Time information is obtained from an external device. A data is obtained from a memory unit of a security chip. Generate a verification code based on the data and time information.

According to another embodiment of the present invention, an integrated circuit is provided. The integrated circuit includes a security chip. The security chip includes a time information acquisition unit, a memory unit, and a verification unit. The time information acquisition unit is configured to obtain time information from an external device. The memory unit is used to store data. The verification unit is configured to generate a verification code based on the data and the time information.

In order to better understand the above and other aspects of the present invention, the preferred embodiments are described below, and in conjunction with the drawings, the detailed description is as follows:

100‧‧‧Integrated circuit patch

101‧‧‧ boards

103‧‧‧Safety Wafer

105‧‧‧First mat

107‧‧‧second mat

S1‧‧‧ first surface

S2‧‧‧ second surface

200‧‧‧SIM card

300‧‧‧ mobile devices

301‧‧‧SIM card slot

303‧‧‧SD card slot

400‧‧‧Network

500‧‧‧Server

600‧‧‧SD card

1031‧‧‧Time Information Acquisition Unit

1032‧‧‧ memory unit

1033‧‧‧Verification unit

T1‧‧‧Time Information

D1‧‧‧Information

A1‧‧‧ verification code

S101, S103, S105, S1011, S1013, S1015‧‧

CT‧‧‧ current time

CZ‧‧‧ current time zone

L1‧‧‧Location Information

FIG. 1A illustrates an integrated circuit patch in accordance with an embodiment of the present invention by displaying a first surface.

FIG. 1B illustrates an integrated circuit patch in accordance with an embodiment of the present invention by displaying a second surface.

FIG. 2 illustrates an integrated circuit patch, a user identification module card, and a mobile device according to an embodiment of the present invention.

FIG. 3 is a diagram showing an integrated circuit patch and user knowledge according to an embodiment of the present invention. Diagram of the relationship between the module card, mobile device and server.

4 is a schematic diagram of a security wafer in accordance with an embodiment of the present invention.

FIG. 5 is a flow chart showing a time information based verification method according to an embodiment of the present invention.

Figure 6 is a flow chart showing the step S101 according to an embodiment of the present invention.

FIG. 7 is a schematic diagram of a time information obtaining unit and a mobile device according to an embodiment of the present invention.

FIG. 8 is a schematic diagram of a user identification module card according to an embodiment of the present invention.

Figure 9 is a schematic diagram of a secure digital card in accordance with an embodiment of the present invention.

Figure 10 illustrates a secure digital card and mobile device in accordance with an embodiment of the present invention.

11 is a diagram showing the relationship between a security chip, a secure digital card, a mobile device, and a server according to an embodiment of the present invention.

The following is a detailed description of the embodiments, which are intended to be illustrative only and not to limit the scope of the invention. In addition, the drawings in the embodiments omit unnecessary elements to clearly show the technical features of the present invention.

FIG. 1A illustrates an integrated circuit patch 100 in accordance with an embodiment of the present invention by displaying a first surface S1. The integrated circuit chip 100 includes a circuit board 101, a security chip 103, and a plurality of first pads 105. The first pad 105 is located on the first surface S1 of the circuit board 101. The security wafer 103 is disposed on the first surface S1 of the circuit board 101.

FIG. 1B illustrates an integrated circuit patch 100 in accordance with an embodiment of the present invention by displaying a second surface S2. The second surface S2 is located on the reverse side of the first surface S1. The integrated circuit chip 100 further includes a plurality of second pads 107 on the second surface S2 of the circuit board 101. Although the security chip 103 is disposed on the first surface S1 of the circuit board 101 as shown in FIG. 1, the security chip 103 may be disposed on the circuit board 101 based on the function or application of the integrated circuit patch 100. On the second surface S2.

FIG. 2 illustrates an integrated circuit patch 100, a Subscriber Identity Module (SIM) card 200, and a mobile device 300 according to an embodiment of the present invention. Referring to FIG. 1A, FIG. 1B and FIG. 2, the first pad 105 is for example connected to the mobile device 300, and the second pad 107 is for example connected to the SIM card 200. . The security chip 103 can communicate with the mobile device 300 through the first pad 105 and communicate with the SIM card 200 through the second pad 107. The SIM card 200 includes a memory unit that stores personal information of the account holder, including the user's mobile number, address book, newsletter, and other materials. The integrated circuit patch 100 can be attached to the SIM card 200 and can be placed into the SIM card slot 301 of the mobile device 300 with the SIM card 200.

Please refer to FIG. 3. FIG. 3 is a diagram showing the relationship between the integrated circuit patch 100, the SIM card 200, the mobile device 300, and the server 500 according to an embodiment of the present invention. The mobile device 300 can communicate with the server 500 via the network 400. Server 500 can be a verification server. In an embodiment, the security chip 103 can generate a verification code and can transmit a verification code to the server 500 to perform a verification process. sequence. In another embodiment, the security chip 103 can generate a verification code and can display the verification code on the screen of the mobile device 300. Next, the user can enter a verification code to a computer system (not shown) connected to the server 500 to perform the verification process.

4 is a schematic diagram of a security wafer 103 in accordance with an embodiment of the present invention. The security chip 103 includes a time information acquisition unit 1031, a memory unit 1032, and a verification unit 1033.

The time information obtaining unit 1031 is configured to acquire information from the mobile device 300. For example, the time information obtaining unit 1031 can be a processing chip, a storage medium storing a plurality of code codes, and/or a circuit having a function of acquiring information from the mobile device 300.

The memory unit 1032 is configured to store data. For example, the memory unit 1032 can be a read only memory (ROM).

The verification unit 1033 is configured to process data and generate data. For example, the verification unit 1033 can be a processing chip, a storage medium storing a plurality of code codes, and/or a circuit having a function of processing data and generating data.

The security chip 103 can generate the verification code A1 based on the data D1 received from the memory unit 1032 and the time information T1 obtained from the mobile device 300. Data D1 includes a key, personal data or other confidential information. The operation of the security wafer 103 is illustrated by the flowchart of FIG.

Please refer to FIG. 5, which illustrates a flow chart of a time information based verification method according to an embodiment of the present invention. Step S101, referring to FIG. 4 and FIG. 5, the time information obtaining unit 1031 is from an external device (for example, a mobile device). 300) Obtain time information T1. In an embodiment, the time information obtaining unit 1031 is connected to the memory of the mobile device 300. Furthermore, please refer to FIG. 6 and FIG. 7. FIG. 6 is a flow chart showing step S101 according to an embodiment of the present invention. Step S101 includes steps S1011 to S1015. FIG. 7 is a schematic diagram of a time information obtaining unit 1031 and a mobile device 300 according to an embodiment of the present invention.

In step S1011, the time information obtaining unit 1031 receives the current time CT recorded in one of the external devices (for example, the mobile device 300) and a current time zone CZ. For example, the current time CT and the current time zone CZ are recorded in the memory of the mobile device 300, and the time information obtaining unit 1031 receives the current time CT and the current time zone CZ from the memory of the mobile device 300.

In step S1013, the time information obtaining unit 1031 corrects the current time zone CZ by acquiring a position information L1. First, the time information acquisition unit 1031 acquires the position information L1. The location information L1 may be a time zone in which a base station is located, hereinafter referred to as a "base station time zone." The mobile device 300 receives a signal from the base station, and the signal may include information of the location where the base station is located. For example, if the base station is located at the location "Taiwan", the mobile device 300 receives the "Taiwan" mobile country code from the base station, that is, the location information L1 is the standard time zone "+8".

Further, the time information obtaining unit 1031 transmits a command to the mobile device 300 to request the location where the base station is located, and then the time information obtaining unit 1031 obtains the base station time zone from the lookup table by using the location information. The base station time zone corresponds to the location where the base station is located. For example, if the location is "Taiwan", you can search for the standard time zone "+8" from the lookup table. In an embodiment, the time information obtaining unit 1031 The command is not transmitted to the mobile device 300 to request the location where the base station is located, but the local time zone is received by the user interface of the mobile device 300. In this embodiment, the local time zone is entered by the user through the user interface.

Then, the time information obtaining unit 1031 corrects the current time zone CZ based on the position information L1 to obtain the correct time zone. In an embodiment, the time information obtaining unit 1031 determines whether the current time zone CZ obtained in step S1011 should be corrected according to the location information L1, and if the current time zone CZ needs to be corrected, the time information obtaining unit 1031 corrects the current time zone CZ according to the location information L1. .

For example, the time information obtaining unit 1031 compares the current time zone CZ with the base station time zone. If the current time zone CZ coincides with the base station time zone, the time information obtaining unit 1031 does not need to correct the current time zone CZ. If the current time zone CZ does not coincide with the base station time zone, the time information obtaining unit 1031 corrects the current time zone CZ. If the current time zone CZ is "+7" and the time zone "+8" obtained from the base station does not coincide, the time information obtaining unit 1031 corrects the current time zone CZ "+7" to the correct time zone "+8".

In step S1015, the time information obtaining unit 1031 generates the World Time Coordinated (UTC) as the time information T1 based on the current time CT and the correct time zone. For example, when the current time CT is “13:00” and the correct time zone is “+8”, the time information obtaining unit 1031 generates the UTC time “05 according to the current time CT “13:00” and the correct time zone “+8”. :00".

Since the current time zone CZ received by the mobile device 300 may be erroneous, the UTC time generated in step S1015 may also be wrong. In order to generate an accurate UTC time, the time information obtaining unit 1031 is based on the location information L1. Correct the current time zone CZ to get the correct time zone. In this way, accurate UTC time can be generated based on the correct time zone.

In an embodiment, in step S101, the time information obtaining unit 1031 can be connected to the user interface of the mobile device 300 to obtain the time information T1. The user interface can be a touch screen, a keyboard, a microphone, or a combination thereof. For example, the user can input the time information T1 through the touch screen, and the time information obtaining unit 1031 receives the time information T1 from the touch screen.

In an embodiment, in step S101, the time information obtaining unit 1031 can be connected to the wireless module of the mobile device 300 to obtain the time information T1. The wireless module can be a Near Field Communication (NFC) module, a Wi-Fi module, a Bluetooth module, or a Quick Response code (QR code) module. For example, the user can use the NFC module of the mobile device 300 to read the NFC tag to obtain the time information T1, or receive the time information T1 from other mobile devices. Then, the time information obtaining unit 1031 receives the time information T1 from the NFC module. .

In step S103, the verification unit 1033 receives the data D1 from the memory unit 1032, and the data D1 includes a key, personal data or other confidential information. For example, the verification unit 1033 is coupled to the memory unit 1032 and receives the material D1 from the memory unit 1032, including a key, personal data, or other confidential information.

In step S105, the verification unit 1033 generates the verification code A1 based on the data D1 and the time information T1. For example, the verification unit 1033 is connected to the time information acquisition unit 1031 and receives the time information T1 from the time information acquisition unit 1031. Connect The verification unit 1033 generates the verification code A1 based on the data D1 and the time information T1. After the verification code A1 is generated, the verification code A1 is transmitted to the server 500 to execute the verification procedure.

FIG. 8 is a schematic diagram of a SIM card 200 in accordance with an embodiment of the present invention. In an embodiment, the security chip 103 can be integrated into the SIM card 200 to enable the SIM card 200 to have a time information based verification function, and steps S101 to S105 and steps S1011 to Sl015 can be performed. For example, after the security chip 103 is integrated into the SIM card 200, the SIM card 200 includes a time information acquisition unit 1031, a memory unit 1032, and a verification unit 1033. The memory unit 1032 stores data including the key, the personal information of the account holder, including the phone number, address book, newsletter, and other confidential information. The details of the steps S101 to S105 and steps S1011 to S1015 performed by the SIM card 200 are similar to the details of the security wafer 103 performing steps S101 to S105 and steps S1011 to S1015.

FIG. 9 is a schematic diagram of a Secure Digital (SD) card 600 in accordance with an embodiment of the present invention. In an embodiment, the security chip 103 can be integrated into the SD card 600 to enable the SD card 600 to have a time information based verification function, and steps S101 to S105 and steps S1011 to S1015 can be performed. For example, after the security chip 103 is integrated into the SD card 600, the SD card 600 includes a time information acquisition unit 1031, a memory unit 1032, and a verification unit 1033. The memory unit 1032 stores data including keys, personal information or other confidential information. The details of the steps S101 to S105 and steps S1011 to S1015 performed by the SD card 600 are similar to the security wafer 103. Steps S101 to S105 and step S1011 are performed. Details to S1015.

FIG. 10 illustrates an SD card 600 and a mobile device 300 in accordance with an embodiment of the present invention. The mobile device 300 includes an SD card slot 303. The security chip 103 is integrated into the SD card 600, and the SD card 600 can be placed into the SD card slot 303 of the mobile device 300.

Please refer to FIG. 11. FIG. 11 is a diagram showing the relationship between the security chip 103, the SD card 600, the mobile device 300, and the server 500 according to an embodiment of the present invention. The security chip 103 is integrated into the SD card 600. The mobile device 300 can communicate with the server 500 via the network 400. Server 500 can be an authentication server. In an embodiment, the secure chip 103 can generate a verification code and can transmit a verification code to the server 500 to perform the verification process. In another embodiment, the security chip 103 can generate a verification code and be displayed on the screen of the mobile device 300. Then, the user can input a verification code to a computer system (not shown) connected to the server 500 to execute the verification process.

In conclusion, the present invention has been disclosed in the above preferred embodiments, and is not intended to limit the present invention. A person skilled in the art can make various changes and modifications without departing from the spirit and scope of the invention. Therefore, the scope of the invention is defined by the scope of the appended claims.

S101, S103, S105‧‧‧ step procedure

Claims (12)

A time information-based verification method includes: communicating with an external device through a plurality of first pads of an integrated circuit to obtain a time information from the external device; and transmitting a plurality of second pads through the integrated circuit a user identity module (SIM) card communication for receiving a data from a memory unit of the user identification module card, wherein the data includes a key, personal information or confidential information; and generating a message based on the data and the time information a verification code; wherein the step of obtaining the time information from the external device comprises: receiving a current time recorded in the external device and a current time zone; correcting the current time zone by obtaining a location information to obtain a correct time zone And generating a world standard time (UTC) based on the correct time zone and the current time. The verification method of claim 1, wherein the location information is a base station time zone, and the base station time zone corresponds to a location where the base station is located. The verification method of claim 1, wherein the step of obtaining the time information from the external device comprises: providing a user interface; and receiving the time information from the user interface. The verification method of claim 1, wherein the step of obtaining the time information from the external device comprises: The time information is received from a wireless module of the external device. The verification method of claim 1, wherein the external device is a mobile device. An integrated circuit having a verification function based on time information, the integrated circuit being an integrated circuit chip, the integrated circuit comprising: a circuit board having a first surface and a second surface, the second The surface is on the opposite side of the first surface; a plurality of first pads are disposed on the first surface for connecting an external device; and a plurality of second pads are disposed on the second surface for connecting a user identification module (SIM) card: a security chip, comprising: a time information obtaining unit for acquiring time information from the external device; and a verification unit for identifying a memory unit of the module card from the user Receiving a data piece and generating a verification code based on the data and the time information; wherein the security chip is disposed on the circuit board, the security chip is configured to communicate with the external device through the first pads, and through the The second pad communicates with the user identification module card, and the data includes a key, personal information or confidential information; wherein the time information obtaining unit receives the current time of the record in the external device A current time zone, by obtaining a position information to correct the current time zone, in order to obtain a correct time zone, and production according to the correct time zone and the current time Born a world standard time. The integrated circuit of claim 6, wherein the integrated circuit is a subscriber identity module card, and the data includes a key, a telephone number, a short message, and other confidential information. The integrated circuit of claim 6, wherein the integrated circuit is a secure digital (SD) card, and the data includes a key, personal information or confidential information. The integrated circuit of claim 6, wherein the external device is a mobile device. The integrated circuit of claim 6, wherein the location information is a base station time zone, and the base station time zone corresponds to a location where the base station is located. The integrated circuit of claim 6, wherein the time information acquisition unit is coupled to a user interface and receives the time information from the user interface. The integrated circuit of claim 6, wherein the time information obtaining unit is connected to one of the external device wireless modules, and receives the time information from the wireless module.