TWI657389B - Mobile terminal and its transaction confirmation method and device - Google Patents

Abstract

The invention discloses a mobile terminal and a transaction confirmation method and device thereof, wherein the transaction confirmation method comprises: acquiring a transaction data and a request to be signed/confirmed; popping up an STK menu, and displaying the waiting in the STK menu Signing/confirming transaction data and request and receiving user input; when the user inputs confirmation to continue the transaction, the security element SE in the smart card is used for security operation; the security operation result is returned.

Description

Mobile terminal and its transaction confirmation method and device

The present invention relates to the field of electronic commerce security technologies, and in particular, to a mobile terminal and a transaction confirmation method and apparatus thereof.

As technology continues to evolve, many wireless communication technologies, such as Bluetooth communication, are integrated into SIM (Subscriber Identity Module) cards, USIM (Universal Subscriber Identity Module) cards, and UIM (User). Identification Module, User Identification Module) Card and SD card (Secure Digital Memory Card), etc., so that mobile terminals such as mobile phones can communicate with smart cards through the 7816 interface, and can also connect with Bluetooth. The smart card communication opens the high-speed data channel between the mobile terminal and the smart card, so that the smart card not only provides the telecommunication function, but also supports various new applications to download and run through the Bluetooth channel. On the other hand, smart terminals such as smart phones, tablets, and notebook computers can use the secure element (SE) in the smart card to perform security operations such as data encryption/decryption, signature/checking, etc. through the application program (APP). Improve APP application security.

Currently widely used in Internet applications such as online banking implemented on PC terminals, the functions of transaction display, digital signature and user confirmation are usually completed through a separate smart key (USBKey). The function of "second generation KEY". With the development of mobile Internet applications, more and more mobile applications are implemented on smart phones. In mobile Internet applications such as mobile banking or mobile payment, separate "second generation KEY" is used with mobile phones. Or a device with similar functions can also implement the same transaction display, digital signature and user confirmation functions as PC terminal applications. However, due to the characteristics of the mobile phone, it is inconvenient to use a separate smart password key on the mobile terminal, and the separate smart password key is easy to forget to carry and easy to lose.

At present, e-commerce is developing rapidly and is becoming more and more intelligent and mobile. It is an inevitable demand to use smart terminals such as smart phones to confirm transactions. In the existing solution for confirming the transaction using the smart terminal, if the user needs to confirm the transaction situation, the transaction situation is often displayed in the APP that processes the transaction and the user is prompted to confirm in the APP interface. Although the working process of the existing solution of the smart terminal can functionally confirm the user's confirmation of the transaction, there is a security risk. If there is a malicious code such as a virus, trojan or hacker on the terminal, it may intercept the data input by the user on the APP interface and tamper with it, so that the transaction displayed on the user's surface is consistent with the input, but due to the malicious program. The user has changed the data entered by the user. The APP actually obtains the tamper-evident data, and then the APP performs the normal processing of the falsified data without knowing it, such as digital signature. In this case, the user sees The trading situation is completely different from the actual trading situation. For example, the user sees the display as "Transfer XX to Customer A", so "confirm" the transfer, but what may actually happen is that the APP specifies the malicious code. The account has made another transfer, and even the user's confirmation action itself may be tampered with, because the confirmation action is also done in the APP interface.

The present invention is intended to provide a mobile terminal and a method and apparatus for confirming the transaction thereof, which can effectively prevent the transaction confirmation information from being maliciously falsified.

The technical solution of the embodiment of the present invention is implemented in the following manner.

An embodiment of the present invention provides a transaction confirmation method for a mobile terminal, the method comprising: acquiring a transaction data and a request to be signed/confirmed; popping up a STK (SIM Tool Kit), in the STK menu. The transaction data to be signed/confirmed is displayed in the request and receives the user input; when the user inputs confirmation to continue the transaction, the security element SE in the smart card is used for security operation; and the security operation result is returned.

In the above solution, the obtaining the transaction data and the request to be signed/confirmed includes: receiving the transaction information and request to be signed/confirmed directly sent by the transaction platform server through the data short message; or obtaining the information from the smart card. Report the signed/confirmed transaction data and request.

In the above solution, the obtaining, by the smart card, the transaction information and the request to be signed/confirmed comprises: receiving a “read data” notification; obtaining, by the specified command, the transaction data and the request to be signed/confirmed from the smart card.

In the above solution, the "read data" notification may be from a transaction platform server or from a smart card.

In the above solution, the returning the security operation result includes: returning the security operation result to the client APP, and sending the client APP to the transaction platform The server; or directly return the security operation result to the trading platform server through the data message.

The embodiment of the invention further provides a transaction confirmation device for a mobile terminal, the device comprising: a data and request acquisition module, a system STK module, a security operation module and a result return module; wherein the data and the request acquisition module are For acquiring the transaction data and request to be signed/confirmed; the system STK module is configured to pop up the STK menu, display the transaction data to be signed/confirmed and request and receive user input in the STK menu; The module is used to perform a security operation using the secure element SE in the smart card when the user inputs confirmation to continue the transaction; the result is returned to the module for returning the safe operation result.

In the above solution, the data and request acquisition module includes: a short message receiving unit, configured to receive the transaction information and request to be signed/confirmed directly sent by the transaction platform server through the data short message; or read the wisdom The card unit is configured to obtain the transaction information and request to be signed/confirmed from the smart card.

In the above solution, the reading smart card unit comprises: a notification receiving subunit, configured to receive a “read data” notification; and an information obtaining subunit, configured to obtain, by using a specified command, the transaction data to be signed/confirmed from the smart card. request.

The embodiment of the invention further provides a mobile terminal, any one of the above transaction confirmation devices in the mobile terminal.

The embodiment of the invention further provides a smart card, which includes: a data and request receiving module, configured to receive a signature to be signed by the client APP / Confirmed transaction data and request; the notification sending module is configured to send a "read data" notification to the mobile terminal after receiving the transaction data and the request to be signed/confirmed generated by the client APP; the security component module It is used to assist the mobile terminal in safe operation.

The invention has the beneficial effects that the STK menu is used to display the transaction data and the request to be signed/confirmed, so that the user can perform the confirmation operation in the STK menu. Since the malicious program cannot intervene and change the display and input in the STK, the user is The transaction situation seen in the STK menu is the transaction information that the client APP transmits through the high-speed data channel of the machine card or that the transaction platform server transmits through the data message. If the user wishes to continue the transaction, then In the STK menu, the transaction is “confirmed”, otherwise the transaction is “cancelled”. After the user confirms in the STK menu, the security function provided by the SE in the smart card can be used to sign the transaction, and then the mobile terminal passes. The high-speed data channel of the machine card returns the signature and the confirmation result to the client APP, and the client APP sends the signature and the confirmation result to the transaction platform server through the data channel; or the mobile terminal directly signs the signature together with the confirmation result through the data short message. Return to the trading platform server; thus, effectively preventing the transaction confirmation The news was maliciously tampered with, improving the security of the transaction.

101-104‧‧‧Steps

201‧‧‧Information and Request Acquisition Module

202‧‧‧System STK Module

203‧‧‧Safe operation module

204‧‧‧Results return module

FIG. 1 is a schematic flowchart of an implementation process of a transaction confirmation method for a mobile terminal according to an embodiment of the present invention.

FIG. 2 is a schematic structural diagram of a structure of a transaction confirmation apparatus for a mobile terminal according to an embodiment of the present invention.

In order to more clearly illustrate the embodiments and technical solutions of the present invention, the technical solutions of the present invention will be described in more detail below with reference to the drawings and embodiments. It is obvious that the described embodiments are a part of the embodiments of the present invention, and not all Example. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without departing from the spirit of the invention are within the scope of the invention.

In the embodiment of the present invention, a client APP of a transaction platform, for example, a palm banking client APP, is installed in the mobile terminal. The user uses the client APP to make a transaction request to the transaction platform server. For example, the user uses the mobile banking APP installed in the mobile phone to transfer the account, and the user inputs the information of the transfer amount, the account, and the like in the APP and makes a transfer. The request; and the Pocket Bank APP generates transaction data and requests to be signed/confirmed based on the information entered by the user.

1 is a schematic flowchart of implementing a transaction confirmation method for a mobile terminal according to an embodiment of the present invention. As shown in FIG. 1, the method includes:

In step 101, the transaction data and the request to be signed/confirmed are obtained.

Specifically, the mobile terminal system acquires the transaction data and the request to be signed/confirmed generated by the client APP of the transaction platform.

Further, the obtaining the transaction data and the request to be signed/confirmed includes: the mobile terminal receiving the transaction information and the request to be signed/confirmed directly sent by the transaction platform server through the data short message; or the mobile terminal from the smart card Obtain the transaction information and request to be signed/confirmed.

Specifically, the client APP generates transaction data to be signed/confirmed and After the request, the transaction data and the request to be signed/confirmed may be sent to the transaction platform server through the communication network, or may be sent to the smart card through the high-speed data channel of the machine card. Here, the high-speed data channel of the machine card may be Bluetooth connection, WiFi connection or ZigBee connection between the mobile terminal and the smart card, as long as the mobile terminal and the smart card support the corresponding network protocol, the corresponding protocol connection can be established, for example, the mobile phone and the SIM card both supporting the Bluetooth protocol The high speed data channel of the machine card can be realized through a Bluetooth connection.

Further, the obtaining, by the mobile terminal, the transaction information and the request to be signed/confirmed from the smart card comprises: receiving a “read data” notification; obtaining, by the specified command, the transaction data and the request to be signed/confirmed from the smart card.

Here, the specified command is related to the type of the mobile terminal and the smart card, the operating system type and version of the mobile terminal, for example, for the smart phone and the SIM card, the designated command may be a "Fetch command".

The above "read data" notification can come from the trading platform server or from the smart card.

Specifically, as described above, after the client APP generates the transaction data and the request to be signed/confirmed, and sends the transaction data and the request to be signed/confirmed to the transaction platform server through the communication network, the transaction platform server After receiving the transaction data and request to be signed/confirmed, the transaction platform server sends a “read data” notification to the mobile terminal, for example, the transaction platform server sends a “read data” notification through the data short message; After the end APP generates the transaction data and the request to be signed/confirmed, when the transaction data and the request to be signed/confirmed are sent to the smart card through the high speed data channel of the machine card, the smart card receives the transaction data to be signed/confirmed and After the request, In the subsequent 7816 normal command response, the smart card notifies the mobile terminal to obtain the transaction information and request to be signed/confirmed in the smart card in a manner of setting a specific response status word; for example, after the SIM card executes the command of the mobile phone 7816 The execution result will be returned in the response command. The response command will be followed by a two-byte command status word group; setting 0x9000 means normal end return, but 0x 91mm (m represents a hexadecimal number) indicating SIM card There is still information on the mobile phone to read, the mobile phone will use the Fetch command to read 0x mm data and perform the SIM card request operation (such as popping up the STK menu), and then return the execution result to the SIM card with the terminal response command. The SIM card decides whether to continue or exit the STK according to whether the mobile phone is successfully executed. If you want to exit the STK, the SIM card returns 0x 9000 in the status word, otherwise it will return 91mm.

In step 102, the STK menu is popped up, and the transaction data to be signed/confirmed is displayed in the STK menu and the user input is received.

Specifically, after obtaining the transaction data and the request to be signed/confirmed, the mobile terminal pops up an STK menu, and displays the transaction data and request to be signed/confirmed in the STK menu; the user is in the STK menu. The transaction is confirmed; the mobile terminal receives the information input by the user.

In step 103, when the user inputs confirmation to continue the transaction, the secure element SE in the smart card is used for security operation.

When the mobile terminal determines, according to the information input by the user, that the user wishes to continue the transaction, the mobile terminal performs a secure operation using the secure element SE in the smart card, including: transaction signature, data encryption and decryption, etc.; security element SE After completing the safe operation, use the machine card high speed data communication The road will return the results of the safe operation.

In step 104, the safe operation result is returned.

Specifically, the mobile terminal can return the security operation result to the client APP, and the client APP sends the result to the transaction platform server.

Or the mobile terminal directly returns the security operation result to the trading platform server through the data short message.

After receiving the result of the security operation, the trading platform server decides whether to continue the subsequent transaction process.

Here, the result of the security operation may be a signature/confirmation result.

2 is a schematic structural diagram of a transaction confirmation device of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 2, the transaction confirmation device includes: a data and request acquisition module 201, a system STK module 202, and a security operation module. 203 and the result is returned to module 204.

The data and request obtaining module 201 is configured to obtain the transaction data and the request to be signed/confirmed.

The system STK module 202 is configured to pop up an STK menu, display the transaction information and request to be signed/confirmed in the STK menu, and receive user input.

The security operation module 203 is configured to perform a security operation using the secure element SE in the smart card when the user inputs confirmation to continue the transaction.

The result is returned to module 204 for returning the results of the secure operation.

Further, in the transaction confirmation device, the data and request acquisition module 201 includes: a short message receiving unit, configured to receive the transaction information and request to be signed/confirmed directly issued by the transaction platform server through the data short message. Or reading the smart card unit for obtaining the transaction information and request to be signed/confirmed from the smart card.

Further, in the transaction confirmation device, the reading smart card unit includes: a notification receiving subunit, configured to receive a “read data” notification; and an information obtaining subunit configured to obtain a signature to be signed from the smart card by using a specified command. Confirmed transaction data and requests.

Further, in the transaction confirmation device, the result returning module 204 includes: a returning APP unit, configured to return the security operation result to the client APP, sent by the client APP to the transaction platform server; or return to the server unit, Return the safe operation result to the trading platform server directly through the data message.

In practical applications, the above information and request acquisition module 201, the system STK module 202, the security operation module 203, and the result return module 204 and their respective units may be configured by a central processing unit (CPU) located in the mobile terminal. , microprocessor (MPU), digital signal processor (DSP), or field programmable gate array (FPGA) implementation.

The present invention also provides a mobile terminal, any one of the above transaction confirmation devices. Here, the mobile terminal can be a smart phone, a tablet or a notebook computer that supports Bluetooth.

The invention also provides a smart card, the smart card includes: a data and request receiving module, configured to receive a transaction data and a request to be signed/confirmed generated by the client APP; and a notification sending module, configured to receive the After the transaction data and the request to be signed/confirmed generated by the client APP are sent, the “read data” notification is sent to the mobile terminal; the security component module is used to assist the line. The mobile terminal performs safe operations.

Here, the smart card can be a standard SIM card, a USIM card, a UIM card, a MicroSIM card, a NaroSIM card, and the like, and various types and sizes of communication cards, in addition to the main control module, the smart card also needs to include a Bluetooth module for use and action. The Bluetooth module of the terminal establishes a Bluetooth connection to realize a high-speed data channel of the machine card.

Each module of the communication system of this embodiment corresponds to the steps described in the foregoing embodiment of the communication method, and thus has the same beneficial effects. In addition, it should be understood that the implementation of the communication system described above is merely illustrative, and the division of the described modules is only a logical function division, and may be further divided in actual implementation. In addition, the coupling or communication connection between the modules may be through some interfaces, or may be electrical or other forms.

Each of the above functional modules may or may not be a physical frame, and may be located in one place or on multiple network units, and may be implemented in a hardware form or in a hardware form. The form of the software function box is implemented. Some or all of the modules may be selected according to actual needs to achieve the objectives of the solution of the present invention.

Those of ordinary skill in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Thus, the invention may take the form of a hardware embodiment, a software embodiment, or an embodiment incorporating a software and a hardware. Moreover, the present invention can take the form of a computer program product embodied on one or more computer usable storage media (including but not limited to disk storage and optical storage, etc.).

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus, and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to produce a machine for generating instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable storage that can direct a computer or other programmable data processing device to operate in a particular manner, such that instructions stored in the computer readable storage produce an article of manufacture including the instruction device. The instruction means implements the functions specified in one or more blocks of the flow or in a flow or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device to perform a series of operational steps on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

It is to be noted that the above description is only an embodiment of the present invention, and thus does not limit the scope of the invention, and the equivalent structure or equivalent flow transformation using the specification and the content of the present invention, for example, the embodiments The combination of the technical features, or directly or indirectly, in other related technical fields, is equally included in the scope of the patent protection of the present invention.

Claims (4)

A transaction confirmation method for an action terminal, comprising: obtaining a transaction data and a request to be signed/confirmed; popping up an STK menu, displaying the transaction data to be signed/confirmed and requesting and receiving user input in the STK menu; When the input confirms to continue the transaction, the secure element in the smart card is used for safe operation; the safe operation result is returned; wherein the transaction data and the request to be signed/confirmed include: receiving the transaction platform server directly through the data message The transaction information and request to be signed/confirmed. The transaction confirmation method as recited in claim 1, wherein the returning the security operation result comprises: returning the security operation result to the client APP, and sending the client APP to the transaction platform server; or directly operating the data message through the data message The result is returned to the trading platform server. A transaction confirmation device for a mobile terminal is used in a transaction confirmation method for an action terminal as claimed in claim 1, the transaction confirmation device of the mobile terminal includes: a data and request acquisition module, a system STK module, and a security operation Module and result return module; The data acquisition request module is used to obtain the transaction data and the request to be signed/confirmed; the STK module of the system is used to pop up the STK menu, and the transaction data and the request to be signed/confirmed are displayed in the STK menu. Receiving user input; the security operation module is configured to perform a security operation using the security element SE in the smart card when the user inputs confirmation to continue the transaction; and the result return module is configured to return a security operation result; wherein The data and request acquisition module includes: a short message receiving unit, configured to receive the transaction information and the request to be signed/confirmed directly sent by the transaction platform server through the data short message. A mobile terminal including the transaction confirming device as recited in claim 3.