TWM504286U - Security digital memory card with embedded smart chip and card reader terminal - Google Patents

Abstract

An invention provides a security digital memory card with embedded smart chip, a card reader terminal and a controlling method thereof, wherein a high security smart chip and an antenna is set in the security digital memory card, thereby the general electric device with the security digital memory card slut and the antenna reader can be used as a credit card machine in the transaction.

Description

Secure digital memory card and line embedded with smart chip Dynamic card reader

The utility model relates to a safe digital memory card and a mobile card reading terminal, in particular to a secure digital memory card and a mobile card reading terminal embedded with a smart chip.

At present, consumers are increasingly turning to the need for convenience and versatility, which has led to changes in the habit of carrying large amounts of cash and change in the past. Today's consumers often only need to carry smart cards with non-contact sensing capabilities, and can conduct transactions such as taking public passenger transport or swiping in the store.

The card issuer is competing to launch different types of smart cards, which leads to the continuous innovation of the relevant reading devices of the smart card. However, although smart cards have made consumers more convenient and convenient, for most of the stores on the market, the time-of-sale terminals built with built-in software, cash registers and credit card sensors are still not perfect. Not only is the volume heavy, it is difficult to erect, the relocation is difficult, and it is also costly.

Since the transaction behavior must be controlled by a high degree of security mechanism, the general credit card sensor is installed directly inside the Security Access Module (SAM) or only the security module card slot. The store must additionally apply for the security module card insertion. This security module is required to read or transmit card data in order to provide security control management. Therefore, the store must purchase or customize the card-sensing machine required by the store.

The purpose of the present invention is to provide a secure digital memory card and a mobile card reader terminal with embedded smart chips, so that an electronic device generally having a secure digital memory card slot can be used as a card sensor.

Therefore, an embodiment of the present invention provides a secure digital memory card embedded with a smart chip, including a memory card interface, a memory card controller, a smart chip interface, and a smart chip. The memory card interface is used to electrically connect to an external terminal application and transmit an Application Protocol Data Unit, an identity verification data, and a transaction data according to the terminal application. The memory card controller electrically connects to the memory card interface and forwards application protocol data commands. The smart chip interface interface is electrically connected to the memory card controller. The smart chip comprises a transmission unit, a file unit, a security unit and an application unit. The transmission unit is electrically connected to the smart chip interface interface to transmit application protocol data commands, identity verification data and transaction data. The file unit contains a directory file and a plurality of application directory files. The security unit is provided with a security mechanism for verifying application protocol data commands and encrypting and decrypting transaction data and identity verification data. application The unit is configured to execute an application protocol data command on the root directory file and the application directory file and return a response message, and the application unit monitors the management transmission unit, the file unit, and the security unit.

In addition, the secure digital chip embedded smart memory card of one embodiment of the foregoing embodiment, wherein the root directory file further has a card key. And each application directory file has an application key respectively. The security mechanism further includes a Personal Identification Number (PIN), a digital signature set, and a set of encryption and decryption keys. The encryption and decryption key set further includes a Transaction Authentication Code (TAC), a Message Degist (MD), and a Mass Authentication Code (MAC). The transaction authorization code, the message digest and the information authentication code may adopt an MD5 algorithm, a SHA algorithm, a DES algorithm and an RSA algorithm. The smart chip further includes a hardware random number generator for generating a random key to encrypt the transaction data and the identity verification data. The secure digital memory card further includes a wireless transceiver module for wirelessly transmitting transaction data. The secure digital memory card also contains a memory for storing transaction data.

A further embodiment of the present invention provides a mobile card reader terminal for reading a secure digital memory card embedded with the smart chip. The mobile card reader terminal includes a transmission interface, a control module, and a day. The line reading module and a network module, the transmission interface is electrically connected to the memory card interface interface and conforms to a wired transmission protocol. The control module is electrically connected to the transmission interface, and the control module has a built-in terminal application for transaction with the secure digital memory card embedded with the smart chip, and the control module issues an application protocol data command to control the intelligence. The chip receives the response information and the control module accesses the smart chip. The antenna reading module is electrically connected to the control module, and the antenna reading module conforms to a wireless transmission protocol for wirelessly receiving transaction data and identity verification data from a transaction card. The network module is electrically connected to the control module and is connected to a transaction unit according to the transaction data and the identity verification data network.

The mobile card reader terminal according to one of the preceding embodiments, wherein the cable transmission protocol can be an ISO7816 protocol. The wireless transmission protocol can be an ISO 14443 agreement.

Therefore, it can be seen that the secure digital memory card and the mobile card reader terminal embedded with the smart chip in the foregoing embodiments and embodiments have a structure in which the smart digital chip has embedded the smart chip and cooperates with the readable security digital memory. The card's mobile card reader terminal can replace the previous built-in security module card reader. In the operation of the software, the mobile card reading terminal can read the internal data of the secure digital memory card embedded with the smart chip, and the secure digital memory card embedded with the smart chip can execute the command issued by the mobile card reading terminal. Thereby, the combination of the foregoing can achieve a safe and convenient action card swipe function.

100‧‧‧Safe Digital Memory Card

110‧‧‧ memory card interface

120‧‧‧ Memory Card Controller

130‧‧‧ memory

140‧‧‧Smart Chip Interface

150‧‧‧Smart Wafer

151‧‧‧Transportation unit

152‧‧‧ file unit

153‧‧‧Safety unit

154‧‧‧ Application Unit

200‧‧‧ mobile card reader terminal

200A‧‧‧Smart Phone

200B‧‧‧ tablet

200C‧‧‧Note Computer

210‧‧‧Transport interface

220‧‧‧Control Module

230‧‧‧Antenna reading module

240‧‧‧Network Module

310~320, 410~480‧‧‧ steps

500‧‧ trading card

600‧‧‧ trading unit

TA‧‧‧ terminal application

APDU‧‧‧Application Protocol Data Command

TD‧‧‧ transaction data

MF‧‧‧ root directory file

AF‧‧‧Application Catalog File

SM‧‧‧Security Mechanism

ATR‧‧‧Response information

ID‧‧‧identification data

The above and other objects, features, advantages and embodiments of the present invention will be more apparent and understood. The description of the drawings is as follows: FIG. 1 is a diagram showing a secure digital embedded embedded smart chip according to an embodiment of the present invention. The block diagram of the memory card.

2 is a block diagram showing an action card reading terminal according to an embodiment of the present invention.

FIG. 3 is a flow chart showing the control of a secure digital memory card embedded with a smart chip according to an embodiment of the present invention.

FIG. 4 is a flow chart showing control of a secure digital memory card embedded with a smart chip in conjunction with an action card reader terminal according to an embodiment of the present invention.

FIG. 5 is a schematic diagram showing the application of a secure digital memory card embedded with a smart chip in conjunction with an action card reader terminal according to an embodiment of the present invention.

Please refer to FIG. 1 , which is a block diagram of a secure digital memory card embedded with a smart chip according to an embodiment of the present invention. The secure digital memory card 100 includes a memory card interface 110, a memory card controller 120, a memory 130, a smart chip interface interface 140, and a smart chip 150.

The memory card interface interface 110 is configured to electrically connect to an external terminal application program TA, and transmit an application protocol data command APDU, an identity verification data ID, and a transaction data TD according to the terminal application program TA.

The memory card controller 120 is electrically connected to the memory card interface interface 110 and forwards the application protocol data command APDU, the identity verification data ID, and the transaction data TD.

The memory 130 is electrically connected to the memory card controller 120, and the memory 130 is used to store the transaction data TD. Although a memory 130 is illustrated in FIG. 1, the number is not limited herein.

The smart chip interface interface 140 is electrically connected to the memory card controller 120, thereby transmitting an application protocol data command APDU, an identity verification data ID, and transaction data TD.

The smart chip 150 is connected to the memory card controller 120 through the smart chip interface interface 140. Therefore, the smart chip interface interface 140 conforms to the transmission protocol of the general card reader, and realizes the physicality between the smart chip 150 and the memory card controller 120. Electrical and drive connections. The smart chip 150 includes a transmission unit 151, a file unit 152, a security unit 153, and an application unit 154. The transmission unit 151 is electrically connected to the smart chip interface interface 140 to transmit the application protocol data command APDU and the transaction data TD. The file unit 152 contains a directory file MF and a plurality of application directory files AF. The security unit 153 is provided with a security mechanism SM for verifying the application protocol data command APDU and encrypting and decrypting the transaction data TD and the identity verification data ID. The application unit 154 is configured to execute an application protocol data command APDU on the root directory file MF and the application directory file AF and return a response information ATR, and the application unit 154 monitors the management transmission unit 151, the file unit 152, and the security unit 153.

The aforementioned application protocol data command APDU refers to a medium that executes the smart chip 150 to communicate with an external terminal, that is, an Application Protocol Data Unit. The terminal application TA is a control program of the external terminal, and the protocol data command APDU can be applied to the secure digital memory card 100 embedded with the smart chip 150.

In addition, in other embodiments, the smart chip may further include a hardware random number generator (not shown) for generating a random key to encrypt the transaction data. The secure digital memory card can also include a wireless transceiver module (not shown). Show) for wirelessly transmitting transaction data without passing through the memory card interface. In addition, the secure digital memory card with embedded smart chip can also have no memory (None Nand Flash), and the transaction data is stored in the electronic erasable rewritable read-only memory (EEPROM) of the smart chip.

Since the smart chip 150 does not allow the external terminal to directly access the internal portion thereof, the storage area in the file unit 152 must be divided into the root directory file MF and the plurality of application directory files AF, and the security mechanism SM in the security unit 153 is used for encryption and decryption. verification. Explaining in more detail, the root directory file MF has a card key for verifying the secure digital memory card 100 for personalization and pre-personalization. Each application directory file AF has an application key respectively. The security mechanism SM can further include a person identification code, a digital signature set, and a set of encryption and decryption keys. The encryption and decryption key set may further include a transaction authorization code, a message digest and an information authentication code. The transaction authorization code, the message digest and the information authentication code may adopt an MD5 algorithm, a SHA algorithm, a DES algorithm and an RSA algorithm, and each algorithm is a common knowledge, and will not be described here. That is to say, the application protocol data command APDU sent by the external terminal needs to be authenticated by the foregoing security mechanism SM and the root directory file MF, the application directory file AF key and the password.

It should be noted here that the secure digital memory card 100 has an encryption and decryption component (not shown) in addition to the smart chip 150, which provides the memory 130 encryption and decryption function, but the security is lower than that of the smart chip 150.

Please refer to FIG. 2 again, which is a block diagram showing an action card reading terminal according to an embodiment of the present invention. The mobile card reader terminal 200 is applied to the secure digital memory card 100 that reads the aforementioned embedded smart chip 150. The mobile card reader terminal 200 includes a transmission interface 210, a control module 220, an antenna reading module 230, and a network module 240.

The transmission interface 210 is electrically connected to the memory card interface interface 110 and conforms to one of the SDIO protocols defined by the Global SD Association, and the wired transmission protocol is the ISO7816 protocol, so that the mobile card reader terminal 200 transmits through the transmission interface 210. The secure digital memory card 100 is read.

The control module 220 is electrically connected to the transmission interface 210. The control module 220 has a built-in terminal application program TA for cooperation with the secure digital memory card 100 embedded with the smart chip 150. The control module 220 issues an application protocol data command APDU to control the smart chip. 150 and receiving the response information ATR, and the control module 220 accesses the memory 130 in the secure digital memory card 100.

The antenna reading module 230 is electrically connected to the control module 220. The antenna reading module 230 conforms to one of the SDIO protocols defined by the Global SD Association for wirelessly receiving transaction data and identity verification data from a transaction card. The wireless transmission protocol is the ISO14443 agreement. A transaction card means all cards that can perform non-contact sensing, such as Pay wave, Pay pass, qPBOC, Express Way or Mifare card.

The network module 240 is electrically connected to the control module 220 and connected to an external transaction unit according to the identity verification data ID and the transaction data TD network transmitted from the transaction card, and the transaction confirmation is performed through the smart chip 150.

Thereby, the user can connect the secure digital memory card 100 by using the mobile card reader terminal 200, and use the embedded smart chip 150 to ensure the security of the transmitted data.

Please refer to the processes of FIG. 3 and FIG. 4 together with the components of FIG. 1 and FIG. 2 , wherein FIG. 3 is a control flow chart of the secure digital memory card 100 according to the embedded smart chip 150 described above. 4 is a control flow chart of the secure digital memory card 100 in accordance with the aforementioned embedded smart chip 150 in conjunction with the mobile card reading terminal 200.

As shown in FIG. 3, the control steps of the secure digital memory card 100 embedding the smart chip 150 are as follows: Step 310, the memory card controller detects whether the application protocol data command is legal. And in step 320, the memory card controller recognizes the parsing application protocol data command and forwards it to the smart chip.

As shown in FIG. 4, the control steps of the secure digital memory card 100 embedded with the smart chip 150 in conjunction with the mobile card reader terminal 200 include the following steps: Step 410, causing the mobile card reader terminal to issue a query version command to the memory card control. Device. In step 420, the memory card controller returns a version information. Step 430, after the action card reader terminal obtains the version information, sends a connection information, and the memory card controller forwards to the smart chip. Step 440, the smart chip is automatically reset and a reply reset message is returned, and is forwarded to the mobile card reader terminal by the memory card controller. Step 450, after the action card reader terminal obtains the reply reset information, issues an application protocol data command, and the memory card controller forwards to the smart chip. Step 460, the smart chip confirms the application protocol data command and returns the response information, and the memory card controller forwards to the mobile card reader terminal. In step 470, the mobile card reader terminal sends a disconnect message to the smart chip by the memory card controller. And in step 480, the smart chip performs the disconnection information, and the memory card controller confirms that the smart chip performs the disconnection information and then responds to the mobile card reading terminal.

Before explaining the control steps of the secure digital memory card 100 embedded with the smart chip 150 in conjunction with the mobile card reader terminal 200, the control steps of the secure digital memory card 100 must be described. In step 310 and step 320, when the terminal application TA of the mobile card reading terminal 200 issues an application protocol data command APDU or other command, it must first detect and parse through the memory card controller 120 in the secure digital memory card 100, if present. The command exception returns an exception status to the terminal application TA. The exception status here contains the serial number of the command does not match or the verification is incorrect.

When the command conforms to the verification and there is no abnormal state, the mobile card reader terminal 200 must first request its version information from the memory card controller 120. After the memory card controller 120 responds to the request for querying the version command, the mobile card reader terminal 200 then requests the smart chip 150 to be reset, forwarded to the smart chip 150 through the memory card controller 120, and the smart chip 150 is reset and then forwarded. The reset information is replied to the mobile card reader terminal 200. Finally, the action card reader terminal 200 issues an APDU for the application protocol data issued by the smart chip 150. The memory card controller 120 records the internal communication status, and if the communication is normal, returns the response information ATR of the smart chip 150, which will be internal. The communication status, response information ATR and its data are written into the memory 130 in a certain format, and are awaiting reading by the mobile card reading terminal 200. If the mobile card reader terminal 200 issues a disconnect message, the memory card controller 120 controls the smart chip 150 to disconnect and replies its disconnect information.

Please refer to FIG. 1 , FIG. 2 and FIG. 5 , which are schematic diagrams showing the application of the secure digital memory card 100 in accordance with the embedded smart chip 150 in conjunction with the mobile card reader terminal 200 . The aforementioned action card reader terminal 200 can For the smart phone 200A, the tablet 200B, the notebook computer 200C or any electronic device having a secure digital memory card slot, the secure digital memory card 100 embedded with the smart chip 150 can be commanded and read its internal data. Thereby, the data of the transaction card 500 is sensed by using the smart phone 200A, the tablet 200B or the notebook computer 200C loaded with the secure digital memory card 100, and the external transaction unit 600 is connected to the network, and the internal smart chip 150 is used for verification. .

It can be seen that the foregoing secure digital memory card, mobile card reader terminal and control method thereof have the following effects:

1. The use of a secure digital chip with a secure digital chip and an action card reader that can read a secure digital memory card can save the cost of a card reader that requires additional custom built-in security modules. Cost and time.

2. Simultaneously with the application on the software, the action card reader can not only read the internal data of the secure digital memory card embedded with the smart chip, but also the secure digital memory card embedded with the smart chip can execute the action card reader terminal. The commands issued are protected by high security keys and passwords throughout the transaction.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Any one skilled in the art can make various changes and retouchings without departing from the spirit and scope of the present invention. The scope is subject to the definition of the scope of the patent application attached.

100‧‧‧Safe Digital Memory Card

110‧‧‧ memory card interface

120‧‧‧ Memory Card Controller

130‧‧‧ memory

140‧‧‧Smart Chip Interface

150‧‧‧Smart Wafer

151‧‧‧Transportation unit

152‧‧‧ file unit

153‧‧‧Safety unit

154‧‧‧ Application Unit

APDU‧‧‧Application Protocol Data Command

TD‧‧‧ transaction data

MF‧‧‧ root directory file

AF‧‧‧Application Catalog File

SM‧‧‧Security Mechanism

ATR‧‧‧Response information

ID‧‧‧identification data

Claims (7)

A secure digital memory card embedded with a smart chip, comprising: a memory card interface for electrically connecting an external terminal application and transmitting an application protocol data command, an identity verification data and a transaction data according to the terminal application a memory card controller electrically connected to the memory card interface and forwarding the application protocol data command, the identity verification data and the transaction data; an intelligent chip interface interface electrically connected to the memory card controller; a smart chip, comprising: a transmission unit electrically connected to the smart chip interface interface to transmit the application protocol data command, the identity verification data and the transaction data; a file unit, the file unit includes a directory file and a plurality of application directory files; a security unit, wherein the security management unit is provided with a security mechanism for verifying the application protocol data command and encrypting and decrypting the transaction data and the identity verification data; and an application unit for Executing the application protocol data for the root directory file and the application directory files Order and return a response message, and the application unit monitoring and management of the transmission unit, the file unit and the security unit. The secure digital memory card embedded with the smart chip, as described in claim 1, wherein the root directory file further has a card key, each The application directory file further has an application key, and the security mechanism further comprises a person identification code, a digital signature set and an encryption and decryption key set, the encryption and decryption key set further comprises a transaction authorization code and a message digest. And an information authentication code, the transaction authorization code, the information digest and the information authentication code adopt an MD5 algorithm, a SHA algorithm, a DES algorithm and an RSA algorithm. The secure digital memory card embedded with the smart chip according to claim 1, wherein the smart chip further comprises a hardware random number generator for generating a random key to encrypt the transaction data and the identity verification data. The secure digital memory card embedded with the smart chip as described in claim 1 further includes a wireless transceiver module for wirelessly transmitting the transaction data. The secure digital memory card embedded with the smart chip as described in claim 1 further includes a memory for storing the transaction data. An action card reader terminal for reading a secure digital memory card embedded in a smart chip according to claim 1, wherein the action card reader terminal comprises: a transmission interface electrically connected to the The memory card interface interface conforms to a wired transmission protocol; a control module electrically connected to the transmission interface, the control module has a terminal application built in cooperation with the secure digital memory card embedded in the smart chip, and the control module issues the application protocol data command to control the The smart chip receives the response information, and the control module accesses the smart chip; an antenna reading module electrically connected to the control module, the antenna reading module conforms to a wireless transmission protocol for use from a The transaction card wirelessly receives the transaction data and the identity verification data; and a network module electrically connected to the control module and connected to a transaction unit according to the transaction data and the identity verification data. For example, in the mobile card reader terminal described in claim 6, the cable transmission protocol is an ISO7816 agreement, and the wireless transmission protocol is an ISO 14443 agreement.