WO2008034347A1

WO2008034347A1 - Method for implementing circle store in the air and device thereof

Info

Publication number: WO2008034347A1
Application number: PCT/CN2007/002683
Authority: WO
Inventors: Bo Zhou; Hongwei Zang
Original assignee: Beijing Watch Data System Co, Ltd.
Priority date: 2006-08-08
Filing date: 2007-09-11
Publication date: 2008-03-27
Also published as: CN1904923B; CN1904923A

Abstract

A method for implementing the circling store in the air and the device thereof are provided. The device is a dual interface telecom smart card with the payment function and is installed in a mobile phone. The holder of the mobile telephone initiates the circle store operation, inputs the transaction amount and sends the circle store initialization command to the operation system of the card by STK, and after the operation system of the card returning the corresponding data, the STK sends the short message of the circle store request to the server; after receiving the short message of the circle store request, the server deducts the circle store funds from the corresponding account after the validation and sends the short message of performing the circle store command; the dual interface telecom smart card sends the circle store command to the operation system of the card after it receiving the command of performing the circle store, after the validation, the electronic purse adds the money and returns the corresponding data to the STK, and the STK sends the circle store result short message to the server.

Description

Method and device for realizing aerial storage

The present invention relates to a method for performing aerial storage using a mobile communication device such as a mobile phone, and also relates to a key device for implementing the aerial storage method, and an identification card supporting the storage service, which belongs to the field of financial electronic technology.

Background technique

The introduction of computers and communication technologies has revolutionized the financial sector. On the basis of the electronic bank, the bank has provided various financial information services that can add value to its customers. Electronic money is a typical representative of such financial information services.

Digital Money refers to the ability to repeatedly store or prepay, the holder pays the traditional currency to the bank, and the issuer converts the information of the equivalent cash value into a digital signal stored in electrical, magnetic or optical form. On the holder's storage medium, it is the general term for various electronic payment payment methods. The trading process of electronic money is to first deposit a sum of money in a bank account as electronic money, and transfer it from a bank account to an electronic money account. In the future, the transaction does not have to go through the bank, and the transaction can be directly made with electronic money.

Currently, storage media as an electronic money carrier are mainly various smart cards, such as public transportation IC cards, campus cards, and dedicated PB0C electronic passbooks/electronic wallets cards. It is convenient, time-saving and safe to use the smart card to swipe for trading activities such as consumption. However, with the increasing number of industries and fields in which cards are used, there are more and more smart cards in the hands of people, which increases the inconvenience for people to carry around. In addition, for a contactless smart card, when a card is swiped, multiple cards enter the same RF field, causing conflicts between the cards, increasing the risk and inconvenience of using the card.

Mobile phones have gradually become mobile information terminals that everyone carries with them. The SIM card inside the mobile phone is used as a smart card and can be used directly for user identification. Therefore, future electronic money can be integrated with mobile communication devices such as mobile phones or personal digital assistants (PDAs) to solve the future cash flow problem of mobile e-commerce. In this way, users can go out shopping and carry out various transactions with a mobile phone or PDA, which will be more secure and convenient. However, for various reasons such as security and technology, mobile communication devices such as mobile phones have not been able to realize the basic electronic money function of directly performing air-to-air storage.

Summary of the invention

It is an object of the present invention to provide a method for performing aerial inventory using a mobile communication device such as a mobile phone. The method can safely and accurately implement the operation of the air storage, and lays the role as an electronic money tool for mobile communication devices such as mobile phones. Foundation.

Another object of the present invention is to provide an identification card that can support a deposit service. The mobile phone identification card is a key device to ensure the security of the air storage method.

In order to achieve the above object of the invention, the present invention adopts the following technical solutions:

An identification card for realizing air circulation, characterized in that:

The identity card has an identity recognition module for telecommunication services and a payment system environment module for electronic money services;

The payment system environment module includes a payment system environment directory module and at least one application definition module, wherein the application definition module configures a basic file related to the application, and the information of the application definition module is stored in the payment system environment directory module. in.

Preferably, the identity identification card has a contact interface and a non-contact interface, and the identity recognition module for the telecommunication service performs telecommunication service communication through the contact interface, and the payment system environment module performs the electronic money service through the non-contact interface. Class communication.

Preferably, the application definition module includes at least one application definition module for the electronic wallet/electronic passbook service.

Preferably, the identity recognition module for the telecommunication service is provided with a user identification application development tool function.

Any of the SIM card, UIM card, ΡΠ 卡 card or USIM card.

Preferably, the identity recognition module communicates with the payment system environment module through a user identification application development tool.

A method for implementing an aerial inventory, implemented by using the above identification card, the identification card being installed in a mobile communication terminal, comprising an identity recognition module for a telecommunication service and a payment system environment module for a financial service ; is characterized by:

(1) The holder of the mobile communication terminal initiates a storage operation, inputs the transaction amount, and sends a initialization instruction to the card operating system through the user identification application development tool, and after the card operating system returns the corresponding data, the user identifies the application development tool to The server sends a queue request message;

(2) After receiving the buffer request message, the server deducts the circle deposit item from the corresponding account, and sends a execution order command message to the identity card;

(3) After the identification card receives the execution of the storage command, the user identification application development tool sends a storage instruction to the card operating system, and after the card operating system is verified, the money is added to the electronic wallet, and the corresponding data is returned to the user identification. An application development tool, wherein the user identification application development tool sends a buffer result message to the server; (4) After receiving the buffer result message, the server verifies and saves the verification information.

Preferably, in the step (1), the manual request resends the request message to ensure that the server can receive the message. Preferably, in the step (1), the user identification application development tool adds the last information stored in the data to the server to confirm the last transaction result when sending the storage request short message.

Preferably, the last circled information includes any one of the last inventory result, the last online transaction serial number, the last transaction date and time, the last transaction old balance, and the last transaction authentication information.

Preferably, in the step (2), if the server does not receive the confirmation of the mobile communication terminal within a predetermined time, the execution of the execution order command short message is automatically re-transmitted.

Preferably, in the step (2), if the server receives the re-packet, the server detects whether the transaction status of the transaction indicated in the re-package is completed, and if not, re-sends the storage command message, otherwise Ignore this heavy package.

Preferably, in the step, if the server receives an error message, the user takes a backoff measure and replenishes the deducted amount.

Preferably, when the card operating system executes the instruction sent by the user identification application development tool, the write operation to the non-volatile memory is either all the write operation succeeds, or all the original values are maintained.

Preferably, when the identification card performs the air storage operation, during the period after the execution of the step (1) is completed and before the start of the step (3), the contactless transaction may be performed, and the non-contact is performed. At the time of the transaction, the air circulation process is aborted.

Preferably, the MAC verification code is calculated according to the uplink/downstream short message content and the corresponding key, and the MAC verification code is added after the short message content and sent together.

The air storage method implemented by the mobile communication device such as a mobile phone provided by the invention can perform the operation of the circle through the functions of the user identification application development tool (STK) of the mobile phone, and does not need to be like the traditional electronic passbook/e-wallet card. Special financial equipment such as storage machines need to be used at specific locations, which greatly facilitates people's use.

DRAWINGS

The invention will now be further described with reference to the drawings and specific embodiments.

FIG. 1 is a schematic diagram showing the basic structure of a dual interface telecommunication smart card with a payment function used in the present invention. FIG. 2 is a schematic structural diagram of another implementation form of the dual interface telecommunication smart card shown in FIG. 1.

Figure 3 is a basic flow chart of the air circulation transaction process.

Figure 4 is a schematic diagram of the communication protection mechanism used in the above-mentioned air storage transaction process.

detailed description For financial business, ensuring transaction security is always a priority. Therefore, the mobile communication device as an electronic money tool needs to be modified from two aspects. One is to strengthen its security to meet the high requirements for the financial security of the mobile communication device to directly use the mobile communication device; Features, simplify the related operations, so that users can realize the air storage business through limited operations.

In order to meet the above requirements, in the mobile phone used for the aerial storage service, the SIM card used is a dual interface telecommunication smart card with a payment function. The dual interface telecommunication smart card with payment function is a key device for implementing the air storage service of the present invention. It has two user interfaces, a contact interface and a non-contact interface, and the two interfaces are connected by electrical signals through antennas or contacts. The contact interface may be installed with a SIM card used by an existing ordinary mobile phone to implement a mobile communication service including a User Identification Application Development Tool (STK), and the non-contact interface may be provided with a functional unit supporting the electronic money function, so that Mobile phones can realize financial transactions such as mobile wallets and mobile phone passbooks.

The basic structure of the dual interface telecommunication smart card with payment function will be specifically described below with reference to FIG. As shown in FIG. 1, in order to implement a financial application including an electronic wallet, the dual interface telecommunication smart card adds a payment system environment module to the existing SIM card for telecommunication service. The payment system environment module is the functional unit supporting the electronic money function mentioned above, and the non-contact interface automatically selects the function unit upon power-on.

In Figure 1, the payment system environment module is separate from the MF (main file) module for telecommunications services. Communication between them is possible through the User Identification Application Development Tool (STK). In the payment system environment module, there is a payment system environment directory module and several ADF (application definition) modules. The payment system environment directory module specifies which payment applications the payment system environment module can support. In the dual-interface telecommunications smart card with payment function, an ADF module is configured for each specific payment application, and various EFs (basic files) related to the payment application are configured in each ADF module. Each ADF module is configured in the payment system environment module, and its information is stored in the payment system environment directory module.

As shown in Figure 2, there is another implementation form in the payment system environment module. In this implementation, the payment system environment module is integrated with the MF (main file) module. The payment system environment directory module and the ADF (application definition) module are respectively connected to the payment system environment module.

In the dual-interface telecom smart card, there are also functional modules such as EF-ICC, DF_GSM, DF_Telecom, and EFKEY that support telecommunication services. Together with the MF (Main File) module, these functional modules form the identity recognition module for telecom services. As a standard communication function module of the SIM card, this module has long been a conventional technology well known to those skilled in the communication field, and will not be described in detail herein.

In the present invention, it is configured in accordance with the requirements of the PB0C electronic wallet/electronic passbook standard issued by the People's Bank of China. The corresponding ADF module meets the special provisions of the specification for implementing an e-wallet/electronic passbook on a smart card. The dual interface telecommunication smart card with payment function can realize electronic money service by means of contactless transaction or data short message.

In the contactless transaction mode, the non-contact terminal first accesses the card through the non-contact interface on the card, and after the card is powered on, it is automatically transferred to the payment system environment module DDF. Of course, the terminal can also select the payment system environment by sending a Select command. Module. The terminal can determine the application supported by the card by reading the payment system environment directory module, and then select the ADF of the different application by using the Select command.

If the contactless terminal is to perform an e-wallet/electronic passbook application, the application can be selected by selecting the e-wallet/electronic passbook ADF module. After selecting the application, the e-wallet/electronic passbook transaction can be carried out, and the specific transaction process is the same as the above PB0C e-wallet/electronic passbook standard.

In addition to the above-mentioned ordinary e-wallet/electronic passbook transaction in the form of contactless transaction, the dual-interface telecom smart card with payment function can also support the function of the user identification application development tool (STK) of the mobile phone and the data short message method for air transaction. the way. The following is an example of using aerial storage as an example to specify the specific steps for realizing air storage transactions by means of data short message using a dual interface telecommunication smart card with payment function.

As shown in Figure 3, the entire transaction process requires three SMS transmissions.

First, the mobile phone holder initiates a ring operation in the mobile phone, and inputs a user password. After the verification is passed, the user inputs the transaction amount, and organizes the relevant data through the user identification application development tool (STK) to initialize the card operating system. The command (Initialize for Load APDU) is used to initiate a circle process. After the card operating system returns the corresponding data, the user identification application development tool (STK) organizes the relevant data and sends a circle request to the server. This is the first message. During the waiting process, if the user feels that the waiting time is too long, the user can manually resend this message to the server.

After receiving the first short message sent by the dual interface telecommunication smart card with payment function, the server verifies MAC1 with the corresponding data, generates MAC2 and deducts the circle deposit item from the corresponding account, and sends the execution circle to the dual interface telecommunication smart card with payment function. Save, this is the second text message.

The above MAC verification code is calculated based on the uplink and downlink short message content and the related key, and the verification code is added after the data short message body to ensure the correctness and integrity of the entire data short message content. If the content of the SMS needs to be kept secret, you can also add corresponding encryption processing to each SMS.

After a certain period of time, if the server does not receive the confirmation of the mobile phone, you can send it several times (the specific number can be set as needed). There is a problem here, because the first one may be sent multiple times, so the server is likely to receive the repacking within the storage time allowed by the SMS center (such as three days). The server should store each card according to the application serial number. Store the transaction SMS record, encounter the same transaction SMS, that is, it is recognized as a heavy package. At this time, the server will check whether the transaction status of the transaction is completed. If not, the second message will be resent. Otherwise, this will be re-issued. Heavy packets are ignored.

After receiving the second short message, the dual interface telecommunication smart card organizes the corresponding data by the user identification application development tool (STK), sends a credit for load APDU to the card operating system, and the card operating system is responsible for verifying the MAC2, the online transaction serial number. Plus 1, the e-wallet adds money, updates the air transaction details, and generates transaction authentication information. The operating system returns the corresponding data and status words to the User Identification Application Development Tool (STK), which organizes the relevant data by the User Identification Application Development Tool (STK) to send the results to the terminal. This is the third SMS. Since this text message is the last text message, if the SMS message is lost, the dual interface telecom smart card will not be known. In order to solve the problem of the loss of this short message in individual cases, the User Identification Application Development Tool (STK) can add the last stored result to the data in the first SMS ringing request for each transaction, the last online transaction serial number, The date and time of the last transaction, the old balance of the last transaction, the last transaction authentication information, of course, some adjustments can be made to the above-mentioned last inventory result information, so that the server can confirm the last transaction result.

After receiving the third SMS, the server verifies and saves the transaction authentication information. If an error status word is received, the server will take the appropriate rollback action and replenish the deducted amount.

During the air-carrying operation, the dual-interface telecommunications smart card can also perform contactless transactions during the period before the handset holder initiates the inventory operation to the dual-interface telecommunications smart card execution queue command. At this point, the air circulation transaction process will be aborted and the server will be notified the next time the circle is initiated.

In the process of inventory transactions, since the short message is unreliable communication, there may be a problem of lost or blocked SMS, so in order to ensure the smooth progress of the transaction, a special communication protection mechanism is used in the present invention. As shown in Figure 4, the communication protection mechanism mainly includes:

1. When initiating a polling request, use the manual resend method to ensure that the server can receive it.

2. When the queue command is executed, the server will automatically resend it several times if it does not receive the confirmation within a certain period of time.

3. When returning the results, use the previous result to complete the last transaction.

When the card operating system executes an instruction from the User Identification Application Development Tool (STK), the power-off protection mechanism is enabled, that is, the write operation to the non-volatile memory (such as EEPR0M) in this instruction is performed. For atomic, or all write operations are successful, or all remain the same. The User Identification Application Development Tool (STK) is only responsible for the organization of data and the sending and receiving of data messages. Such a setting can solve the problem that the mobile phone may be shut down or the battery is dead during the air storage process, and the air circulation transaction will be terminated in this case.

For example, if the mobile phone loses power after sending the first short message, the server performs successfully, deducts the corresponding amount, and sends the execution. Circle the memory, after receiving the second message (the instruction sent by the server), the card operating system judges that the transaction process is not in progress, the error status word and related information (online transaction serial number, transaction date) With the time, the transaction balance) is stored in the last record in the air transaction record, returning the error status, the User Identification Application Development Tool (STK) sends the error status word and the transaction record to the server, and the server uses the error status word and transaction. If the record determines that the transaction on the dual-interface telecom smart card with payment function is unsuccessful, the previous payment deduction is cancelled.

In the above embodiment, the dual interface telecommunication smart card having the payment function is implemented based on the basic architecture of the SIM card. However, the present invention is not limited to this. The UIM card used in the CDMA system, the PIM card of the PHS, and the USIM card used in the future 3G, etc., after adding the payment system environment module of the present invention, the method provided by the present invention can be used to implement the aerial storage operation. .

The method and apparatus for realizing aerial storage according to the present invention have been described in detail above. Any obvious changes made to the invention by those skilled in the art without departing from the spirit of the invention will constitute an infringement of the patent right of the present invention and will bear corresponding legal liabilities.

Claims

Claim

1. An identification card for implementing an aerial inventory, characterized in that:

2. The identification card for implementing an air-storage card according to claim 1, wherein: the identity identification card has a contact interface and a non-contact interface, and the identity recognition module for the telecommunication service passes through the contact interface. Conducting telecommunication service communication, the payment system environment module performs electronic money service type communication through a non-contact interface.

3. The identification card for implementing an air-storage card according to claim 1, wherein: the application definition module includes at least one application definition module for an electronic wallet/electronic passbook service.

4. The identification card for implementing an air-storage card according to claim 1, wherein: the identity recognition module is a SIM card, a UIM card, a PIM card or a USIM card having a user identification application development tool function. Any of them.

5. The identification card for implementing an aerial inventory according to claim 1, wherein: the identity recognition module communicates with the payment system environment module by a user identification application bursting tool.

6. A method for implementing an aerial inventory, implemented by the identification card of claim 1, the identification card being installed in a mobile communication terminal, comprising an identity recognition module for telecommunication services and Payment system environment module for financial services; characterized by:

(1) The holder of the mobile communication terminal initiates a deposit operation, inputs the transaction amount, and sends a initialization command to the card operating system through the user identification application development tool, and the card operating system returns the corresponding data, and the application development tool is recognized by the user. Send a log request message to the server;

7. The method for realizing aerial storage according to claim 6, wherein:

In the step (1), the manual request mode is used to resend the request message to ensure that the server can receive the message.

8. The method for realizing aerial storage according to claim 6, wherein:

In the step (1), the user identification application development tool adds the last information stored in the data to the server to confirm the last transaction result when sending the storage request message.

9. The method for realizing air circulation according to claim 8, wherein: the information of the last inventory includes a last inventory result, a last online transaction serial number, a last transaction date and time, Any of the last traded old balance and last traded certification information.

10. The method for implementing an aerial inventory according to claim 6, wherein in the step (3), the server automatically resends the execution of the execution when the server does not receive the confirmation of the mobile communication terminal within a predetermined time. Command SMS.

11. The method for realizing aerial storage according to claim 6, wherein:

In the step (2), if the server receives the re-packet, the server detects whether the transaction status of the transaction indicated in the re-package is completed, and if not, re-sends the storage command message, otherwise the heavy packet is ignored. .

12. The method for realizing aerial storage according to claim 6, wherein:

In the step (4), if the server receives an error message, a back-off measure is taken to replenish the deducted amount.

13. The method for realizing aerial inventory according to claim 6, wherein:

When the card operating system executes an instruction from the user identification application development tool, the write operation to the non-volatile memory is either all the write operations succeeded, or all of the original values are maintained.

14. The method for realizing aerial storage according to claim 6, wherein:

When the identity card is in the air storage operation, during the period after the completion of the step (1) and before the start of the step (3), the contactless transaction can be performed, and during the non-contact transaction, the air circle The save process is aborted.

15. The method for realizing aerial storage according to claim 6, wherein:

The MAC verification code is calculated according to the uplink/downstream short message content and the corresponding key, and the MAC verification code is added after the short message content and sent together.