WO2008154872A1

WO2008154872A1 - A mobile terminal, a method and a system for downloading bank card information or payment application information

Info

Publication number: WO2008154872A1
Application number: PCT/CN2008/071358
Authority: WO
Inventors: Shuo He; Hongwen Meng; Jia Hu
Original assignee: China Unionpay Co., Ltd.
Priority date: 2007-06-20
Filing date: 2008-06-19
Publication date: 2008-12-24

Abstract

A mobile terminal, a method and a system for downloading bank card information or payment application information, which can solute some problems about security and singleness in the existing method for launching cards, are disclosed. Said mobile terminal includes a middleware and a smart card. Said method for downloading information includes the following steps: Mobile terminal receives authentication information input by users and sends the information to a system for launching cards through the middleware. The system for launching cards encrypts corresponding payment application information or bank card information and sends the information back to the middleware in the mobile terminal, after the system authenticates the information input by users. The middleware writes the received said encrypted information into the smart card. The information about magnetic track used for payment application or other payments, is transmitted safely and stored from the main launching cards server to the smart card embedded in mobile terminal device through wireless communication network. The user holding the card can use the mobile terminal and the system conveniently. And the method is safer than traditional method for launching bank cards.

Description

The invention relates to a mobile terminal and a method for downloading a bank card information or a payment application. The application is submitted to the Chinese Patent Office on June 20, 2007, and the application number is 200710042615.0, and the invention name is "mobile terminal obtains bank card track information or The priority of the Chinese patent application for the method and system of payment application, and the priority of the Chinese patent application filed on June 20, 2007, the Chinese Patent Office, application number 200710042616.5, and the invention name "a mobile payment terminal device" The entire contents of which are incorporated herein by reference.

Technical field

The present invention relates to a method for issuing a bank card, and more particularly to a mobile terminal and a method and system for downloading bank card information or payment applications.

Background technique

The bank card includes a magnetic stripe card, a smart card, and the like, wherein the magnetic stripe card, such as a debit card or a cargo card, records information such as a bank card track for payment (referred to as bank card information) on the magnetic strip. In addition to the track information, the bank card information paid includes the card number, the cardholder name, the card expiration date, and the card check code. Smart cards are usually used to implement payment applications. Payment applications refer to a set of payment rules and data storage defined by banks according to different storage media, security and convenience, such as smart card applications such as electronic wallets, foreign payment card organizations such as VISA or MasterCard also defines a number of similar applications. In essence, the borrowing function implemented by the magnetic stripe card is also a payment application.

At present, various types of bank cards are usually produced in the bank's internal environment. The card making process is completed on a card punching machine with magnetic writing function, and the card is handed over to the cardholder after use. Referring to FIG. 1 , it is a schematic diagram of issuing a bank card through a card punching machine, and the specific process is as follows:

In the first step, the bank collects cardholder information;

The second step is to open an account in the bank account system;

The third step is to transfer the data of the cardholder information and the account information to the host of the card issuing system; the main transmission mode is the file mode, and the data is transmitted through the network, and the card issuing system stores the file in the form of a file;

In the fourth step, the card issuing machine is driven by the card issuing software on the host of the card issuing system to read all the information of each card holder one by one, and the personal information is embossed or printed on the card surface by the punching machine. Then, if it is a magnetic stripe card, the information such as the bank card track for payment is output to the magnetic strip of the bank card; if it is a smart card, the smart card interface on the punching machine and the chip communication on the smart card are used to establish a branch. Paying for an application and completing personalization, the personalization refers to the process of writing personal information to a payment application. The above method of issuing a bank card through a punch card machine has the following characteristics:

First, the card issuance process is carried out in a very closed environment;

Second, the track data is written to the bank card in clear text;

Third, all links are completed through physical contact;

Fourth, the process is simple and there is no security control mechanism;

Fifth, you can only issue cards from your own bank.

Based on the above characteristics, due to the closure of the card issuance environment, the bank card issued by one bank is single, and the bank card of other institutions cannot be issued. Moreover, the card issuance lacks sufficient security.

Summary of the invention

The technical problem to be solved by the present invention is to provide a method and system for downloading bank card information or payment application by a mobile terminal, so as to solve the problem of security and single card issuing in the existing card issuing mode.

Another object of the present invention is to provide a mobile terminal for downloading bank card information and payment applications, and implementing a payment function.

In order to solve the above technical problems, according to a specific embodiment provided by the present invention, the present invention discloses the following technical solutions:

A system for a mobile terminal to download bank card information or a payment application, including a mobile terminal device and a card issuance system, wherein:

The mobile terminal device includes a smart card and a middleware, wherein the smart card is configured to store the downloaded payment application and bank card information; the middleware is configured to collect authentication information input by the user, send to the card issuing system, and receive from the card issuing system The encrypted payment application or bank card information is forwarded to the smart card storage; the card issuing system is configured to receive the authentication information from the middleware of the mobile terminal device, and after the authentication, encrypt the corresponding payment application or bank card information and return to the Middleware for mobile terminal devices.

If the mobile terminal device downloads the bank card information, the authentication information input by the user is the identity authentication information. If the mobile terminal device downloads the payment application, the authentication information input by the user is the authority authentication information.

Preferably, the middleware of the mobile terminal device sends the identity authentication information input by the user to the smart card for encryption, and then sends the authentication information to the card issuing system; and the authority authentication information is directly sent to the card issuing system.

The card issuance system includes a card issuing machine and a card issuance data collection system, wherein the bank card letter The information is stored in the card issuing data collection system, and the card issuing front machine obtains the bank card information from the card issuing data collecting system, and sends the middleware to the mobile terminal device after being encrypted; or the bank card information is directly stored in the card issuing front end machine.

The card issuing data collection system and the card issuing front end are connected through a dedicated communication network; the mobile terminal device and the card issuing system are connected by a wireless communication network, and the wireless communication manner includes a short message, USSD or wireless internet.

A method for a mobile terminal to download bank card information or pay for an application, including:

The mobile terminal receives the authentication information input by the user, and sends the authentication information to the card issuing system through the middleware; after the card issuing system performs the authentication, the corresponding payment application or the bank card information is encrypted and returned to the middleware of the mobile terminal;

The middleware writes the encrypted result to the smart card storage.

If the payment application is downloaded, the user inputs the authority authentication information and performs the authentication of the download authority. If the bank card information is downloaded, the user inputs the identity authentication information to authenticate the user identity.

Preferably, if the card information is downloaded, the method further includes: the mobile terminal middleware sends the identity authentication information input by the user to the smart card for encryption, and then sends the information to the card issuing system.

The smart card encrypts the identity authentication information input by the user by using a key negotiated with the card issuing system, and the card issuing system directly decrypts when verifying the identity of the user.

The card issuing system encrypts the payment application or the bank card information by using a key unknown to the mobile terminal.

Preferably, the method further comprises: performing process key encryption transmission on the transmission data between the middleware and the card issuance system, the transmission data including the authentication information and the encrypted payment application or bank card information.

Preferably, if the payment application is downloaded, the payment application is decomposed into a packet transmission.

A mobile payment terminal device, comprising:

a smart card for storing downloaded payment applications and bank card information;

The middleware is configured to collect authentication information input by the user, and send the information to the card issuing system; and receive the returned payment application or bank card information from the card issuing system, and forward it to the smart card storage;

Communication interface, used to input or output bank card information stored by smart card.

Preferably, the smart card has an encryption function. If the card information is downloaded, the middleware sends the authentication information input by the user to the smart card for encryption, and then sends the information to the card issuing system. Preferably, the payment application and the card information stored by the smart card are encrypted information. The communication interface includes a remote wireless communication interface and/or a proximity contactless communication connection.

The communication interface is disposed on the smart card or provided by the mobile payment terminal device. The smart card is a SIM card; or a smart card separately embedded in the device separately from the SIM card.

The wireless communication mode between the mobile payment terminal device and the card issuance system includes a short message, USSD or wireless internet. According to the specific embodiment provided by the present invention, the present invention discloses the following technical effects: securely transmitting and storing from a card issuing host to a smart card embedded in the mobile terminal device through a wireless communication network, which is convenient for the card holder to use. Compared with the traditional card issuance method, it has the following advantages:

First, issue cards in an open environment;

Second, payment information such as payment applications and tracks are cryptographically shaped at any point on the mobile device side, providing greater security than traditional bank card issuance;

Third, the information such as the payment application and the bank card track is downloaded to the smart card of the mobile terminal device by means of wireless communication;

Fourth, a series of complex processes and security control mechanisms, such as double encryption and decryption (before data transmission and transmission);

Fifth, cards from multiple banks can be issued.

Secondly, a mobile payment terminal device is provided to implement a mobile payment function. The mobile terminal device is embedded with a middleware and a smart card, and the middleware is responsible for a communication connection between the smart card and the card issuance system, and the smart card is responsible for storing information such as a payment application and a bank card track downloaded from the card issuing system; The communication interface provided by the device or smart card outputs information such as the bank card track, and the payment can be completed. Compared with the traditional 4D line card, the mobile payment has the following advantages:

First, since the information such as the bank card track is stored in the smart card of the mobile terminal device, it is not easy to wear and can be effective for a long time;

Second, download information such as payment applications and bank card tracks by wireless communication, bank card tracks Such information is highly secure;

Third, since the downloaded bank card track and the like are encrypted, the smart card is not easily stolen after being lost;

Fourth, it is convenient to carry, and the mobile terminal device can have multiple bank cards built in;

Fifth, remote real-time transactions can be realized by the wireless communication interface provided by the mobile terminal device or the smart card.

Moreover, the communication interface for inputting and outputting information such as bank card tracks may be a remote wireless communication interface for remote downloading and payment; or a short-range contactless communication interface for non-contact on-site download and payment. . Two interfaces can be set in the mobile terminal device, and remote and close-range wireless download and payment functions are available.

DRAWINGS

1 is a schematic diagram of a bank card issued by a punch card machine in the prior art;

2 is a schematic diagram of downloading information such as a bank card track or a payment application to a mobile terminal according to an embodiment of the present invention;

3 is a flow chart showing the steps of downloading a payment application to a mobile terminal according to an embodiment of the present invention; FIG. 4 is a flow chart showing the steps of downloading information such as a bank card track to a mobile terminal according to an embodiment of the present invention;

Figure 5 is a structural diagram of a response message in the embodiment of Figure 4;

FIG. 6 is a structural diagram of an interaction message between a card-issuing front-end machine and a middleware according to an embodiment of the present invention; FIG. 7 is a flow chart of steps for completing payment by a mobile terminal according to an embodiment of the present invention.

detailed description

The present invention will be further described in detail with reference to the accompanying drawings and specific embodiments.

The embodiment of the present invention provides a more secure method for downloading information such as a payment application and a bank card track stored in a traditional bank card from a card issuing system to a smart card built in the mobile terminal, so that the smart card has a bank. Card function.

In order to clearly explain the above download method, the application environment of the method is first introduced. Referring to FIG. 2, it is a schematic diagram of downloading information such as a bank card track or a payment application to a mobile terminal. In the figure, the mobile device 1 and the card-issuing front-end machine 2 are connected through the wireless communication network 3, and the card-issuing front-end machine 2 will be moved. The data to be downloaded is transmitted to the mobile device 1 by wireless communication. The wireless communication network may be a short message, a USSD (Unstructured Supplementary Service Data, which is a new interactive data service based on a GSM network), or a wireless Internet communication method.

The mobile device 1 refers to a mobile device in which a smart card chip 11 (hereinafter referred to as a smart card 11) is embedded, such as a mobile phone with a built-in SIM card, and the SIM card is a smart card 11. The mobile device 1 stores information such as the downloaded payment application and bank card track on the smart card 11, so that the smart card 11 has the function of a bank card. The middleware 12 in the mobile device 1 is a software for interacting with the user's card front-end machine 2, providing information input, function selection, and communication channels for the card-issuing front-end machine 2 and the built-in smart card 11.

The card issuing machine 2 is configured to encrypt and transmit information such as a payment application and a bank card track to the middleware 12 of the mobile device 1. The bank card track and the like may be stored in the card issuing machine 2 or may be stored in the card issuing machine 2 Card issuer 4 or other place in the card issuance data collection system. If it is stored in the card issuing mechanism 4, the card issuing machine 2 and the card issuing mechanism 4 are connected through the dedicated communication network 5, and the card issuing machine 2 needs to acquire the download data such as the track from the card issuing unit 4.

The bank card is issued in the manner shown in Figure 2. There must be a "bank card application" in the smart card before the card is issued. "Bank Card Application" is a dedicated application for providing secure storage of track information and therefore using interfaces. The "bank card application" is the above-mentioned application for payment, which can be downloaded to the smart card by wireless communication, or can be written into the smart card in advance. Therefore, the card issuing method according to the embodiment of the present invention needs to download the application for payment to the mobile terminal first, and provide a storage space and a use interface for the payment information such as the track, and then download the information such as the bank card track for payment. .

The following describes the process of downloading the payment application and downloading information such as tracks.

Referring to FIG. 3, it is a flow chart of the steps of downloading a payment application to a mobile terminal. The download of the payment application is usually called application download. The application download means that the card front-end machine uses middleware to securely download an application to a smart card (such as a SIM card). The download process is as follows:

Step 301: The user opens a function selection interface provided by the mobile device middleware, and selects a payment application download.

In step 302, the user inputs the authorization code through the middleware input. The download authorization code is a verification code provided by the card front-end machine to the user to download the payment application, and is mainly used to verify whether the user has the right to download. Lee. If the user downloads the payment application, the registration authorization is required to obtain a unique download authorization code, which can be in the form of short message, email, or telephone notification.

Step 303: The middleware sends the download authorization code input by the user to the card issuing front end through a wireless communication network.

Step 304: After receiving the request for downloading the application, the card front-end machine confirms whether the user has the download right according to the download authorization code included in the request.

Step 305: After the right authentication, the card-issuing front-end machine sends a response message, decomposes the corresponding payment application to be downloaded by the user into a certain number of data packets, encrypts the data packet with a unique key, and then uses the wireless network to encrypt the data packet. Middleware sent to mobile devices.

The encryption may also adopt various encryption methods, such as a symmetric key or an asymmetric key. However, the encryption key of this step can only be used by the card-issuing front-end machine, and the mobile device cannot know the key.

Step 306: After receiving the download information, the middleware does not process the encrypted application information in the data packet, and directly writes the information to the smart card (such as a SIM card), and the smart card saves the information in the controlled storage area. If the response message is unsuccessful, the application download fails.

Step 307: The middleware confirms whether there is a subsequent data packet according to the indication information of the response message, and if yes, continues to receive the subsequent data packet, and the encrypted application information in the data packet is not processed, and is directly written to the smart card (eg, In the SIM card, until all packets are received.

Step 308, the middleware prompts the user to download successfully.

Referring to Figure 4, there is shown a flow chart of the steps of downloading information such as bank card tracks to a mobile terminal. Step 401: The user selects to download information such as a bank card track on the mobile device middleware.

Step 402: The user confirms by inputting the bank card information through the middleware. The bank card information includes a bank card number and a password, and is mainly used for issuing the card front-end machine to verify the identity of the user.

Step 403: After the middleware encrypts the identity authentication information input by the user to the smart card (such as a SIM card) built in the mobile device, the middleware continues to read the feature information of the mobile device, such as the smart card serial number and the static authentication data on the smart card. It is then sent to the card issuer through the wireless communication network.

The encryption process may use a symmetric key or an asymmetric key, or may be other encryption means. However, the key used for encryption is negotiated in advance with the card-issuing front-end machine through a certain mechanism, otherwise the card-fronting machine cannot be decrypted. Moreover, the keys are stored in the smart card, and the middleware can be used. But don't know the key.

Step 404: After receiving the request for downloading information such as the bank card track, the card front-end machine first verifies the static authentication data included in the request, and confirms that the bank card application built in the mobile device is legal and has not been tampered with, and the verification failure will terminate the download process; After the verification is successful, the encrypted identity authentication information is decrypted by using the negotiation key, and then the identity authentication information is sent to the corresponding organization to verify the identity of the user.

Step 405: After the identity verification, the card-issuing front-end machine sends a response message, compresses the corresponding track and the like information, and encrypts the encrypted information, and the encrypted result is sent to the middleware of the mobile device as part of the text. The structure of the response message is as shown in FIG. 5: mainly includes the message type, cardholder information, encryption result, and other ancillary information. As above, the encryption key can only be used by the card-issuing front-end machine, and the mobile device cannot know the key.

Step 406: After receiving the response information, the middleware parses the cardholder information and the encryption result according to the message header information, and does not process the payment information such as the encrypted track, and directly writes the information to the smart card (such as a SIM card), and the smart card will Information is stored in a controlled storage area. If the response message is unsuccessful, the application download fails.

Step 407, the middleware prompts the user to download successfully.

There are three main differences between the above-mentioned payment application download and the downloading process of information such as tracks:

First, different authentications are performed in two processes: In the payment application download, the card front-end machine authenticates the user download authority by downloading the authorization code; and in the track information downloading process, the card-issuing front-end machine passes the static authentication data and the card number, The password information identifies the user's identity;

Second, in the process of downloading track information, the middleware must distinguish which information is sensitive (such as passwords, track information, etc.), which information can be ignored (such as card name, card number, etc.), and send the sensitive information. The smart card is encrypted and then sent; in the payment application download, the middleware does not need to know whether the information sent or received is ciphertext or plaintext, so the information input by the user is directly sent;

Third, in the payment application download, since the amount of downloaded data of the payment application is large, it is decomposed into multiple data packet transmissions; and the download of information such as tracks can be completed in one time.

Preferably, in the embodiment of the present invention, in order to ensure data interaction security between the card-issuing front-end machine and the mobile terminal middleware, re-encryption is performed in the data transmission process to ensure the security of the transmission process. Referring to FIG. 6, the following structure is defined for the interaction message between the middleware and the card-issuing front-end machine: including the message class Type, action description, process key algorithm and seed, send sequence counter (ssc), message data, etc. The difference between the message shown in FIG. 6 and the message shown in FIG. 5 is that the message in FIG. 6 is a package for all transmission data in the transmission process, that is, the message in FIG. 5 is only a part of the message in FIG. 6.

During the interaction, the message initiator is defined as Sender and the receiver is defined as Receiver. The interaction process is: Sender uses the process key algorithm and the seed generation process key, and uses the process key to encrypt the message data, and sets the transmission sequence counter (SSC) to an initial value of 1; The key algorithm, the SSC and the encrypted message data are combined to form a message and sent to the Receiver; after receiving the message, the Receiver recovers the process key according to the process key algorithm and the process key seed, and decrypts the message data by using the process key. The original text of the sent message (which may also be ciphertext) is obtained, and the decrypted data is determined according to the action description.

Through the above downloading process, the mobile terminal stores information such as a certain payment application that has been encrypted and a bank card track of the individual user, and the mobile terminal user can directly use the smart card (such as a SIM card) in the mobile device to complete the bank payment function. Referring to Figure 7, a flow chart of the steps of completing payment by the mobile terminal is shown.

Step 701: The user performs a card swiping operation on the mobile device carried by the user (such as an ATM, a POS terminal, a bank self-service device, a bank pre-rejection station, etc.), and the mobile device is embedded with a smart card loaded with the bank card application.

Step 702: The smart card provides an interface for outputting the stored download information. When the download information is output through the interface, a process key SK is automatically generated in the card, and the encrypted download data is encrypted again by using the SK. , get the encrypted result (PI) SK.

Step 703: Output the encryption result (PI) SK, the seed data of the generated process key SK, and the process key algorithm through the interface.

Step 704: After receiving the encryption result (PI)SK, the seed data of the process key SK, and the process key algorithm, the receiving terminal forms a message together with the transaction data, and sends the message to the transaction processing system.

Step 705: The transaction processing system returns the process key SK according to the seed data of the generated process key SK and the process key algorithm, and performs decryption processing to obtain encrypted download data. Since the transaction processing system and the card-issuing front-end machine are the same institution or different institutions negotiated in advance, the transaction processing system can obtain a key for decrypting the downloaded data. The transaction processing system solves the encrypted download data Once the data is downloaded, the transaction can be processed directly.

By adopting the above method, the user can download the payment information such as the payment application and the track to the mobile device anytime and anywhere, and the use is very convenient, and is safer and faster than the traditional bank card issuance method.

The present invention also provides a corresponding downloading system for the downloading method. For a specific embodiment, reference may be made to FIG. 2. In the figure, the card issuing machine 2, the card issuing mechanism 4 (possibly storing information such as bank card tracks), and the dedicated communication network 5 are collectively referred to as a card issuing system, so the downloading system includes the mobile device 1, the card issuing system and the wireless communication network 3 . The various components of the system are as described above and will not be described in detail herein.

The embodiment of the invention further provides a mobile terminal device for downloading information such as a payment application and a bank card track. The mobile terminal device is different from a commonly used mobile device, and requires a built-in middleware and a smart card chip that provides a download data output interface. The mobile terminal device may be a mobile phone, a PDA, a mobile PC or the like.

The middleware is responsible for establishing and maintaining data communication between the smart card and the card issuance system, and the specific functions include: for the payment application download, collecting the authority authentication information input by the user on the mobile device (such as downloading the authorization code); for the bank card track, etc. Downloading information, collecting identity authentication information such as the bank card number or password entered by the user, sending sensitive information such as the bank card password entered by the user to the embedded smart card for encryption, and obtaining the encrypted result; establishing a communication link with the card issuing system; The authority authentication information, or the ciphertext of the sensitive information and other collected information, are combined to form a message and sent to the card issuing system; the return information is received from the card issuing system, and the encrypted payment application or track information is parsed and directly forwarded to the Stored in a smart card embedded in the mobile device.

The smart card provides storage and encryption functions, such as a SIM card built in the mobile phone, which is a specific application of the smart card in the field of telecommunications, similar to a computer without a display and a keyboard, and has an internal operating system, a memory, and an EEPROM (similar to a hard disk). Store information), CPU and other components. The reason why a smart card is called a "smart" card is because it has an operating system and a CPU that can flexibly set application logic.

A smart card can store many applications. If a telecom application is stored, it is called a SIM card. Of course, smart cards can also save applications such as bank cards. Each application contains two types of data: a key and data necessary for the application; the key defines the logic of the application, and the application data is protected by the logic. Smart cards for various applications can also be separated from the SIM card and built into the mobile device. The encryption function of the smart card is to store a set of keys in the card in advance, and define the encrypted interface of the key for external use. For example, the following interface defines the encrypted function call:

Table 1 is a function call table that defines encryption.

Among them, KID defines the identifier of the calling key, 0P defines the encryption or decryption operation, and DATA defines the input information of the encryption/decryption. The smart card that defines the above interface can encrypt the user input information sent from the middleware.

The mobile terminal device has built-in smart cards and middleware to download information such as various payment applications and bank card tracks. If the mobile device with the payment function implements the payment function, it also needs to use the built-in communication interface to output the bank card track information during the payment operation to complete the payment. The communication interface has an information input and output function, and is used for receiving information such as a payment application or a bank card track downloaded through the middleware during the downloading process; and outputting the stored track information to the external device during the payment process; .

The communication interface may be provided by a smart card or by a mobile terminal device. Generally, a smart card application uses an interface called APDU (see Table 1) to communicate with or provide services to an external device. The APDU interface is a communication interface, and the downloaded bank card track information can be input to the smart card through the APDU interface. Or output to the receiving terminal, and then transmitted to the transaction processing system through the receiving terminal for transaction processing to realize the payment function of the smart card. Of course, the communication interface can also be set in the mobile device, and the input and output of the stored data can be performed on multiple smart cards embedded in the mobile terminal.

Moreover, the communication interface can be a remote wireless communication interface, which can realize remote downloading and remote real-time payment transactions; and can also be a close-range contactless communication interface, enabling non-contact close-range downloading and on-site payment transactions. The proximity contactless communication interface is provided by a built-in NFC chip for implementing a contactless function. Two interfaces can be set in the mobile terminal device, and at the same time, remote and close-range wireless download and payment functions are available. For example, after remote or close downloading with payment function, if it can be paid on site, the track information is output through the proximity contactless communication interface; Cheng pays, the track information is output through the remote wireless communication interface, so that the user is very convenient to use. The above NFC technology (close-range non-contact technology) is born out of "contactless radio frequency identification" (RFID) and interconnection technology between wireless devices, which can meet the information exchange, content access and service exchange between any two wireless devices. And to make it more simple - as long as any two devices are close without the need for cable plug-in, you can achieve mutual communication. The communication method greatly shortens the "communication distance" between any two wireless devices. For example, holding a mobile phone in front of a concert advertisement poster, you can connect the mobile phone to the poster website, and you can connect the mobile phone to the poster website. To buy tickets, you can use the smart card embedded in the mobile phone to pay for the ticket. This is the application of NFC technology.

The present invention provides a mobile terminal and a method and system for downloading bank card information or payment application. The principles and embodiments of the present invention are described in the following. The description is only for helping to understand the method of the present invention and its core idea; at the same time, there will be changes in the specific embodiments and application scopes according to the idea of the present invention to those skilled in the art. In conclusion, the content of the present specification should not be construed as limiting the invention.

Claims

Rights request

1. A system for downloading bank card information or a payment application by a mobile terminal, including a mobile terminal device and a card issuing system, characterized in that:

2. The system according to claim 1, wherein: if the mobile terminal device downloads the bank card information, the authentication information input by the user is identity authentication information; and if the mobile terminal device downloads the payment application, the user input The authentication information is the authority authentication information.

3. The system according to claim 2, wherein: the middleware of the mobile terminal device sends the identity authentication information input by the user to the smart card for encryption, and then sends the information to the card issuing system; and the right P艮 authentication information is directly Send to the card issuing system.

4. The system according to claim 1, wherein: said card issuing system comprises a card issuing front end machine and a card issuing data collecting system, wherein bank card information is stored in said card issuing data collecting system, said card issuing front end machine The bank card information is obtained from the card issuance data collection system, and is encrypted and sent to the middleware of the mobile terminal device; or the bank card information is directly stored in the card issuing front machine.

The system according to claim 4, wherein: the card issuing data collecting system and the card issuing front end are connected by a dedicated communication network; and the mobile terminal device and the card issuing system are connected by a wireless communication network, Wireless communication methods include SMS, USSD or wireless internet.

6. The mobile terminal downloads the bank card information or the payment application method, and the method includes: the mobile terminal receives the authentication information input by the user, and sends the authentication information to the card issuing system through the middleware; after the card issuing system performs the authentication, the corresponding payment application or The middleware returned to the mobile terminal after the bank card information is encrypted;

The middleware writes the encrypted result to the smart card storage.

7. The method according to claim 6, wherein: if the payment application is downloaded, the user inputs the authority authentication information to perform authentication of the download authority; if the bank card information is downloaded, the user inputs the identity authentication information to perform the user identity. Certification.

8. The method according to claim 7, wherein if the bank card information is downloaded, the method further comprises: the mobile terminal middleware sending the identity authentication information input by the user to the smart card for encryption, and then transmitting the information to the card issuing system.

9. The method according to claim 8, wherein: the smart card encrypts the identity authentication information input by the user by using a key negotiated with the card issuing system, and the card issuing system directly decrypts when verifying the identity of the user.

10. The method of claim 6 wherein: said card issuance system encrypts payment application or bank card information using a key unknown to the mobile terminal.

11. The method according to claim 6, further comprising: performing process key encryption transmission on transmission data between the middleware and the card issuance system, the transmission data including authentication information and an encrypted payment application or bank card information.

12. Method according to claim 6, characterized in that if the payment application is downloaded, the payment application is decomposed into data packet transmissions.

13. A mobile payment terminal device, comprising:

a smart card for storing downloaded payment applications and 4 line card information;

The mobile payment terminal device according to claim 13, wherein: the smart card has an encryption function, and if the bank card information is downloaded, the middleware sends the authentication information input by the user to the smart card for encryption, and then sends the information. Give the card issuing system.

The mobile payment terminal device according to claim 13, wherein: the payment application and the bank card information stored by the smart card are encrypted information.

16. The mobile payment terminal device of claim 13, wherein: the communication interface comprises a remote wireless communication interface and/or a proximity contactless communication interface.

17. The mobile payment terminal device according to claim 16, wherein: the communication interface is provided on a smart card or provided by the mobile payment terminal device.

18. The mobile payment terminal device according to claim 13, wherein: the smart card is a SIM card; or a smart card separately embedded in the device separately from the SIM card.

The mobile payment terminal device according to claim 13, wherein: the wireless communication mode between the mobile payment terminal device and the card issuance system comprises a short message, a USSD or a wireless internet.