WO2009039771A1

WO2009039771A1 - Mobile payment terminal and payment method based on pki technology

Info

Publication number: WO2009039771A1
Application number: PCT/CN2008/072402
Authority: WO
Inventors: Guilin Peng; Xiaohan Yuan; Yong Min; Mingming Ge
Original assignee: China Unionpay Co., Ltd.
Priority date: 2007-09-20
Filing date: 2008-09-18
Publication date: 2009-04-02
Also published as: CN101394615B; CN101394615A

Abstract

A mobile payment terminal and a payment method based on the PKI technology, it resolves the problem that a hidden trouble risk takes place in the identity authentication mechanism and the information transfer mechanism for the current gathering payment service. The mobile payment terminal includes: an intelligent card (1), for storing and applying a digital certificate; an intelligent card read and write equipment (4), for performing a reading, writing and canceling operation to the intelligent card (1); a terminal chip (5) adding a control function, for controlling the intelligent card reader (4) to access the intelligent card (1); a data interface (3), for providing the data communication between the terminal chip (5) and a peripheral equipment. A user using the mobile payment terminal can download the digital certificate into the intelligent card, and achieve the complete mobile payment. And when the mobile payment terminal communicates with the peripheral equipment through the interface such as a data bus or infrared, blue tooth and so on, the user can use the mobile payment terminal to achieve the network payment instead of the USB KEY.

Description

Mobile payment terminal and payment method based on PKI technology

This application claims priority to Chinese Patent Application No. 200710046313.0, entitled "Mobile payment terminal based on ΡΚΙ technology and payment method", filed on September 20, 2007, the entire contents of which are hereby incorporated by reference. Combined in this application.

Technical field

The present invention relates to the application technology of digital certificates, and in particular to a mobile payment terminal and payment method based on the technology.

Background technique

With the popularization of mobile terminals such as mobile phones, a new mobile payment-based mobile payment service has emerged and developed rapidly. Mobile payment, also known as mobile payment, is a payment service that bundles a mobile phone number with a bank card number. At present, the mobile payment service is mainly based on the identity authentication mechanism of the static payment password, and is carried out by means of short message and WAP (Wireless Application Protocol).

The identity authentication mechanism based on the static payment password refers to an authentication mechanism that allows the user to perform payment after the banking system authenticates the static information such as the login password and payment password of the mobile phone user. The business of static passwords is convenient and easy to use. However, this identity authentication mechanism has the following problems: If the user does not apply for mobile payment service, important information such as the bank card number and payment password of the user is leaked or stolen. Since the acquirer does not have a bank card, it is not possible to withdraw money from the refused or self-service terminal; if the acquirer uses online banking, since the current online banking is very strict with the user, only the card number and the payment password cannot be paid; In this case, the acquirer will use the obtained card number and payment password to apply for registration of the mobile payment service, and then use the mobile phone to implement payment operations such as transfer or consumption. Therefore, the identity authentication mechanism based on the static payment password is less secure. In recent years, a large number of cardholder funds have been stolen by others.

Moreover, in the transmission mode of payment information, mobile payment mainly adopts SMS and WAP. In the SMS payment mode, the payment content (including the payment password) is completely plain text and is easily stolen during the transmission process. In the WAP mode, although the transmission technology is used on the transmission channel of the mobile phone to the banking system, it is required. After the WAP gateway decrypts and implements the protocol conversion, there is also a security problem in this link, so it is impossible to encrypt the end-to-end (mobile phone - I-line system).

Therefore, the current mobile payment service has risks in the identity authentication mechanism and information transmission mechanism. Hidden dangers. With the continuous development of mobile payment services, these deficiencies may pose potential business risks.

Summary of the invention

The technical problem to be solved by the present invention is to provide a mobile payment terminal and a payment method based on PKI technology, so as to solve the problem that the current mobile payment service has potential risks in the identity authentication mechanism and the information transmission mechanism.

In order to solve the above technical problems, according to a specific embodiment provided by the present invention, the present invention discloses the following technical solutions:

A mobile payment terminal includes:

Smart card for digital certificate storage and application;

A smart card reader for reading and writing and clearing smart cards;

a terminal chip for adding a control function, configured to control the smart card reader to access the smart card; and a data interface, configured to provide data communication between the terminal chip and the external device.

The data interface includes a data line interface, and/or an infrared interface, and/or a Bluetooth interface, and/or a remote wireless interface.

The terminal further includes: a terminal kit installed on the external device to provide the terminal control and communication function, and adding, downloading, deleting and applying functions of the digital certificate in the kit.

When the smart card is external, the terminal further includes: a slot for providing a connection between the smart card and the smart card reader/writer.

Wherein, the smart card can store multiple digital certificates.

A method for downloading a digital certificate to the mobile terminal includes:

The mobile terminal initiates a download request and sends it to the server through an external device; the terminal chip controls the smart card reader to write the digital certificate to the smart card.

Preferably, before the smart card reader writes the digital certificate to the smart card, the method further comprises: requesting the user to input the smart card access password and verifying.

Preferably, the manner in which the mobile terminal initiates the download request comprises: directly initiating at the mobile terminal, and the terminal chip sends the download request to the external device through the data interface; or triggering the download function provided by the terminal kit installed in the external device to initiate.

A method for downloading a digital certificate to the mobile terminal includes: The mobile terminal initiates a download request by using a WAP mode;

The terminal chip sends the request to the server through the remote wireless interface, and receives the digital certificate returned by the server;

The terminal chip controls the smart card reader to write the digital certificate to the smart card.

A method for applying a digital certificate in the above mobile terminal, comprising:

The mobile terminal initiates a certificate application request by using a WAP method;

The terminal chip controls the smart card reader to access the smart card, and the smart card uses the digital certificate to sign and encrypt the transaction data;

The terminal chip sends the encrypted data to the server through a remote wireless interface to establish a payment channel of the mobile terminal.

Preferably, before the smart card reader accesses the smart card, the smart card reader further includes: requesting the user to input the smart card access password and verifying.

The user initiates a certificate application request through the external device, and the external device sends the request to the terminal chip through the data interface;

The terminal chip sends the encrypted data to the server through an external device to establish an online payment channel.

A method for deleting a digital certificate from the mobile terminal includes:

Initiating a delete request directly at the mobile terminal or triggering a delete function provided by a terminal kit installed on the external device;

The terminal chip controls the smart card reader to remove the digital certificate from the smart card.

Preferably, before the smart card reader removes the digital certificate from the smart card, the method further includes: requesting the user to input the smart card access password and verifying. According to a specific embodiment of the present invention, the following technical effects are disclosed: The embodiment of the present invention provides a secure mobile payment terminal based on PKI (Public Key Infrastructure) technology, by adding a smart card in the terminal. And adding a control function to the smart card in the terminal chip, the digital certificate can be downloaded into the smart card. Based on this, the user can use the mobile terminal to complete secure mobile payment. On the one hand, a digital certificate-based mobile payment security verification mechanism can be established to comprehensively improve the security of mobile payment, avoiding the misappropriation of cardholder funds due to insufficient static password verification mechanism; on the other hand, the security of transaction data can be established. The transmission mechanism avoids the payment of data by the cardholder in clear text, and ensures the security of the cardholder's funds.

Moreover, when the mobile payment terminal is connected to the external device through a data line or an interface such as infrared or Bluetooth, the user can also use the mobile terminal instead of the USB KEY (it is a smart storage device, which can be used for storing the online banking certificate, and can be digitally Signature and signature verification operations) enable secure online payments. In the online payment service, USB KEY technology has been widely adopted to ensure payment security. Although most cardholders have realized that USB KEY has high security, some cardholders also use static passwords, file certificates and other security-level methods because of the high cost and restrictions on network application. Make online payments. In addition, the USB KEY is not a must-have item, and it is not convenient for the card holder to carry it. After adopting the invention, since the mobile terminal is a device carried by the card holder, and does not require additional application fees and costs, it is more convenient and practical than the USB KEY.

DRAWINGS

1 is a rear view of a secure payment mobile phone based on PKI technology according to an embodiment of the present invention; FIG. 2 is a logical structural diagram of the secure payment mobile phone shown in FIG.

3 is a flowchart of downloading a digital certificate to a secure payment mobile phone in an online mode according to an embodiment of the present invention;

4 is a flowchart of downloading a digital certificate to a secure payment mobile phone in a wireless mode according to an embodiment of the present invention;

FIG. 5 is a flowchart of performing mobile payment according to an embodiment of the present invention; FIG.

detailed description

In order to make the above objects, features and advantages of the present invention more apparent, the following DETAILED DESCRIPTION OF THE INVENTION The present invention will be further described in detail.

PKI is the abbreviation of "Public Key Infrastructure", which means "public key infrastructure". It is a versatile security infrastructure realized by the principle and technology of asymmetric cryptography. PKI uses the digital certificate to identify the identity of the key holder. Through the standardized management of the key, the organization establishes and maintains a trustworthy system environment for the organization, transparently providing identity authentication, data confidentiality and integrity to the application system. Non-repudiation and other necessary security guarantees to meet the security needs of various application systems. Simply put, PKI is a system that provides public key encryption and digital signature services, in order to automatically manage keys and certificates, and to ensure the confidentiality, authenticity, integrity and non-repudiation of digital information transmission on the Internet. PKI technology is the core of information security technology and the key and basic technology of e-commerce. The basic technologies of PKI include encryption, digital signatures, data integrity mechanisms, digital envelopes, dual digital signatures, and more.

The embodiment of the invention provides a secure mobile payment terminal based on PKI technology. By introducing the PKI technology into the mobile terminal, the digital certificate can be downloaded to the mobile terminal, and a digital certificate-based mobile payment security verification mechanism is established. On the one hand, the user can use the mobile terminal to complete secure mobile payment; on the other hand, when connecting the external device using a data line or an interface such as infrared or Bluetooth, the user can also use the mobile terminal instead of the USB KEY to realize secure online payment. .

The following is a mobile phone as an example to illustrate the mobile payment terminal and payment method based on the PKI technology. Referring to FIG. 1 , it is a rear view (removing the back cover and the battery) of the secure payment mobile phone based on the PKI technology according to the embodiment of the present invention. Compared with the ordinary mobile phone, the secure payment mobile phone adds a smart IC card 1, an IC card slot 2, a contact IC card reader (not shown), and the like, and has the following functions:

The smart IC card 1 is a type of IC card (integrated circuit card), which is a CPU card in which a microprocessor chip CPU, a storage unit (including a random access memory RAM, a program memory ROM, and a user data memory EEPROM) and a solidification are integrated. The chip operating system COS (Chip Operating System) in the ROM. The smart IC card 1 is equivalent to an independent single chip microcomputer system. In the embodiment of the present invention, the size of the IC card is equivalent to the size of the SIM card, and is a security chip independent of the SIM card. In the smart IC card 1, the digital certificate is stored in the EEPROM storage area, and the digital signature and data encryption algorithm are built in the chip operating system COS, and the application process of using the digital certificate for signature encryption in the payment process is completed in the smart IC card 1. Therefore, the data read from the mobile phone is the data encrypted by the signature, and the security is higher. Preferably, the smart IC card 1 can store multiple digital certificates, depending on the EEPROM capacity. Depending on the amount.

The IC card slot 2 is placed in a position juxtaposed with the SIM card slot to provide insertion or removal of the smart IC card 1. The contact IC card reader can read and write the smart IC card 1 through a plurality of metal contacts located in the slot.

In the embodiment of the present invention, the smart IC card 1 is installed in the mobile phone by inserting the IC card slot 2, and the smart IC card 1 can also be moved to other mobile terminals having similar functions. Of course, the smart IC card 1 can also be solidified in the mobile phone, but this method lacks flexibility.

In addition to the above components, the mobile phone shown in FIG. 1 adds a control program of the IC card reader/writer in the operating system of the mobile phone chip (the mobile phone core hardware, the non-SIM card or the smart IC card 1 storing the certificate in this embodiment). To realize the functions of reading, writing, and clearing digital certificates, the mobile phone chip can access the smart card 1 by controlling the IC card reader through the mobile phone operating system.

Like the ordinary mobile phone, the mobile phone shown in FIG. 1 communicates with an external device through the data interface 3, and the data interface 3 refers to a data line interface or a wireless interface such as infrared or Bluetooth. In addition, most mobile phones currently support WAP functions, so the phone also has a built-in remote wireless application module for data exchange between the mobile phone and the remote server.

Usually, the phone is also equipped with a PC kit, and a CD is attached to the phone. The content on the CD is the PC kit. The PC Suite is a software that connects and synchronizes the phone to the computer. It is installed on a computer connected to the phone to help manage the phone. Usually foreign trade machines (such as Nokia, Samsung, Sony Ericsson, etc.) usually have a PC kit, which can back up the mobile phone resources to the computer. For example: You can copy the phone book on your mobile phone to your computer, or you can use SMS and The picture of the mobile phone is uploaded to the computer, and the resources on the computer can also be downloaded to the mobile phone, such as songs, video files and pictures.

In the embodiment of the present invention, since the smart IC card 1 is added to the mobile phone, the corresponding control function is also added in the PC suite. When the mobile phone is connected to the computer through a data line or an interface such as infrared or Bluetooth, the new one in the PC suite can be used. Certificate download, delete or apply features.

Referring to FIG. 2, it is a logical structural diagram of the secure payment mobile phone shown in FIG. 1, illustrating the logical relationship between various components of the mobile phone. The mobile phone chip 5 with the control function is added to control the IC card reader/writer 4 to access the smart IC card 1, and the IC card reader/writer 4 performs operations such as reading, writing, and erasing the smart IC card 1. The mobile phone chip 5 is connected to the USB interface of the external computer through the data line interface 3, or is connected to the infrared and Bluetooth interfaces of the external computer through the infrared and Bluetooth interface 3 for data exchange. And in the WAP mode, the hand The machine chip 5 realizes connection communication with the remote wireless server through the wireless application module 6. Based on the secure payment handset described above, the digital certificate application process implemented by the mobile phone will be described below.

1. The process of downloading a digital certificate to a mobile phone

The embodiment of the present invention provides two ways to download a digital certificate into a mobile phone, which is an online mode and a wireless mode, respectively.

(1) online mode, refer to Figure 3

In the online mode, first connect the mobile phone to the computer through the data cable or infrared, Bluetooth, etc., and then download the digital certificate to the smart IC card in the mobile phone through the relevant online banking page. Mobile users can choose to download the certificate through the mobile app, or they can initiate a certificate download on the PC through the PC Suite. The mobile phone application refers to a corresponding download menu provided in the operation interface after adding a smart IC card in the mobile phone, and the user selects to initiate a download request. The detailed steps are as follows:

Step 301: The user initiates a digital certificate download request directly on the mobile phone through the mobile phone application, or connects the mobile phone to the computer through a data line or infrared, Bluetooth, etc., and then applies for downloading the certificate through the certificate download function in the mobile phone PC suite on the computer end;

Step 302: If the request is initiated by the mobile phone application, the mobile phone chip sends the certificate download request to the computer through a data line or an interface such as infrared or Bluetooth; if the PC suite is used to initiate the request, the step is omitted;

Step 303, the mobile phone suite program in the computer applies for downloading the digital certificate through the online banking web page; Step 304, the mobile phone suite program in the computer receives the digital certificate issued by the server; Step 305, the mobile phone suite program in the computer passes the digital certificate through the data. Line or infrared, Bluetooth and other interfaces are sent back to the phone;

Step 306, the mobile phone chip sends a write request to the smart IC card through the IC card reader/writer; Step 307, the IC card reader/writer requests the user to input the IC card access password;

Step 308, the user inputs an access password;

Step 309, the IC card operating system verifies that the access password is correct, and writes the digital certificate into the special certificate storage area.

In the above steps, step 307 is a preferred step of the embodiment, that is, the mobile phone user needs to set a password to protect the access to the smart IC card, and only the correct password can be input to complete the certificate download. (2) wireless mode, refer to Figure 4

In the wireless mode, the user accesses the 4 page through the WAP mode, and then downloads the digital certificate to the mobile phone through the over-the-air download. The detailed steps are as follows:

Step 401: The user logs in to the bank WAP page through the mobile phone to apply for downloading the digital certificate; Step 402, the mobile phone chip sends the certificate download request to the remote bank host through the wireless application module;

Step 403, the bank host returns the required digital certificate to the mobile phone;

Step 404, the mobile phone chip sends a write request to the IC card through the IC card reader/writer;

Preferably, in step 405, the IC card reader/writer requests the user to input an IC card access password;

Step 406: The user inputs an access password.

Step 407, the IC card operating system verifies that the access password is correct, and writes the digital certificate into the special certificate storage area.

2. The process of applying digital certificates

In PKI technology, the process of applying digital certificates uses an asymmetrically encrypted public key system for encryption. Asymmetric encryption uses not the same key for encryption and decryption, and usually requires two keys: a public key and a private key. The public key and the private key are a pair, the private key is saved by the encrypting party, and the public key is disclosed to all users. This way of publicizing the public key solves the security problem in the key exchange process. If the data is encrypted with a private key, it can only be decrypted with the corresponding public key. When the encrypting party uses its own private key for data encryption, it is equivalent to digital signature on the data. The decrypting party decrypts the data with the public key. Since the private key is only encrypted, if the decrypting party can decrypt it normally, it indicates that the data must be encrypted. Side, the encryption party can't deny it, and it guarantees that the data is not faked and not modified during the transmission.

Based on the above principle, in the process of downloading the digital certificate, the smart IC card will obtain the only cardholder private key owned by the cardholder and obtain the server public key; then, in the process of applying the digital certificate, the use of the digital certificate The cardholder private key is used to sign the transaction data, and then the server public key is used for encrypted transmission. After the server receives the encrypted data, it first decrypts the transmitted data by using the server private key, and then uses the cardholder's public key to check the transaction data (including the process of verifying the identity of the other party and the process of verifying the integrity of the data). , thus confirming the identity of the cardholder and ensuring the security of data transmission. The cardholder private key and the cardholder public key are a pair of asymmetric keys, and the server private key and the server public key are another pair of asymmetric keys. (1) Mobile payment, see Figure 5

In the mobile payment service, the cardholder performs mobile payment through the WAP method. When a digital certificate is required, the cardholder enters an access password in the secure payment handset, the mobile phone chip accesses the smart IC card, uses the cardholder private key to sign the transaction data, and then encrypts the transmission using the server public key. The detailed steps are as follows:

Step 501: The user logs in to the bank WAP page through the mobile phone, inputs the identity and transaction information to be submitted, and selects the user certificate;

Step 502: The mobile phone chip notifies the IC card reader/writer of the certificate application request;

Preferably, in step 503, the IC card reader/writer requires the user to input an IC card access password;

Step 504, the user inputs an access password.

Step 505: The IC card reader/writer submits the certificate application request and the access password to the smart IC card. Step 506: The smart IC card verifies that the access password is correct, and uses the digital certificate to sign and encrypt the data to be submitted, and then returns to the IC. Card reader/writer

Step 507, the IC card reader/writer returns the signature encrypted data to the mobile phone chip;

Step 508: The mobile phone chip submits the signed transaction data to the remote banking host through the wireless application module.

Step 509, the bank host returns a transaction response, establishes an encrypted channel, and continues subsequent data communication. In the above mobile payment process, since the digital certificate-based mobile payment security verification mechanism is established, the security of the mobile payment is comprehensively improved, and the cardholder funds are prevented from being stolen by others due to insufficient static password verification mechanism. Moreover, a secure transmission mechanism for transaction data is established, which avoids the transmission of cardholder transaction data in clear text and protects the cardholder's funds security.

(2) Online payment, see Figure 6

In the online payment service, the secure payment mobile phone can replace the USB KEY and become the identity token for the cardholder to complete the online payment. The cardholder first connects the phone to the computer via a data cable or an interface such as infrared or Bluetooth, and enables a control switch that allows the application to access the smart IC card. When the cardholder establishes a digital certificate-based connection with the server, the mobile PC Suite automatically reads the application data encrypted by the digital certificate and the cardholder's private key from the mobile smart IC card; after the secure connection is established, the server The process of performing encrypted communication is the same as the traditional USB KEY. The detailed steps are as follows:

Step 601, the user connects the computer to the mobile phone through a data line or infrared, Bluetooth, etc., and Log in to the online banking web page on the computer, enter the identity and transaction information to be submitted, and select the mobile digital certificate;

Step 602: The mobile phone PC suite in the computer submits a certificate application request to the mobile phone chip through the data interface;

Step 603: The mobile phone chip notifies the IC card reader/writer of the certificate application request;

Preferably, in step 604, the IC card reader/writer requires the user to input the smart IC card access password through the mobile phone interface or the PC suite;

Step 605, the user inputs an access password.

Step 606, the IC card reader/writer submits the digital certificate application request and the access password to the smart IC card chip;

Step 607, the smart IC card verifies that the access password is correct, and uses the digital certificate to sign and encrypt the data to be submitted, and returns it to the IC card reader/writer;

Step 608, the IC card reader/writer returns the encrypted data to the mobile phone chip;

Step 609, the mobile phone chip returns the encrypted data to the computer through the data interface;

Step 610: The computer submits the signed transaction data to the online banking host through the Internet;

Step 611, the bank host returns a transaction response, establishes an encrypted channel, and continues subsequent data communication. In the online payment service, USB KEY technology has been widely adopted to ensure payment security. Although most cardholders have realized that USB KEY has high security, some cardholders also use static passwords, file certificates and other security-level methods because of the high cost and restrictions on network application. Make online payments. Moreover, the USB KEY is not a must-have item, and it is not convenient for the card holder to carry it. After adopting the invention, since the mobile terminal such as a mobile phone is a device carried by the card holder, and does not require additional application cost and cost, it is more convenient and practical than the USB KEY.

3. The process of deleting the digital certificate from the mobile phone, refer to Figure 7

The cardholder can delete the digital certificate and private key stored in the smart card chip through the mobile phone application or PC suite. Preferably, the correct cardholder password is entered before deletion. Proceed as follows:

Step 701, the user selects to delete the digital certificate through the mobile phone application, or on the computer through the mobile phone PC suite;

Step 702, the mobile phone chip sends a delete request to the IC card reader/writer; if it is through the mobile phone PC The suite initiates a delete request, and the PC suite program sends the request to the mobile phone chip through the mobile data interface;

Step 703, the IC card reader/writer requires the user to input an IC card access password;

Step 704, the user inputs an access password.

Step 705: The IC card reader/writer submits the deletion certificate request and the access password to the smart IC card chip, and the IC card determines that the access password is correct, and deletes the designated digital certificate.

The parts not shown in the mobile payment terminal shown in FIG. 1 and FIG. 2 can be referred to the relevant parts of the process shown in FIG. 3 to FIG. 7. For the sake of space consideration, details are not described herein again.

The mobile payment terminal and the payment method based on the PKI technology provided by the present invention are described above. The description of the above embodiments is only for helping to understand the method and core idea of the present invention; and, for a person of ordinary skill in the art According to the idea of the present invention, there will be changes in the specific embodiments and application scopes. In summary, the content of the specification should not be construed as limiting the invention.

Claims

Rights request

A mobile payment terminal, comprising:

Smart card for digital certificate storage and application;

A smart card reader for reading and writing and clearing smart cards;

2. The mobile payment terminal of claim 1, wherein: the data interface comprises a data line interface, and/or an infrared interface, and/or a Bluetooth interface, and/or a remote wireless interface.

3. The mobile payment terminal according to claim 1, further comprising: a terminal kit installed on the external device to provide the terminal control and communication function, wherein the package adds, deletes, and applies the digital certificate. .

The mobile payment terminal according to claim 1, wherein when the smart card is externally, the terminal further comprises: a slot, configured to provide a connection between the smart card and the smart card reader/writer.

5. The mobile payment terminal according to claim 1, wherein: the plurality of digital certificates can be stored in the smart card.

A method for downloading a digital certificate to the mobile terminal of claim 1, characterized in that it comprises:

7. The downloading method according to claim 6, wherein before the smart card reader writes the digital certificate to the smart card, the method further comprises: requesting the user to input the smart card access password and verifying.

The downloading method according to claim 6, wherein the method for the mobile terminal to initiate a download request comprises: directly initiating at the mobile terminal, and the terminal chip sends the download request to the external device through the data interface; or triggering the installation The download function provided in the terminal kit of the external device is initiated.

The mobile terminal initiates a download request by using a WAP method;

The terminal chip sends the request to the server through the remote wireless interface, and receives the request returned by the server. Digital certificate

The downloading method according to claim 9, wherein before the smart card reader writes the digital certificate to the smart card, the method further comprises: requesting the user to input the smart card access password and verifying.

A method for applying a digital certificate in a mobile terminal according to claim 1, characterized in that it comprises:

The method for applying a digital certificate according to claim 11, wherein the smart card reader further comprises: requesting the user to input the smart card access password and verifying before accessing the smart card.

The method for applying a digital certificate according to claim 13, wherein the smart card reader further comprises: requesting the user to input the smart card access password and verifying before accessing the smart card.

A method for deleting a digital certificate from the mobile terminal of claim 1, comprising:

16. The deletion method according to claim 15, wherein the smart card reader/writer will count Before the word certificate is deleted from the smart card, it also includes: Asking the user to enter the smart card access password and verify it.