WO2010096991A1

WO2010096991A1 - An application downloading system and method

Info

Publication number: WO2010096991A1
Application number: PCT/CN2009/075443
Authority: WO
Inventors: 贾倩; 马景旺
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-02-27
Filing date: 2009-12-09
Publication date: 2010-09-02
Also published as: CN101819696B; CN101819696A

Abstract

An application downloading method is provided by the invention and implemented based on an application downloading system which includes a management platform for entities outside the card, a service terminal and an intelligent card. After receiving an application downloading request from the service terminal, the management platform for entities outside the card selects the safety domain with responsibility for the application downloading on the intelligent card via the service terminal, establishes a safe tunnel with the intelligent card, and downloads the application to the intelligent card based on the safe tunnel. By the application downloading system and method provided by the invention, the application could be downloaded to the intelligent card conveniently, and the user’s experience could be improved.

Description

System and method for application downloading

Technical field

The present invention relates to the field of communications, and in particular, to an implementation scheme for electronic payment of a mobile terminal, and specifically relates to a system and method for downloading an application.

Background technique

Near Field Communication (NFC) is a short-range wireless communication technology operating at 13.56MHz. It is a fusion of RFID (Radio Frequency Identification) technology and interconnection technology. After integrating NFC technology, mobile communication terminals such as mobile phones can simulate contactless IC cards for related applications of electronic payment. The application of mobile phones in the field of electronic payment will further expand the use of mobile phones, bring convenience to people's lives, and have broad application prospects.

In the related art, an electronic payment application is placed in a smart card, and the card manufacturer usually presets the application on the card when the card is shipped. Multiple electronic payment applications can be installed on the smart card. In order to achieve the security of the payment application, the smart card uses the Global Platform Card Specification V2.1/V2.2 specification, and the smart card is divided into several independent security domains to ensure the isolation and independence of multiple applications.

The Issuer Security Domain (ISD), also known as the Issuer Security Domain, is the card's primary, mandatory card representative that contains secure domain secrets for supporting secure channel protocol operations and card content management. key.

The Supplementary Security Domain (SSD) is an additional, optional card representative of the application provider or card issuer or their agent, hosting applications managed by the application provider and managing the application provider's card issuer. Application, the control party of the security domain can operate and maintain the stored applications, such as downloading new applications, applying upgrades and deleting.

In the prior art, no specific solution is proposed for the electronic payment application downloading. Therefore, there is an urgent need for a technical solution that can conveniently and quickly perform application downloading. Summary of the invention

The technical problem to be solved by the present invention is to propose a system and method for application downloading, which can conveniently and quickly perform application downloading.

In order to solve the above technical problem, the present invention provides a method for downloading an application, the method comprising:

The card external entity management platform receives the application download request sent by the service terminal, selects the security domain responsible for the application download on the smart card through the service terminal, establishes a secure channel with the smart card, and downloads the application to the smart card based on the secure channel. . The service terminal is a card issuer service terminal; or the card external entity management platform is an application provider management platform, and the service terminal is an application provider service terminal.

Further, in the above method,

Card issuer business terminal,

The method is:

The card issuer management platform receives an application download request from the card issuer business terminal; and

The application provider management platform selects the slave security domain on the smart card responsible for the application download, establishes a secure channel through the card issuer management platform and the card issuer service terminal and the smart card, and downloads the application to the smart card based on the secure channel.

Further, in the above method,

The application download request carries smart card feature information,

After the step of receiving the application download request by the card external entity management platform, the method further includes:

Determining whether the application is allowed to be downloaded, wherein

When the judgment result is yes, the security of the application download on the smart card is selected through the service terminal. Further, in the foregoing method, before the step of the card external entity management platform receiving the application download request sent by the service terminal, the method further includes:

The service terminal sends a command to read the smart card feature information to the smart card, and the smart card encapsulates the feature information in a response message for reading the smart card feature information command and sends the message to the service terminal.

Further, in the foregoing method, the step of establishing a secure channel between the card issuer management platform or the application provider management platform and the smart card includes: performing identity authentication between the service terminal and the smart card to establish a secure channel, where

The predetermined secure channel protocol is based on a symmetric key or an asymmetric key mechanism.

Further, in the above method, before the step of downloading the application to the smart card by the external channel management platform, the method further includes: a predetermined command.

Further, in the above method,

The steps for the station to send a predetermined command to the smart card include:

Same as 3⁄4t卞 s )iL ^ 3⁄4t-r a -it-fj3⁄4

After being encapsulated, it is sent to the smart card through the service terminal;

The smart card strips out the predetermined command from the transmitted data to perform the corresponding operation according to the predetermined command.

Further, in the above method, after the step of the smart card stripping the predetermined command from the sent data, the method further includes:

The smart card encapsulates the response to the predetermined command according to the predetermined data format and sends it through the service terminal.

The response of the command.

Further, in the above method, when the predetermined command is an application download command, the smart card is stripped After the step of the predetermined command, the method further includes:

The smart card parses the predetermined command to perform an application download.

Further, in the above method, before the step of sending the predetermined command by the application provider card hosted by the card issuer, the method further includes: a token key sent by the publisher management platform, and then the application The provider management platform generates a predetermined command including a load token for transmission to the smart card through the card issuer management platform and the card issuer service terminal.

Further, in the foregoing method, when the application is a card issuer's own application, the step of the service terminal selecting the security domain on the smart card responsible for the application download includes:

The card issuer management platform selects the primary security domain on the smart card, or,

The card issuer management platform creates a slave security domain for the application and selects the slave security domain; or

When the application is an application controlled by an application provider or an application provider hosted by a card issuer, the steps of the service terminal selecting a security domain on the smart card responsible for the application download include:

If no security domain is created for the app,

The card issuer management platform selects the primary security domain, establishes a secure channel with the smart card, and creates a slave security domain, generates a slave security domain initial key, and sends the slave security domain initial key to the application provider management platform. ; as well as

The application provider management platform selects the slave security domain responsible for the application download and updates the slave security domain key based on the secure channel; or

If you have created a slave security domain for the app,

The application provider management platform selects the slave security domain responsible for the application download and updates the slave security domain key based on the secure channel.

The invention also provides a system for application downloading, which comprises an out-of-card entity management platform and a business end End and smart card; among them,

The card external entity management platform is configured to: receive an application download request sent by the service terminal, and select a security domain on the smart card that is responsible for the application download through the service terminal, and after establishing a secure channel with the smart card, apply the application based on the secure channel Download to smart card;

The service terminal is configured to: send an application download request to an off-card entity management platform, and transparently transmit data between the card external entity management platform and the smart card;

The smart card is configured to: establish a secure channel through the service terminal and the card external entity management platform, and complete an application download operation through the secure channel. The service terminal is a card issuer service terminal, or

Supplier business terminal.

Further, in the above system, when the provider service terminal, the system further includes a card issuer management platform;

The application provider management platform further includes:

An application module, configured to: send a request to create a security domain from a card issuer management platform when a secondary security domain is not created for the application;

a receiving module, configured to: receive a slave security domain initial key sent by the card issuer management platform;

The card issuer management platform also includes:

The creation and delivery module is configured to: receive a request from the security domain to be sent by the application provider management platform, create a slave security domain, generate a slave domain from the security domain, and send the initial key from the security domain to the application provider management platform.

And the application provider management platform, when the service terminal is a card issuer service terminal,

The card issuer management platform is configured to: receive an application from a card issuer service terminal Download request

The application provider management platform is configured to: select a slave security zone, establish a secure channel with the smart card through the card issuer management platform and the card issuer service terminal, and download the application to the smart card based on the secure channel.

Further, in the above system, the card issuer management platform further includes a create and send module, and the create and send module is configured to:

When the slave domain is not created for the application, the slave domain is created from the security domain, and the initial key is generated from the security domain and sent from the secure domain initial key to the application provider management platform;

The application provider management platform also includes a receiving module configured to receive a secure domain initial key transmitted from a card issuer management platform.

Further, in the above system, the application provider management platform further includes an update module, and the update module is configured to update the slave security domain key corresponding to the application.

The station also includes:

Generating a module, which is configured to generate a predetermined command;

a packaging module, configured to encapsulate the predetermined command according to a predetermined data format; and a sending module configured to send the predetermined command to the smart card through the service terminal;

The smart card further includes:

The execution module is configured to: after receiving the predetermined command, parse the predetermined command and perform the corresponding operation. Further, in the above system,

The application provider management platform further includes: a token application module, configured to: apply for a token to the card issuer management platform, and receive a token key sent by the card issuer management platform;

The card issuer management platform also includes:

The token sending module is configured to: after receiving the token application of the application provider management platform, send the token key to the application provider management platform.

Further, in the above system, The application provider management platform further includes:

Generating a module, the setting is: generating a predetermined command including a load token;

a package module, configured to: package the predetermined command in a predetermined data format;

a sending module, configured to: send a predetermined command to the smart card through the card issuer management platform and the card issuer service terminal;

The smart card further includes:

The service terminal further includes a feature information reading module, and the feature information reading module is configured to send a smart card feature information command to the smart card;

The smart card further includes a feature information sending module, and the feature information sending module is configured to send the feature information to the service terminal in a response message for reading the smart card feature information command.

Further, in the above system, the application download request carries the smart card feature information, and the acquiring module is configured to acquire the smart card feature information in the application download request;

a judging module, configured to determine, according to the smart card feature information, whether to allow downloading the application;

The selection module is set to: When the judgment result of the determination module is yes, the security terminal responsible for the application download on the smart card is selected by the service terminal. The station also includes certification and building modules.

The authentication and establishing module is configured to: establish a secure channel by using a service terminal and a smart card for identity authentication according to a predetermined secure channel protocol, where

The invention has the beneficial effects that the application downloading system and method proposed by the invention can conveniently download the application to the smart card, thereby improving the user experience. BRIEF abstract

The drawings are intended to provide a further understanding of the invention, and are intended to be illustrative of the invention. In the drawing:

Figure 1 is a system block diagram of an application download of the present invention;

2 is a flow chart of a method for downloading an application of the present invention;

3 is a detailed signaling flow diagram of a card issuer's own application download and installation in accordance with an embodiment of the present invention; and a detailed signaling flow diagram of the installation;

Figure 5 is a detailed signaling flow diagram of application download and installation autonomously controlled by an application provider in accordance with an embodiment of the present invention. Preferred embodiment of the invention

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments.

System embodiment

In accordance with an embodiment of the present invention, a system for application downloading is provided. 1 is a system block diagram of an application download in accordance with the present invention. As shown in FIG. 1, a card issuer management platform 10, an application provider management platform 12 (a plurality of application provider management platforms may exist in the system), a card issuer service terminal 14, an application provider service terminal 16, and a smart card 18 are included. The following describes the application download system in detail.

The card issuer management platform 10 is responsible for card issuance and management, and manages card resources and lifecycles, keys, certificates, and applications. And receiving a smart card application download request sent by the corresponding service terminal 14 in a predetermined data format, and selecting a security domain through the service terminal 14, performing identity authentication with the smart card 18, establishing a secure channel, and downloading the application to the smart card through the secure channel. 18; further, for creating a slave security domain and generating a slave security domain initial key, sending the security domain initial key to the application provider management platform 12; further, for receiving the application provider management platform 12 After the token application, the token key is sent to the application provider management platform 12.

The application provider management platform 12 is configured to receive a smart card application download request sent by the corresponding service terminal 16 in a predetermined data format, and send a request from the security issue domain to the card issuer management platform 10, at the slave card issuer management platform 10 After obtaining the initial key from the security domain, select the security domain, authenticate with the smart card 18, establish a secure channel, update the security domain key, and download the application to the smart card 18 through the secure channel. For the case where the application is hosted by the card issuer management platform, the application provider management platform 12 is also used to apply for a token (Token) to the card issuer management platform 10, and generate a predetermined command including a Load Token, through the card. The publisher management platform 10 and its service terminal 14 establish a secure channel with the smart card 18 to download the application to the smart card 18.

A card issuer service terminal or an application provider service terminal is called a service terminal.

The card issuer service terminal 14 is configured to send an application download request to the card issuer management platform 10, and transparently transmit data between the card issuer management platform 10 and the smart card 18, wherein the application download request carries the characteristics of the smart card The information further includes a feature information reading module, configured to send a read smart card feature information command to the smart card 18.

The application provider service terminal 16 is configured to send an application download request to the application provider management platform 12, and transparently transmit data between the application provider management platform 12 and the smart card 18, wherein the application download request carries the characteristics of the smart card. The information further includes a feature information reading module, configured to send a read smart card feature information command to the smart card 18.

The smart card 18 is configured to perform identity authentication with the card issuer management platform 10 or the application provider management platform 12 through the service terminal 14 or 16, establish a secure channel, and complete an application download operation through a secure channel; further includes a feature information sending module, And transmitting to the service terminal 14 or 16 in response to the read smart card feature information command and encapsulating its feature information in a response message for reading the smart card feature information command. The above smart card refers to an IC chip or a smart card conforming to the Global Platform Card Specification V2.1.1/V2.2 specification, and may be a SIM/USIM card, a pluggable smart memory card or an IC chip integrated on the mobile terminal in physical form. .

In addition, in the system, the card issuer management platform 10 and the application provider management platform 12 are connected by a dedicated line or a network, and the two parties pre-agreed the connection mode and the data communication protocol. Negotiation.

In addition, between the card issuer management platform 10 and the card issuer service terminal 14, the application provider management platform 12 and the application provider service terminal 16 may pass through a dedicated line and an internal service terminal thereof. The management system is interconnected.

In addition, the service terminal 14/16 transparently transmits information such as data and keys exchanged between the management platform 10/12 and the smart card 18. The service terminal is configured with a smart card reading and writing device, and communicates with the smart card through the smart card reading and writing device. The smart card reading and writing device can be a contactless reader or a contact smart card reader. When the contactless reader/writer is used, the smart card is placed in the mobile terminal, and the service terminal communicates with the smart card through the mobile terminal using the near field communication protocol; when the contact smart card reader is used, the service terminal directly through the smart card reader Communicate with a smart card.

In addition, the above card issuer management platform 10 further includes:

An obtaining module, configured to acquire feature information of the smart card 18 in the application download request;

a determining module, configured to determine, according to the feature information of the smart card 18, whether the download is allowed;

The selection module is configured to select the security domain by the card issuing business terminal 14 if the judgment module determines that the result is YES.

In addition, the card issuer management platform 10 further includes: a creating and sending module, configured to create a slave security domain when receiving a request from a security domain for the application provider management platform or when determining that a slave domain is not created for the application, Generate and send an initial key from the secure domain to the application provider management platform;

In addition, the card issuer management platform 10 further includes: an authentication and establishment module, configured to perform identity authentication with the smart card 18 according to a predetermined secure channel protocol, and establish a secure channel.

In addition, the above card issuer management platform 10 further includes:

a generating module, configured to generate a predetermined command;

a packaging module, configured to package the predetermined command in a predetermined data format;

a sending module, configured to send a predetermined command to the smart card through the card issuer service terminal 14

18.

In addition, the application provider management platform 12 further includes: An obtaining module, configured to acquire feature information of the smart card 18 in the application download request;

The selection module is configured to select, by the service terminal, the smart card to be responsible for the downloaded security domain when the judgment module determines that it is YES.

The above application provider management platform 12 further includes:

An application module, configured to send a request to create a security domain from the card issuer management platform 10 when the slave security domain is not created for the application;

The receiving module is configured to receive the slave security domain initial key sent by the card issuer management platform, and the update module is configured to update the slave security domain key corresponding to the application, and update the security domain initial key to the master key.

In addition, the application provider management platform 12 further includes: an authentication and establishment module, configured to perform identity authentication with the smart card 18 according to a predetermined secure channel protocol, and establish a secure channel.

In addition, the above application provider management platform 12 further includes:

a token application module, configured to apply for a token to the card issuer management platform, and receive a token key sent by the card issuer management platform;

The card issuer management platform 10 further includes: a token sending module, configured to send a token key to the application provider management platform after receiving the token application of the application provider management platform.

a generating module, configured to generate a predetermined command, or used to generate a predetermined command including a loading token; and a packaging module, configured to encapsulate the predetermined command in a predetermined data format;

The sending module is configured to send the predetermined command to the smart card through the service terminal 16 or through the card issuer management platform 10 and its service terminal 14.

The smart card 18 above further includes:

The execution module is configured to parse the predetermined command and perform the corresponding operation after receiving the predetermined command. When the application download command is received, the application download is performed.

Through the above processing, the download and installation of the application can be conveniently implemented through the service terminal. Method embodiment

According to an embodiment of the present invention, a method for downloading an application for downloading an application to a smart card is provided. FIG. 2 is a flowchart of an application downloading method according to an embodiment of the present invention. As shown in FIG. 2, the following processing is included:

Step S201: After receiving the application download request sent by the corresponding service terminal, the card issuer management platform or the application provider management platform selects a security domain that is responsible for the application download on the smart card through the service terminal, and performs identity authentication with the smart card. Establish a safe passage;

The user carries the smart card to the business outlet of the card issuer or the application provider to download the application through the service terminal. After the user carries the smart card to the business outlet, the application download through the service terminal includes the following processing:

1. The service terminal sends a command to read the smart card feature information to the smart card, and the smart card feature information refers to information that can identify the smart card, for example, an ICCID (International Circuit Card Identity);

2. In response to the command to read the smart card feature information, the smart card encapsulates its feature information in a response message for reading the smart card feature information command and sends it to the service terminal;

3. The service terminal sends an application download request to the card issuer management platform or the application provider management platform, wherein the application download request carries the feature information of the smart card; and determines whether the download is allowed according to the feature information; Select the security domain responsible for the app download.

Depending on the management platform to which the application belongs and the security domain controller, the application can be divided into a card issuer's own application, an application provider's application hosted by the card issuer, and an application-controlled application. In the present invention, the card issuer can set a certain authority for the application provider according to the size of the application provider, and for the smaller application provider, the card issuer's authorization (for example, a token) is required to access the security domain. The application stored in the operation; for larger application providers, the application can be controlled, managed and maintained by itself without the authorization of the card issuer. In this way, card issuers can flexibly choose how to control the application based on the policy. Therefore, for selecting a security domain, the following processing is included: For the download of the card issuer's own application, the card issuer management platform may select the primary security domain, or may create a secondary security domain for the corresponding application download, which is determined by the card issuer. .

For application downloads by the application provider, whether hosted by the card issuer or controlled by the application provider, proceed as follows:

If no slave security domain is created for the application, the card issuer management platform needs to first select the primary security domain, establish a secure channel with the smart card, create a slave security domain, generate a slave domain security key, and put the slave security domain. The initial key is sent to the application provider management platform; the application provider management platform selects the corresponding slave security domain, establishes a secure channel with the smart card, and updates the slave security domain key;

If the slave security domain has been created for the application, the application provider management platform selects the corresponding slave security domain, establishes a secure channel with the smart card, and updates the slave security domain key;

For applications hosted by card issuers, the corresponding slave security domain needs to have Delegated Management Privilege.

In step S201, the specific process of performing identity authentication and establishing a secure channel between the card issuer management platform or the application provider management platform and the smart card is: The card issuer management platform or the application provider management platform passes the predetermined secure channel protocol. The service terminal and the smart card perform identity authentication and establish a secure channel. The predetermined secure channel protocol can be based on a symmetric key or an asymmetric key mechanism.

The application is downloaded to the smart card, and the specific processing is:

The download command is sent to the smart card through the service terminal.

For the download of the card issuer's own application, the card issuer management platform generates a predetermined command and sends it to the smart card through the card issuer service terminal; for the download of the application controlled by the application provider, the application provider management platform generates the reservation. The command is sent to the smart card through the application provider service terminal; for the application download of the application provider hosted by the card issuer, the application provider management platform needs to apply for a token to the card issuer management platform before generating the predetermined command. Download and install, after receiving the token key from the card issuer management platform, generate a predetermined command (for example, application download command and application installation command) containing the load token Load Token.

The token is specifically associated with the hosted application, which is generated by the card issuer and is evidence that the card issuer authorizes the management of the card content. For application downloads by application providers hosted by card issuers, the application provider can only download new applications to the smart card if authorized by the card issuer.

2. After receiving the predetermined command, the smart card executes the application download and sends the card to the card through the service terminal.

Based on the established secure channel, an application installation command is sent to the smart card to install the application. For a Java Card application, the application install command invokes the application register() on the smart card, registers the payment application instance with the Java Card Runtime Environment (JCRE), and assigns the corresponding application instance AID to the payment application ( Application IDentifer, application ID). After the successful execution of register() on the smart card, the application is successfully installed. The smart card can feed back the installation results. Send predetermined commands to the smart card (including selecting a security domain, establishing a secure channel and applying download commands, applying installation commands, etc.), and the smart card feeds the command response to the card through the service terminal.

The service terminal sends the smart card; the smart card strips the command from the sent data and executes according to the command.

The application provider management platform strips out the response of the command from the received data. When the predetermined command is an application download command, the smart card performs an application download.

The foregoing technical solution of the present invention is described in detail with reference to an example. FIG. 3 is a detailed signaling flowchart of a card issuer's own application downloading and installing according to an embodiment of the present invention. As shown in FIG. 3, the following processing is included. : Step 301: The card issuer service terminal of the card issuer network sends a command to read the smart card feature information to the smart card.

Step 302: After receiving the command to read the smart card feature information, the smart card encapsulates its own feature information in the read smart card feature information response, and then sends the message to the card issuer service terminal.

Step 303: The card issuer service terminal sends an application download request to the card issuer management platform. The requested data needs to include the feature information of the smart card, so that the card issuer management platform can know the smart card that needs to be downloaded by the application.

Step 304: After receiving the application download request, the card issuer management platform determines whether the applied smart card is allowed to perform the application download; if not, rejects the application download; if yes, selects the primary security domain, and the card issuer management platform selects the smart card primary security The selection of the domain SELECT command fills the AID of the primary security domain, encapsulates it according to the predetermined data format, and sends it to the card issuer service terminal; the card issuer service terminal sends the smart card to the smart card according to the predetermined data format. The smart card strips the SELECT command from the received data and selects the primary security domain according to the command. After executing the command, the smart card sends the SELECT response data to the card issuer service terminal in a predetermined data format, and the card issuer service terminal transmits the data to the card issuer management platform.

Step 305: The card issuer management platform establishes a secure channel by using a card issuer service terminal and the smart card according to a predetermined protocol for identity authentication. A series of commands and responses that establish a secure channel are delivered in the same way as the SELECT command above.

Step 306, after the establishment of the secure channel is completed, the card issuer management platform generates an application download command INSTALL[for load] ([for download]), which is sent to the smart card by the card issuer service terminal, and may include multiple pieces according to the application file size. INSTALL[for load] command. After the smart card is completed, the download result is returned to the card issuer management platform through the card issuer business terminal. Commands and responses are passed in the same way as the SELECT command above.

Step 307, the card issuer management platform generates an application installation command INSTALL[for install] [for installation], and sends the card to the smart card through the card issuer service terminal. After the smart card is installed, the installation result is returned to the card issuer management platform through the card issuer business terminal. Commands and responses are passed in the same way as the SELECT command above. And the detailed signaling flow diagram of the installation, as shown in Figure 4, includes the following processing:

Step 401: The card issuer service terminal of the card issuer network sends a command to read the smart card feature information to the smart card.

Step 402: After receiving the smart card feature information command, the smart card encapsulates its own feature information in the read smart card feature information response, and then sends the smart card feature information response to the card issuer service terminal.

Step 403: The card issuer service terminal sends an application download request to the card issuer management platform. The requested data needs to include the feature information of the smart card, so that the card issuer management platform can know the smart card that needs to be downloaded by the application.

Step 404: After receiving the application download request, the card issuer management platform determines whether the applied smart card is allowed to be applied for downloading; if yes, the following operations are continued, otherwise the application download is rejected. If the slave security domain has been created for the application, the card issuer management platform notifies the application provider management platform of the application to be downloaded by the user, and then proceeds to step 406. Otherwise, the card issuer management platform selects the primary security domain and interacts with the smart card. Establish a secure channel, create an initial key from the security domain, and generate it from the security domain.

Step 405: The card issuer management platform sends the slave security initial key to the application provider management platform.

Step 406: The application provider management platform selects a secure channel between the security domain and the smart card, and then updates the security domain key.

Step 407: The application provider management platform applies a token (Token) to the card issuer management platform for application download and installation.

Step 408: The card issuer management platform sends the publisher Token key to the application provider management platform.

Step 409: The application provider management platform generates an application download command INSTALL[for load] ([for downloading]) containing the load token Load Token according to the information such as the publisher Token, and the card issuer management platform and the card issuer service terminal. Send to smart card, depending on the size of the application file, may contain multiple INSTALL[for load] commands. After the smart card receives the application download command, the application download is performed. After the smart card completes the download, the download result is returned to the application provider management platform by the card issuer management platform and the card issuer service terminal. Step 410: The application provider management platform generates an application installation command INSTALL[for install] ([installation]) including a load Token according to the information such as the publisher Token, and sends the smart card to the smart card through the card issuer management platform and the card issuer service terminal. . After the smart card is installed, the installation result is returned to the application provider management platform through the card issuer management platform and the card issuer service terminal. If it includes application status, resource occupancy, version status, and so on. The command and response are delivered in a similar manner to the SELCET command in the embodiment of Figure 3.

FIG. 5 is a detailed signaling flowchart of an application download and installation autonomously controlled by an application provider according to an embodiment of the present invention. As shown in FIG. 5, the following processing is included:

Step 501: The application provider service terminal of the application provider network sends a command to read the smart card feature information to the smart card.

Step 502: After receiving the smart card feature information command, the smart card encapsulates its own feature information in the read smart card feature information response, and then sends the smart card feature information response to the application provider service terminal.

Step 503: The application provider service terminal sends an application download request to the application provider management platform. The requested data needs to include the feature information of the smart card, so that the application provider management platform can know the smart card that needs to be downloaded by the application.

Step 504: After receiving the application download request, the application provider management platform determines whether the applied smart card is allowed to be applied for downloading; if yes, the following operations are continued, otherwise the application download is rejected. If the secondary security zone has been created for the application, then step 506 is entered, otherwise, the secure domain creation request is sent to the card issuer management platform, and the process proceeds to step 505.

Step 505: After receiving the application for creating a security domain from the application provider management platform, the card issuer management platform determines that the secondary security domain is not created for the application, and selects the primary security domain, and establishes mutual authentication and establishes a secure channel with the smart card. Create an initial key from the security domain that is generated from the security domain.

Step 506, the card issuer management platform sends the slave security initial key to the application provider management platform. Step 507: The application provider management platform selects a secure channel between the security domain and the smart card, and then updates the security domain key.

Step 508, the application provider management platform generates an application download command INSTALL[for load] ([for downloading]), and sends the smart card to the smart card through the application provider service terminal, and may include multiple INSTALL[for load] commands according to the application file size. . After the smart card completes the download, the application provides the business terminal to return the download result to the application provider management platform.

Step 509, the application provider management platform generates an application installation command INSTALL[for install]

([for installation]), sent to the smart card through the application provider business terminal. After the smart card is installed, the installation result is returned to the application provider management platform through the service terminal.

The command and response are delivered in a similar manner to the SELCET command in the Figure 3 embodiment.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

Through the application downloading system and method proposed by the present invention, the application can be conveniently downloaded to the smart card according to the management platform to which the application belongs and the security domain control party, thereby improving the user experience.

Claims

Claim

1. A method for downloading an application, comprising:

The card external entity management platform receives an application download request sent by the service terminal, selects a security domain on the smart card that is responsible for application downloading, establishes a secure channel with the smart card, and applies the application based on the secure channel. Download to the smart card.

2. The method of claim 1, wherein the merchant service terminal; or

Supplier business terminal.

3. The method of claim 1, wherein

Card issuer business terminal,

The method is: the card issuer management platform receives the application download request sent by the card issuer service terminal; and the application provider management platform selects a slave security domain on the smart card that is responsible for application downloading, a secure channel, and downloading the application to the smart card based on the secure channel.

4. The method of claim 2 or 3, wherein

The application download request carries smart card feature information,

Card feature information determines whether the application is allowed to be downloaded, wherein

When the judgment result is yes, the responsible terminal on the smart card is selected by the service terminal. The security domain of the application download.

The method of claim 2 or 3, wherein, before the step of receiving the application download request from the service terminal, the method further includes:

The method according to claim 2 or 3, wherein the step of establishing a secure channel between the card issuer management platform or the application provider management platform and the smart card comprises: a protocol, through the service terminal Performing identity authentication with the smart card to establish the secure channel, where

The method according to claim 2 or 3, wherein before the step of downloading an application to the smart card by the external channel management platform, the method further comprises: a predetermined command.

8. The method according to claim 7, wherein the step of the card issuer management platform or the application provider management platform transmitting a predetermined command to the smart card comprises:

Same as 3⁄4t卞 3 corps /1 ^ jn m only ^ r 卞 α 尸ι

After being encapsulated in a predetermined data format, the smart card is sent by the service terminal; and the smart card strips the predetermined command from the transmitted data to perform a corresponding operation according to the predetermined command.

The method of claim 8, wherein after the step of the smart card stripping the predetermined command from the sent data, the method further includes:

The response to the predetermined command is left.

The method of claim 8, wherein the method further comprises: after the step of the application downloading the command, the smart card is stripped of the predetermined command, the method further comprising:

The method of claim 8, wherein the method further comprises: before the step of the card issuer hosting the predetermined command being sent to the smart card by the card issuer, the method further comprising:

Receiving a token key sent by the card issuer management platform, and then the application provider management platform generates a predetermined command including a load token to be sent by the card issuer management platform and the card issuer service terminal Go to the smart card.

12. The method of claim 1, wherein

When the application is a card issuer's own application, the step of the service terminal selecting the security domain on the smart card responsible for the application download includes:

The card issuer management platform selects a primary security domain on the smart card, or the card issuer management platform creates a secondary security domain for the application, and selects the secondary security domain; or

If no security domain is created for the app,

The card issuer management platform selects a primary security domain, establishes a secure channel with the smart card, and creates a slave security domain, generates a slave security domain initial key, and sends the slave security domain initial key to The application provider management platform;

The application provider management platform selects the slave security domain responsible for the application download, and updates the slave security domain key based on the secure channel; or

If you have created a slave security domain for the app, The application provider management platform selects the slave security domain responsible for the application download and updates the slave security domain key based on the secure channel.

13. An application downloading system, comprising an external card management platform, a service terminal, and a smart card; wherein

The card external entity management platform is configured to: receive an application download request sent by the service terminal, and select, by the service terminal, a security domain that is responsible for application downloading on the smart card, after establishing a secure channel with the smart card, And downloading, by the security channel, the application to the smart card; the service terminal is configured to: send the application download request to the card external entity management platform, where the card external entity management platform and the smart card are Transmitting data transparently;

The smart card is configured to: establish a security channel with the card external entity management platform by using the service terminal, and complete an application download operation by using the secure channel.

14. The system according to claim 13, wherein the merchant service terminal, or

The card external entity management platform is an application provider management platform, and the service terminal is an application provider service terminal.

15. The system of claim 13 wherein

When the service terminal is provided, the system further includes a card issuer management platform;

The application provider management platform further includes:

An application module, configured to: send a request to create a security domain from the card issuer management platform when a slave security domain is not created for the application;

The card issuer management platform also includes:

a creating and sending module, configured to receive the slave security domain creation request sent by the application provider management platform, create a slave security domain, generate the slave security domain initial key, and send the slave The secure domain initial key is given to the application provider management platform.

The system of claim 13, wherein the card external entity management platform comprises a card issuer management platform and an application provider management platform, and when the service terminal is a card issuer service terminal,

The card issuer management platform is configured to receive the application download request sent by the card issuer service terminal;

The application provider management platform is configured to: select a slave security zone, establish a secure channel with the smart card by the card issuer management platform and the card issuer service terminal, and set the application based on the secure channel Download to the smart card.

17. The system of claim 16 wherein

The card issuer management platform further includes a create and send module, and the create and send module is configured to:

When the slave security domain is not created for the application, the slave security domain is generated, the slave security domain initial key is generated, and the slave security domain initial key is sent to the application provider management platform;

The application provider management platform further includes a receiving module, and the receiving module is configured to receive the receiving

The system according to any one of claims 14 to 17, wherein the application provider management platform further comprises an update module, the update module being configured to update the slave security domain key corresponding to the application.

19. The system of claim 14 or 15, wherein

Generating a module, which is configured to generate a predetermined command;

a packaging module configured to package the predetermined command in a predetermined data format;

a sending module, configured to send the predetermined command to the smart card by using the service terminal;

The smart card further includes: An execution module is configured to: after receiving the predetermined command, parse the predetermined command, and perform a corresponding operation.

20. The system of claim 16 or 17, wherein

The application provider management platform further includes:

a token application module, configured to: apply a token to the card issuer management platform, and receive a token key sent by the card issuer management platform;

The card issuer management platform also includes:

21. The system of claim 20, wherein

The application provider management platform further includes: a generating module configured to generate a predetermined command including a loading token;

a sending module, configured to: send the predetermined command to the smart card by using the card issuer management platform and the card issuer service terminal; the smart card further includes:

An execution module is configured to: after receiving the predetermined command, parse the predetermined command, and perform a corresponding operation.

22. The system of any one of claims 15 to 17, wherein

The service terminal further includes a feature information reading module, and the feature information reading module is configured to send a read smart card feature information command to the smart card;

23. The system of claim 14 or 15, wherein

The application download request carries smart card feature information, An acquiring module, configured to acquire smart card feature information in the application download request, and a determining module, configured to determine, according to the smart card feature information, whether to allow downloading the application;

And a selection module, configured to: when the determination result of the determining module is yes, select, by the service terminal, a security domain on the smart card that is responsible for the application download.

The system according to any one of claims 14 to 17, wherein the card issuer management platform or the application provider management platform further includes an authentication and establishment module.

The authentication and establishing module is configured to: establish, according to a predetermined secure channel protocol, identity authentication by using the service terminal and the smart card, where