WO2012012964A1

WO2012012964A1 - Wireless communication terminal and method for binding wireless communication terminal with user interface

Info

Publication number: WO2012012964A1
Application number: PCT/CN2010/077053
Authority: WO
Inventors: 谭冠军; 房立军; 李普光
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-07-28
Filing date: 2010-09-17
Publication date: 2012-02-02
Also published as: CN101958969B; CN101958969A

Abstract

The invention discloses a wireless communication terminal and a method for binding the wireless communication with a user interface (UI). After being working normally, the wireless communication terminal and the UI perform periodic interaction of encryption verification with a preassigned key to verify the validity of the other side. With the technical solution of the invention, the one-to-one correspondence between a UI version and a data card software version is enhanced; the UI or data card can not be used normally when the UI version and the data card software version are not matched, and the requirement of an operator for achieving its special services by realizing the binding of the UI version and the data card software is satisfied. Meanwhile, the public key encryption algorithm, the encryption intensity of the algorithm and the time interval of verification can be modified on practical demands, so the practicability and confidentiality are greatly improved and the differentiated demands for various customizations are satisfied.

Description

Wireless communication terminal and method thereof for binding to user interface

The present invention relates to the field of wireless communication technologies, and more particularly to a wireless communication terminal and a method thereof for binding to a user interface (UI, User Interface). Background technique

With the development of wireless communication technologies, wireless communication terminals, especially data cards, have become an important mobile terminal device, and are increasingly used at present. The UI is a PC-side software that interacts with the data card and the user. Data card related services, such as phone book, Internet access, SMS, MMS, voice telephony, video telephony, etc., all interact with the user through the UI; Then, the UI extends the AT through standard AT commands and some data cards. The instructions interact with the data card, and the data card implements these services. In the implementation of the data card, the UI plays an important role. Among them, AT is Attention, AT command set is from terminal equipment (TE, Terminal Equipment) or data terminal equipment (DTE, Data Terminal Equipment), to terminal adapter (TA, Terminal Adapter) or data circuit terminal equipment (DCE, Data Circuit Terminal Equipment ) sent.

In order to better display the characteristics of customized operators, many custom operators have put forward a series of customization requirements for the data card UI, and some even require the display of the operator's advertising business on the UI.

However, the interaction between the UI and the data card is usually done through standard AT commands, so that there are some problems:

The user uses a certain type of data card customized by the operator, but uses a UI that does not match it, and uses the standard AT command. Although the data card can be used normally, some features of the operator in customizing the UI. Business, such as advertising, cannot be reflected.

The user does not use the carrier's customized data card, but uses the UI of the customized data card. Non-customized data cards do not support certain services on the UI, making it impossible for users to use customized

Related services provided on the UI.

This creates the need for the UI and data card to be bound to each other, and the operator has also raised such a need. The UI and data card are bound to each other to prevent any hacker from using any physical or software method to unlock the data card's lock UI function on the available commercial machine. An effective way to solve the above problems is to use the public key cryptosystem (PKI) technology. The current public key cryptosystems generally fall into three categories: large integer decomposition problem class - public key cryptography (RSA) algorithm, discrete logarithm problem class - digital signature algorithm (DSA), elliptic curve class - elliptic curve cryptography ( ECC). The elliptic curve cryptosystem is a system with the highest encryption strength provided by each bit in the public key cryptosystem. However, its mathematical theory is very esoteric and complicated, and it is difficult to implement in engineering applications, but its unit security strength. Relatively high. One of the characteristics of the RSA algorithm is that the mathematical principle is simple and easy to implement in engineering applications, but its unit security strength is relatively low. Summary of the invention

SUMMARY OF THE INVENTION An object of the present invention is to provide a wireless communication terminal and a method thereof for binding to a UI to solve the above problems.

To achieve the above object, the present invention provides a wireless communication terminal that can be bound to a UI. The board side of the data card includes a board side AT command processing module, a board side public key algorithm module, and a board side control module, wherein

The board side AT command processing module is configured to receive and send an AT command from the UI side to the UI side;

The board side public key algorithm module is configured to securely store the public key A and use the public key A to complete the encryption and decryption functions;

The board side control module is configured to complete coordination and control of each module on the board side.

Further, the UI side corresponding to the data card includes a UI control module, a random number generator, a UI side public key algorithm module, and a UI side AT command processing module, where The UI control module is configured to complete coordination and control of each module on the UI side; the random number generator is configured to generate a random number;

The UI side public key algorithm module is configured to securely store the private key B and complete the encryption and decryption functions by using the private key B.

The UI side AT command processing module is configured to receive and send AT commands from the board side to the board side.

Further, the wireless communication terminal further includes a board-side timer module, configured to determine a result of reporting the encrypted random number to the UI within a time range of the timer.

Further, the interaction process between the wireless terminal and the UI is as follows: On the board side of the wireless communication terminal, the board side public key algorithm module is specifically configured to encrypt the plaintext information by using the public key A to obtain ciphertext information, ciphertext The information is transmitted to the UI side. Correspondingly, the UI side public key algorithm module is specifically configured to decrypt the received ciphertext information through the private key B, and finally obtain the plaintext information on the UI side;

On the UI side, the UI side public key algorithm module is specifically configured to encrypt the plaintext information by using the private key B to obtain the ciphertext information, and the ciphertext information is transmitted to the data card board side; correspondingly, the board side is disclosed. The key algorithm module is specifically configured to decrypt the received ciphertext information through the public key A, and finally obtain the plaintext information on the data card board side.

Further, the UI side public key algorithm module is further configured to: after starting and completing its own initialization work and identifying that the data card completes the initialization interaction process, transition to a normal working mode, and generate a timer to generate a random number. S uses the key S to encrypt the random number to generate an encryption result (S), and notifies the data card side software by means of the AT command by S and (S).

Further, the board side public key algorithm module is further configured to switch to a normal working mode after completing the initialization operation after the data card side software starts, and generate a timer ^; if the data card side software is in the timer ⁷ ^ Receive S and use its own key within the time range A respectively encrypts the result of S and decryption) and ^D (S)). If 3⁄4 and S are the same, the data card side software will return to the UI by means of the AT command, and the data card judges that the UI corresponds to the data card software. UI, the data card side works normally, otherwise, the data card side enters the abnormal working mode; the UI receives the decryption with its own key s in the timer ⁷ ^ time range (^0^, if ¹ ^^ ^" and the same, the UI judges that the data card is the data card side software that is compatible with the UI, and the UI works normally. Otherwise, the UI enters the abnormal working mode.

In addition, the present invention also provides a method for binding a wireless communication terminal to a UI, which includes a wireless communication terminal and a UI performing a regular encryption and verification interaction using a pre-assigned key pair after the normal operation of the UI, to insure the other party's Correctness.

Further, the interaction process between the wireless terminal and the UI includes: on the side of the wireless communication terminal board, the plaintext information is encrypted by the public key A to obtain the ciphertext information, the ciphertext information is transmitted to the UI side, and then decrypted by the private key B, and finally The UI side obtains the plaintext information; the interaction process between the UI side and the data card board side is: On the UI side, the plaintext information is encrypted by the private key B to obtain the ciphertext information, the ciphertext information is transmitted to the data card board side, and then the public key is passed. A decryption, and finally get the plaintext information on the data card board side.

Further, the method further includes: the UI transitioning to a normal working mode after starting and completing its own initialization work and identifying that the data card completes the initialization interaction process, generating a timer, generating a random number S, and using the key S Encryption operation on the random number produces an encryption result ^E B , and notifies the data card side software by means of the AT command by S and E _B (S).

Further, the method further includes: after the data card side software starts and completes its own initialization work, and then transitions to a normal working mode, and generates a timer if the data card side software receives the S in the timer ⁷ ^ time range and utilizes The result of the own key is encrypted S and decrypted (S) respectively (5) and if it is the same as S, the data card side software will return to the UI through the AT command, and the data card determines that the UI corresponds to the data card software. UI, the data card side works normally, otherwise, the data card side enters the abnormal working mode; The UI receives the decryption using its own key s to obtain ^D B ( ^E A (S)) within the timer ⁷ ^ time range. If ^(^(^ and the same, _m determines that the data card is the data associated with the UI) The card side software, the UI works normally, otherwise, the UI enters the abnormal working mode.

In summary, the technical solution of the present invention enhances the correspondence between the UI version and the data card software version. When the UI version and the data card software version do not match, the UI or the data card cannot be used normally, and the carrier is satisfied. Implement UI binding and data card software version binding to achieve the needs of its special business. At the same time, the public key encryption algorithm and its encryption strength and check interval can be modified according to actual needs, which greatly enhances the practicability and confidentiality, and satisfies various customization requirements. DRAWINGS

1 is a schematic diagram of a data card board side to UI side encryption and decryption process according to an embodiment of the present invention; FIG. 2 is a schematic diagram of a data card UI side to board side encryption and decryption process according to an embodiment of the present invention; FIG. 3 is a data card in an embodiment of the present invention; FIG. 4 is a schematic diagram of processing after the UI side and the data card side begin to interact in the UI and the data card board side in the embodiment of the present invention;

FIG. 5 is a flowchart of processing after power-on of the data card board side in which the UI and the data card board side are mutually bound in the embodiment of the present invention. detailed description

The present invention provides a wireless communication terminal and a method thereof for binding to a UI.

The principle of implementing the corresponding binding is that the wireless communication terminal and the UI use the pre-assigned key pair to perform regular encryption and verification interaction after the normal operation, to verify the correctness of the other party, and to ensure the correspondence between the UI and the wireless communication terminal. , achieve mutual binding.

The present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. In this embodiment, the wireless communication terminal uses a data card as an example for description. As shown in FIG. 1 and FIG. 2, a schematic diagram of the encryption and decryption process from the data card board side to the UI side and the UI side to the board side of the present invention using the public key encryption algorithm is shown.

As can be seen from Figure 1, the interaction between the data card board side and the UI side is: On the board side, the plaintext information is encrypted by the public key A to obtain the ciphertext information, the ciphertext information is transmitted to the UI side, and then decrypted by the private key B. Finally, the plaintext information is obtained on the UI side.

As shown in Figure 2, the interaction between the UI side and the data card board side is: On the UI side, the plaintext information is encrypted by the private key B to obtain ciphertext information, and the ciphertext information is transmitted to the data card board side, and then the public key A is passed. Decrypt, and finally get the plaintext information on the data card board side.

In the present invention, the network operator or the data card manufacturer generates a pair of asymmetric key pairs, stores the public key A in the software of the data card board side, and stores the private key B in the UI software.

After the UI starts, it completes its initialization work and recognizes that the data card completes the initialization interaction process and then switches to the normal working mode. At the same time, a timer is generated to generate a random number S and the random number is encrypted by the key S to generate an encryption result. (S), and the random number S and the encryption result OS) are notified to the data card side software by means of the AT command.

After the data card side software is started, it will enter the normal working mode after completing its own initialization work, and a timer ^ is generated at the same time; if the data card side software receives the random number s and the encryption result (s) within the timer ^ time range, the use The public key of its own ^ encrypts the random number s and decrypts the result (S) and ^D obtained by the encryption result (S) generated by the UI side, if ^D and random number

If S is the same, the data card side software will return to the UI through the AT command. The data card judgment UI is the UI corresponding to the data card software, and the data card side works normally. Otherwise, the data card side enters the abnormal working mode.

The UI receives the decryption using its own private key s within the timer ⁷ ^ time range.

^D B ( ^£ A (S)) ^ If Α ( 0 ^ and random number S are the same, the UI judges that the data card is the data card side software associated with the UI, and the UI works normally. Otherwise, the UI enters the abnormal working mode. The public key encryption algorithm used and the timing of the timer ι / ² can be changed according to the needs of the UI and the data card's customizer to meet the needs of differentiation and personalization.

The data card and UI start the next timing check immediately after the end of one calibration during normal operation, thus ensuring regular verification of the UI and data card.

The invention fully utilizes the characteristics that the public key and the private key of the public key encryption algorithm are separately stored, and can simultaneously perform encryption and signature to perform the anti-counterfeiting and confidentiality of the information, and realizes the mutual encryption and verification of the data card and the UI. The interaction, to verify the correctness of the other party, to ensure that the UI and the data card - the correspondence, the realization of the mutual binding. Moreover, the time interval of the public key encryption algorithm and the verification of the binding is modified according to actual needs, which greatly enhances the practicability and confidentiality; the feature that the public key encryption algorithm can be publicized by the public key encryption algorithm is greatly increased. The security and operability of data card and UI mutual verification meets the needs of various customizations.

The network operator or data card manufacturer generates a pair of asymmetric key pairs using a public key encryption algorithm selected by itself: the public key and the private key store the public key in the data card side software, and the private key S Stored in the UI software.

As shown in FIG. 3, it is a schematic block diagram of each functional module on the UI side and the board side of the data card in this embodiment. The UI side of the data card includes a UI side timer module 301, a UI control module 302 (complete coordination and control of each module on the UI side), a random number generator 303 (generating a random number), and a UI side public key algorithm module 304 (security The private key S is stored and the encryption and decryption functions are completed using the private key S. The UI work module 305 (completes the basic function of the data card UI side) and the UI side AT command processing module 306 (responsible for receiving and transmitting the AT from the board side to the board side) Command).

The board side of the data card includes a board side AT command processing module 307 (responsible for receiving and sending AT commands from the UI side), a board side public key algorithm module 308 (secure storage public key, and using the public key to complete encryption and decryption functions). ), the board side working module 309 (completes the basic function on the data card board side), the board side timer module 310, and the board side control module 311 (completes coordination and control of each board side panel). As shown in FIG. 4, the processing flow after the UI side software of the embodiment starts interacting with the data card board side includes the following steps:

Step 401: Each module on the UI side completes its own initialization and interacts with the data card board side to process the normal working mode.

Step 402: The UI public key encryption algorithm module generates a random number S and sends the random number S to the UI side public key encryption algorithm module.

Step 403: The UI side public key encryption algorithm module encrypts the random number with the self key S to obtain the encryption result, and sends the random number S and the encryption result thereof to the UI side AT command processing module. Step 404: UI side AT command processing The module sends the random number S and its encryption result to the data card board side through the AT command mode and starts the timer ⁷ ^

Step 405: If the data card board side reports the result of the UI encryption random number to the UI within the timer ⁷ ^ time range, the process proceeds to step 406, otherwise, the process proceeds to step 410.

Step 406: The UI side AT command processing module sends the received encrypted random number to the UI side encryption algorithm module.

Step 407: The UI side encryption algorithm module decrypts the encrypted random number reported by the data card board side with the key B.

Step 408: If the UI control module determines that the encryption result reported by the data card board side is correct, proceed to step 409, otherwise proceed to step 410.

Step 409: The UI determines that the data card at this time is a data card bound to it, allows the user to perform other normal operations, and returns to step 402 to start the next verification work.

Step 410: The UI determines that the data card at this time is not a data card bound to the data card, and prohibits the user from performing other normal operations.

As shown in FIG. 5, the data card board side in the embodiment is processed after power-on, and includes: Step 501: Each module on the data card board is powered on to complete its initialization and then enters a normal working mode. Step 502: After the data card board side enters the normal working mode, the board side control module starts the timer τ ₂ . Step 503: If the data card receives the result of the random number encryption sent by the UI within the timer ⁷ ^ time range, the process proceeds to step 504, otherwise, the process proceeds to step 510.

Step 504: The data card board side AT command processing module sends the encrypted random number sent by the received UI to the board side encryption algorithm module.

Step 505: The data card board side encryption algorithm module uses the own key to decrypt the encrypted random number sent by the UI.

Step 506: The board-side control module determines that if the random number decrypted by the data card board side is consistent with the random number sent by the UI, the process proceeds to step 507, otherwise, the process proceeds to step 510.

Step 507: The data card board side encryption algorithm module uses the key to encrypt the random number sent by the UI and sends the encryption result to the board side AT command processing module.

Step 508: The board side AT command processing module sends the encryption result to the UI side AT command processing module.

Step 509: The board side control module determines that the UI at this time is a UI bound to the UI, allows the user to perform normal operations, and returns to step 502 to start the next verification work.

Step 510: The board side control module determines that the UI at this time is not the UI bound to the UI, and prohibits the user from performing normal operations.

The technical solution of the present invention enhances the one-to-one correspondence between the UI version and the data card software version. When the UI version and the data card software version do not match, the UI and the data card cannot be used normally, and the operator implements the UI version and The data card software version is bundled to fulfill its special business needs.

At the same time, the public key encryption algorithm and its encryption strength and check interval can be modified according to actual needs, which greatly enhances the practicability and confidentiality, and can be used to meet the needs of various customizations.

Of course, the invention may be embodied in a variety of embodiments without departing from the spirit and scope of the invention.

All modifications, equivalent substitutions and improvements made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Claim

A wireless communication terminal, wherein the board side of the data card comprises a board side AT command processing module, a board side public key algorithm module, and a board side control module, wherein

The board side AT command processing module is configured to receive and send an AT command from the UI side of the interface and to the UI side;

A board-side public key algorithm module for securely storing the public key A and using the public key to perform encryption and decryption functions;

The board side control module is used to complete the coordination and control of each module on the board side.

2. The wireless communication terminal according to claim 1, wherein: the UI side corresponding to the data card comprises a UI control module, a random number generator, a UI side public key algorithm module, and a UI side AT command processing module. , among them,

a UI control module, configured to complete coordination and control of each module on the UI side;

a random number generator for generating a random number;

The UI side public key algorithm module is configured to securely store the private key s and use the private key S to complete the encryption and decryption functions;

The wireless communication terminal according to claim 1 or 2, wherein: the wireless communication terminal further includes a board-side timer module, configured to determine that the UI encrypted random number is reported in a timer ⁷ ^ time range. result.

The wireless communication terminal according to claim 2, wherein: on the board side of the wireless communication terminal, the board side public key algorithm module is specifically configured to encrypt the plaintext information by using the public key A to obtain the ciphertext information. The ciphertext information is transmitted to the UI side. Correspondingly, the UI side public key algorithm module is specifically configured to decrypt the received ciphertext information through the private key B, and finally obtain the plaintext information on the UI side;

On the UI side, the UI side public key algorithm module is specifically configured to use the plaintext information The private key B is encrypted to obtain the ciphertext information, and the ciphertext information is transmitted to the data card board side. Correspondingly, the board side public key algorithm module is specifically configured to decrypt the received ciphertext information through the public key A. Finally, the plaintext information is obtained on the data card board side.

The wireless communication terminal according to claim 3, wherein: the UI side public key algorithm module is further configured to: after starting and completing its own initialization work and identifying that the data card completes the initialization interaction process, In the normal working mode, a timer is generated to generate a random number s and the random number is encrypted by using the key β to generate an encryption result (s), and the data card side software is notified by s and by the AT command.

The wireless communication terminal according to claim 3, wherein: the board side public key algorithm module is further configured to switch to a normal working mode after the data card side software starts to complete its own initialization work, and simultaneously generate A timer if the data card side software receives S in the timer ^ time range and encrypts S with its own key and decrypts the result OS) and 3⁄4 ( 09)), if 3⁄4 ( 09)) and the same, Then, the data card side software returns O^ to the UI through the AT command, and the data card determines that the UI is the UI corresponding to the data card software, and the data card side works normally; otherwise, the data card side enters the abnormal working mode; In the timer ^T , the time range received ^ W, decrypted with its own key S to get ^D KSy>, if A ((S) and S are the same, judge the data card is the data card side software associated with the UI, the UI is normal Work, otherwise, the UI enters an abnormal working mode.

A method for binding a wireless communication terminal to a UI, characterized in that, after the wireless communication terminal and the UI are working normally, the interaction of the encryption and verification is performed by using a pre-assigned key pair to authenticate the other party. Correctness.

8. The method according to claim 7, wherein: the interaction between the wireless terminal and the UI comprises: on the side of the wireless communication terminal board, the plaintext information is encrypted by the public key A to obtain ciphertext information, and the ciphertext information is transmitted to the UI. Side, then decrypted by the private key B, and finally get the plaintext information on the UI side; The interaction between the UI side and the data card board side is: On the UI side, the plaintext information is encrypted by the private key B to obtain the ciphertext information, the ciphertext information is transmitted to the data card board side, and then decrypted by the public key A, and finally in the data. The card side receives plaintext information.

9. The method according to claim 7, wherein the method further comprises: after the UI starts and completes its initialization work and recognizes that the data card completes the initialization interaction process, and then transitions to a normal working mode, and simultaneously generates a The timer generates a random number S and encrypts the random number using the key S to generate an encryption result (S), and notifies the data card side software by means of the AT command by S and (S).

10. The method according to claim 7, wherein: the method further comprises: the data card side software starting and completing its own initialization work, then transferring to a normal working mode, and generating a timer

If the data card side software receives S in the timer ⁷ ^ time range and encrypts S and decrypts ^E B, ^S respectively using its own key, the obtained results W and ^D A ( ^ES , if (09)) and the same, Then, the data card side software returns (S) to the UI through the _AT command, and the data card determines that the UI is the UI corresponding to the data card software, and the data card side works normally; otherwise, the data card side enters the abnormal working mode;

The UI receives the decryption using its own key s in the timer ⁷ ^ time range (^0^, if Α (0 ^ and S are the same, the UI determines that the data card is the data card side software associated with the UI, UI) Normal work, otherwise, the UI enters an abnormal working mode.