WO2012022078A1

WO2012022078A1 - Data card and using method thereof

Info

Publication number: WO2012022078A1
Application number: PCT/CN2010/078792
Authority: WO
Inventors: 肖龙安
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-08-18
Filing date: 2010-11-16
Publication date: 2012-02-23
Also published as: CN102377752A

Abstract

A method for using a data card is provided in this invention, and the data card is connected with a terminal device. The method includes the following steps: a user starts a security application of the data card, and the terminal device determines whether the user has passed the logon authentication or not according to whether a user identification in an activated state exists in the data card; if the user identification in the activated state exists, it means that the user has passed the logon authentication, then the security application of the data card is accomplished. Otherwise, after the user realizing the logon authentication, the security application of the data card is accomplished. A data card is also provided in this invention. The data card of this invention not only has the function of radio network access, but also has the function of security application.

Description

Data card and method of using same

The present invention relates to a wireless terminal access device, and in particular, to a data card and a method for using the same. Background technique

The rapid spread of computer technology and network technology has greatly changed people's life and production methods. While enjoying the convenience brought by computers and the Internet, people also face a large number of security issues related to electronic data, such as theft of personal electronic data of users. Or medium virus and so on. The security of electronic data is becoming increasingly prominent.

In addition, since the data card has high-speed wireless network access and is easy to carry, it is increasingly favored by users. However, the existing data card has a relatively simple function: generally only has wireless network access, so its application is limited. Summary of the invention

In view of this, it is a primary object of the present invention to provide a data card having a secure application function and a method of using the same.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

A method for using a data card, the data card is connected to a terminal device, and the data card receives user identity authentication information preset by a user sent by the terminal device, and stores the user identity authentication information preset by the user and the pre- The user identifier corresponding to the user identity authentication information; the usage method includes:

The user enables the security application of the data card, and the terminal device determines, according to whether the user identifier in the activated state exists in the data card, whether the user has passed the login authentication, and if there is a user identifier in the activated state, indicating that the user The user has passed the login authentication. Then, the security application of the data card is completed; otherwise, after the user implements the login authentication, the security application of the data card is completed.

Further, the user identifier is pre-allocated by the data card or generated according to preset user identity authentication information.

Further, the security application of the data card is enabled by the user: the user selects the electronic data on the terminal device for encryption;

The process of completing the security application of the data card includes:

Transmitting, by the terminal device, electronic data that needs to be encrypted to the data card;

The data card generates a user encryption key according to the user identity in the activated state and the user identity authentication information corresponding to the user identity in the activated state, and uses the generated user encryption key to receive the received electronic data. Encrypting is performed, and the activated user identifier is added to the encrypted electronic data; the data card transmits back the encrypted electronic data carrying the activated user identifier to the terminal device.

Further, the security application of the user to enable the data card is: the user selects to decrypt the encrypted electronic data on the terminal device;

The process of completing the security application of the data card includes: the terminal device transmitting the encrypted electronic data to the data card;

When the data card determines that the user identifier carried in the encrypted electronic data matches the user identifier in the activated state, according to the user identifier in the activated state and the user identifier in the activated state The user identity authentication information generates a user decryption key, and decrypts the encrypted electronic data by using the generated user decryption key, and transmits the decrypted electronic data back to the terminal device.

Further, the process of login authentication includes:

The terminal device prompts the user to input user identity authentication information; after the user inputs the user identity authentication information, the terminal device transmits the input user identity authentication information Giving the data card;

The data card matches the input user identity authentication information with the user identity authentication information preset by the user. If the matching is successful, the data card uses the user identifier corresponding to the preset user identity authentication information. And the terminal device prompts that the user login authentication succeeds; otherwise, the terminal device prompts the user that the login authentication fails.

The method of using further comprises:

When the user quits the security application of the data card, the terminal device sends an exit command to the data card, and the data card deactivates the activated user identifier according to the received exit command, and deletes the User encryption key.

The method of using further comprises:

When the user quits the security application of the data card, the terminal device sends an exit command to the data card, and the data card deactivates the activated user identifier according to the received exit command, and deletes the The user decrypts the key.

Further, the user identity authentication information is a password set by the user, fingerprint information of the user, pupil information of the user, facial information of the user, or voice information of the user.

A data card, connected to a terminal device, wherein the data card comprises: a security storage module, a security authentication module, a data encryption and decryption module, and a communication interface module; wherein, the security storage module is configured to receive the terminal device via the communication interface User preset information sent by the module, and storing the user identity authentication information preset by the user and the user identifier corresponding to the preset user identity authentication information;

a data encryption/decryption module, configured to: when the user identifier in the activated state exists in the security authentication module, receive the electronic data that needs to be encrypted transmitted by the terminal device via the communication interface module, and notify the security authentication module to generate a user encryption key; The generated user encryption key encrypts the electronic data that needs to be encrypted, and adds the activated user identifier to the encrypted electronic data, and carries the encrypted identifier of the activated user identifier. Electronic data is transmitted back to the terminal device via the communication interface module;

a security authentication module, configured to implement login authentication of the user, and generate a user encryption key and transmit the data to the data encryption and decryption according to the user identity in the activated state and the user identity authentication information corresponding to the activated user identity. Module.

Further, the data encryption and decryption module is further configured to: when the user identifier in the activated state exists in the security authentication module, receive the encrypted electronic data sent by the terminal device via the communication interface module, and when the encrypted When the user identifier carried in the electronic data matches the activated user identifier, the security authentication module is notified to generate a user decryption key; and the encrypted electronic data is also decrypted according to the generated user decryption key. Decrypting electronic data is transmitted back to the terminal device via the communication interface module;

The security authentication module is further configured to: generate a user decryption key according to the user identity in the activated state and user identity authentication information corresponding to the activated user identity, and transmit the data to the data encryption and decryption module.

Further, when implementing the login authentication of the user, the security authentication module is configured to: receive user identity authentication information input by the terminal device via the communication interface module, and determine the input user identity authentication information and the user When the preset user identity authentication information is matched, the user identifier corresponding to the preset user identity authentication information is set to an active state.

As can be seen from the above technical solution, the present invention improves the existing data card to enable it to encrypt or decrypt the electronic data, so that the data card not only has the wireless network access function but also has the security application function. The security application function of the data card of the invention is simple to implement and flexible to use, and thus is advantageous for expanding the application of the data card. DRAWINGS

1 is a schematic structural view of a data card of the present invention;

2 is a schematic flow chart of encrypting electronic data by using a data card according to the present invention;

3 is a schematic flow chart of decrypting electronic data by using a data card according to the present invention; FIG. 4 is a schematic flowchart of user login authentication in a security application function of a data card according to the present invention. detailed description

The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings.

The basic idea of the present invention is to: expand the function of the existing data card to have not only the wireless network access function, but also the security application function, so that the data card not only becomes a wireless terminal access device, but also becomes a personal information security terminal.

The data card of the present invention is used in connection with an external terminal device. It should be understood that the connected terminal device is equipped with software corresponding to the data card. As shown in FIG. 1, the software includes a data card security application module.

The terminal device includes, but is not limited to, a desktop, a notebook, a netbook, a palmtop, or a smart terminal.

As shown in FIG. 1, the data card of the present invention includes: a security storage module, a security authentication module, a data encryption and decryption module, and a communication interface module;

a security storage module, configured to receive user preset authentication information sent by the terminal device via the communication interface module, and store the user identity authentication information preset by the user and the user identifier corresponding to the preset user identity authentication information The user identifier is pre-allocated by the data card or generated according to preset user identity authentication information;

a data encryption/decryption module, configured to: when the user identifier in the activated state exists in the security authentication module, receive the electronic data that needs to be encrypted transmitted by the terminal device via the communication interface module, and notify the security authentication module to generate a user encryption key; Generating the user encryption key to encrypt the electronic data to be encrypted, and adding the activated user identifier to the encrypted electronic data, and transmitting the encrypted electronic data carrying the activated user identifier Transmitting the communication interface module to the terminal device;

a security authentication module, configured to implement login authentication of the user, and is activated according to the The user identifier and the user identity authentication information corresponding to the activated user identifier generate a user encryption key and transmit the data to the data encryption and decryption module.

Further, the security authentication module is further configured to: after receiving the exit command sent by the terminal device, deactivate the user ID in the activated state, and delete the user encryption key or the user decryption key.

The communication interface module is configured to connect the data card with the terminal device, and perform data transmission and command interaction between the two. The communication interface module includes but is not limited to one or more of a USB interface, an IEEE1394 interface, a Bluetooth interface, an infrared interface, a wired wide area/LAN interface, and a wireless wide area/local area network interface.

Before using the security application function of the data card, the user identity authentication information needs to be preset. The process of presetting the user identity authentication information includes:

After the data card is connected to the external terminal device, the user should first enable the security of the data card. When the function is used, the data card security application module on the terminal device prompts the user to preset the user identity authentication information;

The user inputs the preset user identity authentication information into the terminal device through the input module of the terminal device; wherein, the input module includes but is not limited to a keyboard, a mouse, a fingerprint collection input device, an image collection input device, or a voice input device; The identity authentication information may be user-specific information such as a password set by the user, fingerprint information of the user, pupil information of the user, facial information of the user, or voice information of the user.

The data card security application module on the terminal device transmits the preset user identity authentication information to the secure storage module of the data card via the communication interface module of the data card, and the security storage module stores the preset user identity authentication information and the corresponding User ID.

The secure storage module of the data card can store identity authentication information of multiple users, and can use the user identifier to distinguish identity authentication information of different users. The user identification may be pre-allocated by the data card, or may generate a corresponding user identification based on the preset user identity authentication information.

The security application function of the data card mainly includes two aspects: encryption storage and decryption of electronic data.

The flow of encrypting and storing electronic data by the data card will be described below with reference to FIG. The electronic data is located on an external terminal device connected to the data card.

Step 201: The user selects electronic data on the terminal device for encryption.

For example, choose to encrypt files such as text, pictures, audio, or video.

Step 202: According to whether the user identity of the activated state exists in the security authentication module, the data card security application module determines whether the user has passed the login authentication. If the user identity of the activated state does not exist in the security authentication module, the user does not log in. If the authentication is performed, go to step 203; otherwise, go to step 204;

There is only one user ID in the active authentication module. Step 203: The data card security application module prompts the user to perform login authentication. If the user login authentication succeeds, step 204 is performed; otherwise, the process ends.

Step 204: The data card security application module transmits the encrypted electronic data to the data encryption/decryption module of the data card via the communication interface module of the data card.

Step 205: The data encryption and decryption module notifies the security authentication module to generate a user encryption key. Step 206: The security authentication module generates a user encryption key according to the user identifier in the activated state and the user identity authentication information corresponding to the user identity in the activated state, and transmits the user encryption key to the data encryption and decryption module.

The user identity authentication information is preset in the security storage module, and the security authentication module reads the user identity authentication information corresponding to the activated user identity from the security storage module.

Step 207: The data encryption and decryption module encrypts the electronic data by using the received user encryption key, and adds a corresponding user identifier to the encrypted electronic data. The corresponding user identifier is the currently identified user ID.

Step 208: The data encryption/decryption module returns the encrypted electronic data carrying the user identifier to the terminal device connected to the data card for storage via the communication interface module.

The flow of decrypting the electronic data by the data card will be described below with reference to FIG. The electronic data is located on an external terminal device connected to the data card.

Step 301: The user selects to decrypt the encrypted electronic data on the terminal device; for example, selecting to decrypt the encrypted text, picture, audio or video file. Step 302: According to whether the user identifier of the active state exists in the security authentication module, the data card security application module determines whether the user has passed the login authentication. If the user identifier in the active authentication module does not exist, the user does not log in. If the authentication is performed, go to step 303; otherwise, go to step 304;

There is only one user ID in the active authentication module. Step 303: The data card security application module prompts the user to perform login authentication. If the user login authentication succeeds, step 304 is performed; otherwise, the process ends.

Step 304: The data card security application module transmits the encrypted electronic data to the data encryption and decryption module of the data card via the communication interface module of the data card.

Step 305: The data encryption/decryption module reads the user identifier in the activated state from the security authentication module, and matches the user identifier carried in the encrypted electronic data with the user identifier in the activated state. If the matching succeeds, the step is performed. 306; Otherwise, the user is prompted to decrypt and the process ends.

Step 306: The data encryption and decryption module notifies the security authentication module to generate a user decryption key. Step 307: The security authentication module generates a user decryption key according to the user identifier in the activated state and the user identity authentication information corresponding to the user identity in the activated state, and transmits the user decryption key to the data encryption and decryption module.

It will be appreciated that the user decryption key is the same as the user encryption key used to encrypt the electronic data.

Step 308: The data encryption and decryption module decrypts the encrypted electronic data by using the received user decryption key.

Step 309: The data encryption/decryption module returns the decrypted electronic data to the external terminal device connected to the data card via the communication interface module, so that the user can use the electronic data.

In the above encryption and decryption process, the encryption and decryption algorithm used is determined in advance by the manufacturer of the data card, and the electronic data can be encrypted and decrypted by software, and the electronic data can be encrypted and decrypted by hardware. According to the above encryption and decryption process, after the data card is connected to the external terminal device, when the user enables the security application of the data card, the user needs to perform login authentication. If the login authentication or login authentication fails, the system cannot be used. Data card encryption or decryption. The login authentication process of the user will be described below with reference to FIG.

Step 401: The data card security application module prompts the user to input the user identity authentication information. Step 402: The user inputs its identity authentication information into the terminal device through an input module of the terminal device connected to the data card.

The input user identity authentication information may be user-specific information such as a password set by the user, fingerprint information of the user, pupil information of the user, facial information of the user, or voice information of the user.

Step 403: The data card security application module on the terminal device transmits the input user identity authentication information to the security authentication module via the communication interface module in the data card.

Step 404: The security authentication module reads the user identity authentication information preset by the user from the security storage module, and matches the input user identity authentication information with the preset user identity authentication information. If the matching fails, the data card security application module The user is prompted to log in to the authentication failure, and the process ends; otherwise, step 405 is performed;

In step 404, when the user identity authentication information is matched, the matching algorithm used is determined by the manufacturer of the data card, and may be matched by software or matched by hardware.

Step 405: The security authentication module sets the user identifier corresponding to the preset user identity authentication information to an active state, and the data card security application module prompts the user that the login authentication succeeds, and the process ends.

After the user login authentication succeeds, the user ID corresponding to the user is in the active state; it should be understood that only one user ID is active at the same time.

In addition, when the user exits the security application of the data card, the data card security application module sends an exit command to the security authentication module via the communication interface module of the data card, and the security authentication module deactivates the activated user identifier according to the received exit command. And delete the encryption process The user encryption key generated in the user or the user decryption key generated during the decryption process, so as to prevent others from illegally using the security application function of the data card.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A method of using a data card, wherein the data card is connected to a terminal device, wherein the data card receives user identity authentication information preset by a user sent by the terminal device, and stores the user identity preset by the user. Authentication information and a user identifier corresponding to the preset user identity authentication information;

The method of use includes:

The user enables the security application of the data card, and the terminal device determines, according to whether the user identifier in the activated state exists in the data card, whether the user has passed the login authentication, and if there is a user identifier in the activated state, indicating that the user After the user has passed the login authentication, the security application of the data card is completed; otherwise, the user implements the login authentication, and then completes the security application of the data card.

2. The method of using a data card according to claim 1, wherein the user identification is pre-allocated by the data card or generated according to preset user identity authentication information.

The method of using the data card according to claim 1, wherein the user enables the security application of the data card to: the user selects the electronic data on the terminal device to perform a security policy;

The process of completing the security application of the data card includes:

The method for using the data card according to claim 1, wherein the security application of the user to enable the data card is: the user selects an encrypted device on the terminal device Decoding electronic data;

The method of using the data card according to claim 3 or 4, wherein the process of login authentication comprises:

The terminal device prompts the user to input user identity authentication information; after the user inputs the user identity authentication information, the terminal device transmits the input user identity authentication information to the data card;

The method of using the data card according to claim 3, wherein the using method further comprises:

The method of using the data card according to claim 4, wherein the using method further comprises:

When the user quits the security application of the data card, the terminal device sends the data card to the data card. Sending an exit command, the data card deactivates the activated user identifier according to the received exit command, and deletes the user decryption key.

The method for using a data card according to claim 1, wherein the user identity authentication information is a password set by a user, fingerprint information of the user, pupil information of the user, facial information of the user, or voice of the user. information.

A data card, connected to the terminal device, wherein the data card comprises: a security storage module, a security authentication module, a data encryption and decryption module, and a communication interface module; wherein the security storage module is configured to receive the terminal device via The user identity authentication information preset by the user sent by the communication interface module, and storing the user identity authentication information preset by the user and the user identifier corresponding to the preset user identity authentication information;

The data card according to claim 9, wherein the data encryption and decryption module is further configured to: when the user identifier in the activated state exists in the security authentication module, the receiving terminal device transmits the information through the communication interface module. Encrypted electronic data, and when the user identifier carried in the encrypted electronic data matches the activated user identifier, notifying the secure authentication module to generate a user decryption key; and further generating a user decryption key according to the generated Decrypting the encrypted electronic data, and transmitting the decrypted electronic data via a communication interface module Returning to the terminal device;

The data card according to claim 9 or 10, wherein the security authentication module is configured to: receive user identity authentication input by the terminal device via the communication interface module when implementing login authentication of the user The information, and when it is determined that the input user identity authentication information matches the user identity authentication information preset by the user, the user identifier corresponding to the preset user identity authentication information is set to an active state.