WO2014015827A1

WO2014015827A1 - Method for authentication of ic card and security information interactive terminal, ic card, and security information interactive terminal

Info

Publication number: WO2014015827A1
Application number: PCT/CN2013/080167
Authority: WO
Inventors: 钟国业; 吴金坛; 万高峰
Original assignee: 中国银联股份有限公司
Priority date: 2012-07-27
Filing date: 2013-07-26
Publication date: 2014-01-30
Also published as: CN103580862A

Abstract

The present invention provides a method for offline authentication of an IC card and a security information interactive terminal, and an IC card and a security information interactive terminal that are capable of using the method. The method comprises: after a data communication link is established between an IC card and a security information interactive terminal, the security information interactive terminal sending an authentication instruction to the IC card, so as to perform an authentication process on the security information interactive terminal, the authentication process being performed in an offline state. The disclosed method for offline authentication of an IC card and a security information interactive terminal, and the disclosed IC card and security information interactive terminal that are capable of using the method achieve enhanced security.

Description

Authentication method for IC card and security information interactive terminal, and IC card and security information interaction end

Technical field

The present invention relates to an authentication method and an IC card and an information interaction terminal, and more particularly to an offline authentication method for an IC card and a security information interaction terminal, and an IC card and a security information interaction terminal. Background technique

At present, with the increasing use of IC cards and the increasing variety of services in different fields, security information (ie, security) between IC cards (such as transportation cards) and security information interaction terminals (such as POS machines) It is becoming more and more common to require higher information, such as passwords, to interact (especially in the case of offline security information interactions) to implement different applications (such as traffic card recharge).

However, in the existing security information interaction system, the IC card and the security information interaction terminal are not legally executed before the security information interaction (for example, the offline recharge operation of the traffic card) in the related offline situation is performed. Sex check or perform a validity check in a symmetric authentication manner (exemplarily, in the current technical solution, when performing an offline operation (such as recharge), a PSAM card for storing a symmetric key needs to be placed on the terminal. (Terminal Secure Access Module), however. The PSAM card is exposed to the terminal and is highly vulnerable to attack, while key management (such as transmission, distribution, update, recycling, etc.) is complicated, thereby limiting the use of cards across regions). This leads to the following potential security risks: Forged unauthorized terminals (such as POS machines) can interact with the IC card (such as a transportation card) for security information in the offline situation (for example, perform an offline refill operation of the traffic card).

Therefore, there is a need to provide a method for offline authentication of an IC card and a security information interactive terminal, and an IC card and a security information interactive terminal capable of using the method. Summary of the invention

In order to solve the problems of the above prior art solutions, the present invention proposes a method for offline authentication of an IC card and a security information interactive terminal, and an ic card and security information interaction terminal capable of using the method.

The object of the invention is achieved by the following technical solutions: An IC card, the IC card comprising:

a communication interface, the communication interface is configured to establish a data communication link between the IC card and the security information interaction terminal;

An authentication unit, configured to receive and process an authentication command from the security information interaction terminal after the data communication link has been established between the IC card and the security information interaction terminal, to perform the security The authentication process of the sexual information interaction terminal, and transmitting the authentication result back to the security information interaction terminal;

a main controller, configured to receive a security information interaction request from the security information interaction terminal after the authentication through the security information interaction terminal, and load a corresponding application to perform a subsequent security information interaction process ;

a memory for storing at least one application and parameters associated with the authentication;

The authentication process for the security information interaction terminal is performed in an offline situation. In the solution disclosed above, preferably, the authentication command includes a terminal record read command, a card random number acquisition command, and an internal authentication command.

In the solution disclosed above, preferably, the parameter associated with the authentication includes a certificate authority public key and a card authentication support capability flag, and the value of the card authentication support capability flag indicates that the IC card is offline The ability to authenticate support.

In the solution disclosed above, preferably, after receiving the terminal record read command from the security information interaction terminal, the authentication unit parses the certificate center public key index from the terminal record read command. a universal service provider public key certificate and a terminal public key certificate, and obtaining a certificate authority public key stored in the memory by the certificate authority public key index, the authentication unit further based on the certificate center public key and the Recovering the generic service provider public key certificate and recovering the generic service refers to the terminal public key in the terminal public key certificate, and the authentication unit then sends the terminal record read response back to the security information interactive terminal.

In the solution disclosed above, preferably, if the card authentication support capability flag indicates that the I C card does not support offline authentication, the IC card does not perform the offline authentication process.

In the solution disclosed above, preferably, the main controller is further used if the unauthenticated pass After the security information interaction terminal terminates the security information interaction process with the security information interaction terminal.

In the solution disclosed above, preferably, after receiving the card random number acquisition command from the security information interaction terminal, the authentication unit generates a card random number, and transmits the card random number acquisition response back to the The security information interaction terminal, wherein the card random number acquisition response includes the card random number and ATC (ie, an application transaction counter).

In the solution disclosed above, preferably, after receiving the internal authentication command from the security information interaction terminal, the authentication unit parses the dynamic signature data from the internal authentication command, and uses the terminal The public key verifies the dynamic signature data, and if the verification passes, sends an internal authentication response indicating "authentication success" to the security information interaction terminal, and if the verification fails, sends the security information to the security information interaction terminal An internal authentication response indicating "authentication failure" is terminated, and the security information interaction process with the security information interaction terminal is terminated.

In the solution disclosed above, preferably, the authentication process is performed using an asymmetric key algorithm. The object of the invention can also be achieved by the following technical solutions:

A security information interaction terminal, where the security information interaction terminal includes:

An authentication module, configured to send an authentication command to the IC card after the security information interaction terminal and the IC card have established a data communication link to perform authentication on the security information interaction terminal Process

a main control module, configured to send a security information interaction request to the IC card after the authentication is passed, to complete a subsequent security information interaction process;

a storage module, where the storage module is configured to store parameters associated with the authentication;

Wherein, the authentication process is performed in an offline situation.

In the solution disclosed above, preferably, the authentication command includes a terminal record read command, a card random number acquisition command, and an internal authentication command.

In the solution disclosed above, preferably, the parameters associated with the authentication include a universal service provider public key certificate, a terminal public key certificate, a terminal private key, a certificate authority public key index, and a terminal authentication support capability flag. And an authentication execution flag and a certificate unexecuted flag, where the value of the terminal authentication support capability flag indicates the capability of the security information interaction terminal to support offline authentication, and the value of the authentication execution flag indicates interaction with the security information. Offline authentication of the terminal has been executed and passed, the recognition The value of the certificate unexecuted flag indicates that the dynamic signature of the security information interaction terminal has not been verified.

In the solution disclosed above, preferably, after the data communication link has been established between the IC card and the security information interaction terminal, the authentication module sends a terminal record read command to the IC card. The terminal record read command includes a certificate center public key index, a universal service provider public key certificate, and a terminal public key certificate.

In the solution disclosed above, preferably, after receiving the read response from the terminal of the IC card, the authentication module transmits a card random number acquisition command to the IC card.

In the solution disclosed above, preferably, after receiving the card random number acquisition response from the IC card, the authentication module generates the generated card random number and ATC (ie, application transaction counter) and terminal data. Dynamically signing data, and transmitting an internal authentication command to the IC card, wherein the internal authentication command includes the dynamic signature data.

In the solution disclosed above, preferably, after receiving the internal authentication response from the IC card, if the internal authentication response indicates "authentication succeeded", the authentication module sets the value of the authentication execution flag It is set to "authentication has been executed", and if the internal authentication response indicates "authentication failure", the authentication module sets the value of the authentication unexecuted flag to "authentication is not performed,".

In the solution disclosed above, preferably, if the value of the terminal authentication support capability flag indicates that the security information interaction terminal does not support offline authentication, the security information interaction terminal does not perform the offline authentication. process.

In the solution disclosed above, preferably, the main control module is further configured to terminate the security information interaction process with the IC card if the offline authentication fails.

A method for offline authentication of an IC card and a security information interaction terminal, the method for offline authentication of an IC card and a security information interaction terminal includes the following steps:

(A1) After the data communication link has been established between the IC card and the security information interaction terminal, the security information interaction terminal sends an authentication instruction to the IC card to perform authentication on the security information interaction terminal. The process, wherein the authentication process is performed in an offline situation.

(A2) after the authentication is passed, the security information interaction terminal passes through the IC card The subsequent data communication process completes the subsequent security information interaction process.

The method for offline authentication of an ic card and a security information interactive terminal disclosed by the present invention and an IC card and a security information interaction terminal capable of using the method have the following advantages: due to security in performing related offline situations The validity check of the terminal is performed before the sexual information is exchanged, so that enhanced security can be obtained, thereby avoiding potential security risks (for example, using a forged security information interactive terminal to complete the security information interaction process). DRAWINGS

The technical features and advantages of the present invention will be better understood by those skilled in the art, in which:

1 is a schematic structural diagram of a security information interaction system including an ic card and a security information interaction terminal according to an embodiment of the present invention;

2 is a flow chart of a method for offline authentication of an IC card and a security information interaction terminal in accordance with an embodiment of the present invention. detailed description

1 is a schematic structural diagram of a security information interaction system including an ic card and a security information interaction terminal according to an embodiment of the present invention. As shown in Fig. 1, the IC card 1 disclosed in the present invention includes a main controller 3, an authentication unit 4, a memory 5, and a communication interface 6. The communication interface 6 is used to establish a data communication link between the IC card 1 and the security information interaction terminal 2 (for example, bringing an IC card close to or contacting a security information interaction terminal). The authentication unit 4 is configured to receive and process an authentication command from the security information interaction terminal 2 after the data communication link has been established between the IC card 1 and the security information interaction terminal 2, and execute the The security information exchanges the authentication process of the terminal 2 and transmits the authentication result back to the security information interactive terminal 2. The main controller 3 is configured to receive a security information interaction request from the security information interaction terminal 2 after the authentication through the security information interaction terminal 2, and load a corresponding application to perform a subsequent security information interaction process. (eg offline recharge operation). The memory 5 is for storing at least one application and parameters associated with the authentication. The authentication process for the security information interaction terminal 2 is performed in the case of offline.

Preferably, in the IC card 1 disclosed in the present invention, the authentication command includes a terminal recording and reading life. Order, card random number acquisition command and internal authentication command.

Preferably, in the IC card 1 disclosed in the present invention, the parameter associated with the authentication includes a certification center (ie, CA, which is a third-party authentication service provider as known to those skilled in the art). The key and the card authentication support capability flag indicate that the value of the card authentication support capability flag indicates the ability of the IC card 1 to support offline authentication (ie, whether offline authentication is supported).

Preferably, in the IC card 1 disclosed in the present invention, after receiving a terminal recording read command from the security information interactive terminal 2, the authentication unit 4 parses out from the terminal record read command. a certificate authority public key index (CPKI), a universal service provider (eg, UnionPay) public key certificate, and a terminal public key certificate, and are stored in the memory 5 by the certificate authority public key index (and application provider identifier CRID) In the certificate authority public key, the authentication unit 4 further restores the universal service provider public key based on the certificate authority public key and the universal service provider public key certificate (for example, obtaining the terminal public key certificate) The terminal public key, the authentication unit 4 then sends a terminal record read response back to the security information interactive terminal 2.

Illustratively, in the IC card 1 disclosed in the present invention, the step of recovering the universal service provider public key comprises: a) checking whether the common service provider public key certificate and the certificate center public key have the same modulus length; b) performing a recovery operation on the universal service provider public key certificate by using the certificate authority public key to obtain the universal service provider public key; c) checking whether the following items in the recovery data are correct: the recovered data tail, the restored data header , certificate format, generic service provider identity, certificate validity period, and generic service provider algorithm identification; d) calculating the hash result of the static authentication data and comparing it with the hash result recovered from the certificate to determine whether it is consistent; e) The modulo portion of the generic service provider public key in the recovered data is combined with the remainder portion (if any) to obtain a generic service provider public key.

Illustratively, in the IC card 1 disclosed in the present invention, the step of recovering the terminal public key in the terminal public key certificate comprises: a) checking the public key certificate of the terminal and the public key of the universal service provider The data in the long public key certificate; c) Check whether the following items in the recovered data are correct: recovered data tail, recovered data header, certificate format, certificate validity period, terminal key algorithm identifier; d) sequentially connected from the terminal The data recovered by the public key certificate, the record data for dynamic data authentication specified by the IC card 1 and the terminal, and the hash result thereof are calculated; e) the calculated hash result is recovered from the terminal public key certificate. If the hash results are compared, if they are inconsistent, the authentication fails; f) Combine the modulo part of the terminal public key in the recovered data with the remainder part (if any) to obtain the terminal public key.

Preferably, in the IC card 1 disclosed in the present invention, if the card authentication support capability flag indicates that the IC card 1 does not support offline authentication, the IC card 1 does not execute the offline authentication process.

Preferably, in the IC card 1 disclosed in the present invention, the main controller 3 is further configured to terminate the security of the interactive terminal 2 with the security information if the security information interaction terminal 2 is not authenticated. Information interaction process.

Preferably, in the IC card 1 disclosed in the present invention, after receiving the card random number acquisition command from the security information interaction terminal 2, the authentication unit 4 generates a card random number, and acquires the card random number. The response is transmitted back to the security information interactive terminal 2, wherein the card random number acquisition response includes the card random number and ATC (ie, an application transaction counter).

Preferably, in the IC card 1 disclosed in the present invention, after receiving an internal authentication command from the security information interactive terminal 2, the authentication unit 4 parses the dynamic signature data from the internal authentication command. And verifying the dynamic signature data by using the terminal public key, and sending an internal authentication response indicating "authentication success" to the security information interaction terminal 2 if the verification is passed, and if the verification fails, The security information interaction terminal 2 transmits an internal authentication response indicating "authentication failure", and terminates the security information interaction process with the security information interaction terminal 2.

Illustratively, in the IC card 1 disclosed in the present invention, the step of verifying the dynamic signature data comprises: a) checking whether the dynamic application data in the dynamic signature data and the modulus of the terminal public key are the same length b) recovering the dynamic application data in the dynamic signature data by using the terminal public key; c) checking whether the following items in the recovered data are correct: recovered data tail, recovered data header, data format; d And sequentially connecting the data recovered from the dynamic signature data, the card random number and the ATC (application transaction counter), and calculating a hash result thereof; e) calculating the calculated hash result from the dynamic signature The hash results recovered in the data are compared, and if they are inconsistent, the verification fails.

As seen above, preferably, in the IC card 1 disclosed in the present invention, the authentication process is performed using an asymmetric key algorithm.

As shown in FIG. 1, the security information interaction terminal 2 disclosed by the present invention includes a main control module 7, an authentication module 8, and a storage module 9. The authentication module 8 is configured to send an authentication command to the IC card 1 after the security information interaction terminal 2 and the IC card 1 have established a data communication link to execute the The authentication process of the security information interaction terminal 2. The main control module 7 is configured to send a security information interaction request to the IC card 1 after the authentication is passed, to complete the security information interaction process. The storage module 9 is configured to store parameters associated with the authentication. Wherein, the authentication process is performed in an offline situation.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, the authentication command includes a terminal record read command, a card random number acquisition command, and an internal authentication command.

Preferably, in the security information interaction terminal 2 disclosed by the present invention, the parameters associated with the authentication include a universal service provider (eg, UnionPay) public key certificate, a terminal public key certificate, a terminal private key, and authentication. a central public key index (CPKI), a terminal authentication support capability flag, an authentication execution flag, and an authentication unexecuted flag, the value of the terminal authentication support capability flag indicating the capability of the security information interaction terminal 2 to support offline authentication (ie, Whether the offline authentication is supported, the value of the authentication execution flag indicates that the offline authentication of the security information interaction terminal 2 has been executed and passed, and the value of the authentication unexecuted flag indicates the security information interaction terminal The dynamic signature of 2 was not verified.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, after the data communication link has been established between the IC card 1 and the security information interaction terminal 2, the authentication module 8 is The IC card 1 sends a terminal record read command, wherein the terminal record read command includes a certificate authority public key index (CPKI), a universal service provider (eg, UnionPay) public key certificate, and a terminal public key certificate.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, after receiving the read response from the terminal of the IC card 1, the authentication module 8 sends the card random number acquisition to the IC card 1. command.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, after receiving the card random number acquisition response from the IC card 1, the authentication module 8 is based on the parsed card random number and ATC (application) Transaction counter) and terminal data (exemplarily, the terminal data may include a merchant code, a terminal code, a transaction date, a transaction time, a terminal serial number, a terminal unpredictable number, etc.) generate dynamic signature data, and send the dynamic signature data to the IC card 2 transmitting an internal authentication command, where the internal authentication command includes the dynamic signature data.

Illustratively, in the security information interaction terminal 2 disclosed in the present invention, the step of generating dynamic signature data includes: a) connecting card data (ie, card random number and ATC) and specified terminal data to form a dynamic application. Data; b) perform hashing with the data connected in the previous step; c) will hash The calculation result is included in the dynamic application data; d) signing the dynamic application data by using a terminal private key to form dynamic signature data; e) carrying the dynamic signature data in the internal authentication command.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, after receiving the internal authentication response from the IC card 1, if the internal authentication response indicates "authentication succeeded", the authentication module 8 Setting the value of the authentication execution flag to "authentication has been performed" (eg, setting its value to "1"), and if the internal authentication response indicates "authentication failure", the authentication module 8 will The value of the authentication unexecuted flag is set to "Authentication not executed through" (for example, setting its value to "1").

Preferably, in the security information interaction terminal 2 disclosed in the present invention, if the value of the terminal authentication support capability flag indicates that the security information interaction terminal 2 does not support offline authentication, the security information interaction terminal 2 The offline authentication process is not performed.

Preferably, in the security information interaction terminal 2 disclosed in the present invention, the main control module 7 is further configured to terminate the security information interaction process with the IC card 1 if the offline authentication fails.

As apparent from the above, preferably, in the security information interactive terminal 2 disclosed in the present invention, the authentication process is performed using an asymmetric key algorithm.

Optionally, the security information interaction terminal 2 disclosed by the present invention may specify card data required to construct the dynamic signature data by using a dynamic data object list (exemplarily, the card data includes a card random number and an ATC) (application transaction counter)).

2 is a flow chart of a method for offline authentication of an IC card and a security information interaction terminal in accordance with an embodiment of the present invention. As shown in FIG. 2, the method for offline authentication of an IC card and a security information interaction terminal disclosed by the present invention includes the following steps: (A1) A data communication has been established between the IC card and the security information interaction terminal. After the link, the security information interaction terminal sends an authentication instruction to the IC card to perform an authentication process on the security information interaction terminal; (A2) after the authentication is passed, the security information interaction terminal Subsequent security information interaction processes (eg, offline refill operations) are accomplished through further data communication with the IC card. Wherein, the authentication process is performed in an offline situation.

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the authentication instruction includes a terminal record read command, a card random number acquisition command, and an internal recognition. Certificate order.

Preferably, in the method for offline authentication of an IC card and a security information interactive terminal disclosed by the present invention, the following parameters associated with the authentication are used: a certification center (ie, CA, as one skilled in the art) It is known that it is a third-party authentication service provider) public key, universal service provider (such as UnionPay) public key certificate, terminal public key certificate, terminal private key, and certificate authority public key index (CPK I ).

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal, the step (A1) further includes: interacting with the security card at the IC card and the security information terminal After the data communication link has been established, the security information interaction terminal sends a terminal record read command to the IC card, where the terminal record read command includes a certificate center public key index (CPK I ), and a universal Service provider (such as UnionPay) public key certificate and terminal public key certificate.

Preferably, in the method for offline authentication of the IC card and the security information interaction terminal disclosed in the present invention, the step (A1) further includes: when receiving the terminal record from the security information interaction terminal After reading the command, the IC card parses the certificate center public key index (CPK I ), the universal service provider (eg, UnionPay) public key certificate, and the terminal public key certificate from the terminal record read command, and passes the The certificate authority public key index (and the application provider identifier CRI D ) acquires a certificate authority public key, and the IC card further restores the universal service provider based on the certificate authority public key and the universal service provider public key certificate a public key (eg, a UnionPay public key), and verifying the terminal public key certificate based on the universal service provider public key to recover the terminal public key in the terminal public key certificate, and the IC card then reads the terminal record The response is sent back to the security information interactive terminal.

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the step (A1) further includes: recording a read response at a terminal receiving the IC card Thereafter, the security information interaction terminal sends a card random number acquisition command to the IC card.

Illustratively, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the step of recovering the public service provider public key includes: a) checking the general service provider public Whether the key certificate is the same as the modulus length of the certificate authority public key; b) performing a recovery operation on the universal service provider public key certificate by using the certificate authority public key to obtain the universal service provider public key; c) checking the following in the recovery data Whether the item is correct: recovered data tail, recovered data header, certificate format, universal service provider ID, certificate validity period, and generic service provider algorithm ID; d) Calculate the hash result of static authentication data, and recover from the certificate The hash results are compared to determine if they are consistent; e) The modulo portion of the generic service provider public key in the recovered data is combined with the remainder portion (if any) to obtain the generic service provider public key.

Illustratively, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the step of recovering the terminal public key in the terminal public key certificate comprises: a) checking Whether the terminal public key certificate is the same as the common service provider public key; b) recovering the terminal public key certificate by using the universal service provider public key to obtain the data in the terminal public key certificate; C) checking the recovered data Whether the following items are correct: recovered data tail, recovered data header, certificate format, certificate validity period, terminal key algorithm identifier; d) sequentially connect the data recovered from the terminal public key certificate, and the IC card 1 and the terminal jointly The specified record data for dynamic data authentication, calculate its hash result; e) compare the calculated hash result with the hash result recovered from the terminal public key certificate, if not, the authentication fails; The modulo portion of the terminal public key in the recovered data is combined with the remainder (if any) to obtain the terminal public key.

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal, the step (A1) further includes: when receiving a card random from the security information interaction terminal After the number acquisition command, the IC card generates a card random number, and transmits a card random number acquisition response back to the security information interaction terminal, where the card random number acquisition response includes the card random number and ATC (application) Transaction counter).

Preferably, in the method for offline authentication of the IC card and the security information interaction terminal disclosed in the present invention, the step (A1) further includes: obtaining a response to the card random number received from the IC card Thereafter, the security information interaction terminal is based on the parsed card random number and ATC (application transaction counter) and terminal data (exemplarily, the terminal data may include a merchant code, a terminal code, a transaction date, a transaction time, a terminal The serial number, the terminal unpredictable number, and the like generate dynamic signature data, and send an internal authentication command to the IC card, wherein the internal authentication command includes the dynamic signature data.

Illustratively, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the step of generating dynamic signature data includes: a) connecting card data (ie, card random number and ATC) And the specified terminal data to constitute the dynamic application data; b) perform the hash operation using the data connected in the previous step; c) include the hash operation result in the dynamic application data; d) use the terminal private Carrying the dynamic signature data in the middle.

Preferably, in the method for offline authentication of the IC card and the security information interaction terminal disclosed in the present invention, the step (A1) further includes: when receiving the internal authentication from the security information interaction terminal After the command, the IC card parses the dynamic signature data from the internal authentication command, and verifies the dynamic signature data using the terminal public key, and sends an indication to the security information interaction terminal if the verification passes "Authenticated authentication" internal authentication response, and if the verification fails, transmitting an internal authentication response indicating "authentication failure" to the security information interaction terminal, and terminating the security information interaction with the security information interaction terminal process.

Illustratively, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, the step of verifying the dynamic signature data comprises: a) checking the dynamic signature data Whether the length of the dynamic application data and the modulus of the terminal public key is the same; b) recovering the dynamic application data in the dynamic signature data by using the terminal public key; c) checking whether the following items in the restored data are correct: Data tail, recovered data header, data format; d) sequentially connecting data recovered from the dynamic signature data, the card random number and ATC (application transaction counter), and calculating a hash result thereof; e) The calculated hash result is compared with the hash result recovered from the dynamic signature data, and if not, the verification fails.

Preferably, in the method for offline authentication of the IC card and the security information interaction terminal disclosed in the present invention, the step (A1) further includes: after receiving an internal authentication response from the IC card, If the internal authentication response indicates "authentication is successful", the security information interaction terminal sets the value of the authentication execution flag in the security information interaction terminal to "authentication has been executed" (eg, setting its value to "1"), and if the internal authentication response indicates "authentication failure", the security information interaction terminal sets the value of the authentication unexecuted flag in the security information interaction terminal to "authentication not executed" (For example, set its value to "1").

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, if the value of the terminal authentication support capability flag in the security information interaction terminal indicates the security information The interactive terminal does not support offline authentication, and the security information interaction terminal does not perform the offline authentication process.

Preferably, in the method for offline authentication of an IC card and a security information interactive terminal disclosed in the present invention, if the value of the card authentication support capability flag in the IC card indicates that the IC card is not supported With offline authentication, the IC card 1 does not perform the offline authentication process.

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, if the security information interaction terminal is not authenticated, the IC card is terminated and the security is terminated. The security information interaction process of the information interaction terminal.

Preferably, in the method for offline authentication of an IC card and a security information interaction terminal disclosed in the present invention, if the offline authentication fails, the security information interaction terminal terminates with the

IC card security information interaction process.

As apparent from the above, preferably, in the method for offline authentication of the IC card and the security information interactive terminal disclosed in the present invention, the authentication process is performed using an asymmetric key algorithm.

Optionally, in the method for offline authentication of the IC card and the security information interaction terminal disclosed in the present invention, the card data required to construct the dynamic signature data may be specified in a manner of a dynamic data object list (example Optionally, the card data includes a card random number and an ATC (Application Transaction Counter).

Although the invention has been described in terms of the preferred embodiments described above, the implementations are not limited to the embodiments described above. It should be appreciated that, without departing from the spirit and scope of the invention,

Claims

Rights request

An IC card, the IC card comprising:

The authentication process for the security information interaction terminal is performed in an offline situation.

The IC card according to claim 1, wherein the authentication command comprises a terminal record read command, a card random number acquisition command, and an internal authentication command.

The IC card according to claim 2, wherein the parameter associated with the authentication comprises a certificate authority public key and a card authentication support capability flag, and the value of the card authentication support capability flag indicates the IC card 1's ability to support offline authentication.

The IC card according to claim 3, wherein the authentication unit parses out from the terminal record read command after receiving a terminal record read command from the security information interaction terminal a certificate authority public key index, a universal service provider public key certificate, and a terminal public key certificate, and obtaining a certificate authority public key stored in the memory by the certificate authority public key index, the authentication unit further based on the authentication Recovering the universal service provider public key by the central public key and the universal service provider public key certificate, and verifying the terminal public key certificate based on the universal service provider public key to recover the obtained terminal public key certificate The terminal public key, the authentication unit then sends a terminal record read response back to the security information interactive terminal.

5. The IC card according to claim 4, wherein if said card authentication support can The force flag indicates that the IC card does not support offline authentication, and the IC card does not perform the offline authentication process.

The IC card according to claim 5, wherein the main controller is further configured to terminate the security information of the terminal interacting with the security information if the security information is not authenticated. Interaction process.

The IC card according to claim 6, wherein, after receiving the card random number acquisition command from the security information interaction terminal, the authentication unit generates a card random number, and acquires the card random number The response is transmitted back to the security information interaction terminal, wherein the card random number acquisition response includes the card random number and an application transaction counter (ATC).

The IC card according to claim 7, wherein the authentication unit parses the dynamic signature data from the internal authentication command after receiving an internal authentication command from the security information interaction terminal, And verifying the dynamic signature data by using the terminal public key, and sending an internal authentication response indicating "authentication success" to the security information interaction terminal if the verification is passed, and if the verification fails, the security is The sexual information interaction terminal transmits an internal authentication response indicating "authentication failure", and terminates the security information interaction process with the security information interaction terminal.

9. The IC card according to claim 8, wherein the authentication process is performed using an asymmetric key algorithm.

Wherein, the authentication process is performed in an offline situation.

The security information interaction terminal according to claim 10, wherein the authentication command comprises a terminal record read command, a card random number acquisition command, and an internal authentication command.

The security information interaction terminal according to claim 11, wherein the parameters associated with the authentication include a universal service provider public key certificate, a terminal public key certificate, a terminal private key, and a certificate authority Key index, terminal authentication support capability flag, authentication execution flag, and authentication unexecuted flag. The value of the terminal authentication support capability flag indicates the capability of the security information interaction terminal to support offline authentication, and the value of the authentication execution flag indicates that offline authentication of the security information interaction terminal has been executed and passed The value of the authentication unexecuted flag indicates that the dynamic signature of the security information interaction terminal is not verified.

The security information interaction terminal according to claim 12, wherein after the data communication link has been established between the IC card and the security information interaction terminal, the authentication module is The IC card transmitting terminal records the read command, wherein the terminal record read command includes a certificate center public key index, a universal service provider public key certificate, and a terminal public key certificate.

The security information interaction terminal according to claim 13, wherein the authentication module sends a card random number acquisition command to the IC card after receiving a record reading response from the terminal of the IC card. .

The security information interaction terminal according to claim 14, wherein the authentication module is based on the parsed card random number and the application transaction counter after receiving the card random number acquisition response from the IC card. TC) and terminal data generate dynamic signature data, and send an internal authentication command to the IC card, wherein the internal authentication command includes the dynamic signature data.

The security information interaction terminal according to claim 15, wherein after the internal authentication response from the IC card is received, if the internal authentication response indicates "authentication succeeded", the authentication module Setting the value of the authentication execution flag to "authentication has been executed", and if the internal authentication response indicates "authentication failure", the authentication module sets the value of the authentication unexecuted flag to "authentication not performed" by".

The security information interaction terminal according to claim 16, wherein the security information interaction is performed if the value of the terminal authentication support capability flag indicates that the security information interaction terminal does not support offline authentication. The terminal does not perform the offline authentication process.

The security information interaction terminal according to claim 17, wherein the main control module is further configured to terminate the security information interaction process with the IC card if the offline authentication fails.

19. The security information interaction terminal according to claim 18, wherein the authentication process is performed using an asymmetric key algorithm.

20. A method for offline authentication of an IC card and a security information interaction terminal, the The method for offline authentication of the IC card and the security information interactive terminal includes the following steps:

(A1) After the data communication link has been established between the IC card and the security information interaction terminal, the security information interaction terminal sends an authentication instruction to the IC card to perform authentication on the security information interaction terminal. a process, wherein the authentication process is performed in an offline situation;

(A2) After the authentication is passed, the security information interaction terminal completes the subsequent security information interaction process by further data communication with the IC card.