WO2014121721A1

WO2014121721A1 - Smart card with electronic signature function, and smart card transaction system and method

Info

Publication number: WO2014121721A1
Application number: PCT/CN2014/071657
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2013-02-06
Filing date: 2014-01-28
Publication date: 2014-08-14

Abstract

Disclosed are a smart card with an electronic signature function, and a smart card transaction system and method. The method comprises: A. a smart card accessing a terminal and receiving a transaction packet; B. the smart card generating a joint password; C. the smart card generating a signature packet according to the transaction packet and the joint password; D. the smart card at least sending the signature packet to the terminal; E. the terminal acquiring an authentication password, and at least sending the transaction packet, the signature packet, and the authentication password to a background system server; and F. the background system server authenticating the signature packet and the authentication password, and executing a transaction operation according to the transaction packet after the authentication succeeds.

Description

Smart card with electronic signature function, smart card transaction system and method

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a smart card, a smart card transaction system, and a transaction method having an electronic signature function. Background technique

Today, credit card spending has become mainstream. The following process is used to implement electronic signature transactions:

Step S101: The user accesses the terminal in a non-contact manner by using a card. The non-contact mode may be any non-contact mode such as radio frequency, Bluetooth, or NFC.

Step S102: The terminal sends the transaction information to the smart card accessed by the user. The transaction information may include at least an account number and an amount, and may further include transaction detail information.

Step S103, the smart card receives the transaction information, displays the transaction information, and after the user confirms that the transaction information is correct, receives the confirmation password input by the user, and signs the transaction information;

Step S104: The smart card accesses the terminal again in a non-contact manner, and sends the signature information to the terminal.

Step S105: The terminal uploads the transaction information and the signature information to the bank server, so that the bank server executes the transaction according to the transaction information.

It can be seen that the existing smart card needs to perform at least two accesses with the terminal in a non-contact manner in the process of signing the transaction information, so that there is a problem that the transaction information and/or the signature information are hijacked during the access process. , causing user losses and low security. Summary of the invention

The invention aims to solve the problem that the security of the existing smart card is not high due to the hijacking of transaction information and/or signature information in the multiple access process.

It is an object of the present invention to provide a smart card transaction method having an electronic signature function.

Another object of the present invention is to provide a smart card having an electronic signature function.

It is still another object of the present invention to provide a smart card transaction system having an electronic signature function.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

The invention provides a smart card transaction method with an electronic signature function, the method comprising:

A. A smart card access terminal having an electronic signature function, receiving a transaction message;

B. The smart card generates a joint password;

C. The smart card generates a signature message according to the transaction packet and the joint password. D. The smart card sends at least the signature message to the terminal;

E. The terminal obtains a verification password, and sends the transaction message, the signature message, and the verification password to the background system server. The verification password is obtained by scanning, by the terminal, the information displayed by the smart card. a joint password, or a joint password obtained from the smart card by the terminal in a contactless communication manner;

F. The background system server verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, the step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the joint password to obtain an encrypted joint password;

The smart card signs the summary information of the transaction message and the encrypted joint password to generate a signature message. In addition, the step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the combined password and a combination of random numbers to obtain an encrypted joint password;

The smart card signs the summary information of the transaction message and the encrypted joint password to generate a signature message. In addition, in the step D, the smart card further sends the encrypted joint password and the signed message to the terminal;

In the step E, the terminal further sends the encrypted joint password, the transaction message, the signature message, and the joint password to the backend system server.

In addition, the step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the joint password to obtain an encrypted joint password, and calculates summary information of the encrypted joint password;

The smart card signs the summary information of the transaction message and the summary information of the encrypted joint password to generate a signature message.

In addition, in the step D, the smart card further sends the summary information of the encrypted joint password and the signed message to the terminal;

In the step E, the terminal sends the summary information of the joint password, the transaction message, the signature message, and the joint password to the backend system server.

In addition, between the step D and the step E, the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message; The smart card receives a confirmation password and/or a confirmation command input through a button;

The smart card displays the joint password.

Another aspect of the present invention provides a smart card transaction system with an electronic signature function, the system comprising: a terminal, a background system server, and a smart card having an electronic signature function;

The smart card accesses the terminal, receives a transaction message, generates a joint password, generates a signature message according to the transaction message and the combined password, and sends the signature message to the terminal at least;

The terminal obtains a verification password, and sends the transaction message, the signature message, and the verification password to the background system server; the verification password is obtained by scanning, by the terminal, the information displayed by the smart card. a joint password, or a joint password obtained from the smart card by the terminal in a contactless communication manner;

The background system server verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, the smart card includes: a transceiver module, a password generation module, a signature module, and a display module;

The transceiver module is configured to receive a transaction message and send the transaction message to the signature module; the transceiver module sends the joint password obtained from the password generation module to the terminal in a contactless communication manner;

The password generating module is configured to generate a joint password, and send the signature to the signature module and the display module. The signature module generates a signature message according to the transaction packet and the joint password, and passes the transceiver module. Sending at least the signed message to the terminal.

In addition, the smart card includes: a transceiver module, a password generation module, a signature module, a display module, and a graphics generation module;

The transceiver module is configured to access a terminal, receive a transaction message, and send the message to the signature module;

The password generating module is configured to generate a joint password, and send the signature to the signature module and the display module. The signature module generates a signature message according to the transaction packet and the joint password, and passes the transceiver module. Sending at least the signature message to the terminal;

The graphics generation module generates a barcode or a picture according to the joint password acquired from the password generation module, and outputs the barcode or the image to the display module for display.

In addition, the terminal acquires the verification password from the smart card in a contactless communication manner.

Further, the terminal acquires the verification password by scanning a barcode or a picture displayed by the display module of the smart card.

In addition, the smart card further includes: a button module;

The button module triggers the display module to display the joint password according to the received confirmation password and/or confirmation command. In addition, the transceiver module further disconnects the terminal after sending the signature message to the terminal; the display module further displays after the transceiver module disconnects from the terminal. The transaction message.

A further aspect of the present invention provides a smart card transaction method with an electronic signature function, the method comprising: A', a smart card access terminal having an electronic signature function, and receiving a transaction message;

B', the smart card generates a joint password, and generates an encrypted joint password according to at least the joint password;

C', the smart card generates a signature message according to the transaction message;

D', the smart card sends the signature message and the encrypted joint password to the terminal;

E', the terminal acquires a verification password, and sends at least the transaction message, the signature message, the verification password, and the encrypted joint password to a background system server; the verification password is scanned by the terminal a joint password obtained by the information displayed by the smart card, or a joint password obtained by the terminal from the smart card in a contactless communication manner; F', the background system server respectively verifying the signature message and the verification password And after the verification is passed, the transaction operation is performed according to the transaction message.

In addition, generating the encrypted joint password according to at least the joint password according to step B' includes:

The smart card encrypts the combination of the joint password and the random number to obtain an encrypted joint password; or the smart card encrypts the joint password by using symmetric encryption or asymmetric encryption to obtain an encrypted joint password. In addition, the step C' includes:

The smart card calculates summary information of the transaction message, and signs the summary information of the transaction message to generate a signature message.

In addition, between the step D' and the step E', the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message;

The smart card receives a confirmation password and/or a confirmation command input through a button;

The smart card displays the joint password.

Another aspect of the present invention provides a smart card transaction system having an electronic signature function, the system comprising: a terminal, a background system server, and a smart card having an electronic signature function;

The smart card accesses the terminal, receives a transaction message, generates a joint password, generates an encrypted joint password according to the joint password, generates a signature message according to the transaction message code, and generates the signature message and the Sending an encrypted joint password to the terminal;

The terminal obtains a verification password, and sends the transaction message, the signature message, the verification password, and the encrypted joint password to the background system server; the verification password is scanned by the terminal. a joint password obtained by the smart card to display information, or a joint password obtained by the terminal from the smart card in a contactless communication manner; The background system server respectively verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, the smart card includes: a transceiver module, a password generation module, an encryption module, a signature module, and a display module; the transceiver module is configured to access a terminal, receive a transaction message, and send the message to the signature module; The contactless communication mode sends the joint password obtained from the password generating module to the terminal;

The password generating module is configured to generate a joint password, and send the joint password to the encryption module and the display module;

And the cryptographic module generates an encrypted joint password according to the joint password, and sends the encrypted joint password to the terminal by using the transceiver module;

The signature module generates a signature message according to the transaction message, and sends the signature message to the terminal by using the transceiver module.

In addition, the smart card includes: a transceiver module, a password generation module, an encryption module, a signature module, a display module, and a graphics generation module;

The signature module generates a signature message according to the transaction message, and sends the signature message to the terminal by using the transceiver module;

In addition, the terminal acquires the verification password from the smart card in a contactless communication manner. Further, the terminal acquires the verification password by scanning a barcode or a picture displayed by the display module of the smart card.

In addition, the smart card further includes: a button module;

The button module triggers the display module to display the joint password according to the received confirmation password and/or confirmation command.

In addition, the transceiver module further disconnects the terminal after sending the signature message to the terminal; the display module further displays after the transceiver module disconnects from the terminal. The transaction message.

A further aspect of the present invention provides a smart card transaction method for an electronic signature function, the method comprising: A. A smart card access terminal having an electronic signature function, receiving a transaction message;

B. The smart card generates a joint password;

C. The smart card generates a signature message according to the transaction packet and the joint password.

D. The smart card sends at least the signature message to the terminal;

E. The terminal acquires a verification password, and sends the transaction message, the signature message, and the verification password to the background system server.

In addition, the verification password is a joint password obtained by scanning, by the terminal, the information displayed by the smart card, or a joint password obtained by the terminal from the smart card in a contactless communication manner; or inputting through a button of the terminal. The joint password.

In addition, the step C includes:

The smart card calculates summary information of the transaction message;

The smart card signs the summary information of the transaction message and the encrypted joint password to generate a signature message. In addition, in the step D, the smart card further sends the encrypted joint password and the signature message to the terminal; in the step E, the terminal further uses the encrypted joint password, the transaction. The message, the signature message, and the joint password are sent to the backend system server.

In addition, the step C includes:

The smart card calculates summary information of the transaction message;

In addition, in the step D, the smart card further sends the summary information of the encrypted joint password and the signature message to the terminal; in the step E, the terminal further summarizes the joint password. The information, the transaction message, the signature message, and the joint password are sent to a background system server. In addition, between the step D and the step E, the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message;

The smart card displays the joint password, barcode or picture.

A further aspect of the present invention provides a smart card having an electronic signature function, wherein the smart card includes: a transceiver module, a password generation module, and a signature module;

The transceiver module is configured to access a terminal, receive a transaction message, and send the transaction message to the signature module; the password generation module is configured to generate a joint password, and send the joint password to the signature a module; the signature module is configured to generate a signature message according to the transaction message and the joint password;

The transceiver module is further configured to send the signature message to the terminal at least.

In addition, the smart card further includes: a display module; the display module is configured to display the joint password.

In addition, the smart card further includes: a button module; the button module triggers the display module to display the joint password according to the received confirmation password and/or the confirmation command.

In addition, the smart card further includes: a display module and a graphic generation module; the graphic generation module is configured to generate a barcode or a picture according to the joint password acquired from the password generation module; and the display module is configured to display the barcode Or picture.

In addition, the smart card further includes: a button module; the button module triggers the display module to display the barcode or the picture according to the received confirmation password and/or confirmation command.

In addition, the smart card accesses the terminal in a contactless communication manner.

Another aspect of the present invention provides a smart card transaction system having an electronic signature function, the system comprising: a terminal, a background system server, and the foregoing smart card having an electronic signature function;

The terminal acquires a verification password, and sends at least the transaction message, the signature message, and the verification password to the backend system server;

In addition, the terminal acquires the verification password by scanning a barcode or a picture displayed by the smart card, or acquires the verification password from the smart card in a contactless communication manner; or receives an input joint password as a verification password by using a button. . Another aspect of the present invention provides a smart card transaction method with an electronic signature function, the method comprising:

A', a smart card access terminal having an electronic signature function, receiving a transaction message;

E', the terminal acquires a verification password, and sends at least the transaction message, the signature message, the verification password, and the encrypted joint password to a background system server;

F', the background system server respectively verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, between the step D' and the step E', the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message;

The smart card displays the joint password, barcode or picture.

A further aspect of the present invention provides a smart card having an electronic signature function, the smart card comprising: a transceiver module, a password generation module, an encryption module, and a signature module;

The transceiver module is configured to access a terminal, receive a transaction message, and send the transaction message to the signature module. The password generation module is configured to generate a joint password, and send the joint password to the encryption module. The encryption module is configured to generate an encrypted joint password according to at least the joint password;

The signature module is configured to generate a signature message according to the transaction message;

The transceiver module is further configured to send the encrypted joint password and the signed message to the terminal.

In addition, the smart card further includes: a display module; the display module is configured to display the joint password. In addition, the smart card further includes: a button module; the button module triggers the display module to display the joint password according to the received confirmation password and/or confirmation command.

In addition, the smart card further includes: a graphic generating module and a display module; the graphic generating module is configured to generate a barcode or a picture according to the joint password acquired from the password generating module; the display module is configured to display the barcode Or picture.

The terminal acquires a verification password, and sends at least the transaction message, the signature message, the verification password, and the encrypted joint password to the background system server;

The background system server respectively verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, the terminal acquires the verification password from the smart card in a contactless communication manner, or acquires the verification password by scanning a barcode or a picture displayed by the display module of the smart card, or receives an input joint password through a button. As the verification password.

It can be seen from the technical solution provided by the present invention that the present invention provides a smart card with an electronic signature function, a smart card transaction system, and a smart card transaction method with an electronic signature function, which is required for completing a transaction through a single access of the smart card and the terminal. The interaction of data reduces the risk of interception of important information caused by multiple accesses and improves security. The joint password of the present invention may be a combination of one or more of numbers, letters and characters randomly generated at each transaction, unlike existing transaction passwords and OTPs, which must be transmitted using ciphertext, the joint password of the present invention. It can be transmitted in clear text without reducing the security of the account during the transaction; the joint password of the present invention is generated on the smart card side and uploaded to the background system server, and is different from the existing OTP requiring the background system server and the terminal simultaneously The unilateral side of the present invention generates a joint cipher and performs signature or unilaterally generates a joint cipher and performs encryption to ensure the security of the joint cipher transmission and the accuracy of the joint cipher verification. The terminal of the present invention obtains the joint cipher. Send relevant data (which can be transaction message, signature message and joint password) to the background system server, so that the data sent by the terminal to the background system server and processed by the background system server are authorized and valid data, guaranteeing Safety has improved work efficiency. DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is a flow chart of a method for an existing electronic signature transaction;

2 is a flowchart of a smart card transaction method with an electronic signature function according to Embodiment 1 of the present invention;

3 is a flowchart of a smart card transaction method with an electronic signature function according to Embodiment 2 of the present invention;

4 is a flowchart of a smart card transaction method with an electronic signature function according to Embodiment 3 of the present invention;

5 is a flowchart of a smart card transaction method with an electronic signature function according to Embodiment 4 of the present invention;

6 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 5 of the present invention; FIG. 7 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 6 of the present invention; FIG. 9 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 8 of the present invention; FIG. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "transverse", "upper", "lower", "front",

The orientation or positional relationship of "post", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outside", etc. is based on the figure The orientation or positional relationship is merely for the purpose of describing the present invention and the simplification of the description, and is not intended to indicate or imply that the device or component referred to has a particular orientation, is constructed and operated in a particular orientation, and thus is not to be construed as limiting. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or connected integrally; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Example 1

2 is a flow chart of a smart card transaction method with an electronic signature function according to Embodiment 1 of the present invention. Referring now to FIG. 2, a smart card transaction method with an electronic signature function according to the present invention will be described as follows:

The smart card transaction method with the electronic signature function of the invention includes:

Step S201: A smart card access terminal having an electronic signature function, receiving a transaction message;

Specifically, before the smart card access terminal having the electronic signature function, the terminal can obtain the transaction message by manually inputting, searching for the network, scanning the product information, and the like.

The smart card can access the terminal in a contactless manner and receive the transaction message sent by the terminal. Among them, the transaction message includes at least the account and the amount, and may also include transaction details.

Of course, the smart card can also access the terminal through contact.

The terminal of the present invention may be a device capable of interacting with a background system server by a wired or wireless method, such as a mobile phone, a notebook, a tablet, a PC, or a POS.

The smart card of the present invention adopts a non-contact mode access terminal to have higher security than a contact mode access terminal, and prevents information from being acquired.

Step S202: The smart card generates a joint password.

Specifically, the smart card randomly generates numbers, letters, and/or symbols, and selects one or more combinations of numbers, letters, and symbols to generate a joint password, which can ensure non-uniqueness of the joint password, randomness, and improve the security of the joint password. Sex.

Step S203: The smart card generates a signature message according to the transaction packet and the joint password.

Specifically, the smart card can directly sign the transaction message and the joint password to generate a signature message; or the smart card calculates the summary information of the transaction message, calculates the summary information of the joint password, and summarizes the summary information of the transaction message and the combined password. The information is signed to generate a signature message; or

The smart card calculates the summary information of the transaction message, encrypts the joint password to obtain the encrypted joint password, and signs the summary information of the transaction message and the encrypted joint password to generate a signature message; or

The smart card calculates the summary information of the transaction message, encrypts the joint password to obtain the encrypted joint password, and calculates the summary information of the encrypted joint password, and signs the summary information of the transaction message and the summary information of the encrypted joint password to generate a signature message.

The summary information may include one or a combination of the following: a hash value calculated by a hash algorithm, a MAC value calculated by a MAC algorithm, and a secret text body obtained by symmetric encryption.

In addition, the encryption operation can be symmetric encryption or asymmetric encryption (for example, by the public key of the background system server). In order to further improve the security of the joint password transmission, the smart card can also generate a random number, which will be combined with the secret. The code and the random number are combined according to a preset format, and the combined data is encrypted to obtain an encrypted joint password. At this point, the joint password and the random number are combined to prevent replay attacks.

The invention can adopt the method of performing summary calculation on the joint password, encrypting the joint password or performing digest calculation on the encrypted joint password, thereby ensuring the security of the joint password transmission; the summary information of the joint password, the encrypted joint password or the encrypted joint password. The summary information is signed to improve the security of the transaction.

Step S204: The smart card sends at least the signature message to the terminal.

Specifically, in step S203, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the smart card also sends the encrypted joint password and the signed message to the terminal.

In step S203, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the smart card also sends the summary information and the signature message of the encrypted joint password to the terminal.

Of course, regardless of what information the smart card calculates in step S203, the smart card can transmit the calculated information to the terminal.

Step S205: The terminal acquires the verification password, and sends at least the transaction message, the signature message, and the verification password to the background system server.

The verification password is a joint password obtained by the terminal scanning the information displayed by the smart card, or a joint password obtained from the smart card by the terminal in a non-contact communication manner, or a joint password input through a button of the terminal. Non-contact communication mode can be Bluetooth, optical communication, NFC infrared and other communication methods.

Specifically, in step S203, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the terminal also sends the encrypted joint password, the transaction message, the signature message, and the verification password to the background system server.

In step S203, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the terminal also sends the summary information of the encrypted joint password, the transaction message, the signature message, and the verification password to the background system server.

Of course, regardless of what kind of information is calculated by the smart card in step S203, the terminal can send the information calculated by the smart card to the background system server.

After obtaining the verification password, the terminal of the present invention sends the transaction message, the signature message and the verification password to the background system server, so that the background system server authenticates the user identity according to the joint password and the signature message, thereby triggering the background. The system server completes the transaction and improves the security of the transaction.

The joint password of the present invention may be a combination of one or more of numbers, letters and characters randomly generated at each transaction, unlike existing transaction passwords and OTPs, which must be transmitted in ciphertext, the joint password of the present invention. It can be transmitted in clear text without reducing the security of the account during the transaction; the joint password of the present invention is generated on the smart card side and uploaded to the background system server, and is different from the existing OTP requiring the background system server and the terminal simultaneously Generate, the unilateral generation of the joint password of the invention and signature, to ensure the security of the joint password transmission and the accuracy of the joint password verification The terminal of the present invention sends relevant data (which may be a transaction message, a signature message, and a verification password) to the background system server after obtaining the verification password, so that the terminal device server needs to be sent by the background system server. The processed data is authorized data, which ensures security and improves work efficiency.

Step S206: The background system server verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

Specifically, in step S203, if the smart card performs signature according to the joint password and the transaction message, in this step, the terminal verifies the correctness of the signature message according to the transaction message and the verification password, and if the signature is correct, determines the verification password and Signature messages are verified.

In step S203, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the terminal verifies the correctness of the password according to the encrypted joint password verification, and verifies the correctness of the signature message according to the transaction message and the verification password.

In step S203, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the terminal verifies the correctness of the verification password according to the summary information of the encrypted joint password, and verifies the signature message according to the transaction message and the verification password. The correctness.

Of course, in the foregoing process, the terminal may further verify the correctness of the signature message according to the transaction message and the encrypted joint password or the encrypted joint password summary information.

Of course, no matter what information the smart card is based on when calculating the signature message in step S203, the terminal can verify the correctness of the verification password and the signature message according to the information or the verification password.

It can be seen that the smart card transaction method of the present invention completes the interaction of data required for transactions through one access of the smart card and the terminal, reduces the risk of interception of important information caused by multiple accesses, and improves security. Example 2

3 is a flow chart of a smart card transaction method with an electronic signature function according to Embodiment 2 of the present invention. Referring now to FIG. 3, a smart card transaction method with an electronic signature function according to the present invention will be described as follows:

Step S301: A smart card access terminal having an electronic signature function, receiving a transaction message;

Of course, the smart card can also access the terminal through contact.

Wherein, the terminal of the present invention can be wired or not for mobile phones, notebooks, tablets, PCs, POS machines, etc. A device that interacts with the backend system server in a line mode.

Step S302: The smart card generates a joint password.

Step S303: The smart card generates a signature message according to the transaction packet and the joint password.

In addition, the encryption operation can be symmetric encryption or asymmetric encryption (for example, by the public key of the background system server). In order to further improve the security of the joint password transmission, the smart card may also generate a random number, combine the joint password and the random number according to a preset format, and encrypt the combined data to obtain an encrypted joint password. The combined password and random number are combined to prevent replay attacks.

Step S304: The smart card sends at least the signature message to the terminal.

Specifically, in step S303, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the smart card also sends the encrypted joint password and the signed message to the terminal.

In step S303, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the smart card also sends the summary information and the signature message of the encrypted joint password to the terminal.

Of course, regardless of what kind of information is calculated by the smart card in step S303, the smart card can send the calculated information to the terminal. Step S305: The smart card disconnects from the terminal;

Specifically, in the case of the contactless mode access, the user can leave the sensing range of the smart card to leave the terminal; in the case of the contact mode access, the user can pull out the smart card from the terminal. Disconnecting from the terminal ensures that the smart card and the terminal are in one contact, which reduces the risk of intercepting multiple contact information and improves the security of data transmission.

Step S306: The smart card displays the transaction message;

Specifically, the smart card displays the received transaction message on the display screen, so that the user can confirm the authenticity of the transaction and ensure the security of the transaction.

Step S307: The smart card receives the confirmation password and/or the confirmation command input through the button;

Specifically, after confirming the authenticity of the transaction information, the user may trigger the smart card to display the generated joint password by inputting the confirmation password and/or the operation of the confirmation instruction. By entering the confirmation password to trigger the smart card to display the joint password, barcode or picture, the joint password can be prevented from being known by others, and the confidentiality of the joint password can be improved.

Step S308: The smart card displays a joint password, a barcode or a picture;

Specifically, the smart card displays a joint password, a barcode, or a picture, so that the terminal can obtain the verification code and complete the transaction. In order to further improve the security of the joint password, and prevent others from obtaining the plaintext information of the joint password, in step S302, the joint password plaintext may be encrypted by a preset symmetric encryption algorithm and the encrypted joint password is stored in the smart card. After the smart card receives the confirmation password and/or confirmation command input by the user through the button, the combined password clear text is decrypted by the preset symmetric encryption algorithm for display.

Step S309: The terminal acquires the verification password, and sends at least the transaction message, the signature message, and the verification password to the background system server;

Specifically, in step S303, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the terminal also sends the encrypted joint password, the transaction message, the signature message, and the joint password to the background system server.

In step S303, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the terminal also sends the summary information of the encrypted joint password, the transaction message, the signature message, and the joint password to the background system server.

Of course, regardless of the information calculated by the smart card in step S303, the terminal can send the information calculated by the smart card to the background system server.

After obtaining the verification password, the terminal of the present invention sends the transaction message, the signature message and the verification password to the background system server, so that the background system server authenticates the user identity according to the verification password and the signature message, and then triggers the background. The system server completes the transaction and improves the security of the transaction. The joint password of the present invention may be a combination of one or more of numbers, letters and characters randomly generated at each transaction, unlike existing transaction passwords and OTPs, which must be transmitted in ciphertext, the joint password of the present invention. It can be transmitted in clear text without reducing the security of the account during the transaction; the joint password of the present invention is generated on the smart card side and uploaded to the background system server, and is different from the existing OTP requiring the background system server and the terminal simultaneously Generating, the one-side of the present invention generates a joint password and performs signature to ensure the security of the joint password transmission and the accuracy of the joint password verification; the terminal of the present invention sends the relevant data after obtaining the verification password (may be a transaction message) The signature message and the verification password are sent to the background system server, so that the data that is sent by the terminal to the background system server and processed by the background system server is authorized data, which ensures security and improves work efficiency.

Step S310: The background system server verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

Specifically, in step S303, if the smart card performs signature according to the joint password and the transaction message, in this step, the terminal verifies the correctness of the signature message according to the transaction message and the verification password, and if the signature is correct, the verification is determined. Both the password and the signed message are verified.

In step S303, if the smart card is used to calculate the scheme for encrypting the joint password, in this step, the terminal verifies the correctness of the password according to the encrypted joint password verification, and verifies the correctness of the signature message according to the transaction message and the verification password.

In step S303, if the smart card is used to calculate the scheme for encrypting the summary information of the joint password, in this step, the terminal verifies the correctness of the verification password according to the summary information of the encrypted joint password, and verifies the signature report according to the transaction message and the verification password. The correctness of the text.

Of course, no matter what information the smart card is based on when calculating the signature message in step S303, the terminal can verify the correctness of the verification password and the signature message according to the information of the smart card or the verification password.

Thus, the smart card transaction method with electronic signature function of the present invention can complete the interaction of data required for transactions through one access of the smart card and the terminal, thereby reducing the risk of intercepting important information caused by multiple accesses and improving security. . Example 3

4 is a flow chart of a smart card transaction method with an electronic signature function according to Embodiment 3 of the present invention. Referring now to FIG. 4, a smart card transaction method with an electronic signature function according to the present invention will be described as follows:

Step S401: A smart card access terminal having an electronic signature function, receiving a transaction message;

Specifically, before the smart card access terminal having the electronic signature function, the terminal can manually input, network, and scan Obtain commodity information and other means to obtain transaction messages.

Of course, the smart card can also access the terminal through contact.

The terminal can be a device that can interact with the background system server by wire or wirelessly, such as a mobile phone, a notebook, a tablet, a PC, or a POS.

Step S402: The smart card generates a joint password, and generates an encrypted joint password according to at least the joint password. Specifically, the smart card randomly generates numbers, letters, and/or symbols, and selects one or more combinations of numbers, letters, and symbols to generate a joint password. , can guarantee the non-uniqueness of the joint password, randomness, and improve the security of the joint password.

Specifically, the smart card may obtain the encrypted joint password by encrypting the combination of the joint password and the random number, or encrypt the joint password by using symmetric encryption or asymmetric encryption to obtain the encrypted joint password.

The invention further ensures the security of the joint password transmission by transmitting the encrypted joint password; combining the joint password and the random number to prevent the replay attack.

Step S403: The smart card generates a signature message according to the transaction packet.

Specifically, the smart card can directly sign the transaction message to generate a signature message; or

The smart card calculates the summary information of the transaction message, and signs the summary information of the transaction message to generate a signature message. The summary information may include one or a combination of the following: a hash value calculated by a hash algorithm, a MAC value calculated by a MAC algorithm, and a secret text body obtained by symmetric encryption.

Step S404: The smart card sends the signature message and the encrypted joint password to the terminal.

Step S405: The terminal acquires the verification password, and sends at least the transaction message, the signature message, the encrypted joint password, and the verification password to the background system server.

The back-end system server can be a bank server or a third-party server, and the third-party server is a server used by the non-bank system, such as a server used by the bus system to recharge and debit the bus card.

The terminal of the present invention sends the transaction message, the signature message, the encrypted joint password and the verification password to the background system server only after obtaining the verification password, so that the background system server authenticates the user identity according to the verification password and the signature message. , in turn triggers the background system server to complete the transaction, improving the security of the transaction. The joint password of the present invention may be a combination of one or more of numbers, letters and characters randomly generated at each transaction, unlike existing transaction passwords and OTPs, which must be transmitted in ciphertext, the joint password of the present invention. It can be transmitted in clear text without reducing the security of the account during the transaction; the joint password of the present invention is generated on the smart card side and uploaded to the background system server, and is different from the existing OTP requiring the background system server and the terminal simultaneously The unilateral side of the present invention generates a joint cipher and performs encryption to ensure the security of the joint cipher transmission and the accuracy of the joint cipher verification. The terminal of the present invention sends the relevant data after obtaining the verification password (which may be a transaction message). The signature message and the verification password are sent to the background system server, so that the data that is sent by the terminal to the background system server and processed by the background system server is authorized data, which ensures security and improves work efficiency.

Step S406: The background system server separately verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

Specifically, the background system server verifies the correctness of the verification password according to the encrypted joint password; the background system server verifies the correctness of the signature message according to the encrypted joint password and the transaction message, or signs the signature according to the verification password and the transaction message. The correctness of the message is verified. After the background system server verifies that the signature is correct and the verification password is correct, the background system server performs the transaction operation according to the transaction message.

Thus, the smart card transaction method with electronic signature function of the present invention can complete the interaction of data required for transactions through one access of the smart card and the terminal, thereby reducing the risk of intercepting important information caused by multiple accesses and improving security. . Example 4

FIG. 5 is a flowchart of a smart card transaction method with an electronic signature function according to Embodiment 4 of the present invention. Referring now to FIG. 5, a smart card transaction method with an electronic signature function according to the present invention will be described as follows:

Step S501: A smart card access terminal having an electronic signature function, receiving a transaction message;

Of course, the smart card can also access the terminal through contact.

The smart card of the present invention adopts a non-contact mode access terminal to have higher security than a contact mode access terminal, and prevents information from being acquired. Step S502: The smart card generates a joint password, and generates an encrypted joint password according to at least the joint password. Specifically, the smart card randomly generates numbers, letters, and/or symbols, and selects one or more combinations of numbers, letters, and symbols to generate a joint password. , can guarantee the non-uniqueness of the joint password, randomness, and improve the security of the joint password.

Step S503: The smart card generates a signature message according to the transaction packet.

Step S504: The smart card sends the signature message and the encrypted joint password to the terminal.

Step S505: The smart card disconnects from the terminal;

Step S506: The smart card displays the transaction message;

Step S507: The smart card receives the confirmation password and/or the confirmation command input through the button;

Step S508: The smart card displays a joint password, a barcode or a picture;

Specifically, the smart card displays a joint password, a barcode, or a picture, so that the terminal obtains the verification password, thereby completing the transaction. In order to further improve the security of the joint password, and prevent others from obtaining the plaintext information of the joint password, in step S502, the joint password plaintext may be encrypted by a preset symmetric encryption algorithm and the encrypted joint password is stored in the smart card. After the smart card receives the confirmation password and/or confirmation command input by the user through the button, the combined password clear text is decrypted by the preset symmetric encryption algorithm for display.

Step S509: The terminal acquires the verification password, and sends the transaction packet, the signature message, the encrypted joint password, and the verification password. Send to the backend system server;

The terminal of the present invention sends the transaction message, the signature message, the encrypted joint password and the verification password to the background system server only after obtaining the verification password, so that the background system server authenticates the user identity according to the verification password and the signature message. , in turn triggers the background system server to complete the transaction, improving the security of the transaction.

The joint password of the present invention may be a combination of one or more of numbers, letters and characters randomly generated at each transaction, unlike existing transaction passwords and OTPs, which must be transmitted in ciphertext, the joint password of the present invention. It can be transmitted in clear text without reducing the security of the account during the transaction; the joint password of the present invention is generated on the smart card side and uploaded to the background system server, and is different from the existing OTP requiring the background system server and the terminal simultaneously The unilateral side of the present invention generates a joint cipher and performs encryption to ensure the security of the joint cipher transmission and the accuracy of the joint cipher verification. The terminal of the present invention sends the relevant data after obtaining the verification password (which may be a transaction message). The signature message and the verification password are sent to the background system server, so that the data that is sent by the terminal to the background system server and processed by the background system server is authorized data, which ensures security and improves work efficiency.

Step S510: The background system server separately verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

Thus, the smart card transaction method with electronic signature function of the present invention can complete the interaction of data required for transactions through one access of the smart card and the terminal, thereby reducing the risk of intercepting important information caused by multiple accesses and improving security. . Example 5

6 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 5 of the present invention. First, the structure of the smart card transaction system with electronic signature function of the present invention will be described with reference to FIG. 6, which is as follows:

The smart card transaction system with electronic signature function of the present invention comprises: a terminal 100, a background system server 200, and a smart card 300 having an electronic signature function. The smart card 300 is a device with an electronic signature function and can be packaged. a card chip containing user account information and a security chip digitally signed by a key, or an integrated chip having the above two chip functions; the terminal 100 can be a mobile phone, a notebook, a tablet, a PC, a POS machine, etc. Or a device that interacts wirelessly with a back-end system server. The background system server 200 can be a bank server or a third-party server, and the third-party server is a server used by a non-banking system, such as a server used by the bus system to recharge and debit the bus card.

The smart card 300 with the electronic signature function includes: a transceiver module 3001, a password generation module 3002, and a signature module 3003; in other words, the above-mentioned modules included in the smart card 300 having the electronic signature function can be integrated on one chip or according to a smart card. The number and function of the 30 chips used are integrated on multiple chips, which are not illustrated here.

The transceiver module 3001 is configured to access the terminal 100, and receive the transaction message and send it to the signature module 3003. The transceiver module 3001 can send the joint password acquired from the password generation module 3002 to the terminal 100 in a contactless communication manner.

The password generation module 3002 is configured to generate a joint password and send it to the signature module 3003. Specifically, the password generation module 3002 may generate a joint password after the transceiver module 3001 receives the transaction message.

The signature module 3003 generates a signature message according to the transaction message and the joint password, and sends the signature message to the terminal 100 through the transceiver module 3001.

The terminal 100 receives the acquisition verification password, and sends at least the transaction message, the signature message, and the verification password to the background system server 200.

The background system server 200 verifies the signature message and the verification password, and after the verification is passed, performs a transaction operation according to the transaction message.

In addition, the smart card 300 may further include a display module 3004 for displaying the joint password, so that the terminal 100 scans the displayed joint password acquisition verification password. Of course, by displaying the joint password, the joint password input terminal 100 can also be used as the verification password by the button of the terminal 100.

Of course, on the basis of the above structure, the transceiver module 3001 of the smart card 300 of the present invention disconnects the terminal 100 after transmitting the signature message to the terminal 100, so that the display module 3004 displays the transaction message. Therefore, it is ensured that the smart card 300 of the present invention completes the data interaction required for the transaction only by contacting the terminal 100 once, reduces the risk of interception of data generated by the secondary contact, and improves the security of the transaction.

Of course, the background system server 200 can verify the number of failed authentications (for example, three times) after verifying the verification password, and then lock the account corresponding to the smart card to protect the security of the user account.

In addition, the smart card 300 may further include: a button module 3005. The button module 3005 triggers the display module 3004 to display the joint password based on the received confirmation password and/or confirmation command.

In addition, the smart card 300 may further include: a graphics generation module 3006; the graphics generation module 3006 is based on the password generation The joint password obtained by the module 3002 generates a barcode or a picture. When the smart card 300 generates a barcode or a picture by using the graphic generation module 3006, the display module 3004 can be triggered by the button module 3005 to display the barcode or the picture.

Specifically, for example, the user may trigger the display module 3004 to display a joint password or display a barcode or a picture by:

(1) Entering the confirmation password, after the smart card 300 verifies that the confirmation password is correct, the display module 3004 displays the joint password, or displays the barcode or picture; or

(2) Press the confirm button, trigger the display module 3004 to display the joint password, or display the barcode or picture; or

(3) Enter the confirmation password and press the confirmation button. After the smart card 300 verifies that the confirmation password is correct, the display module 3004 displays the joint password or displays the barcode or picture.

Of course, the condition that the trigger display module 3004 displays the joint password, the barcode, or the picture may be set for different consumption amounts. For example, the small amount of consumption only requires the user to press the confirmation button, and the large amount of consumption requires the user to input the confirmation password.

Thus, the smart card with electronic signature function and the smart card transaction system with electronic signature function of the present invention can complete the interaction of data required for transaction through one access of the smart card and the terminal, thereby reducing the interception of important information caused by multiple accesses. The risk of improving security. Example 6

FIG. 7 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 6 of the present invention. First, the structure of the smart card transaction system with electronic signature function of the present invention will be described with reference to FIG. 7, which is as follows:

The smart card transaction system with electronic signature function of the present invention comprises: a terminal 10, a background system server 20, and a smart card 30 having an electronic signature function. The smart card 30 is a device with an electronic signature function, and may include a card chip containing user account information and a security chip digitally signed by a key, or an integrated chip having the above two chip functions; the terminal 10 may be a mobile phone, A device that can interact with a back-end system server, such as a notebook, tablet, PC, or POS, by wire or wirelessly. The backend system server 20 can be a bank server or a third party server, and the third party server is a server used by the non-bank system, such as a server used by the bus system to recharge and debit the bus card.

The smart card 30 having the electronic signature function includes: a transceiver module 301, a password generation module 302, a signature module 303, and a display module 304; in other words, the above-mentioned modules included in the smart card 30 having the electronic signature function can be integrated on one chip. It can also be integrated on multiple chips according to the number and function of the chips used by the smart card 30, and will not be exemplified herein.

The transceiver module 301 is configured to access the terminal 10, and receive the transaction message and send it to the signature module 303. The transceiver module 301 sends the joint password obtained from the password generation module 302 to the terminal 10 in a contactless communication manner. The password generation module 302 is configured to generate a joint password and send it to the signature module 303 and the display module 304. Specifically, the password generating module 302 may generate a joint password after the transceiver module 301 receives the transaction message.

The signature module 303 generates a signature message according to the transaction packet and the joint password, and sends the signature message to the terminal 10 through the transceiver module 301.

The terminal 10 receives the acquisition verification password, and sends at least the transaction message, the signature message and the verification password to the background system server 20. The verification password is a joint password obtained by scanning the information displayed by the smart card 30 by the terminal 10, or a joint password acquired from the smart card 30 by the terminal 10 in a contactless communication manner, or a combined password input through a button of the terminal 10.

The background system server 20 verifies the signature message and the verification password, and after the verification is passed, performs the transaction operation according to the transaction message.

Of course, on the basis of the above structure, the transceiver module 301 of the smart card 30 of the present invention disconnects the terminal 10 after transmitting the signature message to the terminal 10, so that the display module 304 displays the transaction message. Therefore, it is ensured that the smart card 30 of the present invention completes the data interaction required for the transaction only by contacting the terminal 10 once, thereby reducing the risk of data being intercepted due to the secondary contact, thereby improving the security of the transaction.

Of course, the background system server 20 can protect the authentication password when the number of verification failures reaches a preset number of times (for example, three times), and locks the account corresponding to the smart card to protect the security of the user account.

In addition, the smart card 30 may further include: a button module 305. The button module 305 triggers the display module 304 to display the joint password based on the received confirmation password and/or confirmation command.

In addition, the smart card 30 further includes: a graphics generation module 306; the graphics generation module 306 generates a barcode or a picture based on the joint password acquired from the password generation module 302. When the smart card 30 generates a barcode or a picture using the graphic generation module 306, the display module 304 can be triggered by the button module 305 to display the barcode or picture.

Specifically, for example, the user may trigger the display module 304 to display a joint password or display a barcode or a picture by:

(1) Enter the confirmation password. After the smart card 30 verifies that the confirmation password is correct, the display module 304 displays the joint password or displays the barcode or picture; or

(2) Pressing the confirmation button, the trigger display module 304 displays the joint password, or displays the barcode or picture; or

(3) Enter the confirmation password and press the confirmation button. After the smart card 30 verifies that the confirmation password is correct, the display module 304 displays the joint password or displays the barcode or picture.

Of course, the conditions for triggering the display module 304 to display the joint password, the barcode, or the picture may be set for different consumption amounts. For example, the small amount of consumption only requires the user to press the confirmation button, and the large amount of consumption requires the user to input the confirmation password.

Thus, the smart card with electronic signature function and the smart card transaction system with electronic signature function of the present invention can be seen. Through the interaction of the smart card and the terminal to complete the transaction, the risk of intercepting important information caused by multiple accesses is reduced, and the security is improved. Example 7

FIG. 8 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to an embodiment of the present invention. First combined with the map

8. Explain the structure of the smart card transaction system with the electronic signature function, as follows:

The smart card transaction system with electronic signature function of the present invention comprises: a terminal 400, a background system server 500, and a smart card 600 having an electronic signature function. The terminal 400 can be a device capable of interacting with a background system server through a wired or wireless manner, such as a mobile phone, a notebook, a tablet, a PC, a POS, etc.; the smart card 600 is a device having an electronic signature function, and can include a user account information. The card chip and the security chip digitally signed by the key, or the integrated chip having the above two chip functions; the background system server 500 may be a bank server or a third party server, and the third party server is a server adopted by the non-bank system, for example The server used in the bus system to recharge and deduct the bus card.

The smart card 600 with the electronic signature function includes: a transceiver module 6001, a password generation module 6002, a signature module 6003, and an encryption module 6005; in other words, the above-mentioned modules included in the smart card 600 having the electronic signature function can be integrated on one chip. It can also be integrated on multiple chips according to the number and function of the chips used by the smart card 600, and will not be exemplified herein.

The transceiver module 6001 is configured to access the terminal 400, and receive the transaction message and send it to the signature module 6003. The transceiver module 6001 sends the joint password obtained from the cryptographic module 6002 to the terminal 400 in a contactless communication manner.

The password generation module 6002 is configured to generate a joint password and send it to the signature module 6003. Specifically, the password generation module 6002 may generate a joint password after the transceiver module 6001 receives the transaction message.

The encryption module 6005 generates an encrypted joint password based on at least the joint password, and transmits the encrypted joint password to the terminal 400 through the transceiver module 6001.

The signature module 6003 generates a signature message according to the transaction message, and sends the signature message to the terminal 400 through the transceiver module 6001.

The terminal 400 obtains the verification password, and sends at least the transaction message, the signature message, the encrypted joint password, and the verification password to the background system server 500.

The background system server 500 respectively verifies the signature message and the verification password, and after the verification is passed, performs the transaction operation according to the transaction message.

In addition, the smart card 600 may further include a display module 6004 for displaying the joint password, so that the terminal 400 scans the displayed joint password acquisition verification password. Of course, by displaying the joint password, it is also possible to pass the terminal. The button of 400 will be combined with the password input terminal 400 as the verification password.

Of course, on the basis of the above structure, the transceiver module 6001 of the smart card 600 of the present invention disconnects the terminal 400 after transmitting the signature message to the terminal 400, so that the display module 6004 displays the transaction message. Therefore, it is ensured that the smart card 600 of the present invention only contacts the terminal 400 once to complete the data interaction required for the transaction, reduces the risk of interception of data generated by the secondary contact, and improves the security of the transaction.

Of course, the background system server 500 can lock the account corresponding to the smart card to protect the security of the user account after the verification password is verified, after the number of verification failures reaches a preset number of times (for example, three times).

In addition, the smart card 600 may further include: a button module 6006. The button module 6006 triggers the display module 6004 to display the joint password based on the received confirmation password and/or confirmation command.

In addition, the smart card 600 further includes: a graphics generation module 6007; the graphics generation module 6007 generates a barcode or a picture based on the joint password acquired from the password generation module 602. When the smart card 600 generates a bar code or a picture by using the graphic generation module 6007, the display module 6004 can be triggered by the button module 6006 to display the barcode or the picture.

Specifically, for example, the user may trigger the display module 6004 to display the joint password or display the barcode or picture by:

(1) Enter the confirmation password. After the smart card 600 verifies that the confirmation password is correct, the display module 6004 displays the joint password, or displays the barcode or picture; or

(2) Press the confirmation button, trigger the display module 6004 to display the joint password, or display the barcode or picture; or

(3) Enter the confirmation password and press the confirmation button. After the smart card 600 verifies that the confirmation password is correct, the display module 6004 displays the joint password or displays the barcode or picture.

Of course, the trigger display module 6004 can be configured to display the joint password condition, the barcode or the picture for different consumption amounts. For example, the small amount of consumption only requires the user to press the confirmation button, and the large amount of consumption requires the user to input the confirmation password.

Thus, the smart card with electronic signature function and the smart card transaction system with electronic signature function of the present invention can complete the interaction of data required for transaction through one access of the smart card and the terminal, thereby reducing the interception of important information caused by multiple accesses. The risk of improving security. Example 8

FIG. 9 is a schematic structural diagram of a smart card transaction system with an electronic signature function according to Embodiment 8 of the present invention. First, with reference to FIG. 8, the structure of the smart card transaction system with electronic signature function of the present invention will be described as follows:

The smart card transaction system with electronic signature function of the present invention comprises: a terminal 40, a background system server 50, and a smart card 60 having an electronic signature function. The terminal 40 can be a device capable of interacting with a background system server by wire or wirelessly, such as a mobile phone, a notebook, a tablet, a PC, a POS machine, etc.; the smart card 60 has an electronic signature. The functional device may include a card chip containing user account information and a security chip digitally signed by a key, or an integrated chip having the above two chip functions; the background system server 50 may be a bank server or a third party server, The three-party server is a server used by the non-bank system, such as a server used by the bus system to recharge and debit the bus card.

The smart card 60 with the electronic signature function includes: a transceiver module 601, a password generation module 602, a signature module 603, a display module 604, and an encryption module 605; in other words, the above-mentioned module included in the smart card 60 having the electronic signature function can be integrated in On one chip, it can also be integrated on multiple chips according to the number and functions of the chips used by the smart card 60, and will not be exemplified herein.

The transceiver module 601 is configured to access the terminal 40, and receive the transaction message and send it to the signature module 603. The transceiver module 601 sends the joint password obtained from the cryptographic module 602 to the terminal 40 in a contactless communication manner.

The password generation module 602 is configured to generate a joint password and send it to the signature module 603 and the display module 604. Specifically, the password generating module 602 can generate a joint password after the transceiver module 601 receives the transaction message.

The encryption module 605 generates an encrypted joint password based on at least the joint password, and transmits the encrypted joint password to the terminal 40 through the transceiver module 601.

The signature module 603 generates a signature message according to the transaction message, and sends the signature message to the terminal 40 through the transceiver module 601.

The terminal 40 obtains the verification password, and sends at least the transaction message, the signature message, the encrypted joint password and the verification password to the background system server 50. The verification password is a joint password obtained by scanning the information displayed by the smart card 60 by the terminal 40, or a joint password acquired from the smart card 60 by the terminal 40 in a contactless communication manner, or a joint password input through the button of the terminal 40.

The background system server 50 respectively verifies the signature message and the verification password, and after the verification is passed, performs the transaction operation according to the transaction message.

Of course, based on the above structure, the transceiver module 601 of the smart card 60 of the present invention disconnects the terminal 40 after transmitting the signature message to the terminal 40, so that the display module 604 displays the transaction message. Therefore, it is ensured that the smart card 60 of the present invention only contacts the terminal 40 once to complete the data interaction required for the transaction, reduces the risk of data being intercepted due to the secondary contact, and improves the security of the transaction.

Of course, the background system server 50 can protect the authentication password by verifying the number of failed authentications (for example, three times), and then locking the account corresponding to the smart card to protect the security of the user account.

In addition, the smart card 60 can also include: a button module 606. The button module 606 triggers the display module 604 to display the joint password based on the received confirmation password and/or confirmation command.

In addition, the smart card 60 further includes: a graphics generation module 607; the graphics generation module 607 is configured according to the slave password generation module The joint password obtained by 602 generates a barcode or a picture. When the smart card 60 generates a barcode or a picture by using the graphic generation module 607, the display module 604 can be triggered by the button module 606 to display the barcode or the picture.

Specifically, for example, the user may trigger the display module 604 to display the joint password or display a barcode or a picture by:

(1) Enter the confirmation password, after the smart card 60 verifies that the confirmation password is correct, the display module 604 displays the joint password, or displays the barcode or picture; or

(2) Pressing the confirmation button, the trigger display module 604 displays the joint password, or displays the barcode or picture; or

(3) Enter the confirmation password and press the confirmation button. After the smart card 60 verifies that the confirmation password is correct, the display module 604 displays the joint password or displays the barcode or picture.

Of course, the trigger display module 604 can be configured to display the joint password condition, barcode or picture for different consumption amount. For example, the small amount of consumption only requires the user to press the confirmation button, and the large amount of consumption requires the user to input the confirmation password.

Thus, the smart card with electronic signature function and the smart card transaction system with electronic signature function of the present invention can complete the interaction of data required for transaction through one access of the smart card and the terminal, thereby reducing the interception of important information caused by multiple accesses. The risk of improving security.

Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain.

It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

One of ordinary skill in the art can understand that all or part of the steps carried by the method of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, one or a combination of the steps of the method embodiments is included.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated module if the software works When the module is implemented in the form of a module and sold or used as a stand-alone product, it can also be stored in a computer readable storage medium.

The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

claims

1. A smart card transaction method with electronic signature function, characterized in that the method includes:

A. A smart card with electronic signature function is connected to the terminal to receive transaction messages;

B. The smart card generates a joint password;

C. The smart card generates a signature message based on the transaction message and the joint password;

D. The smart card sends at least the signed message to the terminal;

E. The terminal obtains the verification password and sends at least the transaction message, the signature message and the verification password to the backend system server;

F. The backend system server verifies the signature message and the verification password, and after passing the verification, performs a transaction operation based on the transaction message.

2. The method according to claim 1, characterized in that step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the joint password to obtain the encrypted joint password;

The smart card signs the summary information of the transaction message and the encrypted joint password to generate a signed message.

3. The method according to claim 1, characterized in that step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the combination of the joint password and the random number to obtain the encrypted joint password;

4. The method according to claim 2 or 3, characterized in that,

In step D, the smart card also sends the encrypted joint password and the signed message to the terminal; in step E, the terminal also sends the encrypted joint password, the transaction message , the signature message and the joint password are sent to the backend system server.

5. The method according to claim 1, characterized in that step C includes:

The smart card calculates summary information of the transaction message;

The smart card encrypts the joint password to obtain the encrypted joint password, and calculates the summary information of the encrypted joint password;

The smart card signs the summary information of the transaction message and the summary information of the encrypted joint password to generate a signed message.

6. The method according to claim 5, characterized in that,

In step D, the smart card also sends the summary information of the encrypted joint password and the signed message to the terminal;

In step E, the terminal also sends the summary information of the joint password, the transaction message, the signature message and the joint password to the backend system server.

7. The method according to claim 1, characterized in that, between the step D and the step E, the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message;

The smart card receives the confirmation password and/or confirmation instruction input through the keys;

The smart card displays the joint password, barcode or picture.

8. The method according to claim 1, wherein the verification password is a joint password obtained by scanning the information displayed on the smart card through the terminal, or from the smart card through the terminal in a non-contact communication manner. The joint password obtained; or the joint password entered through the keys of the terminal.

9. A smart card with an electronic signature function, characterized in that the smart card includes: a transceiver module, a password generation module and a signature module;

The transceiver module is used to access the terminal, receive transaction messages and send the transaction messages to the signature module; the password generation module is used to generate a joint password, and send the joint password to the signature Module; The signature module is used to generate a signature message based on the transaction message and the joint password;

The transceiver module is also configured to send at least the signed message to the terminal.

10. The smart card according to claim 9, wherein the smart card further includes: a display module; the display module is used to display the joint password.

11. The smart card according to claim 10, characterized in that, the smart card further includes: a button module; the button module triggers the display module to display the joint password according to the received confirmation password and/or confirmation instruction. .

12. The smart card according to claim 9, characterized in that the smart card further includes: a display module and a graphics generation module;

The graphic generation module is configured to generate a barcode or picture based on the joint password obtained from the password generation module;

The display module is used to display the barcode or picture.

13. The smart card according to claim 12, characterized in that, the smart card further includes: a button module; the button module triggers the display module to display the barcode or the barcode according to the received confirmation password and/or confirmation instruction. picture.

14. The smart card according to claim 9, characterized in that the smart card accesses the terminal in a non-contact communication manner.

15. The smart card according to any one of claims 10 to 13, characterized in that, after sending the signature message to the terminal, the transceiver module also disconnects from the terminal;

The display module also displays the transaction message after the transceiver module disconnects from the terminal.

16. A smart card transaction system with an electronic signature function, characterized in that the system includes: a terminal, a backend system server, and a smart card with an electronic signature function as described in any one of claims 9 to 15;

The terminal obtains the verification password and sends at least the transaction message, the signature message and the verification password to the backend system server;

The backend system server verifies the signature message and the verification password, and after passing the verification, performs a transaction operation based on the transaction message.

17. The system according to claim 16, wherein the terminal obtains the verification password by scanning a barcode or picture displayed on the smart card, or obtains the verification password from the smart card in a non-contact communication manner; Or receive the entered joint password as the verification password by pressing a key.

18. A smart card transaction method with electronic signature function, characterized in that the method includes:

A'. A smart card with electronic signature function accesses the terminal and receives transaction messages;

B'. The smart card generates a joint password, and at least generates an encrypted joint password based on the joint password;

C'. The smart card generates a signature message based on the transaction message;

D'. The smart card sends the signed message and the encrypted joint password to the terminal;

E'. The terminal obtains the verification password and sends at least the transaction message, the signature message, the verification password and the encrypted joint password to the backend system server;

F'. The backend system server verifies the signature message and the verification password respectively, and after passing the verification, executes the transaction operation based on the transaction message.

19. The method according to claim 18, wherein the verification password is a joint password obtained by scanning the information displayed on the smart card through the terminal, or from the smart card through the terminal in a non-contact communication manner. The joint password obtained; or the joint password entered through the keys of the terminal.

20. The method according to claim 18, characterized in that step B' generating an encrypted joint password based on at least the joint password includes:

The smart card encrypts the combination of the joint password and the random number to obtain an encrypted joint password; or the smart card uses symmetric encryption or asymmetric encryption to encrypt the joint password to obtain an encrypted joint password.

21. The method according to claim 18, characterized in that step C' includes: The smart card calculates the summary information of the transaction message, signs the summary information of the transaction message, and generates a signed message.

22. The method according to claim 18, characterized in that, between the step D' and the step E', the method further includes:

The smart card disconnects from the terminal;

The smart card displays the transaction message;

The smart card displays the joint password, barcode or picture.

23. A smart card with an electronic signature function, characterized in that the smart card includes: a transceiver module, a password generation module, an encryption module and a signature module;

The transceiver module is used to access the terminal, receive transaction messages and send the transaction messages to the signature module; the password generation module is used to generate a joint password, and send the joint password to the encryption module ; The encryption module is configured to generate an encrypted joint password based on at least the joint password;

The signature module is used to generate a signature message according to the transaction message;

The transceiver module is also configured to send the encrypted joint password and the signed message to the terminal.

24. The smart card according to claim 23, wherein the smart card further includes: a display module; the display module is used to display the joint password.

25. The smart card according to claim 24, characterized in that, the smart card further includes: a button module; the button module triggers the display module to display the joint password according to the received confirmation password and/or confirmation instruction. .

26. The smart card according to claim 23, wherein the smart card further includes: a graphics generation module and a display module;

The graphic generation module is configured to generate a barcode or picture according to the joint password obtained from the password generation module;

The display module is used to display the barcode or picture.

27. The smart card according to claim 26, characterized in that, the smart card further includes: a button module; the button module triggers the display module to display the barcode or the barcode according to the received confirmation password and/or confirmation instruction. picture.

28. The smart card according to claim 23, characterized in that the smart card is connected to the terminal in a non-contact communication method.

29. The smart card according to any one of claims 24 to 27, characterized in that the transceiver module transmits After the signed message is sent to the terminal, the connection with the terminal is also disconnected;

30. A smart card transaction system with an electronic signature function, characterized in that the system includes: a terminal, a backend system server, and a smart card with an electronic signature function as described in any one of claims 23 to 29;

The terminal obtains the verification password and sends at least the transaction message, the signature message, the verification password and the encryption joint password to the backend system server;

The backend system server verifies the signature message and the verification password respectively, and after passing the verification, performs a transaction operation based on the transaction message.

31. The system according to claim 30, wherein the terminal obtains the verification password from the smart card in a non-contact communication manner, or by scanning a barcode or picture displayed by the display module of the smart card. The verification password, or a joint password input by pressing a key, is used as the verification password.