WO2016124031A1 - 模拟装置、真实卡片管理器和数据交互系统 - Google Patents

模拟装置、真实卡片管理器和数据交互系统 Download PDF

Info

Publication number
WO2016124031A1
WO2016124031A1 PCT/CN2015/094732 CN2015094732W WO2016124031A1 WO 2016124031 A1 WO2016124031 A1 WO 2016124031A1 CN 2015094732 W CN2015094732 W CN 2015094732W WO 2016124031 A1 WO2016124031 A1 WO 2016124031A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
interface
read
write
send
Prior art date
Application number
PCT/CN2015/094732
Other languages
English (en)
French (fr)
Inventor
李东声
Original Assignee
天地融科技股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from CN201510056001.2A external-priority patent/CN105989383A/zh
Priority claimed from CN201510056002.7A external-priority patent/CN105989399A/zh
Priority claimed from CN201510056264.3A external-priority patent/CN105991550A/zh
Application filed by 天地融科技股份有限公司 filed Critical 天地融科技股份有限公司
Priority to CA2970324A priority Critical patent/CA2970324C/en
Priority to US15/531,927 priority patent/US20170323289A1/en
Priority to AU2015381427A priority patent/AU2015381427B9/en
Publication of WO2016124031A1 publication Critical patent/WO2016124031A1/zh

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327Short range or proximity payments by means of M-devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352Contactless payments by cards
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction

Definitions

  • the present invention relates to the field of electronic information security technologies, and in particular, to a simulation device, a real card manager, and a data interaction system.
  • the present invention is directed to solving the above problems.
  • a first main object of the present invention is to provide a simulation device.
  • a simulation device comprising:
  • a first interface configured to receive first data sent by the terminal and send the data to the security module
  • the security module is configured to receive the first data sent by the first interface, process the first data to obtain second data, and send the second data to a wireless interface;
  • the wireless interface is configured to receive the second data sent by the security module and send the data to a real card manager;
  • the wireless interface is further configured to receive third data sent by the real card manager and send the data to the security module;
  • the security module is configured to receive the third data sent by the wireless interface, process the third data to obtain fourth data, and send the fourth data to the first interface;
  • the first interface is configured to receive the fourth data sent by the security module and send the fourth data to the terminal.
  • Input device for performing fifth data input
  • a prompting device configured to perform a sixth data prompt
  • the security module is further configured to receive the fifth data input by the input device, and send the fifth data to the prompting device The sixth data.
  • a first interface configured to receive first data sent by the terminal and send the data to the control module
  • the control module is configured to receive the first data sent by the first interface, process the first data to obtain second data, and send the second data to a security module;
  • the security module is configured to receive second data sent by the control module, process the second data to obtain third data, and send the third data to the control module;
  • the control module is further configured to receive the third data sent by the security module, process the third data to obtain fourth data, and send the fourth data to the wireless interface;
  • the wireless interface is configured to receive the fourth data sent by the control module and send the fourth data to a real card manager;
  • the wireless interface is further configured to receive the fifth data sent by the real card manager and send the data to the control module;
  • the control module is further configured to receive the fifth data sent by the wireless interface, process the fifth data to obtain sixth data, and send the sixth data to the security module;
  • the security module is further configured to receive sixth data sent by the control module, process the sixth data to obtain seventh data, and send the seventh data to the control module;
  • the control module is further configured to receive the seventh data sent by the security module, process the seventh data to obtain eighth data, and send the eighth data to the first interface;
  • the first interface is further configured to receive the eighth data sent by the control module and send the eighth data to the terminal.
  • Input device for performing ninth data input
  • the control module is further configured to receive the ninth data input by the input device, and send the tenth data to the prompting device.
  • Input device for performing ninth data input
  • the security module is further configured to receive the ninth data input by the input device, and send the tenth data to the prompting device.
  • the wireless interface is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or WIFI interface.
  • the prompting device comprises: a voice playing device and/or a display device;
  • the input device comprises: a voice collecting device, a keyboard and/or a scanning device .
  • Item 8 The simulation device of any of aspects 1 to 7, the analog device being an analog card, a mobile device, or an electronic signature device.
  • Item 9 The simulation device of item 8, wherein the analog card comprises: a smart card chip.
  • the simulation device comprising a mobile device and an electronic signature device, the first interface being located on the mobile device, the wireless interface being located at the electronic signature On the device, the security module is located on the electronic signature device.
  • the simulation device comprising a mobile device and an electronic signature device, the first interface being located on the electronic signature device, the wireless interface being located at the mobile device On the device, the security module is located on the electronic signature device.
  • simulation device of any one of aspects 1 to 7, the simulation device comprising a mobile device and an electronic signature device, the first interface and the wireless interface being located on the mobile device, the security module Located on the electronic signature device.
  • the simulation device according to any one of claims 1 to 12, wherein the terminal is a card reader terminal or a card reader terminal.
  • the card reader terminal comprises: a payment terminal and/or a function terminal; or the read/write card terminal comprises: a payment terminal and/or a function terminal.
  • Item 16 The simulation device according to item 15, wherein the security chip is one.
  • the simulation device according to any one of claims 1 to 16, wherein the processing performed by the security module on the received data comprises: encryption, decryption, verification, verification verification, certificate verification, signature, verification, and One or any combination of data format conversions.
  • the simulation device according to the present invention can realize the function of connecting the terminal and the real card manager and performing data interaction, and using the simulation device instead of the real card for transaction, the user can realize the transaction. And the purpose of higher security.
  • a second main object of the present invention is to provide a real card manager.
  • the first card is configured to receive the first data sent by the analog device and send the first data to the security module, where the security module is configured to receive the first data sent by the wireless interface. Processing the first data to obtain the second data, and sending the second data to the read/write interface; and at least one read/write interface, configured to receive the second data sent by the security module, and send the second data to the real a card; the at least one read/write interface, And the third module is further configured to receive the third data sent by the real card, and the security module is further configured to receive the third data sent by the read/write interface, and perform the third data.
  • the fourth data is sent, and the fourth data is sent to the wireless interface; the wireless interface is further configured to receive the fourth data sent by the security module, and send the fourth data to the analog device;
  • the fifth data input is performed;
  • the prompting device is configured to perform the sixth data prompt;
  • the security module is further configured to receive the fifth data input by the input device, and send the sixth data to the prompting device data.
  • the cut-off board is connected; in each of the read/write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and the read/write control unit of each of the at least two read/write interfaces, For reading the third data from the real card, and writing the second data to the real card; a storage unit of each of the at least two read/write interfaces for storing The respective addresses of the read and write interfaces.
  • the at least one read/write interface is at least two read/write interfaces, wherein the last read/write interface comprises a first IO interface, a read/write control unit, and a storage unit;
  • Each of the at least two read/write interfaces except the last read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit; wherein the at least The first IO interface of the first read/write interface of the two read/write interfaces is connected to the security module; the at least two read/write interfaces are from the second read/write interface, and the first of each read/write interface
  • the IO interface is respectively connected to the second IO interface of the previous read/write interface; in each of the read/write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and the at least two read/write interfaces are a read/write control unit of each read/write interface, configured to read the third data from the real card, and write
  • the solution 21 includes a wireless interface, configured to receive the first data sent by the analog device, and send the first data to the control module, where the control module is configured to receive the first data sent by the wireless interface. Processing the first data to obtain the second data, and sending the second data to the security module; the security module, configured to receive the second data sent by the control module, and the second data Processing, the third data is sent, and the third data is sent to the control module; the control module is further configured to receive the third data sent by the security module, and process the third data to obtain a third data.
  • the port is configured to receive the fourth data sent by the control module and send the data to the real card; the at least one read/write interface is further configured to receive the fifth data sent by the real card and send the data to the control module
  • the control module is further configured to receive the fifth data sent by the read/write interface, process the fifth data to obtain sixth data, and send the sixth data to the security module;
  • the security module is further configured to receive the sixth data sent by the control module, process the sixth data to obtain the seventh data, and send the seventh data to the control module;
  • the control module is further used to Receiving the seventh data sent by the security module, processing the seventh data to obtain eighth data, and sending the eighth data to the wireless interface;
  • the wireless interface is further configured to receive the control The eighth data sent by the module is sent to the simulation device; the input device is configured to perform the ninth data input; the prompting device is configured to perform the tenth data prompt; the control module is further used Said input means receiving said input data according to the ninth,
  • the cut-off board is connected; in each of the read/write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and the read/write control unit of each of the at least two read/write interfaces, For reading the fifth data from the real card, and writing the fourth data to the real card; a storage unit of each of the at least two read/write interfaces for storing The respective addresses of the read and write interfaces.
  • the at least one read/write interface is at least two read/write interfaces, wherein the last read/write interface comprises a first IO interface, a read/write control unit, and a storage unit;
  • Each of the at least two read/write interfaces except the last read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit; wherein the at least The first IO interface of the first read/write interface of the two read/write interfaces is connected to the control module; the at least two read/write interfaces are from the second read/write interface, and the first of each read/write interface
  • the IO interface is respectively connected to the second IO interface of the previous read/write interface; in each of the read/write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and the at least two read/write interfaces are a read/write control unit of each read/write interface, configured to read the fifth data from the real card, and write
  • the real card manager according to the schemes 18 to 23, wherein the wireless interface is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or WIFI interface.
  • the wireless interface is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or WIFI interface.
  • Item 25 The real card manager of claims 18 to 24, the input device comprising: a voice capture device, a keyboard and/or a scan device; the prompt device comprising: a voice playback device and/or a display device.
  • Item 26 The real card manager of any of claims 18 to 25, wherein the simulation device is an analog card, a mobile device, or an electronic signature device.
  • Item 27 The real card manager of claims 18 to 25, the simulation device comprising a mobile device and an electronic signature device.
  • Item 28 The real card manager of claims 18 to 27, the security module being a security chip.
  • Item 29 The real card manager of claim 28, wherein the security chip is one.
  • Item 30 The real card manager according to any one of claims 18 to 29, wherein the processing performed by the security module on the received data comprises: encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data. One or any combination of format conversions.
  • the real card manager based on the present invention can realize the management of the real card, and can further cooperate with the simulation device to realize convenient user transaction and high security.
  • a third main object of the present invention is to provide a data interaction system.
  • the data interaction system includes: a simulation device and a real card manager; the simulation device is configured to receive first data sent by the terminal, and process the first data to obtain second data, to the The real card manager sends the second data; the real card manager is configured to receive the second data sent by the simulation device, process the second data to obtain third data, and send the third data to the real card The third data; the real card manager is further configured to receive fourth data sent by the real card, process the fourth data to obtain fifth data, and send the fifth data to the simulation device The simulation device is further configured to receive the fifth data sent by the real card manager, process the fifth data to obtain sixth data, and send the sixth data to the terminal.
  • the simulation device includes: a first interface, configured to receive the first data sent by the terminal and send the data to an analog device security module; Receiving, by the first interface, the first data, processing the first data to obtain second data, and sending the second data to an analog device wireless interface; Receiving the second data sent by the analog device security module and sending the data to the real card manager; the analog device wireless interface is further configured to receive the fifth data sent by the real card manager and Sent to the analog device security module; the simulation The device security module is further configured to receive the fifth data sent by the wireless interface of the analog device, process the fifth data to obtain sixth data, and send the sixth data to the first interface; The first interface is further configured to receive the sixth data sent by the analog device security module and send the sixth data to the terminal.
  • the data interaction system of claim 32 the simulation device further comprising: an analog device input device for performing a seventh data input; a simulation device prompting device for performing an eighth data prompt; the simulation device
  • the security module is further configured to receive the seventh data input by the analog device input device, and send the eighth data to the analog device prompting device.
  • the simulation device comprises: a first interface, configured to receive the first data sent by the terminal and send the data to an analog device control module; And receiving the first data sent by the first interface, processing the first data to obtain first processing data, and sending the first processing data to an analog device security module; the analog device security module Receiving the first processing data sent by the simulation device control module, processing the first processing data to obtain second processing data, and transmitting the second processing data to the simulation device control module;
  • the simulation device control module is further configured to receive the second processing data sent by the simulation device security module, process the second processing data to obtain second data, and send the first data to the analog device wireless interface a data interface, configured to receive the second data sent by the analog device control module and send the data to the a virtual card interface, configured to receive the fifth data sent by the real card manager and sent to the analog device control module; the analog device control module is further configured to receive the The fifth data sent by the wireless interface of the simulation device is processed to obtain the fifth processed data, and the fifth processed data is sent to the analog device
  • the data interaction system of claim 34 the simulation device further comprising: an analog device input device for performing a seventh data input; a simulation device prompting device for performing an eighth data prompt; the simulation device
  • the control module is further configured to receive the seventh data input by the analog device input device, and send the eighth data to the analog device prompting device.
  • the data interaction system of claim 34 the simulation device further comprising: an analog device input device for performing a seventh data input; a simulation device prompting device for performing an eighth data prompt; the simulation device a security module, configured to receive the seventh data input by the analog device input device, and prompt the analog device The device transmits the eighth data.
  • the wireless interface of the simulation device is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, and a 4G network interface.
  • Network interface or WIFI interface is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, and a 4G network interface.
  • simulation device is an analog card, a mobile device, or an electronic signature device.
  • analog card comprises: a smart card chip.
  • the simulation device comprises a mobile device and an electronic signature device
  • the first interface is located on the mobile device
  • the analog device wireless interface is located at the On the electronic signature device
  • the analog device security module is located on the electronic signature device.
  • the data interaction system of any one of aspects 32 to 37 wherein the simulation device comprises a mobile device and an electronic signature device, the first interface is located on the electronic signature device, and the analog device wireless interface is located
  • the mobile device security module is located on the electronic signature device on the mobile device.
  • the data interaction system of any one of aspects 32 to 37 wherein the simulation device comprises a mobile device and an electronic signature device, the first interface and the analog device wireless interface are located on the mobile device, The analog device security module is located on the electronic signature device.
  • the data interaction system according to any one of the items 31 to 42, wherein the terminal is a card reader terminal or a card reader terminal.
  • the card reader terminal comprises: a payment terminal and/or a function terminal; or the read/write card terminal comprises: a payment terminal and/or a function terminal.
  • simulation device security module is a security chip.
  • Item 46 The data interaction system according to item 45, wherein the security chip is one.
  • the data interaction system according to any one of claims 32 to 46, wherein the processing performed by the simulation device security module on the received data comprises: encryption, decryption, verification, verification verification, certificate verification, signature, One or any combination of verification and data format conversion.
  • the real card manager comprises: a real card manager wireless interface, configured to receive the second data sent by the simulation device and send it to a real card manager for security a module, the real card manager security module, configured to receive the second data sent by the real card manager wireless interface, process the second data to obtain third data, and send the Third data; at least one read/write interface, configured to receive the third data sent by the real card manager security module, and send the third data to the real a real card; the at least one read/write interface is further configured to receive the fourth data sent by the real card and send the fourth data to the real card manager security module; the real card manager security module is further configured to receive the The fourth data sent by the read/write interface, the fourth data is processed to obtain fifth data, and the fifth data is sent to the real card manager wireless interface; the real card manager wireless interface, And configured to receive the fifth data sent by the real card manager security module, and send the data to the simulation device; the real card manager input device is configured to perform ninth data input; the real card manager prompt device
  • the real card manager further comprises: a cutoff board; the at least one read/write interface is at least two read/write interfaces, wherein each of the read/write interfaces includes a first IO interface, a second IO interface, a read/write control unit, and a storage unit; wherein, the first IO interface of the first read/write interface of the at least two read/write interfaces and the real card manager security module Connected; the at least two read/write interfaces start from the second read/write interface, and the first IO interface of each read/write interface is respectively connected to the second IO interface of the previous read/write interface; The two IO interfaces are connected to the cutoff board storing the cutoff information; in each of the read and write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and each of the at least two read/write interfaces a read/write control unit of the read/write interface, configured to read the fourth data from the real card, and write the
  • the at least one read/write interface is at least two read/write interfaces, wherein the last read/write interface comprises a first IO interface, a read/write control unit, and a storage unit;
  • Each of the at least two read/write interfaces except the last read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit; wherein the at least two The first IO interface of the first read/write interface of the read/write interface is connected to the real card manager security module; each of the at least two read/write interfaces starts from the second read/write interface, and each read/write interface The first IO interface is respectively connected to the second IO interface of the previous read/write interface; in each of the read/write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; the at least two reads a read/write control unit of each read/write interface in the write interface, configured to read the fourth data from the real card,
  • the real card manager includes: a real card manager wireless interface, configured to receive the second data sent by the simulation device and send the data to the real card manager control module;
  • the real card manager control module is configured to receive the second data sent by the real card manager wireless interface, process the second data to obtain second processing data, and send the second processing data to the real card manager security module.
  • the second processing data; the real card manager security module configured to receive the second processing data sent by the real card manager control module, and process the second processing data to obtain third processing data Transmitting the third processing data to the real card manager control module; the real card manager control module is further configured to receive the third processing data sent by the real card manager security module, The third processing data is processed to obtain the third data, and the third data is sent to the read/write interface; the at least one read/write interface is configured to receive the third data sent by the real card manager control module and send the third data to a real card; the at least one read/write interface is further configured to receive fourth data sent by the real card and send the real data to the real a slice manager control module, wherein the real card manager control module is further configured to receive the fourth data sent by the read/write interface, and process the fourth data to obtain fourth processed data, to the real The card manager security module sends the fourth processing data; the real card manager security module is further configured to receive the fourth processing data sent by the real card manager control module, and the fourth processing data Processing, the fifth
  • the real card manager further comprising: a cutoff board; the at least one read/write interface is at least two read/write interfaces, wherein each of the read/write interfaces includes a first IO interface, a second IO interface, a read/write control unit, and a storage unit; wherein, the first IO interface of the first read/write interface of the at least two read/write interfaces and the real card manager control module Connected; the at least two read/write interfaces start from the second read/write interface, and the first IO interface of each read/write interface is respectively connected to the second IO interface of the previous read/write interface; The two IO interfaces are connected to the cutoff board storing the cutoff information; in each of the read and write interfaces, the first IO interface and the second IO interface are respectively connected to the read/write control unit; and each of the at least two read/write interfaces a read/write control unit of the read/write interface, configured to read the fourth data from the real card, and write the third
  • the at least one read/write interface is at least two read and write interfaces.
  • the first IO interface of each read/write interface is connected to the second IO interface of the previous read/write interface, and the read/write interface is
  • the first IO interface and the second IO interface are respectively connected to the read/write control unit; the read/write control unit of each of the at least two read/write interfaces is configured to read the first card from the real card And storing the third data into the real card; the storage unit of each of the at least two read/write interfaces is configured
  • the real card manager wireless interface is a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, and a 3G network interface. , 4G network interface or WIFI interface.
  • the data interaction system according to any one of the items 48 to 56, wherein the processing performed by the real card manager security module on the received data comprises: encryption, decryption, verification, verification verification, certificate verification, One or any combination of signatures, verifications, and data format conversions.
  • the simulation device in the data interaction system of the present invention can realize the function of connecting the terminal and the real card manager and performing data interaction, and using the simulation device to replace the real card for transaction.
  • the management of the real card can be realized, thereby realizing the purpose of facilitating user transactions and high security.
  • FIG. 1 is a schematic structural diagram of a simulation apparatus according to Embodiment 1 of the present invention.
  • FIG. 2 is a schematic structural diagram of a simulation apparatus according to Embodiment 2 of the present invention.
  • FIG. 3 is a schematic structural diagram of a simulation apparatus according to Embodiment 3 of the present invention.
  • FIG. 4 is a schematic structural diagram of a simulation apparatus according to Embodiment 4 of the present invention.
  • FIG. 5 is a schematic structural diagram of a simulation apparatus according to Embodiment 5 of the present invention.
  • FIG. 6 is a schematic structural diagram of a real card manager according to Embodiment 9 of the present invention.
  • FIG. 7 is a schematic structural diagram of a read/write interface in a first structure of a real card manager provided by the invention.
  • FIG. 8 is another schematic structural diagram of a read/write interface in a first structure of a real card manager provided by the invention.
  • FIG. 9 is a schematic structural diagram of a real card manager according to Embodiment 10 of the present invention.
  • FIG. 10 is a schematic structural diagram of a read/write interface in a second structure of a real card manager provided by the present invention.
  • FIG. 11 is another schematic structural diagram of a read/write interface in a second structure of a real card manager provided by the present invention.
  • FIG. 12 is a schematic structural diagram of a data interaction system according to the present invention.
  • connection In the description of the present invention, it should be noted that the terms “installation”, “connected”, and “connected” are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or integrally connected; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • Connected, or integrally connected can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • the specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.
  • the present invention provides an architecture for data interaction to provide a transaction solution that is convenient for users to trade and has high security.
  • the data interaction architecture includes: an emulation device and a real card manager.
  • the simulation device may include one or more analog devices, each of which can belong to and be managed by only one real card manager.
  • the simulation device may be an analog card, that is, a device that is separately manufactured as a card shape, or a real card that is reserved with an analog device function, and the analog card may be the same size as the existing bank card, and in the data interaction architecture, Replace the real card to complete the transaction.
  • the simulation device of the present invention may also be a mobile device having an analog device function, including: a smart phone, a tablet computer (PAD), a PDA (eg, a palmtop computer, a learning machine), a notebook computer, an e-book reading device, and a wearable device.
  • the analog device of the present invention may also be an electronic signature device (key device, such as ICBC U Shield, Agricultural Bank K Bao, etc.).
  • the analog device of the present invention can also be a combination of a mobile device and an electronic signature device.
  • the simulation device can cooperate with an existing terminal (the terminal can include a payment terminal, a function terminal, etc., for example, the payment terminal includes a transaction type terminal related to financial transactions, such as: a smartphone, a tablet, a notebook computer, a smart wearable device, an ATM A payment originating terminal such as a machine, a POS machine, a bus recharge machine, and a Lakara payment terminal, and the function terminal includes a service type terminal, for example, a service initiating terminal such as an access control and a point card management terminal, performs data interaction, and the simulation device can also be real.
  • the card manager performs data interaction.
  • the terminal can be connected by using a contact type and/or an NFC method.
  • the terminal can be connected by using an NFC method.
  • the terminal involved in the present invention may be a card reader terminal or a card reader terminal for reading or reading data from the simulation device.
  • the real card manager can manage one or more analog devices, and the real card manager has at least one read/write interface, and the read/write interface can be a contact type (such as contact contact in the form of a card slot) interface and/or Or non-contact (such as NFC, etc.) interface, so that the real card manager can connect different kinds of real cards in different ways; the real card manager can also interact with the analog device for data.
  • the real card manager can be placed in a fixed location (such as the user's home), or can be made into a small device (such as a wallet). When the real card manager is placed in a fixed location, it can mainly pass the 2G network interface, 3G.
  • the network interface such as the network interface, the 4G network interface or the WIFI interface interacts with the analog device.
  • the network interface and the analog device can be used for data interaction, and the Bluetooth interface and the infrared interface can also be used.
  • the near field communication interface or the midfield communication interface such as the 2.4G interface, the 900M interface, the zigbee interface, and the analog device perform data interaction.
  • the real card is a smart chip card
  • the real card can be a function card (such as a bus card, a meal card, a shopping card, a membership card, a loyalty card, an ID card, etc.) or a bank card issued by a bank.
  • the analog device is a card-shaped device, it can also be a smart chip card.
  • the present invention provides an emulation device for data interaction between a terminal and a real card manager.
  • the present invention also provides a real card manager for managing the above real cards.
  • the invention also provides a data interaction system for performing data communication between the simulation device and the real card manager mutual. In the following, the structure and function of the simulation device, the real card manager and the real card manager will be described in detail.
  • Embodiment 1 is a schematic structural diagram of a simulation apparatus according to Embodiment 1 of the present invention.
  • the simulation apparatus of Embodiment 1 of the present invention includes:
  • the first interface 101, the wireless interface 102, and the security module 103 wherein:
  • the first interface 101 is configured to receive the first data sent by the terminal and send the data to the security module.
  • the security module 103 is configured to receive the first data sent by the first interface 101, process the first data to obtain the second data, and send the second data to the wireless interface 102.
  • the wireless interface 102 is configured to receive the second data sent by the security module 103 and send the data to the real card manager;
  • the wireless interface 102 is further configured to receive the third data sent by the real card manager and send the third data to the security module 103;
  • the security module 103 is configured to receive the third data sent by the wireless interface 102, process the third data to obtain the fourth data, and send the fourth data to the first interface 101.
  • the first interface 101 is configured to receive the fourth data sent by the security module 103 and send the fourth data to the terminal.
  • the first interface 101 can be a contact interface, the first interface 101 can also be a contactless interface, and the first interface 101 can also be a contact interface and a contactless interface, so as to be performed by the first interface 101 and the terminal.
  • Data interaction can be a contact, a USB interface, a serial port, an audio interface, etc.
  • the contact interface can be a model of NXP 8035, NCN 8025, etc.
  • the contactless interface can be a 2.4G interface, a Bluetooth interface, Infrared interface, NFC interface or RFID interface, etc.
  • the model of the non-contact interface can be QN9021, PN512, TIF256 of Texas Instruments, RC663 of NXP.
  • the interface that the terminal can support it can be used as the interface of the first interface 101 to cooperate with the terminal.
  • the wireless interface 102 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or a WIFI interface, so as to be wirelessly communicated with the real The card manager performs data interaction.
  • the wireless interface 102 can be SIM6320, Longshan's U7500, and the like.
  • the data conforming to the first interface protocol may be converted into data conforming to the wireless interface protocol, and sent through the wireless interface 102.
  • the data conforming to the wireless interface protocol can also be converted into data conforming to the first interface protocol, and sent through the first interface 101.
  • the first interface 101 is an NFC interface
  • the wireless interface 102 is a Bluetooth interface.
  • the first interface 101 and the wireless interface 102 are of the same type, for example, when the terminal supports the Bluetooth interface, the first interface 101 of the analog device may be a Bluetooth interface, and the wireless interface 102 may also be a Bluetooth interface. At this time, the analog device does not need to perform an operation of data communication protocol conversion.
  • the security module 103 has a data processing function such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the first embodiment of the present invention controls the first interface 101 and the wireless interface 102 through the security module 103. Data transfer can improve security.
  • the security module is a security chip, the security chip is one to save cost.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the analog device when the analog device is a smart chip card and the security module is a security chip, the analog device may further include a smart card chip.
  • the security chip may be integrated into the smart card chip as a chip or as a separate chip.
  • the security chip can be a national technology Z8D256U, Infineon's STSEL78.
  • the security chip may have a storage unit for data storage.
  • a connection terminal and a real card manager can be realized, and a data interaction function is performed between the two, and the simulation device is used instead of the real card for transaction, which can realize user-friendly transaction and is safe. Higher purpose.
  • the simulation apparatus of Embodiment 1 of the present invention may also separately set a memory; the memory may be connected to the security module 103 for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the simulation apparatus of Embodiment 2 of the present invention includes:
  • the first interface 201 is configured to receive the first data sent by the terminal and send the data to the security module 205;
  • the security module 205 is configured to receive the first data sent by the first interface 201, process the first data to obtain the second data, and send the second data to the wireless interface 202.
  • the wireless interface 202 is configured to receive the second data sent by the security module 205 and send the data to the real card manager;
  • the wireless interface 202 is further configured to receive the third data sent by the real card manager and send the data to the security module 205;
  • the security module 205 is configured to receive the third data sent by the wireless interface 202, process the third data to obtain the fourth data, and send the fourth data to the first interface 201.
  • the first interface 201 is configured to receive the fourth data sent by the security module 205 and send the fourth data to the terminal.
  • the input device 203 is configured to perform a fifth data input
  • a prompting device 204 configured to perform a sixth data prompt
  • the security module 205 is further configured to receive the fifth data input by the input device 203 and send the sixth data to the prompting device 204.
  • the first interface 201 can be a contact interface, the first interface 201 can also be a contactless interface, and the first interface 201 can also be a contact interface and a contactless interface, so as to be performed by the first interface 201 and the terminal.
  • Data interaction can be a contact, a USB interface, a serial port, an audio interface, etc.
  • the contact interface can be a model of NXP 8035, NCN 8025, etc.
  • the contactless interface can be a 2.4G interface, a Bluetooth interface, Infrared interface, NFC interface or RFID interface, etc.
  • the model of the non-contact interface can be QN9021, PN512, TIF256 of Texas Instruments, RC663 of NXP.
  • the interface that the terminal can support it can be used as the interface of the first interface 201 to cooperate with the terminal.
  • the wireless interface 202 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface or a WIFI interface, so as to be wirelessly communicated with the real The card manager performs data interaction.
  • the wireless interface 202 can be SIM6320, Longshan's U7500, and the like.
  • the data conforming to the first interface protocol may be converted into data conforming to the wireless interface protocol, and sent through the wireless interface 202.
  • the data conforming to the wireless interface protocol can also be converted into data conforming to the first interface protocol, and sent through the first interface 201.
  • the first interface 201 is an NFC interface
  • the wireless interface 202 is a Bluetooth interface.
  • the first interface 201 is of the same type as the wireless interface 202, for example, when the terminal supports the Bluetooth interface, the first interface 201 of the analog device may be a Bluetooth interface, and the wireless interface 202 may also be a Bluetooth interface. At this time, the analog device does not need to perform an operation of data communication protocol conversion.
  • the input device 203 can be one of a voice collection device, a keyboard, and a scanning device, or any combination thereof.
  • the voice collection device may be a microphone or the like
  • the keyboard may be a physical keyboard or a virtual keyboard
  • the scanning device may be a camera or the like.
  • the prompting device 204 may include: a voice playing device and/or a display device; the voice playing device may be a speaker, a earphone, etc., and the display device may be a display screen or the like.
  • the security module 205 has a data processing function such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the second embodiment 201 of the present invention controls the first interface 201 and the wireless interface 202 through the security module 205. Data transfer can improve security.
  • the security module when the security module is a security chip, the security chip is a To save costs.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the analog device when the analog device is a smart chip card and the security module is a security chip, the analog device may further include a smart card chip.
  • the security chip may be integrated into the smart card chip as a chip or as a separate chip.
  • the security chip can be a national technology Z8D256U, Infineon's STSEL78.
  • the security chip may have a storage unit for data storage.
  • a connection terminal and a real card manager can be realized, and a data interaction function is performed between the two, and the simulation device is used instead of the real card for transaction, which can realize user-friendly transaction and is safe. Higher purpose.
  • the simulation device of Embodiment 2 of the present invention may also separately set a memory; the memory may be connected to the security module 205 for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the security module may further process the data received from the input device and send it to the prompting device for prompting.
  • the security module can process the data received from the input device and send it to the real card manager or to the terminal.
  • the simulation device may further include a battery, which may be a non-rechargeable battery or a rechargeable battery.
  • the analog device may further include a charging controller.
  • the controller can be connected to the battery for receiving electrical energy and charging the battery.
  • the charging controller can be disposed in the battery or in the security module.
  • the charging controller further It can be set on the first interface with charging function.
  • a separate charging interface (such as a USB interface) can also be provided on the analog device, and the charging controller can be disposed on the charging interface.
  • the difference between the third embodiment and the first embodiment is that the first interface and the wireless interface in the third embodiment are called by the control module, and the specific implementation is as follows:
  • FIG. 3 is a schematic structural diagram of a simulation apparatus according to Embodiment 3 of the present invention.
  • the simulation apparatus of Embodiment 3 of the present invention includes:
  • a first interface 301 a wireless interface 302, a security module 303, and a control module 304;
  • the first interface 301 is configured to receive the first data sent by the terminal and send the data to the control module 304.
  • the control module 304 is configured to receive the first data sent by the first interface 301, process the first data to obtain the second data, and send the second data to the security module 303.
  • the security module 303 is configured to receive the second data sent by the control module 304, process the second data to obtain the third data, and send the third data to the control module 304.
  • the control module 304 is further configured to receive the third data sent by the security module 303, process the third data to obtain the fourth data, and send the fourth data to the wireless interface 302.
  • the wireless interface 302 is configured to receive the fourth data sent by the control module 304 and send the fourth data to the real card manager;
  • the wireless interface 302 is further configured to receive the fifth data sent by the real card manager and send the data to the control module 304;
  • the control module 304 is further configured to receive the fifth data sent by the wireless interface 302, process the fifth data to obtain the sixth data, and send the sixth data to the security module 303.
  • the security module 303 is further configured to receive the sixth data sent by the control module 304, process the sixth data to obtain the seventh data, and send the seventh data to the control module 304.
  • the control module 304 is further configured to receive the seventh data sent by the security module 303, process the seventh data to obtain the eighth data, and send the eighth data to the first interface 301.
  • the first interface 301 is further configured to receive the eighth data sent by the control module 304 and send the data to the terminal.
  • the first interface 301 can be a contact interface, the first interface 301 can also be a contactless interface, and the first interface 301 can also be a contact interface and a contactless interface.
  • the contact interface can be a contact, a USB interface, a serial port, an audio interface, etc.
  • the contact interface can be a model of NXP 8035, NCN 8025, etc.
  • the contactless interface can be a 2.4G interface, a Bluetooth interface, Infrared interface, NFC interface or RFID interface, etc.
  • the model of the non-contact interface can be QN9021, TIF256 of Texas Instruments, PN512, RC663 of NXP.
  • the interface that the terminal can support it can be used as the interface of the first interface 301 to cooperate with the terminal.
  • the wireless interface 302 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or a WIFI interface, so as to communicate with a real card through wireless communication.
  • the manager performs data interaction.
  • the wireless interface 302 can be SIM6330, Longshang U7500, and the like.
  • the data conforming to the first interface protocol may be converted into data conforming to the wireless interface protocol, and sent through the wireless interface 302.
  • the data conforming to the wireless interface protocol can be converted into data conforming to the first interface protocol, and sent through the first interface 301.
  • the first interface 301 is an NFC interface
  • the wireless interface 302 is a Bluetooth interface.
  • the first interface 301 is of the same type as the wireless interface 302, for example, when the terminal supports the Bluetooth interface, the first interface 301 of the analog device may be a Bluetooth interface, and the wireless interface 302 may also be a Bluetooth interface. At this time, the simulation device There is no need to perform operations for data communication protocol conversion.
  • the security module 303 has data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the security module when the security module is a security chip, the security chip is one to save cost.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the analog device is a smart chip card and the security module is a security chip
  • the analog device may further include a smart card chip.
  • the security chip may be integrated into the smart card chip as a chip or as a separate chip.
  • the smart card chip may not be included, and the function of the smart card chip is completed by the security chip.
  • the security chip can be a national technology Z8D256U, Infineon's STSEL78.
  • the security chip may have a storage unit for data storage.
  • the control module 304 controls data interaction between the first interface 301, the wireless interface 302, and the security module 303.
  • the control module can be implemented by a software module having a data processing function such as a data format conversion, an information extraction, and a forwarding operation, or the control module can also be implemented by using a hardware chip.
  • the control module is a control chip.
  • the control chip may be STM32 of ST company, Z32 of national technology, or the like.
  • the control chip may have a storage unit for data storage.
  • the processing of the data by the control module may include, but is not limited to, the following one or any combination thereof: data format conversion, information extraction and forwarding operations, and the like.
  • the security module and the control module in the present invention can be integrated into one module, or can be integrated into one chip as two modules.
  • a connection terminal and a real card manager can be realized, and a data interaction function is performed between the two, and the simulation device is used instead of the real card for transaction, which can realize user-friendly transaction and is safe. Higher purpose.
  • the simulation device of Embodiment 3 of the present invention may also separately set a memory; the memory may be connected to the control module 304 or connected to the security module 303 for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the difference between the fourth embodiment and the second embodiment is that the first interface, the wireless interface, the input device, the prompting device, and the like are invoked by the control module in the fourth embodiment, and the specific implementation is as follows:
  • the simulation apparatus of Embodiment 4 of the present invention includes:
  • First interface 401 wireless interface 402, security module 403, input device 404, prompting device 405, and control Module 406;
  • the first interface 401 is configured to receive the first data sent by the terminal and send the data to the control module 406;
  • the control module 406 is configured to receive the first data sent by the first interface 401, process the first data to obtain the second data, and send the second data to the security module 403.
  • the security module 403 is configured to receive the second data sent by the control module 406, process the second data to obtain the third data, and send the third data to the control module 406.
  • the control module 406 is further configured to receive the third data sent by the security module 403, process the third data to obtain the fourth data, and send the fourth data to the wireless interface 402.
  • the wireless interface 402 is configured to receive the fourth data sent by the control module 406 and send the fourth data to the real card manager;
  • the wireless interface 402 is further configured to receive the fifth data sent by the real card manager and send the data to the control module 406;
  • the control module 406 is further configured to receive the fifth data sent by the wireless interface 402, process the fifth data to obtain the sixth data, and send the sixth data to the security module 403.
  • the security module 403 is further configured to receive the sixth data sent by the control module 406, process the sixth data to obtain the seventh data, and send the seventh data to the control module 406.
  • the control module 406 is further configured to receive the seventh data sent by the security module 403, process the seventh data to obtain the eighth data, and send the eighth data to the first interface 401;
  • the first interface 401 is further configured to receive the eighth data sent by the control module 406 and send the data to the terminal.
  • An input device 404 configured to perform a ninth data input
  • a prompting device 405, configured to perform a tenth data prompt
  • the control module 406 is further configured to receive the ninth data input by the input device 404 and send the tenth data to the prompting device 405.
  • the first interface 401 can be a contact interface, the first interface 401 can also be a contactless interface, and the first interface 401 can also be a contact interface and a contactless interface.
  • the contact interface can be a contact, a USB interface, a serial port, an audio interface, etc.
  • the contact interface can be a model of NXP 8035, NCN 8025, etc.
  • the contactless interface can be a 2.4G interface, a Bluetooth interface, Infrared interface, NFC interface or RFID interface, etc.
  • the model of the non-contact interface can be QN9021, TIF256 of Texas Instruments, PN512, RC663 of NXP.
  • the interface that the terminal can support it can be used as the interface of the first interface 401 to cooperate with the terminal.
  • the wireless interface 402 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or a WIFI interface, so as to communicate with a real card through wireless communication.
  • the manager performs data interaction.
  • the wireless interface 402 can be a SIM6340, a U7500 of Longshang, and the like.
  • the analog device receives the data from the first interface 401. After that, the data conforming to the first interface protocol can be converted into data conforming to the wireless interface protocol, and transmitted through the wireless interface 402. Of course, after the analog device receives the data from the wireless interface 402, the data conforming to the wireless interface protocol can also be converted. The data conforms to the first interface protocol and is sent through the first interface 401.
  • the first interface 401 is an NFC interface
  • the wireless interface 402 is a Bluetooth interface.
  • the first interface 401 is of the same type as the wireless interface 402, for example, when the terminal supports the Bluetooth interface, the first interface 401 of the analog device may be a Bluetooth interface, and the wireless interface 402 may also be a Bluetooth interface. At this time, the analog device does not need to perform an operation of data communication protocol conversion.
  • the security module 403 has data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the security module when the security module is a security chip, the security chip is one to save cost.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the analog device is a smart chip card and the security module is a security chip
  • the analog device may further include a smart card chip.
  • the security chip may be integrated into the smart card chip as a chip or as a separate chip.
  • the smart card chip may not be included, and the function of the smart card chip is completed by the security chip.
  • the security chip can be a national technology Z8D256U, Infineon's STSEL78.
  • the security chip may have a storage unit for data storage.
  • Input device 404 can be one of a voice acquisition device, a keyboard, and a scanning device, or any combination thereof.
  • the voice collection device may be a microphone or the like
  • the keyboard may be a physical keyboard or a virtual keyboard
  • the scanning device may be a camera or the like.
  • the prompting device 405 may include: a voice playing device and/or a display device; the voice playing device may be a speaker, a earphone, etc., and the display device may be a display screen or the like.
  • the control module 406 controls data interaction between the first interface 401, the wireless interface 402, the input device 404, the prompting device 405, and the security module 403.
  • the control module can be implemented by a software module having a data processing function such as a data format conversion, an information extraction, and a forwarding operation, or the control module can also be implemented by using a hardware chip.
  • the control module is a control chip.
  • the control chip may be STM32 of ST company, Z32 of national technology, or the like.
  • the control chip may have a storage unit for data storage.
  • the processing of the data by the control module may include, but is not limited to, the following one or any combination thereof: data format conversion, information extraction and forwarding operations, and the like.
  • the security module and the control module in the present invention can be integrated into one module, or can be integrated into one chip as two modules.
  • connection terminal and a real card manager can be implemented, and The function of data interaction between the two uses the simulation device instead of the real card for transaction, which can realize convenient user transaction and high security.
  • the simulation apparatus of Embodiment 4 of the present invention may also separately set a memory; the memory may be connected to the control module 406 or connected to the security module 403 for storing data.
  • the data described in the present invention may further include instructions and the like.
  • control module may further process the data received from the input device and send it to the prompting device for prompting.
  • control module may also process the data received from the input device and send it to the real card manager or to the terminal.
  • control module may process the data received from the input device and send it to the security module for processing.
  • control module may process the data received from the security module and send it to the prompting device for prompting.
  • the difference between the fifth embodiment and the first embodiment is that the first interface and the wireless interface are invoked by the control module in the fifth embodiment, and the input device and the prompting device are called by the security module, and the specific implementation is as follows:
  • FIG. 5 is a schematic structural diagram of a simulation apparatus according to Embodiment 5 of the present invention.
  • the simulation apparatus of Embodiment 5 of the present invention includes:
  • a first interface 501 a wireless interface 502, an input device 503, a prompting device 504, a security module 505, and a control module 506;
  • the first interface 501 is configured to receive the first data sent by the terminal and send the data to the control module 506.
  • the control module 506 is configured to receive the first data sent by the first interface 501, process the first data to obtain the second data, and send the second data to the security module 505.
  • the security module 505 is configured to receive the second data sent by the control module 506, process the second data to obtain the third data, and send the third data to the control module 506.
  • the control module 506 is further configured to receive the third data sent by the security module 505, process the third data to obtain the fourth data, and send the fourth data to the wireless interface 502.
  • a wireless interface 502 configured to receive fourth data sent by the control module 506 and send the data to the real card manager;
  • the wireless interface 502 is further configured to receive the fifth data sent by the real card manager and send the data to the control module 506;
  • the control module 506 is further configured to receive the fifth data sent by the wireless interface 502, process the fifth data to obtain the sixth data, and send the sixth data to the security module 505.
  • the security module 505 is further configured to receive the sixth data sent by the control module 506, process the sixth data to obtain the seventh data, and send the seventh data to the control module 506.
  • the control module 506 is further configured to receive the seventh data sent by the security module 505, and process the seventh data.
  • the eighth data, the eighth data is sent to the first interface 501;
  • the first interface 501 is further configured to receive the eighth data sent by the control module 506 and send the data to the terminal.
  • the input device 503 is configured to perform ninth data input
  • a prompting device 504 configured to perform a tenth data prompt
  • the security module 505 is further configured to receive the ninth data input by the input device 503, and send the tenth data to the prompting device 504.
  • the first interface 501 can be a contact interface, the first interface 501 can also be a contactless interface, and the first interface 501 can also be a contact interface and a contactless interface.
  • the contact interface can be a contact, a USB interface, a serial port, an audio interface, etc.
  • the contact interface can be a model of NXP 8035, NCN 8025, etc.
  • the contactless interface can be a 2.4G interface, a Bluetooth interface, Infrared interface, NFC interface or RFID interface, etc.
  • the model of the non-contact interface can be QN9021, TIF256 of Texas Instruments, PN512, RC663 of NXP.
  • the interface that the terminal can support it can be used as an interface of the first interface 501 to cooperate with the terminal.
  • the wireless interface 502 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface, or a WIFI interface, so as to communicate with a real card through wireless communication.
  • the manager performs data interaction.
  • the wireless interface 502 can be a SIM6320, a U7500 of Longshang, and the like.
  • the data conforming to the first interface protocol may be converted into data conforming to the wireless interface protocol, and sent through the wireless interface 502.
  • the data conforming to the wireless interface protocol can also be converted into data conforming to the first interface protocol, and sent through the first interface 501.
  • the first interface 501 is an NFC interface
  • the wireless interface 502 is a Bluetooth interface.
  • the first interface 501 is of the same type as the wireless interface 502, for example, when the terminal supports the Bluetooth interface, the first interface 501 of the analog device may be a Bluetooth interface, and the wireless interface 502 may also be a Bluetooth interface. At this time, the analog device does not need to perform an operation of data communication protocol conversion.
  • the input device 503 can be one of a voice acquisition device, a keyboard, and a scanning device, or any combination thereof.
  • the voice collection device may be a microphone or the like
  • the keyboard may be a physical keyboard or a virtual keyboard
  • the scanning device may be a camera or the like.
  • the prompting device 504 may include: a voice playing device and/or a display device; the voice playing device may be a speaker, a earphone, etc., and the display device may be a display screen or the like.
  • the security module 505 has data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the security module when the security module is a security chip, the security chip is one to save cost.
  • the security module can have encryption, decryption, verification, verification verification, certificate verification, signature,
  • the software module of the data processing function such as the verification and data format conversion is implemented, or the security module can also be implemented by using a hardware chip, for example, the security module is a security chip.
  • the analog device is a smart chip card and the security module is a security chip
  • the analog device may further include a smart card chip.
  • the security chip may be integrated into the smart card chip as a chip or as a separate chip.
  • the smart card chip may not be included, and the function of the smart card chip is completed by the security chip.
  • the security chip can be a national technology Z8D256U, Infineon's STSEL78.
  • the security chip may have a storage unit for data storage.
  • Control module 506 controls data interaction between first interface 501, wireless interface 502, and security module 505.
  • the control module can be implemented by a software module having a data processing function such as a data format conversion, an information extraction, and a forwarding operation, or the control module can also be implemented by using a hardware chip.
  • the control module is a control chip.
  • the control chip may be STM32 of ST company, Z32 of national technology, or the like.
  • the control chip may have a storage unit for data storage.
  • the processing of the data by the control module may include, but is not limited to, the following one or any combination thereof: data format conversion, information extraction and forwarding operations, and the like.
  • the security module and the control module in the present invention can be integrated into one module, or can be integrated into one chip as two modules.
  • a connection terminal and a real card manager can be realized, and a data interaction function is performed between the two, and the simulation device is used instead of the real card for transaction, which can realize user-friendly transaction and is safe. Higher purpose.
  • the simulation device of Embodiment 5 of the present invention may also separately set a memory; the memory may be connected to the control module 506 or connected to the security module 505 for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the security module may further process the data received from the input device and send it to the prompting device for prompting.
  • the security module can also process the data received from the input device and send it to the control module, and then send it to the real card manager or to the terminal.
  • the simulation device based on Embodiment 3, Embodiment 4 and Embodiment 5 further includes a battery, which may be a non-rechargeable battery or a rechargeable battery.
  • the analog device may further include a charging controller.
  • the charging controller can be connected to the battery for receiving electric energy and charging the battery.
  • the charging controller can be set in the battery, can also be set in the security module, and can also be set in the control module, when the first When the interface has a charging function, the charging controller can also be disposed on the first interface having a charging function.
  • a separate charging interface for example, a USB interface
  • the charging controller can be disposed on the charging interface. .
  • the simulation device in the embodiment is a combination of a mobile device and an electronic signature device, wherein the first interface is located on the mobile device, the wireless interface is located on the electronic signature device, and the security module is Located on an electronic signature device.
  • the input device and the prompting device can be located on the mobile device at the same time, or on the electronic signature device at the same time, or one of them is located on the mobile device and the other is located on the electronic signature device.
  • the control module can be located on the mobile device or on the electronic signature device.
  • the simulation device in the embodiment is a combination of a mobile device and an electronic signature device, wherein the first interface is located on the electronic signature device, the wireless interface is located on the mobile device, and the security module is Located on an electronic signature device.
  • the input device and the prompting device can be located on the mobile device at the same time, or on the electronic signature device at the same time, or one of them is located on the mobile device and the other is located on the electronic signature device.
  • the control module can be located on the mobile device or on the electronic signature device.
  • the simulation device in the embodiment is a combination of a mobile device and an electronic signature device, wherein the first interface and the wireless interface are located on the mobile device, and the security module is located on the electronic signature device. .
  • the input device and the prompting device can be located on the mobile device at the same time, or on the electronic signature device at the same time, or one of them is located on the mobile device and the other is located on the electronic signature device.
  • the control module can be located on the mobile device or on the electronic signature device.
  • the data interaction may be performed directly between the various components of the data interaction (for example, when the simulation device is a mobile phone, the security module of the mobile phone directly acquires data through the first interface), Data interaction can be performed indirectly (for example, when the analog device is a combination of a mobile phone and a key device, data received on the first interface on the mobile phone can be transmitted to the connection path between the mobile phone and the key device (for example, an audio interface) to The security module located in the key device).
  • the analog device is a combination of a mobile phone and a key device
  • data received on the first interface on the mobile phone can be transmitted to the connection path between the mobile phone and the key device (for example, an audio interface) to The security module located in the key device).
  • the processing performed by the security module on the received data includes one or any combination of encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • FIG. 6 is a schematic structural diagram of a real card manager according to Embodiment 9 of the present invention.
  • the real card manager of Embodiment 9 of the present invention includes:
  • a wireless interface 601 at least one read/write interface 602, an input device 603, a security module 604, and a prompting device 605;
  • the wireless interface 601 is configured to receive the first data sent by the analog device and send the data to the security module 604;
  • the security module 604 is configured to receive the first data sent by the wireless interface 601, process the first data to obtain the second data, and send the second data to the read/write interface 602.
  • At least one read/write interface 602, configured to receive the second data sent by the security module 604, and send the data to the real card;
  • At least one read/write interface 602 is further configured to receive the third data sent by the real card and send it to the security module 604;
  • the security module 604 is further configured to receive the third data sent by the read/write interface 602, process the third data to obtain the fourth data, and send the fourth data to the wireless interface 601.
  • the wireless interface 601 is further configured to receive the fourth data sent by the security module 604, and send the fourth data to the analog device;
  • the input device 603 is configured to perform a fifth data input
  • a prompting device 605, configured to perform a sixth data prompt
  • the security module 604 is further configured to receive the fifth data input by the input device 603 and send the sixth data to the prompting device 605.
  • the wireless interface 601 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface or a WIFI interface, so as to pass wireless communication. Data interaction with the analog device.
  • the wireless interface 601 can be a SIM6320, a U7500 of Longshang Company, and the like.
  • the read/write interface 602 can be at least one contact interface, or at least one contactless interface, or at least one contact interface and at least one contactless interface, for data interaction with different types of real cards through the read/write interface 602.
  • a read/write interface 602 reads and writes with a real card.
  • the read/write interface 602(1) is a read/write interface 602(n), where n ⁇ 2 and n is a natural number.
  • the contact interface may be a contact or the like, and the contactless interface may be an NFC interface or the like.
  • the model of the contact interface can be 8035 from NXP, 8025 from NCN, etc.
  • the model of the contactless interface can be PN512, NCP RC663, etc.
  • the present invention also provides two structures for reading and writing interfaces, but the present invention is not limited to this:
  • the real card manager in the present invention further includes: a cut-off board; at least one read/write interface is at least two read/write interfaces, wherein each read/write interface includes: a first IO interface, a second IO interface, and a read/write control unit. And a storage unit (not shown); see Figure 7 for details:
  • the first IO interface of the first read/write interface of the at least two read/write interfaces is connected to the security module;
  • the first IO interface of each read/write interface is connected to the second IO interface of the previous read/write interface, respectively, from the second read/write interface;
  • the second IO interface of the last read/write interface is connected to the cutoff board storing the cutoff information
  • the first IO interface and the second IO interface are respectively connected to the read/write control unit;
  • a read/write control unit of each of the at least two read/write interfaces for reading the third data from the real card and writing the second data to the real card;
  • a storage unit of each of the at least two read/write interfaces for storing the address of each of the read/write interfaces.
  • the data transmission is performed by using the IO interface in series, the number of IO interfaces of the security module is saved. Since the cutoff board is set, when the security module detects the cutoff information, the last read/write interface can be known, and the interface detection efficiency is improved.
  • the read/write control unit may be integrated or may be configured as two units, that is, a read/write unit and a control unit, which are not limited in the present invention. If two units are used, the IO interface is respectively connected to the control unit. The read/write unit is connected to the control unit.
  • the at least one read/write interface is at least two read/write interfaces, wherein the last read/write interface includes a first IO interface, a read/write control unit, and a storage unit; and at least two of the at least two read/write interfaces except the last read/write interface
  • Each read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit (not shown); as shown in FIG. 8, wherein:
  • the first IO interface of the first read/write interface of the at least two read/write interfaces is connected to the security module;
  • the first IO interface of each read/write interface is connected to the second IO interface of the previous read/write interface, respectively, from the second read/write interface;
  • the first IO interface and the second IO interface are respectively connected to the read/write control unit;
  • a read/write control unit of each of the at least two read/write interfaces for reading the third data from the real card and writing the second data to the real card;
  • a storage unit of each of the at least two read/write interfaces for storing the address of each of the read/write interfaces
  • the storage unit of the last read/write interface of at least two read/write interfaces is also used to store the cutoff information.
  • the data transmission is performed by using the IO interface in series, the number of IO interfaces of the security module is saved. Since the last read/write interface stores the cutoff information, when the security module detects the cutoff information, the last read/write interface can be known, and the interface detection efficiency is improved.
  • the read/write control unit may be integrated or may be configured as two units, that is, a read/write unit and a control unit, which are not limited in the present invention. If two units are used, the IO interface is respectively connected to the control unit. The read/write unit is connected to the control unit.
  • the input device 603 can be one of a voice acquisition device, a keyboard, and a scanning device, or any combination thereof.
  • the voice collection device may be a microphone or the like
  • the keyboard may be a physical keyboard or a virtual keyboard
  • the scanning device may be a camera or the like.
  • the prompting device 605 is configured to perform a sixth data prompt.
  • the prompting device 605 may include: a voice playing device and/or a display device; the voice playing device may be a speaker, a earphone, etc., and the display device may be a display screen or the like.
  • the security module 604 has data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the security module when the security module is a security chip, the security chip is one to save cost.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the embodiment of the present invention controls the data transmission of the wireless interface 601 and the read/write interface 602 through the security module 604, which can improve security.
  • the security chip when the security module is a security chip, the security chip can be a national technology Z8D256U, Infineon STSEL78.
  • the security chip may have a storage unit for data storage.
  • the security module may further process the data received from the input device and send it to the prompting device for prompting.
  • the security module can process the data received from the input device and send it to a real card or to an analog device.
  • the real card manager according to the embodiment 9 of the present invention can realize the management of the real card, and can further cooperate with the simulation device to realize convenient user transaction and high security.
  • the real card manager of the embodiment 9 of the present invention further includes: the power source may be a direct plug power source or a battery, and if it is a battery, the real card manager further has a charger and other supporting components. .
  • the real card manager of Embodiment 9 of the present invention further includes: a memory; the memory is connected to the security module for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the difference between the tenth embodiment and the ninth embodiment is that the wireless interface, the read/write interface, the input device, and the prompting device are invoked by the control module in the embodiment 10, and the specific implementation is as follows:
  • FIG. 9 is a schematic structural diagram of a real card manager according to Embodiment 10 of the present invention.
  • the real card manager of Embodiment 10 of the present invention includes:
  • a wireless interface 901 at least one read/write interface 902, a security module 903, an input device 904, a prompting device 905, and a control module 906;
  • the wireless interface 901 is configured to receive the first data sent by the analog device and send the data to the control module 906;
  • the control module 906 is configured to receive the first data sent by the wireless interface 901, process the first data to obtain the second data, and send the second data to the security module 903.
  • the security module 903 is configured to receive the second data sent by the control module 906, process the second data to obtain the third data, and send the third data to the control module 906.
  • the control module 906 is further configured to receive the third data sent by the security module 903, process the third data to obtain the fourth data, and send the fourth data to the read/write interface 902.
  • At least one read/write interface 902, configured to receive the fourth data sent by the control module 906 and send the data to the real card
  • At least one read/write interface 902 is further configured to receive the fifth data sent by the real card and send it to the control module 206;
  • the control module 906 is further configured to receive the fifth data sent by the read/write interface 902, process the fifth data to obtain the sixth data, and send the sixth data to the security module 903.
  • the security module 903 is further configured to receive the sixth data sent by the control module 906, process the sixth data to obtain the seventh data, and send the seventh data to the control module 906.
  • the control module 906 is further configured to receive the seventh data sent by the security module 903, process the seventh data to obtain the eighth data, and send the eighth data to the wireless interface 901;
  • the wireless interface 901 is further configured to receive the eighth data sent by the control module 906 and send the data to the analog device;
  • the input device 904 is configured to perform a ninth data input
  • a prompting device 905, configured to perform a tenth data prompt
  • the control module 906 is further configured to receive the ninth data input by the input device 904, and send the tenth data to the prompting device 905.
  • the wireless interface 901 can be any one of a Bluetooth interface, an infrared interface, a 2.4G interface, a 900M interface, a zigbee interface, a 2G network interface, a 3G network interface, a 4G network interface or a WIFI interface, so as to communicate wirelessly. Data interaction with the analog device.
  • the wireless interface 901 can be SIM6320, Longshan's U7500, and the like.
  • the read/write interface 902 can have at least one contact interface, or at least one contactless interface, or at least one contact interface and at least one contactless interface for performing with the different types of real cards through the read/write interface 902. Data interaction, a read/write interface 902 reads and writes with a real card.
  • the contact interface may be a contact or the like, and the contactless interface may be an NFC interface or the like.
  • the model of the contact interface can be 8035 from NXP, 8025 from NCN, etc.
  • the model of the contactless interface can be PN512, NCP RC663, etc.
  • the present invention also provides two structures for reading and writing interfaces, but the present invention is not limited to this:
  • the real card manager further includes: a cutoff board; at least one read/write interface is at least two read/write interfaces, wherein each read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit ( Not shown in the figure); see Figure 10 for details:
  • the first IO interface of the first read/write interface of the at least two read/write interfaces is connected to the control module;
  • the first IO interface of each read/write interface is connected to the second IO interface of the previous read/write interface, respectively, from the second read/write interface;
  • the second IO interface of the last read/write interface is connected to the cutoff board storing the cutoff information
  • the first IO interface and the second IO interface are respectively connected to the read/write control unit;
  • a read/write control unit of each of the at least two read/write interfaces for reading the fifth data from the real card and writing the fourth data to the real card;
  • a storage unit of each of the at least two read/write interfaces for storing the address of each of the read/write interfaces.
  • the data transmission is performed by using the IO interface in series, the number of IO interfaces of the control module is saved. Since the cutoff board is set, when the control module detects the cutoff information, the last read/write interface can be known, and the interface detection efficiency is improved.
  • the read/write control unit may be integrated or may be configured as two units, that is, a read/write unit and a control unit, which are not limited in the present invention. If two units are used, the IO interface is respectively connected to the control unit. The read/write unit is connected to the control unit.
  • the at least one read/write interface is at least two read/write interfaces, wherein the last read/write interface includes a first IO interface, a read/write control unit, and a storage unit; and at least two of the at least two read/write interfaces except the last read/write interface
  • Each read/write interface includes: a first IO interface, a second IO interface, a read/write control unit, and a storage unit (not shown); as shown in FIG. 11, wherein:
  • the first IO interface of the first read/write interface of the at least two read/write interfaces is connected to the control module;
  • the first IO interface of each read/write interface is connected to the second IO interface of the previous read/write interface, respectively, from the second read/write interface;
  • the first IO interface and the second IO interface are respectively connected to the read/write control unit;
  • a read/write control unit of each of the at least two read/write interfaces for reading the fifth data from the real card and writing the fourth data to the real card;
  • a storage unit of each of the at least two read/write interfaces for storing the address of each of the read/write interfaces
  • the storage unit of the last read/write interface of at least two read/write interfaces is also used to store the cutoff information.
  • the data transmission is performed by using the IO interface in series, the number of IO interfaces of the control module is saved. Since the last read/write interface stores the cutoff information, when the control module detects the cutoff information, the last read/write interface can be known, and the interface detection efficiency is improved.
  • the read/write control unit may be integrated or may be configured as two units, that is, a read/write unit and a control unit, which are not limited in the present invention. If two units are used, the IO interface is respectively connected to the control unit. The read/write unit is connected to the control unit.
  • Input device 904 can be one of a voice acquisition device, a keyboard, and a scanning device, or any combination thereof.
  • the voice collection device may be a microphone or the like
  • the keyboard may be a physical keyboard or a virtual keyboard
  • the scanning device may be a camera or the like.
  • the prompting device 905 is connected to the security module 903 for performing the eighth data prompt.
  • the prompting device 905 may include: a voice playing device and/or a display device; the voice playing device may be a speaker, a earphone, etc., and the display device may be a display screen or the like.
  • the security module 903 has data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion.
  • the security module when the security module is a security chip, the security chip is one to save cost.
  • the security module can be implemented by a software module having data processing functions such as encryption, decryption, verification, verification verification, certificate verification, signature, verification, and data format conversion, or the security module can also be implemented by using a hardware chip.
  • the security module is a security chip.
  • the security chip can be a national technology Z8D256U, Infineon STSEL78.
  • the security chip may have a storage unit for data storage.
  • the control module 906 controls data interaction between the wireless interface 901, the read/write interface 902, the input device 903, the prompting device 904, and the security module 903.
  • the control module can be implemented by a software module having a data processing function such as a data format conversion, an information extraction, and a forwarding operation, or the control module can also be implemented by using a hardware chip.
  • the control module is a control chip.
  • the control chip may be STM32 of ST company, Z32 of national technology, or the like.
  • the control chip may have a storage unit for data storage.
  • the processing of the data by the control module may include, but is not limited to, the following one or any combination thereof: data format conversion, information extraction and forwarding operations, and the like.
  • the management of the real card can be realized, and further The simulation device cooperates to realize convenient user transactions and high security.
  • the real card manager of the embodiment 10 of the present invention may further include: a power source.
  • the power supply can be a direct power supply or a battery. If it is a battery, the real card manager also has a charger and other components.
  • the real card manager of Embodiment 10 of the present invention further includes: a memory; the memory is connected to the control module for storing data.
  • the data described in the present invention may further include instructions and the like.
  • the security module and the control module in the present invention can be integrated into one module, or can be integrated into one chip as two modules.
  • control module may further process the data received from the input device and send it to the prompting device for prompting.
  • control module can also process the data received from the input device and send it to the real card or to the analog device.
  • control module may process the data received from the input device and send it to the security module for processing.
  • control module may process the data received from the security module and send it to the prompting device for prompting.
  • the data interaction system of the present invention includes: an analog device 10 and a real card manager 20; wherein:
  • the simulation device 10 is configured to receive first data sent by the terminal, process the first data to obtain second data, and send the second data to the real card manager 20;
  • the real card manager 20 is configured to receive the second data sent by the simulation device 10, process the second data to obtain the third data, and send the third data to the real card.
  • the real card manager 20 is further configured to receive the fourth data sent by the real card, process the fourth data to obtain the fifth data, and send the fifth data to the simulation device 10;
  • the simulation device 10 is further configured to receive the fifth data sent by the real card manager 20, process the fifth data to obtain the sixth data, and send the sixth data to the terminal.
  • the simulation device 10 of the present invention can transmit data received from the terminal to the real card manager 20, and can also transmit data received from the real card manager 20 to the terminal to complete the terminal to the real card. Data interaction between managers 20.
  • the data transmitted between the simulation device 10 and the real card manager 20 can also be independent of the terminal, that is, the data sent by the simulation device 10 to the real card manager 20 is not from the terminal but is generated or derived by the simulation device 10 itself.
  • Other external device acquisition similarly, the data sent by the real card manager 20 to the simulation device 10 may also be Independent processing by the analog device 10 does not need to be sent to the terminal.
  • the simulation device 10 and the real card manager 20 in the data interaction system can refer to the simulation device and the real card manager described in the foregoing embodiments, and details are not described herein.
  • the "connected" described in the present invention may be directly connected or indirectly connected.
  • portions of the invention may be implemented in hardware, software, firmware or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.
  • each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.
  • the above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Theoretical Computer Science (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephonic Communication Services (AREA)
  • Storage Device Security (AREA)
  • Telephone Function (AREA)

Abstract

本发明提供一种模拟装置、真实卡片管理器和数据交互系统。该模拟装置,包括:第一接口,用于接收终端发送的第一数据并发送给安全模块;安全模块,用于接收第一接口发送的第一数据,对第一数据进行处理得到第二数据,向无线接口发送第二数据;无线接口,用于接收安全模块发送的第二数据并发送给真实卡片管理器;无线接口,还用于接收真实卡片管理器发送的第三数据并发送给安全模块;安全模块,用于接收无线接口发送的第三数据,对第三数据进行处理得到第四数据,向第一接口发送第四数据;第一接口,用于接收安全模块发送的第四数据并发送给终端。基于该模拟装置可以实现连接终端以及真实卡片管理器并进行数据交互的功能。

Description

模拟装置、真实卡片管理器和数据交互系统 技术领域
本发明涉及电子信息安全技术领域,尤其涉及一种模拟装置、真实卡片管理器和数据交互系统。
背景技术
现有交易流程中,例如:取款或者购物刷卡,通常用户需要随身携带从银行办理的银行卡,用户随身携带银行卡存在一定的安全风险,一旦丢失,则容易对用户的资产造成损失。另外,由于银行卡种类多种多样,一个用户可能同时拥有多张不同银行的银行卡,如需随身携带多张不同银行的银行卡,在进行交易时不够方便。
因此,现有技术中急需提供一种既方便用户交易,且安全性较高的交易解决方案。
发明内容
本发明旨在解决上述问题。
本发明的第一个主要目的在于提供一种模拟装置。
为达到上述目的,本发明的技术方案具体是这样实现的:
方案1、一种模拟装置,包括:
第一接口,用于接收终端发送的第一数据并发送给安全模块;
所述安全模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向无线接口发送所述第二数据;
所述无线接口,用于接收所述安全模块发送的所述第二数据并发送给真实卡片管理器;
所述无线接口,还用于接收所述真实卡片管理器发送的第三数据并发送给所述安全模块;
所述安全模块,用于接收所述无线接口发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述第一接口发送所述第四数据;
所述第一接口,用于接收所述安全模块发送的所述第四数据并发送给所述终端。
方案2、根据方案1所述的模拟装置,还包括:
输入装置,用于进行第五数据输入;
提示装置,用于进行第六数据提示;
所述安全模块,还用于接收所述输入装置输入的所述第五数据,向所述提示装置发送 所述第六数据。
方案3、一种模拟装置,包括:
第一接口,用于接收终端发送的第一数据并发送给控制模块;
所述控制模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向安全模块发送所述第二数据;
所述安全模块,用于接收所述控制模块发送的第二数据,对所述第二数据进行处理得到第三数据,向所述控制模块发送所述第三数据;
所述控制模块,还用于接收所述安全模块发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述无线接口发送所述第四数据;
所述无线接口,用于接收所述控制模块发送的所述第四数据并发送给真实卡片管理器;
所述无线接口,还用于接收所述真实卡片管理器发送的第五数据并发送给所述控制模块;
所述控制模块,还用于接收所述无线接口发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述安全模块发送所述第六数据;
所述安全模块,还用于接收所述控制模块发送的第六数据,对所述第六数据进行处理得到第七数据,向所述控制模块发送所述第七数据;
所述控制模块,还用于接收所述安全模块发送的所述第七数据,对所述第七数据进行处理得到第八数据,向所述第一接口发送所述第八数据;
所述第一接口,还用于接收所述控制模块发送的所述第八数据并发送给所述终端。
方案4、根据方案3所述的模拟装置,还包括:
输入装置,用于进行第九数据输入;
提示装置,用于进行第十数据提示;
所述控制模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
方案5、根据方案3所述的模拟装置,还包括:
输入装置,用于进行第九数据输入;
提示装置,用于进行第十数据提示;
所述安全模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
方案6、根据方案1至5任一项所述的模拟装置,所述无线接口为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口。
方案7、根据方案2、4、5任一项所述的模拟装置,所述提示装置包括:语音播放装置和/或显示装置;所述输入装置包括:语音采集装置、键盘和/或扫描装置。
方案8、根据方案1至7任一项所述的模拟装置,所述模拟装置为模拟卡片、移动设备或者电子签名设备。
方案9、根据方案8所述的模拟装置,所述模拟卡片包括:智能卡芯片。
方案10、根据方案1至7任一项所述的模拟装置,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述移动设备上,所述无线接口位于所述电子签名设备上,所述安全模块位于所述电子签名设备上。
方案11、根据方案1至7任一项所述的模拟装置,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述电子签名设备上,所述无线接口位于所述移动设备上,所述安全模块位于所述电子签名设备上。
方案12、根据方案1至7任一项所述的模拟装置,所述模拟装置包括移动设备和电子签名设备,所述第一接口和所述无线接口位于所述移动设备上,所述安全模块位于所述电子签名设备上。
方案13、根据方案1至12任一项所述的模拟装置,所述终端为读卡式终端或者读写卡式终端。
方案14、根据方案13所述的模拟装置,所述读卡式终端包括:支付终端和/或功能终端;或者,所述读写卡式终端包括:支付终端和/或功能终端。
方案15、根据方案1至14任一项所述的模拟装置,所述安全模块为安全芯片。
方案16、根据方案15所述的模拟装置,所述安全芯片为一个。
方案17、根据方案1至16任一项所述的模拟装置,所述安全模块对接收到的数据进行的处理包括:加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换中的一种或者任意组合。
由上述本发明提供的技术方案可以看出,基于本发明的模拟装置,可以实现连接终端以及真实卡片管理器并进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
本发明的第二个主要目的在于提供一种真实卡片管理器。
为达到上述目的,本发明的技术方案具体是这样实现的:
方案18、一种真实卡片管理器,包括:无线接口,用于接收模拟装置发送的第一数据并发送给安全模块;所述安全模块,用于接收所述无线接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向读写接口发送所述第二数据;至少一个读写接口,用于接收所述安全模块发送的所述第二数据,并发送给真实卡片;所述至少一个读写接口, 还用于接收所述真实卡片发送的第三数据并发送给所述安全模块;所述安全模块,还用于接收所述读写接口发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述无线接口发送所述第四数据;所述无线接口,还用于接收所述安全模块发送的所述第四数据,并发送给所述模拟装置;输入装置,用于进行第五数据输入;提示装置,用于进行第六数据提示;所述安全模块,还用于接收所述输入装置输入的所述第五数据,向所述提示装置发送所述第六数据。
方案19、根据方案18所述的真实卡片管理器,还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述安全模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第三数据,并向所述真实卡片写入所述第二数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
方案20、根据方案18所述的真实卡片管理器,所述至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述安全模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第三数据,并向所述真实卡片写入所述第二数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
方案21、一种真实卡片管理器,包括:无线接口,用于接收模拟装置发送的第一数据并发送给控制模块;所述控制模块,用于接收所述无线接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向安全模块发送所述第二数据;所述安全模块,用于接收所述控制模块发送的所述第二数据,对所述第二数据进行处理得到第三数据,向所述控制模块发送所述第三数据;所述控制模块,还用于接收所述安全模块发送的所述第三数据,对所述第三数据进行处理得到第四数据,向读写接口发送所述第四数据;至少一个读写接 口,用于接收所述控制模块发送的所述第四数据并发送给真实卡片;所述至少一个读写接口,还用于接收所述真实卡片发送的第五数据并发送给所述控制模块;所述控制模块,还用于接收所述读写接口发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述安全模块发送所述第六数据;所述安全模块,还用于接收所述控制模块发送的第六数据,对所述第六数据进行处理得到第七数据,向所述控制模块发送所述第七数据;所述控制模块,还用于接收所述安全模块发送的所述第七数据,对所述第七数据进行处理得到第八数据,向所述无线接口发送所述第八数据;所述无线接口,还用于接收所述控制模块发送的所述第八数据并发送给所述模拟装置;输入装置,用于进行第九数据输入;提示装置,用于进行第十数据提示;所述控制模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
方案22、根据方案21所述的真实卡片管理器,还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述控制模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第五数据,并向所述真实卡片写入所述第四数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
方案23、根据方案21所述的真实卡片管理器,所述至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述控制模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第五数据,并向所述真实卡片写入所述第四数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
方案24、根据方案18至23所述的真实卡片管理器,所述无线接口为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或 WIFI接口。
方案25、根据方案18至24所述的真实卡片管理器,所述输入装置包括:语音采集装置、键盘和/或扫描装置;所述提示装置包括:语音播放装置和/或显示装置。
方案26、根据方案18至25所述的真实卡片管理器,所述模拟装置为模拟卡片、移动设备或者电子签名设备。
方案27、根据方案18至25所述的真实卡片管理器,所述模拟装置包括移动设备和电子签名设备。
方案28、根据方案18至27所述的真实卡片管理器,所述安全模块为安全芯片。
方案29、根据方案28所述的真实卡片管理器,所述安全芯片为一个。
方案30、根据方案18至29所述的真实卡片管理器,所述安全模块对接收到的数据进行的处理包括:加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换中的一种或者任意组合。
由上述本发明提供的技术方案可以看出,基于本发明的真实卡片管理器,可以实现对真实卡片的管理,进一步可以与模拟装置配合从而实现方便用户交易,且安全性较高的目的。
本发明的第三个主要目的在于提供一种数据交互系统。
为达到上述目的,本发明的技术方案具体是这样实现的:
方案31、一种数据交互系统,包括:模拟装置以及真实卡片管理器;所述模拟装置,用于接收终端发送的第一数据,对所述第一数据进行处理得到第二数据,向所述真实卡片管理器发送所述第二数据;所述真实卡片管理器,用于接收所述模拟装置发送的所述第二数据,对所述第二数据进行处理得到第三数据,向真实卡片发送所述第三数据;所述真实卡片管理器,还用于接收所述真实卡片发送的第四数据,对所述第四数据进行处理得到第五数据,向所述模拟装置发送所述第五数据;所述模拟装置,还用于接收所述真实卡片管理器发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述终端发送所述第六数据。
方案32、根据方案31所述的数据交互系统,所述模拟装置包括:第一接口,用于接收所述终端发送的所述第一数据并发送给模拟装置安全模块;所述模拟装置安全模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向模拟装置无线接口发送所述第二数据;所述模拟装置无线接口,用于接收所述模拟装置安全模块发送的所述第二数据并发送给所述真实卡片管理器;所述模拟装置无线接口,还用于接收所述真实卡片管理器发送的所述第五数据并发送给所述模拟装置安全模块;所述模拟 装置安全模块,还用于接收所述模拟装置无线接口发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述第一接口发送所述第六数据;所述第一接口,还用于接收所述模拟装置安全模块发送的所述第六数据并发送给所述终端。
方案33、根据方案32所述的数据交互系统,所述模拟装置还包括:模拟装置输入装置,用于进行第七数据输入;模拟装置提示装置,用于进行第八数据提示;所述模拟装置安全模块,还用于接收所述模拟装置输入装置输入的所述第七数据,向所述模拟装置提示装置发送所述第八数据。
方案34、根据方案31所述的数据交互系统,所述模拟装置包括:第一接口,用于接收所述终端发送的所述第一数据并发送给模拟装置控制模块;所述模拟装置控制模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第一处理数据,向模拟装置安全模块发送所述第一处理数据;所述模拟装置安全模块,用于接收所述模拟装置控制模块发送的所述第一处理数据,对所述第一处理数据进行处理得到第二处理数据,向所述模拟装置控制模块发送所述第二处理数据;所述模拟装置控制模块,还用于接收所述模拟装置安全模块发送的所述第二处理数据,对所述第二处理数据进行处理得到第二数据,向所述模拟装置无线接口发送所述第二数据;所述模拟装置无线接口,用于接收所述模拟装置控制模块发送的所述第二数据并发送给所述真实卡片管理器;所述模拟装置无线接口,还用于接收所述真实卡片管理器发送的第五数据并发送给所述模拟装置控制模块;所述模拟装置控制模块,还用于接收所述模拟装置无线接口发送的所述第五数据,对所述第五数据进行处理得到第五处理数据,向所述模拟装置安全模块发送所述第五处理数据;所述模拟装置安全模块,还用于接收所述模拟装置控制模块发送的所述第五处理数据,对所述第五处理数据进行处理得到第六处理数据,向所述模拟装置控制模块发送所述第六处理数据;所述模拟装置控制模块,还用于接收所述模拟装置安全模块发送的所述第六处理数据,对所述第六处理数据进行处理得到第六数据,向所述第一接口发送所述第六数据;所述第一接口,还用于接收所述模拟装置控制模块发送的所述第六数据并发送给所述终端。
方案35、根据方案34所述的数据交互系统,所述模拟装置还包括:模拟装置输入装置,用于进行第七数据输入;模拟装置提示装置,用于进行第八数据提示;所述模拟装置控制模块,还用于接收所述模拟装置输入装置输入的所述第七数据,向所述模拟装置提示装置发送所述第八数据。
方案36、根据方案34所述的数据交互系统,所述模拟装置还包括:模拟装置输入装置,用于进行第七数据输入;模拟装置提示装置,用于进行第八数据提示;所述模拟装置安全模块,还用于接收所述模拟装置输入装置输入的所述第七数据,向所述模拟装置提示 装置发送所述第八数据。
方案37、根据方案32至36任一项所述的数据交互系统,所述模拟装置无线接口为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口。
方案38、根据方案31至37任一项所述的数据交互系统,所述模拟装置为模拟卡片、移动设备或者电子签名设备。
方案39、根据方案38所述的数据交互系统,所述模拟卡片包括:智能卡芯片。
方案40、根据方案32至37任一项所述的数据交互系统,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述移动设备上,所述模拟装置无线接口位于所述电子签名设备上,所述模拟装置安全模块位于所述电子签名设备上。
方案41、根据方案32至37任一项所述的数据交互系统,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述电子签名设备上,所述模拟装置无线接口位于所述移动设备上,所述模拟装置安全模块位于所述电子签名设备上。
方案42、根据方案32至37任一项所述的数据交互系统,所述模拟装置包括移动设备和电子签名设备,所述第一接口和所述模拟装置无线接口位于所述移动设备上,所述模拟装置安全模块位于所述电子签名设备上。
方案43、根据方案31至42任一项所述的数据交互系统,所述终端为读卡式终端或者读写卡式终端。
方案44、根据方案43所述的数据交互系统,所述读卡式终端包括:支付终端和/或功能终端;或者,所述读写卡式终端包括:支付终端和/或功能终端。
方案45、根据方案32至44任一项所述的数据交互系统,所述模拟装置安全模块为安全芯片。
方案46、根据方案45所述的数据交互系统,所述安全芯片为一个。
方案47、根据方案32至46任一项所述的数据交互系统,所述模拟装置安全模块对接收到的数据进行的处理包括:加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换中的一种或者任意组合。
方案48、根据方案31所述的数据交互系统,所述真实卡片管理器包括:真实卡片管理器无线接口,用于接收所述模拟装置发送的所述第二数据并发送给真实卡片管理器安全模块;所述真实卡片管理器安全模块,用于接收所述真实卡片管理器无线接口发送的所述第二数据,对所述第二数据进行处理得到第三数据,向读写接口发送所述第三数据;至少一个读写接口,用于接收所述真实卡片管理器安全模块发送的所述第三数据,并发送给真 实卡片;所述至少一个读写接口,还用于接收所述真实卡片发送的第四数据并发送给所述真实卡片管理器安全模块;所述真实卡片管理器安全模块,还用于接收所述读写接口发送的所述第四数据,对所述第四数据进行处理得到第五数据,向所述真实卡片管理器无线接口发送所述第五数据;所述真实卡片管理器无线接口,还用于接收所述真实卡片管理器安全模块发送的所述第五数据,并发送给所述模拟装置;真实卡片管理器输入装置,用于进行第九数据输入;真实卡片管理器提示装置,用于进行第十数据提示;所述真实卡片管理器安全模块,还用于接收所述真实卡片管理器输入装置输入的所述第九数据,向所述真实卡片管理器提示装置发送所述第十数据。
方案49、根据方案48所述的数据交互系统,所述真实卡片管理器还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述真实卡片管理器安全模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第四数据,并向所述真实卡片写入所述第三数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
方案50、根据方案48所述的数据交互系统,所述至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述真实卡片管理器安全模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第四数据,并向所述真实卡片写入所述第三数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
方案51、根据方案31所述的数据交互系统,所述真实卡片管理器包括:真实卡片管理器无线接口,用于接收所述模拟装置发送的第二数据并发送给真实卡片管理器控制模块; 所述真实卡片管理器控制模块,用于接收所述真实卡片管理器无线接口发送的所述第二数据,对所述第二数据进行处理得到第二处理数据,向真实卡片管理器安全模块发送所述第二处理数据;所述真实卡片管理器安全模块,用于接收所述真实卡片管理器控制模块发送的所述第二处理数据,对所述第二处理数据进行处理得到第三处理数据,向所述真实卡片管理器控制模块发送所述第三处理数据;所述真实卡片管理器控制模块,还用于接收所述真实卡片管理器安全模块发送的所述第三处理数据,对所述第三处理数据进行处理得到第三数据,向读写接口发送所述第三数据;至少一个读写接口,用于接收所述真实卡片管理器控制模块发送的所述第三数据并发送给真实卡片;所述至少一个读写接口,还用于接收所述真实卡片发送的第四数据并发送给所述真实卡片管理器控制模块;所述真实卡片管理器控制模块,还用于接收所述读写接口发送的所述第四数据,对所述第四数据进行处理得到第四处理数据,向所述真实卡片管理器安全模块发送所述第四处理数据;所述真实卡片管理器安全模块,还用于接收所述真实卡片管理器控制模块发送的所述第四处理数据,对所述第四处理数据进行处理得到第五处理数据,向所述真实卡片管理器控制模块发送所述第五处理数据;所述真实卡片管理器控制模块,还用于接收所述真实卡片管理器安全模块发送的所述第五处理数据,对所述第五处理数据进行处理得到第五数据,向所述真实卡片管理器无线接口发送所述第五数据;所述真实卡片管理器无线接口,还用于接收所述真实卡片管理器控制模块发送的所述第五数据并发送给所述模拟装置;真实卡片管理器输入装置,用于进行第九数据输入;真实卡片管理器提示装置,用于进行第十数据提示;所述真实卡片管理器控制模块,还用于接收所述真实卡片管理器输入装置输入的所述第九数据,向所述真实卡片管理器提示装置发送所述第十数据。
方案52、根据方案51所述的数据交互系统,所述真实卡片管理器还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述真实卡片管理器控制模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第四数据,并向所述真实卡片写入所述第三数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
方案53、根据方案51所述的数据交互系统,所述至少一个读写接口为至少两个读写 接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述真实卡片管理器控制模块相连;所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第四数据,并向所述真实卡片写入所述第三数据;所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
方案54、根据方案48至53任一项所述的数据交互系统,所述真实卡片管理器无线接口为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口。
方案55、根据方案48至54任一项所述的数据交互系统,所述真实卡片管理器安全模块为安全芯片。
方案56、根据方案55所述的数据交互系统,所述安全芯片为一个。
方案57、根据方案48至56任一项所述的数据交互系统,所述真实卡片管理器安全模块对接收到的数据进行的处理包括:加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换中的一种或者任意组合。
由上述本发明提供的技术方案可以看出,基于本发明的数据交互系统中的模拟装置,可以实现连接终端以及真实卡片管理器并进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,基于本发明的数据交互系统中的真实卡片管理器,可以实现对真实卡片的管理,从而实现既方便用户交易,且安全性较高的目的。
附图说明
为了更清楚地说明本发明实施例的技术方案,下面将对实施例描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域的普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他附图。
图1为本发明实施例1提供的模拟装置的结构示意图;
图2为本发明实施例2提供的模拟装置的结构示意图;
图3为本发明实施例3提供的模拟装置的结构示意图;
图4为本发明实施例4提供的模拟装置的结构示意图;
图5为本发明实施例5提供的模拟装置的结构示意图;
图6为本发明实施例9提供的真实卡片管理器的结构示意图;
图7为发明提供的真实卡片管理器第一结构中读写接口的一种结构示意图;
图8为发明提供的真实卡片管理器第一结构中读写接口的另一种结构示意图;
图9为本发明实施例10提供的真实卡片管理器的结构示意图;
图10为本发明提供的真实卡片管理器第二结构中读写接口的一种结构示意图;
图11为本发明提供的真实卡片管理器第二结构中读写接口的另一种结构示意图;
图12为本发明数据交互系统的结构示意图。
具体实施方式
下面结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本发明一部分实施例,而不是全部的实施例。基于本发明的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本发明的保护范围。
在本发明的描述中,需要理解的是,术语“中心”、“纵向”、“横向”、“上”、“下”、“前”、“后”、“左”、“右”、“竖直”、“水平”、“顶”、“底”、“内”、“外”等指示的方位或位置关系为基于附图所示的方位或位置关系,仅是为了便于描述本发明和简化描述,而不是指示或暗示所指的装置或元件必须具有特定的方位、以特定的方位构造和操作,因此不能理解为对本发明的限制。此外,术语“第一”、“第二”仅用于描述目的,而不能理解为指示或暗示相对重要性或数量或位置。
在本发明的描述中,需要说明的是,除非另有明确的规定和限定,术语“安装”、“相连”、“连接”应做广义理解,例如,可以是固定连接,也可以是可拆卸连接,或一体地连接;可以是机械连接,也可以是电连接;可以是直接相连,也可以通过中间媒介间接相连,可以是两个元件内部的连通。对于本领域的普通技术人员而言,可以具体情况理解上述术语在本发明中的具体含义。
下面将结合附图对本发明实施例作进一步地详细描述。
本发明提供了一种数据交互的架构,以提供既方便用户交易,且安全性较高的交易解决方案。该数据交互架构包括:模拟装置以及真实卡片管理器。
其中:
模拟装置,可以包括一个或多个模拟装置,每个模拟装置只能属于一个真实卡片管理器并被其管理。该模拟装置可以为模拟卡片,即单独制造为卡片形状的设备,也可以为预留有模拟装置功能的真实卡片,该模拟卡片可以与现有银行卡片大小相同,在本数据交互架构中,可以替代真实卡片完成交易。当然,本发明的模拟装置还可以为具有模拟装置功能的移动设备,包括:智能手机、平板电脑(PAD)、PDA(例如掌上电脑、学习机)、笔记本电脑、电子书阅读装置、可穿戴设备(例如智能腕表、智能眼镜等)等,或者,本实用新型的模拟装置还可以为电子签名设备(key设备,例如工行U盾,农行K宝等)。当然,本实用新型的模拟装置还可以为移动设备和电子签名设备的组合。模拟装置可以配合现有的终端(该终端可以包括支付终端、功能终端等,例如支付终端包括涉及金融交易的交易类型的终端,例如:智能手机、平板电脑、笔记本电脑、智能可穿戴设备、ATM机、POS机、公交充值机、拉卡拉支付终端等支付发起类终端,功能终端包括业务型终端,例如:门禁、积分卡管理终端等业务发起类终端)进行数据交互,模拟装置也可以与真实卡片管理器进行数据交互。具体的,当模拟装置为卡片形状的设备时,可以通过接触式和/或NFC方式连接终端使用,当模拟装置为智能手机等形式时,可以通过NFC方式连接终端使用。其中,为了便于与本发明的模拟装置进行配合使用,本发明中涉及的终端可以为读卡式终端,也可以为读写卡式终端,以便对模拟装置进行数据的读取或者读写。
真实卡片管理器,可以管理一张或多张模拟装置,且该真实卡片管理器具有至少一个读写接口,该读写接口可以为接触式(例如卡槽形式的触点接触等)接口和/或非接触式(例如NFC等)接口,以方便真实卡片管理器可以通过不同方式连接不同种类的真实卡片;真实卡片管理器还可以与模拟装置进行数据交互。该真实卡片管理器可以放置在固定位置(例如用户家里),也可以制成小型设备随身携带(例如钱包形式),当该真实卡片管理器放置在固定位置时,主要可以通过2G网络接口、3G网络接口、4G网络接口或WIFI接口等网络接口与模拟装置进行数据交互,当该真实卡片管理器随身携带时,除了可以采用网络接口与模拟装置进行数据交互外,还可以采用蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口等近场通信接口或中场通信接口与模拟装置进行数据交互。
在本数据交互架构中,真实卡片为智能芯片卡,该真实卡片可以为功能卡(例如公交卡、饭卡、购物卡、会员卡、积分卡、身份证等)或者银行颁发的银行卡,当模拟装置为卡片形状的设备时,也可以为智能芯片卡。
基于上述数据架构,本发明提供了一种模拟装置,以便用于终端与真实卡片管理器之间进行数据交互。本发明还提供了一种真实卡片管理器,以便用于管理上述真实卡片。本发明还提供了一种数据交互系统,以便用于进行模拟装置与真实卡片管理器之间的数据交 互。下面,分别对模拟装置、真实卡片管理器和真实卡片管理器的结构和功能进行详细说明。
模拟装置
实施例1
图1示出了本发明实施例1的模拟装置的结构示意图,参见图1,本发明实施例1的模拟装置包括:
第一接口101、无线接口102、安全模块103;其中:
第一接口101,用于接收终端发送的第一数据并发送给安全模块;
安全模块103,用于接收第一接口101发送的第一数据,对第一数据进行处理得到第二数据,向无线接口102发送第二数据;
无线接口102,用于接收安全模块103发送的第二数据并发送给真实卡片管理器;
无线接口102,还用于接收真实卡片管理器发送的第三数据并发送给安全模块103;
安全模块103,用于接收无线接口102发送的第三数据,对第三数据进行处理得到第四数据,向第一接口101发送第四数据;
第一接口101,用于接收安全模块103发送的第四数据并发送给终端。
其中:第一接口101可以为接触式接口、第一接口101还可以为非接触式接口,第一接口101也可以为接触式接口和非接触式接口,以便通过该第一接口101与终端进行数据交互。其中,接触式接口可以为触点、USB接口、串口、音频接口等,接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口可以为2.4G接口、蓝牙接口、红外接口、NFC接口或RFID接口等,非接触式接口的型号可以为QN9021、PN512、德州仪器公司的TIF256、NXP公司的RC663等。只要终端可以支持的接口,均可以作为该第一接口101的接口以配合终端使用。
无线接口102可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信的方式与真实卡片管理器进行数据交互。具体的,该无线接口102可以为SIM6320、龙尚公司的U7500等。
当第一接口101与无线接口102的类型不同时,模拟装置从第一接口101接收到数据后,可以将符合第一接口协议的数据转换为符合无线接口协议的数据,并通过无线接口102发送,当然,模拟装置从无线接口102接收到数据后,还可以将符合无线接口协议的数据转换为符合第一接口协议的数据,并通过第一接口101发送。本实施例优选的,可以令第一接口101为NFC接口,无线接口102为蓝牙接口。
当第一接口101与无线接口102的类型相同时,例如:当终端支持蓝牙接口时,模拟装置的第一接口101可以为蓝牙接口,无线接口102也可以为蓝牙接口。此时,模拟装置无需执行数据通信协议转换的操作。
安全模块103为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能,本发明实施例1通过安全模块103控制第一接口101、无线接口102的数据传输,可以提高安全性。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。另外,当模拟装置为智能芯片卡,安全模块为安全芯片时,模拟装置还可以包含智能卡芯片,本实施例中安全芯片可以与该智能卡芯片集成为一个芯片,也可以作为独立的芯片,当然,当模拟装置为智能芯片卡时,也可以不包含智能卡芯片,其智能卡芯片的功能由安全芯片完成。具体的,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
基于本发明实施例1的模拟装置,可以实现连接终端以及真实卡片管理器,并在二者之间进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
进一步的,为了方便数据存储,本发明实施例1的模拟装置,还可以单独设置存储器;该存储器可以与安全模块103相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
实施例2
图2示出了本发明实施例2的模拟装置的结构示意图,参见图2,本发明实施例2的模拟装置包括:
第一接口201、无线接口202、输入装置203、提示装置204以及安全模块205;其中:
第一接口201,用于接收终端发送的第一数据并发送给安全模块205;
安全模块205,用于接收第一接口201发送的第一数据,对第一数据进行处理得到第二数据,向无线接口202发送第二数据;
无线接口202,用于接收安全模块205发送的第二数据并发送给真实卡片管理器;
无线接口202,还用于接收真实卡片管理器发送的第三数据并发送给安全模块205;
安全模块205,用于接收无线接口202发送的第三数据,对第三数据进行处理得到第四数据,向第一接口201发送第四数据;
第一接口201,用于接收安全模块205发送的第四数据并发送给终端。
输入装置203,用于进行第五数据输入;
提示装置204,用于进行第六数据提示;
安全模块205,还用于接收输入装置203输入的第五数据,向提示装置204发送第六数据。
其中:第一接口201可以为接触式接口、第一接口201还可以为非接触式接口,第一接口201也可以为接触式接口和非接触式接口,以便通过该第一接口201与终端进行数据交互。其中,接触式接口可以为触点、USB接口、串口、音频接口等,接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口可以为2.4G接口、蓝牙接口、红外接口、NFC接口或RFID接口等,非接触式接口的型号可以为QN9021、PN512、德州仪器公司的TIF256、NXP公司的RC663等。只要终端可以支持的接口,均可以作为该第一接口201的接口以配合终端使用。
无线接口202可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信的方式与真实卡片管理器进行数据交互。具体的,该无线接口202可以为SIM6320、龙尚公司的U7500等。
当第一接口201与无线接口202的类型不同时,模拟装置从第一接口201接收到数据后,可以将符合第一接口协议的数据转换为符合无线接口协议的数据,并通过无线接口202发送,当然,模拟装置从无线接口202接收到数据后,还可以将符合无线接口协议的数据转换为符合第一接口协议的数据,并通过第一接口201发送。本实施例优选的,可以令第一接口201为NFC接口,无线接口202为蓝牙接口。
当第一接口201与无线接口202的类型相同时,例如:当终端支持蓝牙接口时,模拟装置的第一接口201可以为蓝牙接口,无线接口202也可以为蓝牙接口。此时,模拟装置无需执行数据通信协议转换的操作。
输入装置203可以为语音采集装置、键盘和扫描装置中的一种或其任意组合。其中,语音采集装置可以为麦克等,键盘可以为物理键盘或者虚拟键盘等,扫描装置可以为摄像头等。
提示装置204可以包括:语音播放装置和/或显示装置;语音播放装置可以为喇叭、耳机听筒等,显示装置可以为显示屏等。
安全模块205为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能,本发明实施例2通过安全模块205控制第一接口201、无线接口202的数据传输,可以提高安全性。且本实施例中安全模块为安全芯片时,安全芯片为一 个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。另外,当模拟装置为智能芯片卡,安全模块为安全芯片时,模拟装置还可以包含智能卡芯片,本实施例中安全芯片可以与该智能卡芯片集成为一个芯片,也可以作为独立的芯片,当然,当模拟装置为智能芯片卡时,也可以不包含智能卡芯片,其智能卡芯片的功能由安全芯片完成。具体的,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
基于本发明实施例2的模拟装置,可以实现连接终端以及真实卡片管理器,并在二者之间进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
进一步的,为了方便数据存储,本发明实施例2的模拟装置,还可以单独设置存储器;该存储器可以与安全模块205相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
当然,本实施例中安全模块还可以对从输入装置接收到的数据进行处理后发送至提示装置进行提示。另外,安全模块还可以对从输入装置接收到的数据进行处理后发送至真实卡片管理器或者发送至终端。
当然,基于实施例1和实施例2的模拟装置,还可以包含电池,该电池可以为不可充电电池,也可以为充电电池,如果为充电电池,本模拟装置还可以包含充电控制器,该充电控制器可以与电池相连,用于接收电能并给电池充电,当然,该充电控制器可以设置在电池内,也可以设置在安全模块内,当第一接口具有充电功能时,该充电控制器还可以设置在具有充电功能的第一接口上,当然模拟装置上还可以设置单独的充电接口(例如USB接口),该充电控制器可以设置在充电接口上。
实施例3
本实施例3与实施例1的区别在于,本实施例3中第一接口、无线接口通过控制模块进行调用,具体实现如下:
图3示出了本发明实施例3的模拟装置的结构示意图,参见图3,本发明实施例3的模拟装置包括:
第一接口301、无线接口302、安全模块303以及控制模块304;其中:
第一接口301,用于接收终端发送的第一数据并发送给控制模块304;
控制模块304,用于接收第一接口301发送的第一数据,对第一数据进行处理得到第二数据,向安全模块303发送第二数据;
安全模块303,用于接收控制模块304发送的第二数据,对第二数据进行处理得到第三数据,向控制模块304发送第三数据;
控制模块304,还用于接收安全模块303发送的第三数据,对第三数据进行处理得到第四数据,向无线接口302发送第四数据;
无线接口302,用于接收控制模块304发送的第四数据并发送给真实卡片管理器;
无线接口302,还用于接收真实卡片管理器发送的第五数据并发送给控制模块304;
控制模块304,还用于接收无线接口302发送的第五数据,对第五数据进行处理得到第六数据,向安全模块303发送第六数据;
安全模块303,还用于接收控制模块304发送的第六数据,对第六数据进行处理得到第七数据,向控制模块304发送第七数据;
控制模块304,还用于接收安全模块303发送的第七数据,对第七数据进行处理得到第八数据,向第一接口301发送第八数据;
第一接口301,还用于接收控制模块304发送的第八数据并发送给终端。
其中:第一接口301可以为接触式接口、第一接口301还可以为非接触式接口,第一接口301也可以为接触式接口和非接触式接口。其中,接触式接口可以为触点、USB接口、串口、音频接口等,接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口可以为2.4G接口、蓝牙接口、红外接口、NFC接口或RFID接口等,非接触式接口的型号可以为QN9021、德州仪器公司的TIF256、PN512、NXP公司的RC663等。只要终端可以支持的接口,均可以作为该第一接口301的接口以配合终端使用。
无线接口302可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信方式与真实卡片管理器进行数据交互。具体的,该无线接口302可以为SIM6330、龙尚公司的U7500等。
当第一接口301与无线接口302的类型不同时,模拟装置从第一接口301接收到数据后,可以将符合第一接口协议的数据转换为符合无线接口协议的数据,并通过无线接口302发送,当然,模拟装置从无线接口302接收到数据后,还可以将符合无线接口协议的数据转换为符合第一接口协议的数据,并通过第一接口301发送。本实施例优选的,可以令第一接口301为NFC接口,无线接口302为蓝牙接口。
当第一接口301与无线接口302的类型相同时,例如:当终端支持蓝牙接口时,模拟装置的第一接口301可以为蓝牙接口,无线接口302也可以为蓝牙接口。此时,模拟装置 无需执行数据通信协议转换的操作。
安全模块303为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。另外,当模拟装置为智能芯片卡,安全模块为安全芯片时,模拟装置还可以包含智能卡芯片,本实施例中安全芯片可以与该智能卡芯片集成为一个芯片,也可以作为独立的芯片,当然,当模拟装置为智能芯片卡时,也可以不包含智能卡芯片,其智能卡芯片的功能由安全芯片完成。具体的,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
控制模块304控制第一接口301、无线接口302以及安全模块303之间的数据交互。其中,控制模块可以通过具有数据格式转换、信息提取和转发操作等数据处理功能的软件模块实现,或者该控制模块也可以采用硬件芯片来实现,例如该控制模块为控制芯片。具体的,当控制模块为控制芯片时,该控制芯片可以为ST公司的STM32、国民技术的Z32等。另外,控制芯片可以具有存储单元,用于进行数据存储。其中,控制模块对数据的处理可以包括但不限于如下一种或其任意组合:数据格式转换、信息提取和转发操作等。
本发明中的安全模块和控制模块可以集成为一个模块,也可以作为两个模块集成在一个芯片中。
基于本发明实施例3的模拟装置,可以实现连接终端以及真实卡片管理器,并在二者之间进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
进一步的,为了方便数据存储,本发明实施例3的模拟装置,还可以单独设置存储器;该存储器可以与控制模块304相连,或者与安全模块303相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
实施例4
本实施例4与实施例2的区别在于,本实施例4中第一接口、无线接口、输入装置、提示装置等通过控制模块进行调用,具体实现如下:
图4示出了本发明实施例4的模拟装置的结构示意图,参见图4,本发明实施例4的模拟装置包括:
第一接口401、无线接口402、安全模块403、输入装置404、提示装置405以及控制 模块406;其中:
第一接口401,用于接收终端发送的第一数据并发送给控制模块406;
控制模块406,用于接收第一接口401发送的第一数据,对第一数据进行处理得到第二数据,向安全模块403发送第二数据;
安全模块403,用于接收控制模块406发送的第二数据,对第二数据进行处理得到第三数据,向控制模块406发送第三数据;
控制模块406,还用于接收安全模块403发送的第三数据,对第三数据进行处理得到第四数据,向无线接口402发送第四数据;
无线接口402,用于接收控制模块406发送的第四数据并发送给真实卡片管理器;
无线接口402,还用于接收真实卡片管理器发送的第五数据并发送给控制模块406;
控制模块406,还用于接收无线接口402发送的第五数据,对第五数据进行处理得到第六数据,向安全模块403发送第六数据;
安全模块403,还用于接收控制模块406发送的第六数据,对第六数据进行处理得到第七数据,向控制模块406发送第七数据;
控制模块406,还用于接收安全模块403发送的第七数据,对第七数据进行处理得到第八数据,向第一接口401发送第八数据;
第一接口401,还用于接收控制模块406发送的第八数据并发送给终端。
输入装置404,用于进行第九数据输入;
提示装置405,用于进行第十数据提示;
控制模块406,还用于接收输入装置404输入的第九数据,向提示装置405发送第十数据。
其中:第一接口401可以为接触式接口、第一接口401还可以为非接触式接口,第一接口401也可以为接触式接口和非接触式接口。其中,接触式接口可以为触点、USB接口、串口、音频接口等,接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口可以为2.4G接口、蓝牙接口、红外接口、NFC接口或RFID接口等,非接触式接口的型号可以为QN9021、德州仪器公司的TIF256、PN512、NXP公司的RC663等。只要终端可以支持的接口,均可以作为该第一接口401的接口以配合终端使用。
无线接口402可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信方式与真实卡片管理器进行数据交互。具体的,该无线接口402可以为SIM6340、龙尚公司的U7500等。
当第一接口401与无线接口402的类型不同时,模拟装置从第一接口401接收到数据 后,可以将符合第一接口协议的数据转换为符合无线接口协议的数据,并通过无线接口402发送,当然,模拟装置从无线接口402接收到数据后,还可以将符合无线接口协议的数据转换为符合第一接口协议的数据,并通过第一接口401发送。本实施例优选的,可以令第一接口401为NFC接口,无线接口402为蓝牙接口。
当第一接口401与无线接口402的类型相同时,例如:当终端支持蓝牙接口时,模拟装置的第一接口401可以为蓝牙接口,无线接口402也可以为蓝牙接口。此时,模拟装置无需执行数据通信协议转换的操作。
安全模块403为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。另外,当模拟装置为智能芯片卡,安全模块为安全芯片时,模拟装置还可以包含智能卡芯片,本实施例中安全芯片可以与该智能卡芯片集成为一个芯片,也可以作为独立的芯片,当然,当模拟装置为智能芯片卡时,也可以不包含智能卡芯片,其智能卡芯片的功能由安全芯片完成。具体的,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
输入装置404可以为语音采集装置、键盘和扫描装置中的一种或其任意组合。其中,语音采集装置可以为麦克等,键盘可以为物理键盘或者虚拟键盘等,扫描装置可以为摄像头等。
提示装置405可以包括:语音播放装置和/或显示装置;语音播放装置可以为喇叭、耳机听筒等,显示装置可以为显示屏等。
控制模块406控制第一接口401、无线接口402、输入装置404、提示装置405以及安全模块403之间的数据交互。其中,控制模块可以通过具有数据格式转换、信息提取和转发操作等数据处理功能的软件模块实现,或者该控制模块也可以采用硬件芯片来实现,例如该控制模块为控制芯片。具体的,该控制模块为控制芯片时,该控制芯片可以为ST公司的STM32、国民技术的Z32等。另外,控制芯片可以具有存储单元,用于进行数据存储。其中,控制模块对数据的处理可以包括但不限于如下一种或其任意组合:数据格式转换、信息提取和转发操作等。
本发明中的安全模块和控制模块可以集成为一个模块,也可以作为两个模块集成在一个芯片中。
基于本发明实施例4的模拟装置,可以实现连接终端以及真实卡片管理器,并在二者 之间进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
进一步的,为了方便数据存储,本发明实施例4的模拟装置,还可以单独设置存储器;该存储器可以与控制模块406相连,或者与安全模块403相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
当然,本实施例中控制模块还可以对从输入装置接收到的数据进行处理后发送至提示装置进行提示。另外,控制模块还可以对从输入装置接收到的数据进行处理后发送至真实卡片管理器或者发送至终端。或者,控制模块还可以对从输入装置接收到的数据进行处理后发送至安全模块进行处理。或者,控制模块还可以对从安全模块接收到的数据进行处理后发送至提示装置进行提示。
实施例5
本实施例5与实施例1的区别在于,本实施例5中第一接口、无线接口通过控制模块进行调用,输入装置、提示装置通过安全模块进行调用,具体实现如下:
图5示出了本发明实施例5的模拟装置的结构示意图,参见图5,本发明实施例5的模拟装置包括:
第一接口501、无线接口502、输入装置503、提示装置504、安全模块505以及控制模块506;其中:
第一接口501,用于接收终端发送的第一数据并发送给控制模块506;
控制模块506,用于接收第一接口501发送的第一数据,对第一数据进行处理得到第二数据,向安全模块505发送第二数据;
安全模块505,用于接收控制模块506发送的第二数据,对第二数据进行处理得到第三数据,向控制模块506发送第三数据;
控制模块506,还用于接收安全模块505发送的第三数据,对第三数据进行处理得到第四数据,向无线接口502发送第四数据;
无线接口502,用于接收控制模块506发送的第四数据并发送给真实卡片管理器;
无线接口502,还用于接收真实卡片管理器发送的第五数据并发送给控制模块506;
控制模块506,还用于接收无线接口502发送的第五数据,对第五数据进行处理得到第六数据,向安全模块505发送第六数据;
安全模块505,还用于接收控制模块506发送的第六数据,对第六数据进行处理得到第七数据,向控制模块506发送第七数据;
控制模块506,还用于接收安全模块505发送的第七数据,对第七数据进行处理得到 第八数据,向第一接口501发送第八数据;
第一接口501,还用于接收控制模块506发送的第八数据并发送给终端。
输入装置503,用于进行第九数据输入;
提示装置504,用于进行第十数据提示;
安全模块505,还用于接收输入装置503输入的第九数据,向提示装置504发送第十数据。
其中:第一接口501可以为接触式接口、第一接口501还可以为非接触式接口,第一接口501也可以为接触式接口和非接触式接口。其中,接触式接口可以为触点、USB接口、串口、音频接口等,接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口可以为2.4G接口、蓝牙接口、红外接口、NFC接口或RFID接口等,非接触式接口的型号可以为QN9021、德州仪器公司的TIF256、PN512、NXP公司的RC663等。只要终端可以支持的接口,均可以作为该第一接口501的接口以配合终端使用。
无线接口502可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信方式与真实卡片管理器进行数据交互。具体的,该无线接口502可以为SIM6320、龙尚公司的U7500等。
当第一接口501与无线接口502的类型不同时,模拟装置从第一接口501接收到数据后,可以将符合第一接口协议的数据转换为符合无线接口协议的数据,并通过无线接口502发送,当然,模拟装置从无线接口502接收到数据后,还可以将符合无线接口协议的数据转换为符合第一接口协议的数据,并通过第一接口501发送。本实施例优选的,可以令第一接口501为NFC接口,无线接口502为蓝牙接口。
当第一接口501与无线接口502的类型相同时,例如:当终端支持蓝牙接口时,模拟装置的第一接口501可以为蓝牙接口,无线接口502也可以为蓝牙接口。此时,模拟装置无需执行数据通信协议转换的操作。
输入装置503可以为语音采集装置、键盘和扫描装置中的一种或其任意组合。其中,语音采集装置可以为麦克等,键盘可以为物理键盘或者虚拟键盘等,扫描装置可以为摄像头等。
提示装置504可以包括:语音播放装置和/或显示装置;语音播放装置可以为喇叭、耳机听筒等,显示装置可以为显示屏等。
安全模块505为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、 验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。另外,当模拟装置为智能芯片卡,安全模块为安全芯片时,模拟装置还可以包含智能卡芯片,本实施例中安全芯片可以与该智能卡芯片集成为一个芯片,也可以作为独立的芯片,当然,当模拟装置为智能芯片卡时,也可以不包含智能卡芯片,其智能卡芯片的功能由安全芯片完成。具体的,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
控制模块506控制第一接口501、无线接口502以及安全模块505之间的数据交互。其中,控制模块可以通过具有数据格式转换、信息提取和转发操作等数据处理功能的软件模块实现,或者该控制模块也可以采用硬件芯片来实现,例如该控制模块为控制芯片。具体的,该控制模块为控制芯片时,该控制芯片可以为ST公司的STM32、国民技术的Z32等。另外,该控制芯片可以具有存储单元,用于进行数据存储。其中,控制模块对数据的处理可以包括但不限于如下一种或其任意组合:数据格式转换、信息提取和转发操作等。
本发明中的安全模块和控制模块可以集成为一个模块,也可以作为两个模块集成在一个芯片中。
基于本发明实施例5的模拟装置,可以实现连接终端以及真实卡片管理器,并在二者之间进行数据交互的功能,使用该模拟装置代替真实卡片进行交易,可以实现方便用户交易,且安全性较高的目的。
进一步的,为了方便数据存储,本发明实施例5的模拟装置,还可以单独设置存储器;该存储器可以与控制模块506相连,或者与安全模块505相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
当然,本实施例中安全模块还可以对从输入装置接收到的数据进行处理后发送至提示装置进行提示。另外,安全模块还可以对从输入装置接收到的数据进行处理后发送至控制模块,再由控制模块发送至真实卡片管理器或者发送至终端。
当然,基于实施例3、实施例4和实施例5的模拟装置,还包括电池,该电池可以为不可充电电池,也可以为充电电池,如果为充电电池,本模拟装置还可以包含充电控制器,该充电控制器可以与电池相连,用于接收电能并给电池充电,当然,该充电控制器可以设置在电池内,也可以设置在安全模块内,还可以设置在控制模块内,当第一接口具有充电功能时,该充电控制器还可以设置在具有充电功能的第一接口上,当然模拟装置上还可以设置单独的充电接口(例如USB接口),该充电控制器可以设置在充电接口上。
实施例6
本实施例与上述实施例1至5的区别在于,本实施例中模拟装置为移动设备和电子签名设备的组合,其中,第一接口位于移动设备上,无线接口位于电子签名设备上,安全模块位于电子签名设备上。
输入装置和提示装置可以同时位于移动设备上,也可以同时位于电子签名设备上,还可以其中一个位于移动设备上,另一个位于电子签名设备上。
控制模块可以位于移动设备上,也可以位于电子签名设备上。
其他相关描述均与上述实施例1至5的相关描述相同,在此不再赘述。
实施例7
本实施例与上述实施例1至5的区别在于,本实施例中模拟装置为移动设备和电子签名设备的组合,其中,第一接口位于电子签名设备上,无线接口位于移动设备上,安全模块位于电子签名设备上。
输入装置和提示装置可以同时位于移动设备上,也可以同时位于电子签名设备上,还可以其中一个位于移动设备上,另一个位于电子签名设备上。
控制模块可以位于移动设备上,也可以位于电子签名设备上。
其他相关描述均与上述实施例1至5的相关描述相同,在此不再赘述。
实施例8
本实施例与上述实施例1至5的区别在于,本实施例中模拟装置为移动设备和电子签名设备的组合,其中,第一接口和无线接口位于移动设备上,安全模块位于电子签名设备上。
输入装置和提示装置可以同时位于移动设备上,也可以同时位于电子签名设备上,还可以其中一个位于移动设备上,另一个位于电子签名设备上。
控制模块可以位于移动设备上,也可以位于电子签名设备上。
其他相关描述均与上述实施例1至5的相关描述相同,在此不再赘述。
值得说明的是,上述实施例1至8中,存在数据交互的各个部件之间可以通过直接进行数据交互(例如,模拟装置为手机时,手机的安全模块通过第一接口直接获取数据),也可以通过间接进行数据交互(例如,模拟装置为手机和key设备的组合时,位于手机上的第一接口接收到的数据,可以通过手机和key设备之间的连接通路(例如音频接口)传输至位于key设备中的安全模块)。
以上实施例1至8中,安全模块对接收到的数据进行的处理包括:加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换中的一种或者任意组合。
真实卡片管理器
实施例9
图6示出了本发明实施例9的真实卡片管理器的结构示意图,参见图9,本发明实施例9的真实卡片管理器包括:
无线接口601、至少一个读写接口602、输入装置603、安全模块604以及提示装置605;其中:
无线接口601,用于接收模拟装置发送的第一数据并发送给安全模块604;
安全模块604,用于接收无线接口601发送的第一数据,对第一数据进行处理得到第二数据,向读写接口602发送第二数据;
至少一个读写接口602,用于接收安全模块604发送的第二数据,并发送给真实卡片;
至少一个读写接口602,还用于接收真实卡片发送的第三数据并发送给安全模块604;
安全模块604,还用于接收读写接口602发送的第三数据,对第三数据进行处理得到第四数据,向无线接口601发送第四数据;
无线接口601,还用于接收安全模块604发送的第四数据,并发送给模拟装置;
输入装置603,用于进行第五数据输入;
提示装置605,用于进行第六数据提示;
安全模块604,还用于接收输入装置603输入的第五数据,向提示装置605发送第六数据。
其中:无线接口601可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信的方式与模拟装置进行数据交互。具体的,该无线接口601可以为SIM6320、龙尚公司的U7500等。
读写接口602可以为至少一个接触式接口,或者至少一个非接触式接口,或者至少一个接触式接口和至少一个非接触式接口,以便通过读写接口602与不同类型的真实卡片进行数据交互,一个读写接口602与一个真实卡片进行读写。具体可参见图6,读写接口602(1)……读写接口602(n),其中,n≥2且n为自然数。具体的,接触式接口可以为触点等,非接触式接口可以为NFC接口等。接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口的型号可以为PN512、NXP公司的RC663等。
另外,本发明还提供了两种读写接口的结构,但本发明并不局限于此:
方式一:
本发明中的真实卡片管理器还包括:截止板;至少一个读写接口为至少两个读写接口,其中,每个读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元(图中未示出);具体可参见图7,其中:
至少两个读写接口中第一个读写接口的第一IO接口与安全模块相连;
至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;
每个读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
至少两个读写接口中每个读写接口的读写控制单元,用于从真实卡片读取第三数据,并向真实卡片写入第二数据;
至少两个读写接口中每个读写接口的存储单元,用于存储读写接口各自的地址。
由于采用IO接口串联的方式进行数据传输,节省了安全模块的IO接口数量。由于设置了截止板,在安全模块检测到截止信息时,可以获知最后一个读写接口,提高接口检测效率。
该读写控制单元可以集成在一起,也可以设置为两个单元,即读写单元和控制单元,在本发明中并不做限制,如果采用两个单元实现时,IO接口分别与控制单元连接,读写单元与控制单元连接。
方式二:
至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;至少两个读写接口中除最后一个读写接口之外的每个读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元(图中未示出);具体可参见图8,其中:
至少两个读写接口中第一个读写接口的第一IO接口与安全模块相连;
至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
每个读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
至少两个读写接口中每个读写接口的读写控制单元,用于从真实卡片读取第三数据,并向真实卡片写入第二数据;
至少两个读写接口中每个读写接口的存储单元,用于存储读写接口各自的地址;
至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
由于采用IO接口串联的方式进行数据传输,节省了安全模块的IO接口数量。由于最后一个读写接口中存储有截止信息,在安全模块检测到截止信息时,可以获知最后一个读写接口,提高接口检测效率。
该读写控制单元可以集成在一起,也可以设置为两个单元,即读写单元和控制单元,在本发明中并不做限制,如果采用两个单元实现时,IO接口分别与控制单元连接,读写单元与控制单元连接。
此外,各个IO接口之间采用耦合连接。
输入装置603可以为语音采集装置、键盘和扫描装置中的一种或其任意组合。其中,语音采集装置可以为麦克等,键盘可以为物理键盘或者虚拟键盘等,扫描装置可以为摄像头等。
提示装置605,用于进行第六数据提示。其中,提示装置605可以包括:语音播放装置和/或显示装置;语音播放装置可以为喇叭、耳机听筒等,显示装置可以为显示屏等。
安全模块604为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。本发明实施例9通过安全模块604控制无线接口601、读写接口602的数据传输,可以提高安全性。具体的,该安全模块为安全芯片时,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
当然,本实施例中安全模块还可以对从输入装置接收到的数据进行处理后发送至提示装置进行提示。另外,安全模块还可以对从输入装置接收到的数据进行处理后发送至真实卡片或者发送至模拟装置。
基于本发明实施例9的真实卡片管理器,可以实现对真实卡片的管理,进一步可以与模拟装置配合从而实现方便用户交易,且安全性较高的目的。
进一步的,为了方便用户使用,本发明实施例9的真实卡片管理器,还包括:电源可以为直插电源,也可以为电池,如果为电池,本真实卡片管理器还具有充电器等配套部件。
进一步的,为了方便数据存储,本发明实施例9的真实卡片管理器,还包括:存储器;该存储器与安全模块相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
实施例10
本实施例10与实施例9的区别在于,本实施例10中无线接口、读写接口、输入装置以及提示装置等通过控制模块进行调用,具体实现如下:
图9示出了本发明实施例10的真实卡片管理器的结构示意图,参见图9,本发明实施例10的真实卡片管理器包括:
无线接口901、至少一个读写接口902、安全模块903、输入装置904、提示装置905以及控制模块906;其中:
无线接口901,用于接收模拟装置发送的第一数据并发送给控制模块906;
控制模块906,用于接收无线接口901发送的第一数据,对第一数据进行处理得到第二数据,向安全模块903发送第二数据;
安全模块903,用于接收控制模块906发送的第二数据,对第二数据进行处理得到第三数据,向控制模块906发送第三数据;
控制模块906,还用于接收安全模块903发送的第三数据,对第三数据进行处理得到第四数据,向读写接口902发送第四数据;
至少一个读写接口902,用于接收控制模块906发送的第四数据并发送给真实卡片;
至少一个读写接口902,还用于接收真实卡片发送的第五数据并发送给控制模块206;
控制模块906,还用于接收读写接口902发送的第五数据,对第五数据进行处理得到第六数据,向安全模块903发送第六数据;
安全模块903,还用于接收控制模块906发送的第六数据,对第六数据进行处理得到第七数据,向控制模块906发送第七数据;
控制模块906,还用于接收安全模块903发送的第七数据,对第七数据进行处理得到第八数据,向无线接口901发送第八数据;
无线接口901,还用于接收控制模块906发送的第八数据并发送给模拟装置;
输入装置904,用于进行第九数据输入;
提示装置905,用于进行第十数据提示;
控制模块906,还用于接收输入装置904输入的第九数据,向提示装置905发送第十数据。
其中:无线接口901可以为蓝牙接口、红外接口、2.4G接口、900M接口、zigbee接口、2G网络接口、3G网络接口、4G网络接口或WIFI接口中的任一种接口,以便通过无线通信的方式与模拟装置进行数据交互。具体的,该无线接口901可以为SIM6320、龙尚公司的U7500等。
读写接口902可以至少一个接触式接口,或者至少一个非接触式接口,或者至少一个接触式接口和至少一个非接触式接口,以便通过读写接口902与不同类型的真实卡片进行 数据交互,一个读写接口902与一个真实卡片进行读写。具体可参见图2,读写接口902(1)……读写接口902(n),其中,n≥2且n为自然数。具体的,接触式接口可以为触点等,非接触式接口可以为NFC接口等。接触式接口的型号可以为NXP公司的8035、NCN公司的8025等;非接触式接口的型号可以为PN512、NXP公司的RC663等。
另外,本发明还提供了两种读写接口的结构,但本发明并不局限于此:
方式一:
真实卡片管理器还包括:截止板;至少一个读写接口为至少两个读写接口,其中,每个读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元(图中未示出);具体可参见图10,其中:
至少两个读写接口中第一个读写接口的第一IO接口与控制模块相连;
至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;
每个读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
至少两个读写接口中每个读写接口的读写控制单元,用于从真实卡片读取第五数据,并向真实卡片写入第四数据;
至少两个读写接口中每个读写接口的存储单元,用于存储读写接口各自的地址。
由于采用IO接口串联的方式进行数据传输,节省了控制模块的IO接口数量。由于设置了截止板,在控制模块检测到截止信息时,可以获知最后一个读写接口,提高接口检测效率。
该读写控制单元可以集成在一起,也可以设置为两个单元,即读写单元和控制单元,在本发明中并不做限制,如果采用两个单元实现时,IO接口分别与控制单元连接,读写单元与控制单元连接。
方式二:
至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;至少两个读写接口中除最后一个读写接口之外的每个读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元(图中未示出);具体可参见图11,其中:
至少两个读写接口中第一个读写接口的第一IO接口与控制模块相连;
至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
每个读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
至少两个读写接口中每个读写接口的读写控制单元,用于从真实卡片读取第五数据,并向真实卡片写入第四数据;
至少两个读写接口中每个读写接口的存储单元,用于存储读写接口各自的地址;
至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
由于采用IO接口串联的方式进行数据传输,节省了控制模块的IO接口数量。由于最后一个读写接口中存储有截止信息,在控制模块检测到截止信息时,可以获知最后一个读写接口,提高接口检测效率。
该读写控制单元可以集成在一起,也可以设置为两个单元,即读写单元和控制单元,在本发明中并不做限制,如果采用两个单元实现时,IO接口分别与控制单元连接,读写单元与控制单元连接。
此外,各个IO接口之间采用耦合连接。
输入装置904可以为语音采集装置、键盘和扫描装置中的一种或其任意组合。其中,语音采集装置可以为麦克等,键盘可以为物理键盘或者虚拟键盘等,扫描装置可以为摄像头等。
提示装置905与安全模块903连接,用于进行第八数据提示。其中,提示装置905可以包括:语音播放装置和/或显示装置;语音播放装置可以为喇叭、耳机听筒等,显示装置可以为显示屏等。
安全模块903为具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能。且本实施例中安全模块为安全芯片时,安全芯片为一个,以节约成本。其中,该安全模块可以通过具有加密、解密、校验、校验验证、证书验证、签名、验签和数据格式转换等数据处理功能的软件模块实现,或者该安全模块也可以采用硬件芯片来实现,例如该安全模块为安全芯片。具体的,安全模块为安全芯片时,该安全芯片可以为国民技术的Z8D256U、英飞凌公司的STSEL78。另外,安全芯片可以具有存储单元,用于进行数据存储。
控制模块906控制无线接口901、读写接口902、输入装置903、提示装置904以及安全模块903之间的数据交互。其中,控制模块可以通过具有数据格式转换、信息提取和转发操作等数据处理功能的软件模块实现,或者该控制模块也可以采用硬件芯片来实现,例如该控制模块为控制芯片。具体的,当控制模块为控制芯片时,该控制芯片可以为ST公司的STM32、国民技术的Z32等。另外,控制芯片可以具有存储单元,用于进行数据存储。其中,控制模块对数据的处理可以包括但不限于如下一种或其任意组合:数据格式转换、信息提取和转发操作等。
基于本发明实施例10的真实卡片管理器,可以实现对真实卡片的管理,进一步可以与 模拟装置配合从而实现方便用户交易,且安全性较高的目的。
进一步的,为了方便用户使用,本发明实施例10的真实卡片管理器还可以包括:电源。该电源可以为直插电源,也可以为电池,如果为电池,本真实卡片管理器还具有充电器等配套部件。
进一步的,为了方便数据存储,本发明实施例10的真实卡片管理器,还包括:存储器;该存储器与控制模块相连,用于存储数据。
本发明所记载的数据,还可以包括指令等。
本发明中的安全模块和控制模块可以集成为一个模块,也可以作为两个模块集成在一个芯片中。
当然,本实施例中控制模块还可以对从输入装置接收到的数据进行处理后发送至提示装置进行提示。另外,控制模块还可以对从输入装置接收到的数据进行处理后发送至真实卡片或者发送至模拟装置。或者,控制模块还可以对从输入装置接收到的数据进行处理后发送至安全模块进行处理。或者,控制模块还可以对从安全模块接收到的数据进行处理后发送至提示装置进行提示。
交互系统
图12示出了本发明数据交互系统的结构示意图,参见图12,本发明数据交互系统包括:模拟装置10以及真实卡片管理器20;其中:
模拟装置10,用于接收终端发送的第一数据,对第一数据进行处理得到第二数据,向真实卡片管理器20发送第二数据;
真实卡片管理器20,用于接收模拟装置10发送的第二数据,对第二数据进行处理得到第三数据,向真实卡片发送第三数据;
真实卡片管理器20,还用于接收真实卡片发送的第四数据,对第四数据进行处理得到第五数据,向模拟装置10发送第五数据;
模拟装置10,还用于接收真实卡片管理器20发送的第五数据,对第五数据进行处理得到第六数据,向终端发送第六数据。
具体的,通过本发明的模拟装置10,可以将从终端接收到的数据发送至真实卡片管理器20,也可以将从真实卡片管理器20接收到的数据发送至终端,以便完成终端至真实卡片管理器20之间的数据交互。
当然,模拟装置10与真实卡片管理器20之间进行传输的数据也可以与终端无关,即模拟装置10向真实卡片管理器20发送的数据,并非来自终端,而由模拟装置10自身生成或者从其他外部设备获取;同理,真实卡片管理器20向模拟装置10发送的数据,也可仅 由模拟装置10进行独立处理,无需发送至终端。
由此可见,通过本发明的数据交互系统,可以提供既方便用户交易,且安全性较高的交易解决方案。
其中,该数据交互系统中所述的模拟装置10以及真实卡片管理器20可分别参考上述实施例所述的模拟装置和真实卡片管理器,在此不再赘述。
本发明所记载的“相连”,可以为直接相连,也可以为间接相连。
流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为,表示包括一个或更多个用于实现特定逻辑功能或过程的步骤的可执行指令的代码的模块、片段或部分,并且本发明的优选实施方式的范围包括另外的实现,其中可以不按所示出或讨论的顺序,包括根据所涉及的功能按基本同时的方式或按相反的顺序,来执行功能,这应被本发明的实施例所属技术领域的技术人员所理解。
应当理解,本发明的各部分可以用硬件、软件、固件或它们的组合来实现。在上述实施方式中,多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或固件来实现。例如,如果用硬件来实现,和在另一实施方式中一样,可用本领域公知的下列技术中的任一项或他们的组合来实现:具有用于对数据信号实现逻辑功能的逻辑门电路的离散逻辑电路,具有合适的组合逻辑门电路的专用集成电路,可编程门阵列(PGA),现场可编程门阵列(FPGA)等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可以通过程序来指令相关的硬件完成,所述的程序可以存储于一种计算机可读存储介质中,该程序在执行时,包括方法实施例的步骤之一或其组合。
此外,在本发明各个实施例中的各功能单元可以集成在一个处理模块中,也可以是各个单元单独物理存在,也可以两个或两个以上单元集成在一个模块中。上述集成的模块既可以采用硬件的形式实现,也可以采用软件功能模块的形式实现。所述集成的模块如果以软件功能模块的形式实现并作为独立的产品销售或使用时,也可以存储在一个计算机可读取存储介质中。
上述提到的存储介质可以是只读存储器,磁盘或光盘等。
在本说明书的描述中,参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本发明的至少一个实施例或示例中。在本说明书中,对上述术语的示意性表述不一定指的是相同的实施例或示例。而且,描述的具体特征、结构、材料或者特点可以在任何的一个或多个实施例或示例中以合适的方式结合。
尽管上面已经示出和描述了本发明的实施例,可以理解的是,上述实施例是示例性的,不能理解为对本发明的限制,本领域的普通技术人员在不脱离本发明的原理和宗旨的情况下在本发明的范围内可以对上述实施例进行变化、修改、替换和变型。本发明的范围由所附权利要求及其等同限定。

Claims (21)

  1. 一种模拟装置,其特征在于,包括:
    第一接口,用于接收终端发送的第一数据并发送给安全模块;
    所述安全模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向无线接口发送所述第二数据;
    所述无线接口,用于接收所述安全模块发送的所述第二数据并发送给真实卡片管理器;
    所述无线接口,还用于接收所述真实卡片管理器发送的第三数据并发送给所述安全模块;
    所述安全模块,用于接收所述无线接口发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述第一接口发送所述第四数据;
    所述第一接口,用于接收所述安全模块发送的所述第四数据并发送给所述终端。
  2. 根据权利要求1所述的模拟装置,其特征在于,还包括:
    输入装置,用于进行第五数据输入;
    提示装置,用于进行第六数据提示;
    所述安全模块,还用于接收所述输入装置输入的所述第五数据,向所述提示装置发送所述第六数据。
  3. 一种模拟装置,其特征在于,包括:
    第一接口,用于接收终端发送的第一数据并发送给控制模块;
    所述控制模块,用于接收所述第一接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向安全模块发送所述第二数据;
    所述安全模块,用于接收所述控制模块发送的第二数据,对所述第二数据进行处理得到第三数据,向所述控制模块发送所述第三数据;
    所述控制模块,还用于接收所述安全模块发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述无线接口发送所述第四数据;
    所述无线接口,用于接收所述控制模块发送的所述第四数据并发送给真实卡片管理器;
    所述无线接口,还用于接收所述真实卡片管理器发送的第五数据并发送给所述控制模块;
    所述控制模块,还用于接收所述无线接口发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述安全模块发送所述第六数据;
    所述安全模块,还用于接收所述控制模块发送的第六数据,对所述第六数据进行处理得到第七数据,向所述控制模块发送所述第七数据;
    所述控制模块,还用于接收所述安全模块发送的所述第七数据,对所述第七数据进行处理得到第八数据,向所述第一接口发送所述第八数据;
    所述第一接口,还用于接收所述控制模块发送的所述第八数据并发送给所述终端。
  4. 根据权利要求3所述的模拟装置,其特征在于,还包括:
    输入装置,用于进行第九数据输入;
    提示装置,用于进行第十数据提示;
    所述控制模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
  5. 根据权利要求3所述的模拟装置,其特征在于,还包括:
    输入装置,用于进行第九数据输入;
    提示装置,用于进行第十数据提示;
    所述安全模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
  6. 根据权利要求1至5任一项所述的模拟装置,其特征在于,所述模拟装置为模拟卡片、移动设备或者电子签名设备。
  7. 根据权利要求6所述的模拟装置,其特征在于,所述模拟卡片包括:智能卡芯片。
  8. 根据权利要求1至5任一项所述的模拟装置,其特征在于,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述移动设备上,所述无线接口位于所述电子签名设备上,所述安全模块位于所述电子签名设备上;或者,所述模拟装置包括移动设备和电子签名设备,所述第一接口位于所述电子签名设备上,所述无线接口位于所述移动设备上,所述安全模块位于所述电子签名设备上;或者,所述模拟装置包括移动设备和电子签名设备,所述第一接口和所述无线接口位于所述移动设备上,所述安全模块位于所述电子签名设备上。
  9. 根据权利要求1至8任一项所述的模拟装置,其特征在于,所述终端为读卡式终端或者读写卡式终端。
  10. 根据权利要求9所述的模拟装置,其特征在于,所述读卡式终端包括:支付终端和/或功能终端;或者,所述读写卡式终端包括:支付终端和/或功能终端。
  11. 根据权利要求1至10任一项所述的模拟装置,其特征在于,所述安全模块为安全芯片。
  12. 根据权利要求11所述的模拟装置,其特征在于,所述安全芯片为一个。
  13. 一种真实卡片管理器,其特征在于,包括:
    无线接口,用于接收模拟装置发送的第一数据并发送给安全模块;
    所述安全模块,用于接收所述无线接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向读写接口发送所述第二数据;
    至少一个读写接口,用于接收所述安全模块发送的所述第二数据,并发送给真实卡片;
    所述至少一个读写接口,还用于接收所述真实卡片发送的第三数据并发送给所述安全模块;
    所述安全模块,还用于接收所述读写接口发送的所述第三数据,对所述第三数据进行处理得到第四数据,向所述无线接口发送所述第四数据;
    所述无线接口,还用于接收所述安全模块发送的所述第四数据,并发送给所述模拟装置;
    输入装置,用于进行第五数据输入;
    提示装置,用于进行第六数据提示;
    所述安全模块,还用于接收所述输入装置输入的所述第五数据,向所述提示装置发送所述第六数据。
  14. 根据权利要求13所述的真实卡片管理器,其特征在于,所述真实卡片管理器还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;
    其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述安全模块相连;
    所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
    最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;
    每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
    所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第三数据,并向所述真实卡片写入所述第二数据;
    所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
  15. 根据权利要求13所述的真实卡片管理器,其特征在于,
    所述至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;
    其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述安全模块相连;
    所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
    每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
    所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第三数据,并向所述真实卡片写入所述第二数据;
    所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;
    所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
  16. 一种真实卡片管理器,其特征在于,包括:
    无线接口,用于接收模拟装置发送的第一数据并发送给控制模块;
    所述控制模块,用于接收所述无线接口发送的所述第一数据,对所述第一数据进行处理得到第二数据,向安全模块发送所述第二数据;
    所述安全模块,用于接收所述控制模块发送的所述第二数据,对所述第二数据进行处理得到第三数据,向所述控制模块发送所述第三数据;
    所述控制模块,还用于接收所述安全模块发送的所述第三数据,对所述第三数据进行处理得到第四数据,向读写接口发送所述第四数据;
    至少一个读写接口,用于接收所述控制模块发送的所述第四数据并发送给真实卡片;
    所述至少一个读写接口,还用于接收所述真实卡片发送的第五数据并发送给所述控制模块;
    所述控制模块,还用于接收所述读写接口发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述安全模块发送所述第六数据;
    所述安全模块,还用于接收所述控制模块发送的第六数据,对所述第六数据进行处理得到第七数据,向所述控制模块发送所述第七数据;
    所述控制模块,还用于接收所述安全模块发送的所述第七数据,对所述第七数据进行处理得到第八数据,向所述无线接口发送所述第八数据;
    所述无线接口,还用于接收所述控制模块发送的所述第八数据并发送给所述模拟装置;
    输入装置,用于进行第九数据输入;
    提示装置,用于进行第十数据提示;
    所述控制模块,还用于接收所述输入装置输入的所述第九数据,向所述提示装置发送所述第十数据。
  17. 根据权利要求16所述的真实卡片管理器,其特征在于,所述真实卡片管理器还包括:截止板;所述至少一个读写接口为至少两个读写接口,其中,每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;
    其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述控制模块相连;
    所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
    最后一个读写接口的第二IO接口与存储有截止信息的截止板相连;
    每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
    所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第五数据,并向所述真实卡片写入所述第四数据;
    所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址。
  18. 根据权利要求16所述的真实卡片管理器,其特征在于,
    所述至少一个读写接口为至少两个读写接口,其中,最后一个读写接口包括第一IO接口、读写控制单元和存储单元;所述至少两个读写接口中除最后一个读写接口之外的每个所述读写接口包括:第一IO接口、第二IO接口、读写控制单元和存储单元;
    其中,所述至少两个读写接口中第一个读写接口的第一IO接口与所述控制模块相连;
    所述至少两个读写接口中从第二个读写接口起,每个读写接口的第一IO接口分别连接前一个读写接口的第二IO接口;
    每个所述读写接口中,第一IO接口与第二IO接口分别与读写控制单元相连;
    所述至少两个读写接口中每个读写接口的读写控制单元,用于从所述真实卡片读取所述第五数据,并向所述真实卡片写入所述第四数据;
    所述至少两个读写接口中每个读写接口的存储单元,用于存储所述读写接口各自的地址;
    所述至少两个读写接口中最后一个读写接口的存储单元,还用于存储截止信息。
  19. 根据权利要求13至18任一项所述的真实卡片管理器,其特征在于,所述安全模块为安全芯片。
  20. 根据权利要求19所述的真实卡片管理器,其特征在于,所述安全芯片为一个。
  21. 一种数据交互系统,其特征在于,包括权利要求1-12任一项所述的模拟装置和权利要求13-20任一项所述的真实卡片管理器,其中
    所述模拟装置,用于接收终端发送的第一数据,对所述第一数据进行处理得到第二数据,向所述真实卡片管理器发送所述第二数据;
    所述真实卡片管理器,用于接收所述模拟装置发送的所述第二数据,对所述第二数据进行处理得到第三数据,向真实卡片发送所述第三数据;
    所述真实卡片管理器,还用于接收所述真实卡片发送的第四数据,对所述第四数据进行处理得到第五数据,向所述模拟装置发送所述第五数据;
    所述模拟装置,还用于接收所述真实卡片管理器发送的所述第五数据,对所述第五数据进行处理得到第六数据,向所述终端发送所述第六数据。
PCT/CN2015/094732 2015-02-03 2015-11-16 模拟装置、真实卡片管理器和数据交互系统 WO2016124031A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CA2970324A CA2970324C (en) 2015-02-03 2015-11-16 Simulation apparatus, real card manager and data interactive system
US15/531,927 US20170323289A1 (en) 2015-02-03 2015-11-16 A simulation apparatus, a real card manager and a data interactive system
AU2015381427A AU2015381427B9 (en) 2015-02-03 2015-11-16 Analog device, authentic card manager, and data exchange system

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
CN201510056264.3 2015-02-03
CN201510056001.2A CN105989383A (zh) 2015-02-03 2015-02-03 真实卡片管理器
CN201510056002.7A CN105989399A (zh) 2015-02-03 2015-02-03 模拟装置
CN201510056001.2 2015-02-03
CN201510056002.7 2015-02-03
CN201510056264.3A CN105991550A (zh) 2015-02-03 2015-02-03 数据交互系统

Publications (1)

Publication Number Publication Date
WO2016124031A1 true WO2016124031A1 (zh) 2016-08-11

Family

ID=56563414

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/094732 WO2016124031A1 (zh) 2015-02-03 2015-11-16 模拟装置、真实卡片管理器和数据交互系统

Country Status (4)

Country Link
US (1) US20170323289A1 (zh)
AU (1) AU2015381427B9 (zh)
CA (1) CA2970324C (zh)
WO (1) WO2016124031A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101567109A (zh) * 2009-06-03 2009-10-28 普天信息技术研究院有限公司 一种集成支付和收款功能的装置、系统和交易方法
US20120259796A1 (en) * 2011-01-31 2012-10-11 The Bank Of New York Mellon System and method for optimizing collateral management
CN102737311A (zh) * 2012-05-11 2012-10-17 福建联迪商用设备有限公司 网络银行安全认证方法和系统
CN102968721A (zh) * 2012-11-19 2013-03-13 交通银行股份有限公司 一种手机收单系统

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101567109A (zh) * 2009-06-03 2009-10-28 普天信息技术研究院有限公司 一种集成支付和收款功能的装置、系统和交易方法
US20120259796A1 (en) * 2011-01-31 2012-10-11 The Bank Of New York Mellon System and method for optimizing collateral management
CN102737311A (zh) * 2012-05-11 2012-10-17 福建联迪商用设备有限公司 网络银行安全认证方法和系统
CN102968721A (zh) * 2012-11-19 2013-03-13 交通银行股份有限公司 一种手机收单系统

Also Published As

Publication number Publication date
AU2015381427B9 (en) 2019-07-25
CA2970324A1 (en) 2016-08-11
AU2015381427A1 (en) 2017-06-22
CA2970324C (en) 2020-06-30
US20170323289A1 (en) 2017-11-09
AU2015381427B2 (en) 2019-06-06

Similar Documents

Publication Publication Date Title
JP6193859B2 (ja) Rfidカードの管理方法及び端末
CN104123645B (zh) 基于金融安全认证的移动互联网智能支付终端及支付系统
CN103269326A (zh) 一种面向泛在网的安全设备、多应用系统和安全方法
CN101639960B (zh) 个人专用电子支付器
CN103886455A (zh) 数字钱包设备以及包括虚拟卡和数字钱包设备的系统
CN202075817U (zh) 一种多功能装置及pos系统
CN103560886A (zh) 电子签名设备认证方法
US10496983B2 (en) Wireless to magnetic transition smart card
CN105469129A (zh) 基于ic卡式水表的购水方法及其系统
CN202841180U (zh) 基于WiFi和NFC技术的数据交换存储设备
CN103345686A (zh) 一种移动支付设备
CN103559523A (zh) 基于swp se实现的非接触读写设备及方法
CN103505875A (zh) 互动娱乐触控桌游系统
CN106971455A (zh) 一种基于网络的公共卡充值方法和系统
CN104239945A (zh) 一种万能卡
CN102279940A (zh) 基于swp协议的移动支付sd卡
WO2016124031A1 (zh) 模拟装置、真实卡片管理器和数据交互系统
WO2015176393A1 (zh) 短距离通信终端、智能卡充值系统及方法
CN204406557U (zh) 金融ic卡的非接触支付装置以及使用其的行业终端
CN204759506U (zh) 数据交互系统
WO2017193837A1 (zh) 一种基于信令网的未来通信支付系统
WO2016045573A1 (zh) 数据交互系统
CN204759471U (zh) 模拟装置
CN105989381B (zh) 真实卡片管理器
CN102289886B (zh) 一种储物柜系统、交换中心和储物柜系统信息处理方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15880973

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 15531927

Country of ref document: US

ENP Entry into the national phase

Ref document number: 2970324

Country of ref document: CA

ENP Entry into the national phase

Ref document number: 2015381427

Country of ref document: AU

Date of ref document: 20151116

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15880973

Country of ref document: EP

Kind code of ref document: A1