WO2017076270A1 - 一种具有动态令牌otp功能的智能卡及其工作方法 - Google Patents

一种具有动态令牌otp功能的智能卡及其工作方法 Download PDF

Info

Publication number
WO2017076270A1
WO2017076270A1 PCT/CN2016/104200 CN2016104200W WO2017076270A1 WO 2017076270 A1 WO2017076270 A1 WO 2017076270A1 CN 2016104200 W CN2016104200 W CN 2016104200W WO 2017076270 A1 WO2017076270 A1 WO 2017076270A1
Authority
WO
WIPO (PCT)
Prior art keywords
smart card
main control
otp
control module
radio frequency
Prior art date
Application number
PCT/CN2016/104200
Other languages
English (en)
French (fr)
Inventor
夏生凤
肖德银
Original Assignee
国民技术股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 国民技术股份有限公司 filed Critical 国民技术股份有限公司
Priority to CN201680003587.9A priority Critical patent/CN107005575A/zh
Publication of WO2017076270A1 publication Critical patent/WO2017076270A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Definitions

  • the present invention relates to the field of network mobile payment, and in particular, to a smart card having an OTP (One Time Password) function and a working method thereof.
  • OTP One Time Password
  • USBKEY and dynamic token OTP can no longer comply with the trend of mobile security and convenient payment: USBKEY products require terminals with OTG (On-The- Go) technology and driver support, and most mobile phones such as mobile phones, tablets, and iPADs do not support OTG function. Even with the OTG function, you need to carry USB (Universal Serial Bus) connection data cable and USBKEY with you. Carrying and operating is extremely inconvenient; time-based dynamic token OTP, event-type dynamic token OTP, challenge response type dynamic token OTP, etc.
  • challenge code also called challenge password
  • CHAP handshake authentication protocol
  • USBKEY and dynamic token OTP with Bluetooth interface issued by the bank are independent split type.
  • the present invention is intended to provide a smart card with a dynamic token OTP function and a working method thereof, which solves the problem of inconvenience of carrying and trading operations of a dynamic token OTP product device in the mobile payment era.
  • the embodiment of the invention provides a smart card with a dynamic token OTP function
  • the smart card includes: a smart card main control module, a radio frequency control module, a radio frequency antenna, an OTP main control chip, and a contact interface;
  • the smart card main control module is used to implement the basic functions of the smart card, and is respectively connected with the radio frequency control module, the OTP main control chip and the contact interface to exchange and exchange data information;
  • the radio frequency control module is configured to control the radio frequency antenna to implement a wireless communication protocol, establish a corresponding wireless communication connection with the terminal, and implement interaction with the APP application software;
  • Radio frequency antenna for receiving and transmitting radio frequency signals
  • the OTP main control chip is configured to receive transaction information transmitted by the terminal through a wireless communication connection or a contact interface, and the production dynamic code is sent to the smart card main control module;
  • the contact interface is used to implement a connection interface between the smart card main control module and the terminal, and transmits data and control information.
  • the method for the smart card with the dynamic token OTP function to communicate with the mobile phone through the Bluetooth interface is as follows: the SIM card OTP token mobile phone Bluetooth module establishes a connection channel, and the mobile application (APP) client transmits transaction information, The encryption process of the challenge code (including but not limited to data, text, picture, fingerprint, iris, etc.) is extracted and sent to the SIM of the present invention.
  • the SIM card OTP token of the present invention adopts a corresponding hash algorithm according to the received information (including Not limited to SM3/SHA1/SHA256/SHA384, etc.)
  • the dynamic code is generated and returned to the APP client for display and authentication confirmation with the application server via the mobile Internet. If the transaction is consistent, the transaction is passed.
  • the smart card with the dynamic token OTP function provided by the embodiment of the present invention implements the OTP token function through the STK value-added service service: the SIM card application enters the mobile phone STK menu and selects the OTP order.
  • the card application input corresponding PIN code can be used, the challenge code information is transmitted to the SIM card of the invention by the STK instruction, and the corresponding dynamic code is generated by reading back through the STK instruction.
  • the smart card of the present invention includes: a SIM (Subscriber Identity Module) card and an SD card (Secure Digital Memory Card), wherein the SIM card includes: a standard SIM card, a UIM (User Identify Module) ) card, USIM (Universal Subscriber Identity Module) card, Micro SIM, Nano SIM card, etc.
  • SIM Subscriber Identity Module
  • SD card Secure Digital Memory Card
  • the SIM card includes: a standard SIM card, a UIM (User Identify Module) ) card, USIM (Universal Subscriber Identity Module) card, Micro SIM, Nano SIM card, etc.
  • the secure digital memory card SD card includes: standard SD card, Mini SD card.
  • the invention has the beneficial effects that the technology of combining Bluetooth technology, mobile handheld terminal equipment, internet, 4G/3G/GPRS/GSM, MCU controller, etc., mainly solves the problem of mobile convenient and secure payment in the era of mobile internet and current
  • the dynamic token OTP (One-time Passwrd) product device is issued and inconvenient to carry.
  • the terminal device software APP, STK (SIM Tool Kit, user identification application development tool) menu is combined to design a dynamic password OTP function device such as time type, event type, challenge response type or biometric type, and realizes safe and convenient network payment. , mobile payment system environment.
  • FIG. 1 is a schematic structural diagram of a dynamic token OTP with a Bluetooth interface SIM/USIM card form according to an embodiment of the present invention
  • FIG. 2 is a schematic structural diagram of a dynamic token OTP with a Bluetooth interface SD card according to an embodiment of the present invention
  • FIG. 3 is a flow chart of the smart card provided by the present invention communicating with an external mobile terminal through a Bluetooth interface;
  • FIG. 4 is a flow chart of the smart card provided by the present invention communicating with an external mobile terminal through an ISO7816 interface
  • FIG. 5 is a schematic diagram of a SIM card OTP token providing communication with a mobile phone through a Bluetooth interface according to an embodiment of the present invention
  • FIG. 6 is a schematic diagram of an OTP token function implemented by a STK value-added service service by a SIM card OTP token according to an embodiment of the present invention
  • FIG. 7 is a flowchart of interaction between a smart card and a mobile terminal and a server in an actual transaction application according to an embodiment of the present invention
  • FIG. 8 is a schematic structural diagram of a smart card with an OTP function according to an embodiment of the present invention.
  • FIG. 1 shows a dynamic token OTP with a Bluetooth interface SIM/USIM card form.
  • the SIM/USIM card includes: a SIM/USIM card master 101, a Bluetooth master chip 102, and an OTP master.
  • the data exchange is exchanged; the OTP master chip 103 transmits and receives the transaction time, challenge code, biometric code (fingerprint/iris, etc.) related transaction information transmitted by the mobile phone, tablet computer, iPAD, etc.
  • the Bluetooth main control piece 102 realizes the Bluetooth interface protocol through the Bluetooth antenna 104, establishes a connection with the terminal bluetooth module such as a mobile phone, a tablet computer, an iPAD, and realizes interaction with the APP application software;
  • the ISO7816 interface 105 passes through the mobile phone and the tablet STK menus such as computers and iPADs implement value-added services for OTP token functions.
  • the internal data exchange process is shown in Figure 3 and Figure 4.
  • FIG 2 shows a dynamic token OTP with a Bluetooth interface SD card form, as shown in Figure 2,
  • the SD card includes: an SD card master 201, a Bluetooth master chip 202, an OTP master chip 203, a Bluetooth antenna 204, an SCIO interface 205, and a memory 206.
  • the SD card master 201 mainly implements memory access and management of the memory 206.
  • the Bluetooth main control chip 202 and the OTP main control chip 203 exchange and exchange data information; the OTP main control chip 203 transmits and receives the mobile phone and the tablet through the Bluetooth interface or the SCIO interface 205.
  • the Bluetooth master chip 202 implements the Bluetooth interface protocol through the Bluetooth antenna 204, and the mobile phone and the tablet
  • the terminal Bluetooth module such as computer and iPAD establishes connection and realizes communication interaction with APP application software;
  • SCIO interface 205 is connected with mobile phone, tablet computer and iPAD to realize information exchange between SD card master 201 and terminal; memory 206 mainly realizes information storage. .
  • the internal data exchange process is shown in FIG. 3 and FIG. 4 . It should be noted that FIG. 3 and FIG. 4 are examples of the dynamic token OTP in the form of SIM, and the data flow is also applicable to the dynamic order of the SD card form. Card OTP.
  • FIG. 3 shows a smart card provided by the present invention for communicating data flow with an external mobile terminal through a Bluetooth interface.
  • the SIM card form dynamic token OTP is taken as an example, and the same applies to other forms of dynamic tokens such as an SD card.
  • FIG. 4 shows the smart card provided by the present invention communicating with the external mobile terminal through the ISO7816 interface.
  • the dynamic card token OTP is taken as an example, and the same applies to other forms of dynamic tokens such as the SD card.
  • FIG. 5 shows a smart card provided by the present invention to establish a connection channel with a Bluetooth module of a mobile terminal such as a mobile phone, a tablet computer, or an iPAD through a Bluetooth interface, and the APP client transmits transaction information and a challenge code (including but not limited to data, text, pictures, and fingerprints).
  • Encryption processing such as iris, iris, etc. is sent to the SIM/USIM/SD card of the present invention, and the SIM/USIM/SD card generates a dynamic code according to the received information and transmits it back to the APP client for display and through the mobile Internet.
  • the application server performs authentication confirmation, and if it is consistent, the transaction is passed.
  • FIG. 6 shows the smart card provided by the present invention implementing the OTP token function through the STK value-added service service, and entering the STK menu of the mobile terminal such as the mobile phone, the tablet computer, the iPAD, etc., selecting the OTP token application, and inputting the corresponding PIN code can be used.
  • the STK instruction transmits the challenge code information to the utility model.
  • the SIM/USIM/SD card is read back by the STK instruction to generate the corresponding dynamic code.
  • FIG. 7 shows the flow of interaction between the smart card provided by the present invention and the mobile terminal and the server in the actual transaction application.
  • the process is not limited to the present invention, and the APP application and the web client may include a mobile phone/PDA in the process. It is used on mobile terminals such as /iPAD/tablet; the same dynamic token OTP is not limited to the form of SIM card (Micro SIM, Nano SIM)/SD card (Mini SD card), and the communication interface is not limited to Bluetooth/ISO7816/NFC. .
  • FIG. 3, FIG. 4, FIG. 5, and FIG. 6 take the dynamic token OTP of the SIM form as an example, but does not limit the dynamic token OTP that is also applicable to the SD card form.
  • the Bluetooth master chip and the Bluetooth antenna in the smart card can also be replaced by a Near Field Communication (NFC) module and an NFC antenna, so that the smart card can be combined with a mobile terminal with an NFC interface function to implement access control authorization. Management, near field payment, dynamic password lock and other functions.
  • NFC Near Field Communication
  • the present invention provides a smart card with a dynamic token OTP function.
  • the smart card includes: a smart card main control module 801, a radio frequency control module 802, a radio frequency antenna 803, an OTP main control chip 804, and a contact type. Interface 805; wherein
  • the smart card main control module 801 is configured to implement a basic function of the smart card, and is respectively connected to the radio frequency control module 802, the OTP main control chip, and the contact interface to perform data transmission and exchange;
  • the radio frequency control module 802 is configured to control the radio frequency antenna 803 to implement a wireless communication protocol, establish a corresponding wireless communication connection with the terminal, and implement interaction with the APP application software;
  • the OTP main control chip 804 is configured to receive transaction information transmitted by the terminal through the wireless communication connection or the contact interface 805, and the production dynamic code is sent to the smart card main control module 801;
  • the contact interface 805 is configured to implement a connection interface between the smart card main control module 801 and the terminal, and transmit data and control information.
  • Each module of the communication system of this embodiment corresponds to the steps described in the foregoing embodiment of the communication method. Therefore, it has the same beneficial effects.
  • the implementation of the communication system described above is merely illustrative, and the division of the described modules is only a logical function division, and may be further divided in actual implementation.
  • the coupling or communication connection of the modules to each other may be through some interfaces, or may be electrical or other forms.
  • Each of the above functional modules may be part of a communication system, and may or may not be a physical frame. It may be located in one place or on multiple network units, and may be implemented in the form of hardware or a software function box. The form is implemented. Some or all of the modules may be selected according to actual needs to achieve the objectives of the solution of the present invention.
  • embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.
  • the computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device.
  • the apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

Abstract

本发明提供一种具有动态令牌OTP功能的智能卡及其工作方法，其中，所述智能卡包括：智能卡主控模块，用于实现智能卡基本功能，同时分别与射频控制模块、OTP主控芯片以及接触式接口连接，进行数据信息的传输交换；射频控制模块，用于控制射频天线实现无线通信协议，与终端建立相应的无线通信连接，实现与APP应用软件的交互；射频天线，用于接收和发送射频信号；OTP主控芯片，用于接收终端通过无线通信连接或接触式接口传输的交易信息，生产动态码发送至智能卡主控模块；接触式接口，用于实现智能卡主控模块与终端的连接接口，传输数据与控制信息，实现与STK应用或APP应用软件交互。

Description

一种具有动态令牌OTP功能的智能卡及其工作方法 技术领域
本发明涉及网络移动支付领域，尤其涉及一种具有OTP(One Time Password，动态令牌)功能的智能卡及其工作方法。
背景技术
随着移动互联网发展，网络支付、手机、平板电脑、iPAD移动支付成为一种潮流，逐渐得到人们的青睐，但同时安全性也越来越成为人们关注的焦点。银行当前解决手机、平板电脑、iPAD等移动支付安全问题仍沿用着PC(personal computer，个人计算机)互联网时代的USBKEY(一种存储数字证书及用户私钥装置，可实现用户身份认证及签名功能，主要用于网络认证)及动态令牌OTP，面对当前移动支付安全便捷性的趋势，USBKEY及动态令牌OTP已不能顺应移动安全便捷支付的潮流：USBKEY产品需要终端具有OTG(On-The-Go)技术及驱动支持，而目前大部分手机、平板电脑、iPAD等移动终端不支持OTG功能，即使带了OTG功能还需要随身携带USB(Universal Serial Bus通用串行总线)连接数据线及USBKEY随身携带及操作极其不便；而时间型动态令牌OTP、事件型动态令牌OTP、挑战应答型动态令牌OTP等需要手工输入挑战码(challenge，也称作挑战口令，是指遵循握手验证协议(CHAP)生成的一组加密口令)、动态码等操作不便，与移动支付交易的安全便捷性，易用体验性相背离。
目前银行发行的带蓝牙接口的USBKEY及动态令牌OTP均为独立分体式，使用时需手动输入挑战码、动态码/确认等信息，完成一次交易操作比较繁琐，携带不便，已不能满足移动支付时代的交易安全便捷的体验性。
发明内容
本发明期望提供一种具有动态令牌OTP功能的智能卡及其工作方法，解决移动支付时代动态令牌OTP产品装置携带及交易操作不便问题。
本发明实施例的技术方案是这样实现的：
本发明实施例提供一种具有动态令牌OTP功能的智能卡，所述智能卡包括：智能卡主控模块、射频控制模块、射频天线、OTP主控芯片以及接触式接口；其中，
智能卡主控模块，用于实现智能卡基本功能，同时分别与射频控制模块、OTP主控芯片以及接触式接口连接，进行数据信息的传输交换；
射频控制模块，用于控制射频天线实现无线通信协议，与终端建立相应的无线通信连接，实现与APP应用软件的交互；
射频天线，用于接收和发送射频信号；
OTP主控芯片，用于接收终端通过无线通信连接或接触式接口传输的交易信息，生产动态码发送至智能卡主控模块；
接触式接口，用于实现智能卡主控模块与终端的连接接口，传输数据与控制信息。
本发明实施例提供的具有动态令牌OTP功能的智能卡通过蓝牙接口与手机通信完成网络支付的方法为：SIM卡OTP令牌手机蓝牙模块建立连接通道，手机应用(APP)客户端将交易信息、挑战码(包括但不限于数据、文字、图片、指纹、虹膜等生物识别码)等加密处理提取发送给本发明SIM，本发明SIM卡OTP令牌根据接收的信息采用相应的杂凑算法(包括但不限于SM3/SHA1/SHA256/SHA384等)产生动态码并回传给APP客户端显示并通过移动互联网与应用服务器进行认证确认，如一致则交易通过。
本发明实施例提供的具有动态令牌OTP功能的智能卡通过STK增值业务服务实现OTP令牌功能的方法为：SIM卡应用进入手机STK菜单选择OTP令 牌应用、输入对应的PIN码即可开始使用，通过STK指令将挑战码信息传输给本发明SIM卡，再通过STK指令读回产生对应的动态码。
本发明涉及的智能卡包括：SIM(Subscriber Identity Module客户识别模块)卡和SD卡(Secure Digital Memory Card，安全数字存储卡)，其中SIM卡包含：标准SIM卡、UIM(User Identify Module，用户识别模块)卡，USIM(Universal Subscriber Identity Module，全球用户识别)卡、Micro SIM、Nano SIM卡等，安全数字存储卡SD卡包含：标准SD卡、Mini SD卡。
本发明的有益效果在于，将蓝牙(Bluetooth)技术、移动手持终端设备、互联网、4G/3G/GPRS/GSM、MCU控制器等相结合的技术，主要解决移动互联网时代移动便捷安全支付问题及当前动态令牌OTP(One-time Passwrd)产品装置发行及携带不便问题。通过合理设计，在手机、平板电脑、iPAD等移动终端设备的SIM卡或SD卡里内置蓝牙接口芯片及可产生OTP(One Time Passwrd)动态口令功能的芯片，与手机、平板电脑、iPAD等移动终端设备软件APP、STK(SIM Tool Kit，用户识别应用开发工具)菜单结合，设计为具有时间型、事件型、挑战应答型或生物识别型等动态口令OTP功能装置，构建实现安全便捷的网络支付、移动支付系统环境。
附图说明
图1为本发明实施例提供的带蓝牙接口SIM/USIM卡形态的动态令牌OTP的结构示意图；
图2为本发明实施例提供的带蓝牙接口SD卡形态的动态令牌OTP的结构示意图；
图3本发明提供的智能卡通过蓝牙接口与外部移动终端通信的流程图；
图4本发明提供的智能卡通过ISO7816接口与外部移动终端通信的流程图；图5为本发明实施例提供的SIM卡OTP令牌通过蓝牙接口与手机通信完成网络支付的示意图；
图6为本发明实施例提供的SIM卡OTP令牌通过STK增值业务服务实现OTP令牌功能；
图7为本发明实施例提供的智能卡在实际的交易应用中与移动终端及服务器之间的交互流程图；图8为本发明实施例提供的具有OTP功能的智能卡的结构示意图。
具体实施方式
为了更清楚地说明本发明实施例和技术方案，下面将结合附图及实施例对本发明的技术方案进行更详细的说明，显然，所描述的实施例是本发明的一部分实施例，而不是全部实施例。基于本发明的实施例，本领域普通技术人员在不付出创造性劳动的前提下所获得的所有其他实施例，都属于本发明保护的范围。
实施例1
图1示出了一种带蓝牙接口SIM/USIM卡形态的动态令牌OTP，如图1所示，该SIM/USIM卡包括：SIM/USIM卡主控101、蓝牙主控芯片102、OTP主控芯片103、蓝牙天线104及ISO7816接口105；其中，SIM/USIM卡主控101实现电信功能，同时通过相关接口(包括SPI/UART/IIC等)与蓝牙主控芯片102以及OTP主控芯片103进行数据信息的传输交换；OTP主控芯片103通过蓝牙接口或ISO7816接口传输接收手机、平板电脑、iPAD等终端传输过来的交易的时间、挑战码、生物识别码(指纹/虹膜等)相关交易信息，实现动态码生成；蓝牙主控片102通过蓝牙天线104实现蓝牙接口协议，与手机、平板电脑、iPAD等终端蓝牙模块建立连接、实现与APP应用软件的交互；ISO7816接口105通过与手机、平板电脑、iPAD等STK菜单实现OTP令牌功能的增值业务。内部数据交换流程见附图3、附图4所示。
实施例2，
图2示出了一种带蓝牙接口SD卡形态的动态令牌OTP，如图2所示，该 SD卡包括：SD卡主控201、蓝牙主控芯片202、OTP主控芯片203、蓝牙天线204、SCIO接口205及存储器206；其中，SD卡主控201主要实现存储器206的存储访问及管理，同时通过相关接口(包括SPI/UART/IIC等)与蓝牙主控芯片202以及OTP主控芯片203进行数据信息的传输交换；OTP主控芯片203通过蓝牙接口或SCIO接口205传输接收手机、平板电脑、iPAD等端传输过来的交易的时间、挑战码、生物识别码(指纹/虹膜等)相关交易信息，实现动态码生成；蓝牙主控芯片202通过蓝牙天线204实现蓝牙接口协议，与手机、平板电脑、iPAD等终端蓝牙模块建立连接、实现与APP应用软件的通信交互；SCIO接口205与手机、平板电脑、iPAD连接，实现SD卡主控201与终端的信息交换；存储器206主要实现信息的存储。内部数据交换流程见附图3、附图4所示，需要说明的是附图3、附图4虽以SIM形态的动态令牌OTP为例，该数据流程同样适用于SD卡形态的动态令牌OTP。
图3显示了本发明提供的智能卡通过蓝牙接口与外部移动终端通信数据流，图中以SIM卡形态动态令牌OTP为例说明，同样对于其他形式如SD卡形态的动态令牌同样适用。
图4显示了本发明提供的智能卡通过ISO7816接口与外部移动终端通信数据流，图中以SIM卡形态动态令牌OTP为例说明，同样对于其他形式如SD卡形态的动态令牌同样适用。
图5显示了本发明提供的智能卡通过蓝牙接口与手机、平板电脑、iPAD等移动终端的蓝牙模块建立连接通道，APP客户端将交易信息、挑战码(包括但不限于数据、文字、图片、指纹、虹膜等生物识别码)等加密处理提取发送给本实用新型SIM/USIM/SD卡，该SIM/USIM/SD卡根据接收的信息产生动态码并回传给APP客户端显示并通过移动互联网与应用服务器进行认证确认，如一致则交易通过。
图6显示了本发明提供的智能卡通过STK增值业务服务实现OTP令牌功能，进入手机、平板电脑、iPAD等移动终端的STK菜单选择OTP令牌应用、输入对应的PIN码即可开始使用，通过STK指令将挑战码信息传输给本实用新 型SIM/USIM/SD卡，再通过STK指令读回产生对应的动态码。
图7显示了本发明提供的智能卡在实际的交易应用中与移动终端及服务器之间的交互流程，应当注意此流程并不为限定本发明，流程中APP应用及网页客户端可能包含手机/PDA/iPAD/平板电脑等移动终端设备上使用；同样的动态令牌OTP不限于SIM卡(Micro SIM、Nano SIM)形态/SD卡(Mini SD卡)形态，通信接口不限于蓝牙/ISO7816/NFC等。
需要说明的是附图3、附图4、附图5、附图6虽以SIM形态的动态令牌OTP为例，但不限制同样适用于SD卡形态的动态令牌OTP。
此外，智能卡中的蓝牙主控芯片和蓝牙天线也可替换为近场通信(Near Field Communication，NFC)模块和NFC天线，这样，该智能卡与带NFC接口功能的移动终端结合，还可实现门禁授权管理、近场支付、动态密码锁等功能。
综合以上，本发明提供一种具有动态令牌OTP功能的智能卡，如图8所示，该智能卡包括：智能卡主控模块801、射频控制模块802、射频天线803、OTP主控芯片804以及接触式接口805；其中，
智能卡主控模块801，用于实现智能卡基本功能，同时分别与射频控制模块802、OTP主控芯片以及接触式接口连接，进行数据信息的传输交换；
射频控制模块802，用于控制射频天线803实现无线通信协议，与终端建立相应的无线通信连接，实现与APP应用软件的交互；
射频天线803，用于接收和发送射频信号；
OTP主控芯片804，用于接收终端通过无线通信连接或接触式接口805传输的交易信息，生产动态码发送至智能卡主控模块801；
接触式接口805，用于实现智能卡主控模块801与终端的连接接口，传输数据与控制信息。
本实施例的通讯系统的各个模块对应执行上述通讯方法实施例所描述的步 骤，因此具有相同的有益效果。另外，应该理解到，以上所描述的通讯系统的实施方式仅仅是示意性的，所描述模块的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。另外，模块相互之间的耦合或通信连接可以是通过一些接口，也可以是电性或其它的形式。
上述各个功能模块作为通讯系统的组成部分，可以是或者也可以不是物理框，既可以位于一个地方，也可以分布到多个网络单元上，既可以采用硬件的形式实现，也可以采用软件功能框的形式实现。可以根据实际的需要选择其中的部分或者全部模块来实现本发明方案的目的。
本领域内的技术人员应明白，本发明的实施例可提供为方法、系统、或计算机程序产品。因此，本发明可采用硬件实施例、软件实施例、或结合软件和硬件方面的实施例的形式。而且，本发明可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器和光学存储器等)上实施的计算机程序产品的形式。
本发明是参照根据本发明实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个 流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
再次说明，以上所述仅为本发明的实施例，并非因此限制本发明的专利范围，凡是利用本发明说明书及附图内容所作的等效结构或等效流程变换，例如各实施例之间技术特征的相互结合，或直接或间接运用在其他相关的技术领域，均同理包括在本发明的专利保护范围内。以上所述，仅为本发明的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到的变化或替换，都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应以权利要求的保护范围为准。

Claims (10)

  1. 一种具有动态令牌OTP功能的智能卡，其特征在于，所述智能卡包括：
    智能卡主控模块、射频控制模块、射频天线、OTP主控芯片以及接触式接口；其中，
    智能卡主控模块，用于实现智能卡基本功能，同时分别与射频控制模块、OTP主控芯片以及接触式接口连接，进行数据信息的传输交换；
    射频控制模块，用于控制射频天线实现无线通信协议，与终端建立相应的无线通信连接，实现与APP应用软件的交互；
    射频天线，用于接收和发送射频信号；
    OTP主控芯片，用于接收终端通过无线通信连接或接触式接口传输的交易信息，生产动态码发送至智能卡主控模块；
    接触式接口，用于实现智能卡主控模块与终端的连接接口，传输数据与控制信息，实现与STK应用或APP应用软件交互。
  2. 根据权利要求1所述的智能卡，其特征在于，所述无线通信连接包括：蓝牙通信连接；所述射频控制模块包括：蓝牙控制模块。
  3. 根据权利要求1所述的智能卡，其特征在于，所述接触式接口包括：
    ISO7816接口和/或SCIO接口。
  4. 根据权利要求1所述的智能卡，其特征在于，所述智能卡还包括：
    存储器，用于实现信息的存储。
  5. 根据权利要求1所述的智能卡，其特征在于，所述智能卡包括：
    客户识别模块(SIM)卡和安全数字存储卡(SD卡)。
  6. 一种具有动态令牌OTP功能智能卡的工作方法，其特征在于，所述方 法包括：
    智能卡主控模块接收终端通过无线通信连接或接触式接口传输的交易信息，解析后发送至OTP主控芯片；
    所述OTP主控芯片生产动态码发送至所述智能卡主控模块；
    所述智能卡主控模块通过无线通信连接或接触式接口向所述终端传输所述动态码。
  7. 根据权利要求6所述的工作方法，其特征在于，所述OTP主控芯片生产动态码所依据的信息包括：交易信息、挑战码和/或生物识别码。
  8. 根据权利要求6所述的工作方法，其特征在于，所述OTP主控芯片生产动态码的方法包括：采用杂凑算法处理接收到的信息，并返回处理后的信息。
  9. 根据权利要求8所述的工作方法，其特征在于，所述杂凑算法包括：
    SM3、SHA1、SHA256或SHA384。
  10. 根据权利要求6所述的工作方法，其特征在于，所述无线通信连接包括：蓝牙连接或近场通信NFC连接。
PCT/CN2016/104200 2015-11-03 2016-11-01 一种具有动态令牌otp功能的智能卡及其工作方法 WO2017076270A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201680003587.9A CN107005575A (zh) 2015-11-03 2016-11-01 一种具有动态令牌otp功能的智能卡及其工作方法

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510738599.3 2015-11-03
CN201510738599 2015-11-03

Publications (1)

Publication Number Publication Date
WO2017076270A1 true WO2017076270A1 (zh) 2017-05-11

Family

ID=58662552

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/104200 WO2017076270A1 (zh) 2015-11-03 2016-11-01 一种具有动态令牌otp功能的智能卡及其工作方法

Country Status (3)

Country Link
CN (1) CN107005575A (zh)
TW (1) TWI626607B (zh)
WO (1) WO2017076270A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108183889A (zh) * 2017-12-15 2018-06-19 深圳市文鼎创数据科技有限公司 身份认证方法及身份认证装置
CN109639435A (zh) * 2018-12-26 2019-04-16 江苏恒宝智能系统技术有限公司 一种基于终端卡对app的认证方法及系统
CN111600828A (zh) * 2019-02-20 2020-08-28 中国电力科学研究院有限公司 一种通信组件
CN112214423A (zh) * 2020-10-11 2021-01-12 深圳市金玺智控技术有限公司 一种低成本控制装置、管控方法、管控系统以及存储介质

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109547398B (zh) * 2017-09-22 2022-01-25 中国联合网络通信集团有限公司 基于智能卡和终端应用的认证方法及装置

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1862948A1 (en) * 2006-06-01 2007-12-05 Axalto SA IC card with OTP client
CN101577917A (zh) * 2009-06-16 2009-11-11 深圳市星龙基电子技术有限公司 一种安全的基于手机的动态密码验证方法
CN102611551A (zh) * 2011-01-20 2012-07-25 深圳市文鼎创数据科技有限公司 物理认证方法、装置及动态口令牌
CN102737310A (zh) * 2011-04-02 2012-10-17 国民技术股份有限公司 一种基于非接触智能卡的支付系统及支付方法
CN103312519A (zh) * 2013-07-05 2013-09-18 飞天诚信科技股份有限公司 一种动态口令设备及其工作方法
WO2014062623A1 (en) * 2012-10-15 2014-04-24 Powered Card Solutions, Llc System and method for secure remote access and remote payment using a mobile device and a powered display card

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW200732941A (en) * 2006-02-16 2007-09-01 Chunghwa Telecom Co Ltd USB portable storage device for data storage with safety certificate incorporating with system of wireless identification and digital certificate
CN101916476A (zh) * 2010-02-11 2010-12-15 江苏银邦信息技术有限公司 一种基于sd加密卡与近距离无线通信技术相结合的移动数据传输方法
CN102168509B (zh) * 2011-03-23 2013-12-25 袁磊 密码随日期进行变化的动态密码锁系统
TWM439229U (en) * 2012-05-11 2012-10-11 Shinsoft Co Ltd Security apparatus with mulitple safety controls and system using the same
US9087246B1 (en) * 2015-02-16 2015-07-21 Polaris Tech Global Limited RFID-to-bluetooth selective adapter

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1862948A1 (en) * 2006-06-01 2007-12-05 Axalto SA IC card with OTP client
CN101577917A (zh) * 2009-06-16 2009-11-11 深圳市星龙基电子技术有限公司 一种安全的基于手机的动态密码验证方法
CN102611551A (zh) * 2011-01-20 2012-07-25 深圳市文鼎创数据科技有限公司 物理认证方法、装置及动态口令牌
CN102737310A (zh) * 2011-04-02 2012-10-17 国民技术股份有限公司 一种基于非接触智能卡的支付系统及支付方法
WO2014062623A1 (en) * 2012-10-15 2014-04-24 Powered Card Solutions, Llc System and method for secure remote access and remote payment using a mobile device and a powered display card
CN103312519A (zh) * 2013-07-05 2013-09-18 飞天诚信科技股份有限公司 一种动态口令设备及其工作方法

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108183889A (zh) * 2017-12-15 2018-06-19 深圳市文鼎创数据科技有限公司 身份认证方法及身份认证装置
CN109639435A (zh) * 2018-12-26 2019-04-16 江苏恒宝智能系统技术有限公司 一种基于终端卡对app的认证方法及系统
CN111600828A (zh) * 2019-02-20 2020-08-28 中国电力科学研究院有限公司 一种通信组件
CN112214423A (zh) * 2020-10-11 2021-01-12 深圳市金玺智控技术有限公司 一种低成本控制装置、管控方法、管控系统以及存储介质

Also Published As

Publication number Publication date
TW201717125A (zh) 2017-05-16
CN107005575A (zh) 2017-08-01
TWI626607B (zh) 2018-06-11

Similar Documents

Publication Publication Date Title
TWI421777B (zh) 認證處理裝置及其相關行動裝置
KR101830952B1 (ko) Nfc 기반 결제를 위한 생체인식 인증 사용
CN105874494B (zh) 针对丢失的电子设备禁用移动支付
US10853802B2 (en) Data storage key for secure online transactions
KR101971329B1 (ko) 전자 디바이스 상의 크리덴셜의 프로비저닝 및 인증
TWI496025B (zh) 配件、配件介面系統及方法
TWI599189B (zh) 在一電子裝置上使用於驗證頻道上傳達的密碼之認證之佈建
US9647840B2 (en) Method for producing a soft token, computer program product and service computer system
WO2017076270A1 (zh) 一种具有动态令牌otp功能的智能卡及其工作方法
US10032162B2 (en) Multi-purpose data storage key
WO2013071711A1 (zh) 一种处理支付业务的方法和终端
CN107370601B (zh) 一种集成多种安全认证的智能终端、系统及方法
CN102938081A (zh) 智能卡个人化的数据处理方法、控制器及系统
JP2022503755A (ja) 非接触カードの暗号化認証のためのシステムおよび方法
WO2017020468A1 (zh) 应用于复合型智能卡设备的数据交互方法和装置
JP2023539633A (ja) 電話から電源カード、電話のＢｌｕｅｔｈｏｏｔｈ通信へのＮＦＣフィールドの使用
CN103596175A (zh) 一种基于近场通讯技术的移动智能终端认证系统及方法
TWI650715B (zh) 基於近場通信之支付系統及其方法
CN203746179U (zh) 一种移动安全金融终端
CN106886728A (zh) 一种智能卡的读取装置和方法
CN204463212U (zh) 交易认证卡及其远程交易认证系统
CN105405010B (zh) 交易装置、使用其的交易系统与交易方法
WO2017101584A1 (zh) 实现线上线下交易安全的设备和方法
KR101529040B1 (ko) 엔에프씨 인증카드를 이용한 인증장치와 방법
KR102172855B1 (ko) 사용자의 휴대형 매체를 이용한 매체 분리 기반 서버형 일회용코드 제공 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16861538

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 20.09.2018)

122 Ep: pct application non-entry in european phase

Ref document number: 16861538

Country of ref document: EP

Kind code of ref document: A1