WO2019174022A1 - 基于cn39码的交通智慧收费系统及方法 - Google Patents

基于cn39码的交通智慧收费系统及方法 Download PDF

Info

Publication number
WO2019174022A1
WO2019174022A1 PCT/CN2018/079222 CN2018079222W WO2019174022A1 WO 2019174022 A1 WO2019174022 A1 WO 2019174022A1 CN 2018079222 W CN2018079222 W CN 2018079222W WO 2019174022 A1 WO2019174022 A1 WO 2019174022A1
Authority
WO
WIPO (PCT)
Prior art keywords
code
data
unit
group
charging
Prior art date
Application number
PCT/CN2018/079222
Other languages
English (en)
French (fr)
Inventor
于志
Original Assignee
于志
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 于志 filed Critical 于志
Priority to PCT/CN2018/079222 priority Critical patent/WO2019174022A1/zh
Publication of WO2019174022A1 publication Critical patent/WO2019174022A1/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Definitions

  • the invention relates to the application of the commercial cryptography technology in the public transportation toll collection system, and is a digital password authentication method capable of ensuring non-repudiation of consumption, encrypting the mobile phone number to generate the CN39 code as the unique consumption identification code, and scanning the code once, once. While facilitating the consumer, it can identify in real time whether the consumption is effective and accurately generate the corresponding time and space, and record the movement track of the client.
  • Password is the most effective, reliable and economical way to solve network and information security. It is also the core technology and basic support for maintaining network and information security. At present, the development of commercial cryptography has made important breakthroughs, the standardization and standardization system has been gradually improved, the management system has been continuously improved, and the technological innovation capability has been significantly improved. It not only has the information encryption function to ensure the confidentiality of information, but also has the functions of digital signature, identity verification, system security and so on.
  • the object of the present invention is to provide a method for identifying and authenticating a CN39 code generated by encrypting a mobile phone number, which has both an explicit part and a password part; the CN39 code is used as the only consumer identification code.
  • the code changes once, ensuring the non-repudiation of the client (mobile phone) consumption.
  • Read the changed CN39 code on the smartphone record the movement track of the mobile phone, map out the change of the passenger's position, and charge the fare.
  • a traffic intelligent charging system based on CN39 code comprising:
  • (1) Data processing center Generate CN39 code data based on the mobile phone number, and generate CN39' code data correspondingly, including:
  • Program fragment processing unit It is used to extract CN39 from the data packet received by the charging terminal input and output unit, and divide it into three segments, and the 13-digit decimal number is allowed to allow only the CN39 code to pass.
  • Authentication unit used to decrypt the passed CN39 code data, verify that the CN39 code is correct or incorrect, pass the correct one, and give up if the error occurs;
  • the CN39 code used to pass the authentication unit authentication is re-encrypted to generate CN39', and the data is output.
  • the CN39 code data generated by receiving, storing and managing the mobile phone number can be downloaded by using a mobile phone or a mobile communication device;
  • Charging end used to record the transportation of the client equipment "ride” and the distance traveled by it, and carry out pricing and charging, including:
  • Reading device used to read the CN39 code of the client and upload it to the data processing center.
  • the device is installed on the vehicle or at the entrance and exit of the airport, dock, subway, railway station, etc.
  • Charge end program fragmentation processing unit for receiving CN39' data transmitted by the data processing center, performing fragmentation processing, allowing only the CN39' code to be allowed to pass.
  • Charging end authentication unit used to decrypt and pass the passed CN39' code data
  • the charging terminal control unit is used for recording the geographical location when the reading device reads the CN39 code, corresponding to the read CN39 code, mapping the corresponding time and space and the vehicle, confirming the movement track of the mobile phone, and calculating the corresponding path through the distance.
  • the price, and the price is recorded under the name of the mobile phone user, and the monthly fee is charged;
  • Toll input and output unit used to receive or send data
  • a CN39 code-based traffic smart charging method comprising the following steps:
  • the data processing center adds a decimal country code to the user's mobile phone number to make it a 13-digit decimal number as the first group of data;
  • the data processing center automatically generates a 13-digit decimal number that conforms to the serial number coding principle as the second group of data;
  • the data processing center obtains the first group of data and the second group of data each of which is 13 decimal digits to be processed;
  • the data processing center judges whether the second group of data conforms to the serial number coding principle, and if it is met, proceeds to the next step, and if not, performs an error prompt;
  • the data processing center encrypts the first group of data and the second group of data conforming to the serial number coding principle by a commercial cryptographic algorithm to generate a 13-digit decimal verification code, that is, a third group of data, the three groups
  • the data constitutes the CN39 code
  • the client downloads the corresponding N CN39 codes in the chronological order.
  • the corresponding reading device reads the CN39 code and uses them in sequence;
  • the reading device at the charging end reads the CN39 code, and transmits the CN39 code to the program fragment processing unit of the data processing center, and the unit performs fragmentation processing on the received CN39 code data;
  • the program fragment processing unit of the data processing center, CN39-313 extracts the 39-digit decimal number that constitutes the CN39 code from the received data packet according to the encoding rule of the CN39 code, and divides it into three segments, Segment 13-digit decimal number, that is, 52-bit binary number (52 bits);
  • the authentication unit of the data processing center decrypts and authenticates the CN39 code, transmits the correct CN39 code to the data encryption unit, encrypts and generates the CN39' code, and transmits it to the charging terminal, and gives up the wrong CN39 code, indicating that the authentication fails. ;
  • the program fragment processing unit of the charging end performs fragmentation processing on the received data CN39', and extracts a 39-digit decimal number constituting the CN39' code from the received data packet according to the encoding rule of the CN39' code, and Divided into three segments, the 13-digit decimal number, that is, 52-bit binary number (52bit);
  • the charging end program fragment processing unit transmits the CN39' to the charging end authentication unit, the charging end authentication unit decrypts the CN39', and the authentication result is "0", the CN39' data is transmitted to the charging unit of the charging end; otherwise, Do not transmit data, indicating that the authentication failed;
  • the control unit of the charging end processes the received CN39' data mapping process, and generates corresponding time and space, and then generates a travel record by time and space; when the passenger picks up the code again when the vehicle is disembarked, a drop-off record is generated, and the charging end records the client's record. Enter the vehicle record and get off the record, and automatically calculate the cost, generate the corresponding consumption record, and automatically deduct the total cost generated every month.
  • the charging end input/output unit sends a consumption bill to the user, and the client directly checks the consumption bill with the mobile phone number.
  • the CN39 code-based traffic smart charging method shown in the following is the serial number encoding principle of the second group of data: the 1-2 digit is a 2-digit category code, wherein the mobile phone number has a category number of 00, and the 3-4th digit
  • the 5th to 6th digits are the 2-digit month code
  • the 7th to 8th digits are the 2-digit date code
  • the 9th to 13th digits are the 5-digit serial number code, which is for each day.
  • the mobile phone number provides 100,000 CN39 codes, which are used in order.
  • the client divides the first group data, the second group data, and the third group data into three lines and stores them in the storage mode.
  • the storage method is the first group data and the second group.
  • the group data and the third group data are stored in three rows, upper and middle rows.
  • the illustrated CN39 code-based traffic smart charging method the client can automatically or manually download the N CN39 codes required for the day.
  • the CN39 code-based traffic smart charging method is shown, the reading device at the charging end reads the CN39 code, transmits the CN39 to the data processing center, and the data processing center verifies whether the CN39 code is zero or not, and determines whether the CN39 code is legal or not. , illegal warnings are given and recorded.
  • the illustrated CN39 code-based traffic smart charging method after receiving the CN39' data transmitted by the charging end program fragment processing unit, the charging end authentication unit decrypts the verification code through the cryptographic algorithm, and authenticates whether the CN39' code is correct.
  • the technical improvement of the object of the present invention is to provide a method for identifying and authenticating a CN39 code generated by encrypting a mobile phone number, which has both an explicit part and a password part; the CN39 code is used as a unique consumption identification code, and the scan code changes once. Ensure the non-repudiation of the client (mobile phone) consumption. Read the changed CN39 code on the smartphone, record the movement track of the mobile phone, map out the change of the passenger's position, and charge the fare.
  • Figure 1 is a schematic diagram of the CN39 code
  • FIG. 2 is a schematic block diagram showing a flow of generating a CN39 code
  • Figure 3 is a schematic block diagram of the authentication process of the CN39 code
  • Figure 5 is a schematic block diagram of the data flow of the CN39 code
  • Figure 6 is a schematic diagram of a program fragment processing unit
  • Figure 7 is a schematic diagram of an authentication unit
  • Figure 8 is a schematic diagram of a data encryption unit
  • FIG. 9 is a schematic diagram of a charging terminal control unit
  • Figure 10 is a system architecture diagram.
  • the timing code of the client CN39 code shows the time characteristic of the passenger
  • the reading device of the vehicle reads the CN39 code, and can record the passenger's riding location and board the vehicle.
  • the charging end records the movement track of the client and automatically calculates the generated fee.
  • the mobile phone number owner pays the required fee to the owner of the vehicle, and can choose the monthly or pre-stored fee. .
  • Passengers only need to use a mobile phone to travel around the country to avoid a charging terminal in one place. Different charging terminals use different cards.
  • the invention adds a serial number code and a verification code on the basis of the client mobile phone number.
  • the serial number code uniquely identifies the second set of data, and the user can use up to 100,000 CN39 codes per day, which can fully meet the consumption needs of one day.
  • the verification code is generated by the first group of data and the second group of data, and is encrypted by a commercial cryptographic algorithm. After the cryptographic algorithm encrypts and obtains the verification code, the first group of data and the second group of data can be obtained by the commercial cryptographic algorithm to obtain the verification.
  • the purpose. CN39 code can identify the consumption behavior of each time in the world. The probability that CN39 code is guessed is one tenth of a trillion, so the probability of tampering and counterfeiting of client CN39 code is also one tenth of a trillion, further Ensure the non-repudiation of consumption.
  • the verification code is a 13-bit decimal number generated by encrypting the first set of data and the second set of data by a commercial cryptographic algorithm, which is unique and random.
  • the CN39 code is obtained by dividing the above three groups of data into, upper and middle.
  • the CN39 code identifies each consumption behavior in the world, and can verify and verify the authenticity by the commercial cryptographic algorithm to achieve the purpose of protecting the security of the CN39 code.
  • the CN39 code manufactured according to the above steps has the following advantages:
  • the CN39 code is composed of two sets of plaintext and a set of ciphertext.
  • the security reliability of the CN39 code is based on the confidentiality and secret key of the cryptographic algorithm. Therefore, the disclosure of ciphertext does not affect the security of the cryptographic algorithm. The possibility of deciphering the cryptographic algorithm is considered to be absent here.
  • the CN39 code consists of 39 decimal digits, and its variation is 10 39 ; the CN39 code consists of three sets of 13-digit decimal numbers, of which the first group and the second group are plaintext, and the third group is the verification code, that is, the ciphertext. . Therefore, the probability that the CN39 code is guessed is one in ten trillions. Obviously this is a small probability event, and even if the guess is successful, it will not pose a threat to the user's other CN39 code.
  • the CN39 code establishes a three-party (data processing center, client, and charging end) guarantee mechanism; the data processing center has a cryptographic algorithm and a key, and the center receives the CN39 code, and verifies the authenticity through the authentication unit, and if the verification passes, the information is transmitted. Otherwise give up.
  • the data processing center monitors the CN39 code in real time. If an IP continues to send a large number of CN39 codes, even if the authentication is passed, the CN39 code corresponding to the mobile phone number will be blocked in the data processing, and the information transmission will be blocked to ensure that the charging terminal receives a reliable CN39. 'code.
  • the security of the CN39 code lies in the fact that there are both plain text and ciphertext, and the probability of being guessed is one in ten trillion.
  • the CN39 code is one code, one secret, one secret and one secret.
  • the basic principle of information confidentiality is that the details of the public algorithm do not fundamentally affect the security of the algorithm, that is, the security depends on the key. In this scheme, even if it is publicized The ciphertext will not affect the security of the CN39 code.
  • the client corresponds to the CN39 code of the mobile phone, and the data processing center filters out the malicious request to ensure that the CN39 code is safe and reliable.
  • the charging end ensures that the CN39' code is safe and reliable, and the three parties guarantee the safety of the user to take the vehicle consumption, reducing unnecessary Loss.
  • CN39' is a network product that reflects CN39's security and credibility.
  • CN39' embodies the computational model of active immunity, which combines computation and protection. It uses the password as the gene to implement functions such as identification, status measurement, and secure storage. Under the premise of CN39 authentication and zeroing, the secondary encryption operation based on SM4 algorithm is carried out, and with the help of the program fragment processing unit, the "self” and “non-self” components are identified in time, which is non-repudiation in the measurable process. Rejecting harmful substances into the body is equivalent to cultivating immunity to the toll terminal and ensuring the security of the database at the toll end.
  • SM4 is mainly to ensure the security of keys based on the security of engineering implementation.
  • the CN39 and CN39' keys have no correlation and exist independently of each other.
  • the probability of CN39 being guessed is one tenth of a trillion, and in view of the characteristics of one time and one secret, CN39 and CN39' are effectively guaranteed to be safe. Letter.
  • Establish a data processing center including a program fragmentation processing unit, an authentication unit, and a data encryption unit.
  • the data processing center has functions of encryption, decryption, encoding, decoding, network transmission, data query, data comparison, etc., and has a mobile phone number database, a CN39 code database, a commercial password database, etc., and a commercial password database is used for managing keys and commercial passwords. Algorithms to ensure the security of keys and algorithms.
  • the program fragment processing unit performs program fragmentation processing on the received CN39 code, divides it into three groups of data codes, and transmits the data to the authentication unit, and the authentication unit decrypts it by using a commercial cryptographic algorithm to verify the legality of the CN39 code, such as legality.
  • the data encryption unit receives the CN39 code passed by the authentication unit and then encrypts and generates the CN39' to be transmitted to the charging terminal.
  • the traffic smart charging system based on CN39 code can be divided into:
  • the CN39 code is composed of the first group data, the second group data and the verification code of the user, and is composed of the lower, upper and middle groups of codes.
  • the data processing center collects the user's mobile phone number, serial number code, and initializes the database.
  • Reading code The CN39 code is transmitted to the program fragment processing unit of the data processing center via the mobile network.
  • the program fragment processing unit decodes the CN39 code and converts it into three sets of 13-bit decimal numbers. Store the verification code in the password database.
  • the authentication unit of the data processing center decrypts the verification code by the commercial cryptographic algorithm, and generates two sets of 13-digit decimal numbers, that is, digital authentication and clear codes.
  • the authentication unit of the data processing center compares the digital authentication clear code with the first set of data and the serial number of the user in the initial database.
  • the center encodes the mobile phone number and serial number of the client, converts it into two sets of 13-digit decimal data, and then encrypts and generates a set of 13-digit decimal data, and the three sets of data are stored in the CN39 code database.
  • the CN39 code is transmitted to the program fragment processing unit for processing the program fragmentation, and is divided into three groups of data codes and then transmitted to the authentication unit.
  • the authentication unit decrypts the verification code to generate the first group of data and the second group of data and two sets of decimal data.
  • the digital certificate clear code database is compared with the initialization database, and the information is determined according to the result.
  • the client sends the CN39 code to the program fragmentation processing unit.
  • CN39-313 performs program fragmentation on the data and divides it into 3 segments, each segment of 13 decimal digits, 52 bits.
  • the authentication unit performs decryption operations on the three sets of data.
  • the authentication unit transmits the correct CN39 code to the data encryption unit.
  • the data encryption unit encrypts the CN39 to generate the CN39' code and transmits it to the charging end.
  • the debris processing and certification of CN39' at the toll end is the same as CN39. If the authentication result is "0", the CN39' is transmitted to the control unit of the charging end; otherwise, the data is not transmitted, indicating that the authentication has failed.
  • the control unit of the charging end records the loading and receiving records of the client for the received CN39' data mapping process, and automatically calculates the cost thereof to generate a corresponding consumption record;
  • the control unit sends a consumer bill to the user through the input and output unit.
  • a system architecture diagram of a CN39 code-based traffic intelligent charging system and method comprising a client, a data processing center (including a program fragment processing unit, an authentication unit, a data encryption unit), a charging terminal (including a reading device, a program fragment processing unit, Authentication unit, control unit, etc.
  • the whole operation process is basically as follows: First, according to the client download and store CN39 code, the reading device reads and transmits the CN39 code to the data processing center, and the program fragment processing unit performs program fragmentation processing on the data, and divides the data into three groups of data.
  • the code, the authentication unit verifies the authenticity of the CN39 code, and if the verification passes, the data is transmitted to the data encryption unit, otherwise it is discarded, and the data encryption unit receives the CN39 code passed by the authentication unit and then encrypts and generates the CN39' code, and the CN39 'The code is passed to the charging end.
  • the program fragment processing unit and the authentication unit at the charging end sequentially perform fragmentation processing and decryption authentication on the received CN39' code, and the authentication is passed to the control unit.
  • the control unit records the data of the CN39' data received by the control unit, records the loading and exiting records of the client, and automatically calculates the cost, and generates a corresponding consumption record.
  • the corresponding data flow chart is: client (CN39 code) ⁇ data processing center program fragment processing unit ⁇ data processing center authentication unit (authentication transmission, decryption operation on CN39 code, the result of verification is “0”, then transmit” 1" then abandon) ⁇ Data Processing Center Data Encryption Unit (convert CN39 code to CN39') ⁇ Toll end program fragment processing unit ⁇ Toll end authentication unit ⁇ Toll end control unit (for received CN39' data mapping processing, automatic Calculate the cost and generate a consumption record).
  • the client uses the CN39 code corresponding to the day according to the mobile number 13612202293:
  • the second set of data 0018010100000
  • the first set of data 6913612202293;
  • the last five digits of the second set of data represent the serial number code, indicating that the first few daily consumption requests, up to 100,000 rides per day, if the demand exceeds 100,000, re-circulate in order from the beginning.
  • the CN39 code corresponding to the 100000th phone is:
  • the second set of data 0018010199999
  • the first set of data 6913612202293 ;
  • the reading device reads a data packet containing the CN39 code (001801010000058177969361426913612202293) and sends it to the data processing center program fragment processing unit;
  • the program fragment processing unit will extract the CN39 code (001801010000058177969361426913612202293) of 39 decimal digits, which is divided into three segments:
  • the three sets of data codes are transmitted to the data processing center authentication unit, and the authentication unit performs a decryption operation on the decryption result, and the decryption result is "0" to continue the data transmission to the data processing center data encryption unit;
  • the data encryption unit transmits the CN39 code to generate the CN39' code and transmits it to the charging end;
  • the program fragment processing unit and the authentication unit at the charging end sequentially perform fragmentation processing and decryption authentication on the received CN39' code, and the authentication is passed to the control unit.
  • the control unit records the data of the CN39' data received by the control unit, records the loading and exiting records of the client, and automatically calculates the cost, and generates a corresponding consumption record.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Finance (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Devices For Checking Fares Or Tickets At Control Points (AREA)

Abstract

一种基于CN39码的交通智慧收费系统，所述系统包括：由识读设备、收费系统控制单元、收费系统碎片处理单元、收费系统认证单元及收费系统输入输出单元组成的收费系统，用户手机，由程序碎片处理单元、认证单元及数据处理单元组成的数据处理中心。本发明提供了一种对手机号码加密生成的CN39码进行识别以及认证的方法，既有明示部分，又有密码部分；CN39码作为唯一的消费识别码，扫码一次变化一次，通过识别手机号码自动加密生成，确保了手机支付的安全性。

Description

基于CN39码的交通智慧收费系统及方法 技术领域
本发明涉及商用密码技术在公共交通收费系统中的应用，是一种能确保消费不可抵赖性的数字密码认证方法，把手机号码加密生成CN39码作为唯一的消费识别码，扫码一次变化一次，在方便消费者的同时可以实时识别消费是否有效并精准产生相对应的时空，并记录客户端移动轨迹。
 背景技术
随着互联网的发展，智能手机方便了大家的生活，现在大家出门，几乎不用带现金，带上手机便可以就可以解决日常支付问题。但是乘坐交通工具，付款限制比较多，到了一个地方需购买当地乘车卡或者排队现场购买车票，非常不方便，并且现金投币还可能会使交通公司收到假币。现在虽然部分交通工具支持手机支付，但是对于手机限制也比较多，比如必须支持Applepay或者NFC。扫码支付虽然也很方便，但是被别人盗取的可能性也比较大，因为现在的一些软件虽然已经和手机号绑定，但是通过获取一次验证码也可以在其他手机上登录，加大了支付的不安全性。
 技术问题
密码是解决网络与信息安全最有效、最可靠、最经济的方式，也是维护网络与信息安全的核心技术和基础支撑。目前，商用密码技术的发展取得了重要突破，标准规范体系逐步健全，管理体系不断完善，科技创新能力显著提高。它不仅具有保证信息机密性的信息加密功能，而且具有数字签名、身份验证、系统安全等功能。
 技术解决方案
本发明目的是针对以上现有技术的不足，提供一种对手机号码加密生成的CN39码进行识别以及认证的方法，既有明示部分，又有密码部分；CN39码作为唯一的消费识别码，扫码一次变化一次，确保了客户端（手机）消费的不可抵赖性。识读智能手机上变化的CN39码，记录手机的移动轨迹，映射出乘车人的位置变化，收费端计价收费。
本发明目的可通过以下技术方案实现：
一种基于CN39码的交通智慧收费系统，所述系统包括：
（1）数据处理中心：基于手机号生成CN39码数据，并相应产生CN39’码数据，包括:
程序碎片处理单元：用于从收费端输入输出单元接收到的数据包中提取CN39,并将其分为三段，毎段13位十进制数，允许仅允许CN39码通过。
认证单元：用于对通过的CN39码数据进行解密运算，认证CN39码正确或错误，正确则通过，错误则放弃；
数据加密单元：用于将认证单元认证通过的CN39码再加密生成CN39’，并输出数据。
（2）客户端：用于接收、存储、管理该手机号所产生的CN39码数据，可使用手机或移动通讯设备下载；
（3）收费端：用于记录客户端设备“乘坐”的交通工具和其所经过的路程，并进行计价和收费，包括:
识读设备：用于读取客户端的CN39码并上传至数据处理中心，该设备安装在交通工具上或者机场、码头、地铁、火车站等出入口位置；
收费端程序碎片处理单元：用于接收由数据处理中心传送的CN39’数据，进行碎片处理，允许仅允许CN39’码通过。
收费端认证单元：用于对通过的CN39’码数据解密，并认证；
收费端控制单元：用于记录识读设备读取CN39码时的地理位置，与读取的CN39码相对应，映射出相应的时空和交通工具，确认手机的移动轨迹，通过路程计算出相应的价格，并将价格记录到手机使用者名下，按月统计收费；
收费端输入输出单元：用于接收或发送数据；
一种基于CN39码的交通智慧收费方法，其所述方法包括以下步骤：
   （1）、数据处理中心在用户的手机号前加十进制的国别代码，使其成为13位十进制数，作为第一组数据；
（2）、数据处理中心自动生成符合流水号编码原则的13位十进制数，作为第二组数据；  
（3）、数据处理中心获取待处理的各为13位十进制的第一组数据及第二组数据；
   （4）、数据处理中心判断第二组数据是否符合流水号编码原则，若符合则进行下一步，若不符合则进行错误提示；
（5）、数据处理中心将上述第一组数据和符合流水号编码原则的第二组数据，通过商用密码算法加密运算，产生一个13位的十进制验证码，即第三组数据，该三组数据组成CN39码；
（6）、客户端按时间顺序下载当天对应的N个CN39码，乘坐交通工具时，相应的识读设备识读CN39码，依次使用；
（7）、收费端的识读设备识读CN39码，将CN39码传送到数据处理中心的程序碎片处理单元，该单元对接收到的CN39码数据进行碎片化处理；
（8）、数据处理中心的程序碎片处理单元，即CN39-313，依据CN39码的编码规则从接收到的数据包中提取组成CN39码的39位十进制数，并将其分为三段，毎段13位十进制数，即52位二进制数(52bit)；
（9）、数据处理中心的认证单元解密并认证CN39码，将正确的CN39码传到数据加密单元，再加密产生CN39’码，并传送到收费端，将错误的CN39码放弃，提示认证失败；
（10）、收费端的程序碎片处理单元对接收到的数据CN39’进行碎片化处理，依据CN39’码的编码规则从接收到的数据包中提取组成CN39’码的39位十进制数，并将其分为三段，毎段13位十进制数，即52位二进制数(52bit)；
（11）、收费端程序碎片处理单元将CN39’传输到收费端认证单元，收费端认证单元对CN39’解密认证，认证结果为＂0＂则将CN39’数据传输到收费端的控制单元；否则，不传送数据，提示认证失败；
（12）、收费端的控制单元对接收到的CN39’数据映射处理，产生相应的时空，由时空再产生乘车记录；下车时乘客再次扫码，则产生下车记录，收费端记录客户端的上车记录及下车记录，并自动计算其费用，产生对应的消费记录，每月自动扣除所产生的总费用。     
（13）、收费端输入输出单元向用户发送消费账单，客户端用手机号直接查阅消费账单。
所示的基于CN39码的交通智慧收费方法，其第2组数据的流水号编码原则是：第1-2位为2位的类别代码，其中手机号码的类别号为00，第3-4位为2位的年份代码，第5-6位为2位的月份代码，第7-8位为2位的日期代码，第9-13位为5位的该日流水号代码,每天针对每个手机号提供100000个CN39码，按照顺序依次使用。
所示的基于CN39码的交通智慧收费方法，其客户端将第1组数据、第2组数据及第3组数据分为三行后给予存储，其存储方式为，第1组数据、第2组数据及第3组数据分下、上、中三行存储。
所示的基于CN39码的交通智慧收费方法，其客户端可自动或手动下载当天所需的N个CN39码。
所示的基于CN39码的交通智慧收费方法，其收费端的识读设备识读CN39码，将CN39传输到数据处理中心，数据处理中心认证CN39码是否归零，判断CN39码是否合法，合法的通过，不合法的给予警告提示并记录。
所示的基于CN39码的交通智慧收费方法，其收费端认证单元在收到收费端程序碎片处理单元传输过来的CN39’数据后，通过密码算法对其中的验证码解密运算，认证CN39’码是否正确。
 有益效果
本发明目的技术进步在于，提供一种对手机号码加密生成的CN39码进行识别以及认证的方法，既有明示部分，又有密码部分；CN39码作为唯一的消费识别码，扫码一次变化一次，确保了客户端（手机）消费的不可抵赖性。识读智能手机上变化的CN39码，记录手机的移动轨迹，映射出乘车人的位置变化，收费端计价收费。
 附图说明
图1为CN39码示意图；
图2为CN39码的产生流程示意框图；
图3为CN39码的认证流程示意框图；
图4为CN39码的比对流程示意框图；
图5为CN39码的数据流程示意框图；
图6为程序碎片处理单元示意图；
图7为认证单元示意图；
图8为数据加密单元示意图；
图9为收费端控制单元示意图；
图10为系统体系架构图。
 本发明的实施方式
所述的基于CN39码的交通智慧收费系统及方法，客户端CN39码的时序码显示了乘客的时间特征，交通工具的识读设备读取CN39码，又可以记录乘客的乘车地点，上车时识读一次CN39码下车时再识读一次CN39码，收费端记录客户端的移动轨迹并自动计算产生费用，手机号码归属人向交通工具归属人支付所需费用，可以选择月结或者预存费用。乘客只要一部手机走遍全国各地，避免一个地方一个收费端，不同收费端要用不同的卡。
本发明是在客户端手机号码的基础上，又增加了流水号编码和验证码。流水号编码唯一标识第二组数据，用户每日可用的CN39码多达100000个，完全可以满足一天的消费需要。同时，验证码是由第一组数据和第二组数据，通过商用密码算法加密产生，密码算法加密得到验证码后，通过商用密码算法解密可得到第一组数据和第二组数据，达到验证之目的。CN39码可在世界范围内，标识每次的消费行为，CN39码被猜测到的概率是十万亿分之一，故客户端CN39码被篡改和假冒的概率也是十万亿分之一，进一步确保消费的不可抵赖性。
结合附图和实施方法对本发明做进一步的详细说明：
一、验证码
验证码是通过商用密码算法将第一组数据和第二组数据加密产生的13位的十进制数，是唯一的，随机的。
将上述三组数据分下、上、中排列即得CN39码，CN39码在世界范围内标识每一次消费行为，且可通过商用密码算法加、解密验证真伪，达到保护CN39码安全的目的。
二、按上述步骤制造成的CN39码具有以下优点：
CN39码是由两组明文和一组密文组成，CN39码的安全可靠性建立在密码算法的保密性和保密的密钥基础之上，所以，公开密文不会影响密码算法的安全性。破译密码算法的可能性在此视为不存在。
CN39码由39位十进制数组成，它的变化量是10 39个；CN39码有三组13位的十进制数组成，其中第1组及第2组是明文，第3组是验证码，即密文。所以，CN39码被猜测到的概率是十万亿分之一 ，很显然这是一个小概率事件，且即使猜测成功，它不会对用户其他的CN39码构成威胁。
三、CN39码的应用
CN39码建立三方（数据处理中心、客户端、收费端）保障机制；数据处理中心拥有密码算法和密钥，该中心接收CN39码，通过认证单元验证真伪，如验证通过，则将该信息传递，否则放弃。数据处理中心实时监控CN39码，若某个IP持续大量发送CN39码，即使认证通过，数据处理中也会屏蔽该手机号对应的CN39码，阻断信息的发送，保障收费端收到可靠的CN39’码。
1、CN39码安全性在于，既有明文，又有密文，被猜到的概率为十万亿分之一。CN39码是一码一密、一次一密，信息保密的一个基本原则是公开算法的细节不会从根本上影响算法的安全性，即保密依赖于密钥，在这种方案中，即使公开了密文，也不会影响CN39码的安全性。
2、客户端与该手机的CN39码相对应，数据处理中心过滤掉恶意请求，保证CN39码安全可靠，收费端保证CN39’码安全可靠，三方保障用户乘坐交通工具消费的安全性，减少不必要的损失。
四、CN39'码的应用。
CN39'是体现CN39安全可信的网络产物。
CN39'体现了运算和防护并存的主动免疫的计算模式，以密码为基因，实施身份识别、状态度量、保密存储等功能。在CN39认证归零的前提下，进行基于SM4算法的二次加密操作，并在程序碎片处理单元的协助下，及时识别“自己”和“非己”成份，在可测过程中具有不可抵赖性，排斥进入机体的有害物质，相当于为收费端培育了免疫能力，保障了收费端数据库的安全性。
 SM4作为商密算法，在工程实施的安全基础上，主要是确保密钥的安全。而CN39和CN39'密钥没有任何关联性，彼此独立存在的，CN39被猜到的概率是十万亿分之一，且鉴于一次一密的特性，有效地保障了CN39和CN39'是安全可信的。
五、建立数据处理中心，其中包括程序碎片处理单元、认证单元、数据加密单元。
数据处理中心有加密、解密、编码、解码、网络传输、数据查询、数据比对等功能，建有手机号码数据库、CN39码数据库、商用密码数据库等，商用密码数据库用于管理密钥和商用密码算法，确保密钥和算法的安全。程序碎片处理单元对接收到的CN39码进行程序碎片处理，将其分为3组数据码，传输给认证单元，认证单元用商用密码算法对其解密，验证该CN39码的合法性，如合法，产生第一组数据、流水号码，将此第一组数据、流水号码与初始数据库中的第一组数据和第二组数据比对，比对通过则验证通过，将该信息传输，否则则放弃。数据加密单元接收到认证单元认证通过的CN39码之后再加密产生CN39’传递到收费端。
基于CN39码的交通智慧收费系统可分为：
１、申请密码算法：
按照《商用密码管理条例》规定审批所需要的商用密码算法，如杂凑算法、随机数生成算法。
2、CN39码，如图1所示 ：
CN39码由用户的第一组数据、第二组数据、验证码组成，由下、上、中三组编码组成。
3、CN39码的产生，如图2所示 ：
（1）初始化：数据处理中心收集用户的手机号码、流水号编码，初始化数据库。
（2）加密：用密码算法对该数据库数据进行加密，生成13位十进制数的验证码，存入相应的密码数据库。
（3）编码：将用户的第一组数据、第二组数据、验证码分成三组13位十进制数，存入CN39码数据库。
4、 CN39码的识别，如图3所示 ：
（1）读码：CN39码经过移动网络传输至数据处理中心的程序碎片处理单元。
（2）解码：程序碎片处理单元将CN39码解码，转换为三组13位十进制数。将验证码存入密码数据库。
（3）解密：数据处理中心的认证单元用商用密码算法对验证码解密，产生二组13位十进制数，即数字认证明码。
5、 CN39码的比对，如图4所示 ：
（1）数据处理中心的认证单元将该数字认证明码与初始数据库中该用户的第一组数据、流水号码比对。
（2）比对结果反馈，一致则验证通过，信息被传输，不一致则放弃传输。
6、 CN39码的数据流程图，如图5所示：
（1）建立数据处理中心，具有加密、解密、编码、解码、网络传输、数据查询、数据比对等功能。
（2）该中心对客户端的手机号码、流水号编码，转换成二组13位十进制的数据，再加密产生一组13位十进制的数据，三组数据存入CN39码数据库。CN39码传至程序碎片处理单元，进行程序碎片处理，将其分为3组数据码再传送给认证单元，认证单元对验证码解密产生第一组数据和第二组数据二组十进制数据，存入数字认证明码数据库。数字认证明码数据库与初始化数据库比对，根据结果决定信息是否传输。
7、程序碎片处理单元，如图6所示：
（1）客户端将CN39码发送至程序碎片处理单元。
（2）CN39-313对数据进行程序碎片处理，将其分为3段，每段13位十进制数、52bit。
8、先认证后传输，如图7所示：
（1）认证单元对三组数据进行解密运算。
（2）验算结果为“0”则传输；为“1”则放弃。
9、数据加密单元，如图8所示：
（1）认证单元将正确的CN39码传到数据加密单元。
（2）数据加密单元将CN39加密产生CN39’码，并传送到收费端。
10、CN39’的处理
收费端对CN39’的碎片处理及认证同CN39。认证结果为＂0＂，则将CN39’传输到收费端的控制单元；否则，不传送数据，提示认证失败。
11、收费端控制单元，如图9所示：
（1）收费端的控制单元对于接收到的CN39’数据映射处理，记录客户端的上车记录及下车记录，并自动计算其费用，产生对应的消费记录；
（2）控制单元通过输入输出单元向用户发送消费账单。
12.系统体系架构图如图10所示：
基于CN39码的交通智慧收费系统及方法的系统架构图，由客户端、数据处理中心（包括程序碎片处理单元、认证单元、数据加密单元）、收费端（包括识读设备、程序碎片处理单元、认证单元、控制单元）等构成。整个运作流程基本如下：首先，根据客户端下载并存储CN39码，识读设备读取并将CN39码传送给数据处理中心，程序碎片处理单元对数据进行程序碎片处理，将其分为3组数据码，认证单元验证CN39码真伪，如验证通过，则将数据传送到数据加密单元，否则则放弃，数据加密单元接收到认证单元认证通过的CN39码之后再加密产生CN39’码，并将CN39’码传递到收费端。收费端的程序碎片处理单元及认证单元依次对接收到的CN39’码进行碎片处理以及解密认证，认证通过，则传递给控制单元。控制单元对接收到的CN39’数据映射处理，记录客户端的上车记录及下车记录，并自动计算其费用，产生对应的消费记录。
相对应的数据流程图为：客户端（CN39码）→数据处理中心程序碎片处理单元→数据处理中心认证单元（认证传输，对CN39码进行解密运算，验算结果为“0”则传输，为“1”则放弃）→数据处理中心数据加密单元（将CN39码转化成CN39’）→收费端程序碎片处理单元→收费端认证单元→收费端控制单元（对接收到的CN39’数据映射处理，自动计算费用，产生消费记录）。
具体实施例：
2018年01月01日，客户端依据手机号码13612202293使用该日对应的CN39码：
            第二组数据：0018010100000
验  证  码：5817796936142
第一组数据：6913612202293       ；
 
第二组数据中后五位代表的是流水号编码，表示每天第几个消费请求，一天乘车行为多达100000个，如果需求超过100000个，则从头开始按照顺序重新循环。第100000个电话对应的CN39码为：
第二组数据：0018010199999
验  证  码：5817796936142
第一组数据：6913612202293           ；
 
首先，识读设备读取包含CN39码(001801010000058177969361426913612202293)的数据包发送给数据处理中心程序碎片处理单元；
其次，程序碎片处理单元接受到收据包后，会相应的提取其中39位十进制数的CN39码（001801010000058177969361426913612202293），分为三段： 
0018010100000
5817796936142
6913612202293；
即各为13位十进制数的三组数据码；
再次，三组数据码传送给数据处理中心认证单元，认证单元对其进行解密运算，解密结果为＂0＂继续将数据传送到数据处理中心数据加密单元；
然后，数据加密单元将CN39码加密产生CN39’码传递到收费端；
最后，收费端的程序碎片处理单元及认证单元依次对接收到的CN39’码进行碎片处理以及解密认证，认证通过，则传递给控制单元。控制单元对接收到的CN39’数据映射处理，记录客户端的上车记录及下车记录，并自动计算其费用，产生对应的消费记录。

Claims (7)

  1. 基于CN39码的交通智慧收费系统，其特征在于，所述系统包括：
    （1）数据处理中心：基于手机号生成CN39码数据，并相应产生CN39’码数据，包括:
    程序碎片处理单元：用于从收费端输入输出单元接收到的数据包中提取CN39,并将其分为三段，毎段13位十进制数，允许仅允许CN39码通过;
    认证单元：用于对通过的CN39码数据进行解密运算，认证CN39码正确或错误，正确则通过，错误则放弃；
    数据加密单元：用于将认证单元认证通过的CN39码再加密生成CN39’，并输出数据;
    （2）客户端：用于接收、存储、管理该手机号所产生的CN39码数据，可使用手机或移动通讯设备下载；
    （3）收费端：用于记录客户端设备“乘坐”的交通工具和其所经过的路程，并进行计价和收费，包括:
    识读设备：用于读取客户端的CN39码并上传至数据处理中心，该设备安装在交通工具上或者机场、码头、地铁、火车站等出入口位置；
    收费端程序碎片处理单元：用于接收由数据处理中心传送的CN39’数据，进行碎片处理，允许仅允许CN39’码通过;
    收费端认证单元：用于对通过的CN39’码数据解密，并认证；
    收费端控制单元：用于记录识读设备读取CN39码时的地理位置，与读取的CN39码相对应，映射出相应的时空和交通工具，确认手机的移动轨迹，通过路程计算出相应的价格，并将价格记录到手机使用者名下，按月统计收费；
    收费端输入输出单元：用于接收或发送数据。
  2. 基于CN39码的交通智慧收费方法，其特征在于，所述方法包括以下步骤：
       （1）、数据处理中心在用户的手机号前加十进制的国别代码，使其成为13位十进制数，作为第一组数据；
    （2）、数据处理中心自动生成符合流水号编码原则的13位十进制数，作为第二组数据；  
    （3）、数据处理中心获取待处理的各为13位十进制的第一组数据及第二组数据；
       （4）、数据处理中心判断第二组数据是否符合流水号编码原则，若符合则进行下一步，若不符合则进行错误提示；
    （5）、数据处理中心将上述第一组数据和符合流水号编码原则的第二组数据，通过商用密码算法加密运算，产生一个13位的十进制验证码，即第三组数据，该三组数据组成CN39码；
    （6）、客户端按时间顺序下载当天对应的N个CN39码，乘坐交通工具时，相应的识读设备识读CN39码，依次使用；
    （7）、收费端的识读设备识读CN39码，将CN39码传送到数据处理中心的程序碎片处理单元，该单元对接收到的CN39码数据进行碎片化处理；
    （8）、数据处理中心的程序碎片处理单元，即CN39-313，依据CN39码的编码规则从接收到的数据包中提取组成CN39码的39位十进制数，并将其分为三段，毎段13位十进制数，即52位二进制数(52bit)；
    （9）、数据处理中心的认证单元解密并认证CN39码，将正确的CN39码传到数据加密单元，再加密产生CN39’码，并传送到收费端，将错误的CN39码放弃，提示认证失败；
    （10）、收费端的程序碎片处理单元对接收到的数据CN39’进行碎片化处理，依据CN39’码的编码规则从接收到的数据包中提取组成CN39’码的39位十进制数，并将其分为三段，毎段13位十进制数，即52位二进制数(52bit)；
    （11）、收费端程序碎片处理单元将CN39’传输到收费端认证单元，收费端认证单元对CN39’解密认证，认证结果为＂0＂则将CN39’数据传输到收费端的控制单元；否则，不传送数据，提示认证失败；
    （12）、收费端的控制单元对接收到的CN39’数据映射处理，产生相应的时空，由时空再产生乘车记录；下车时乘客再次扫码，则产生下车记录，收费端记录客户端的上车记录及下车记录，并自动计算其费用，产生对应的消费记录，每月自动扣除所产生的总费用。     
    （13）、收费端输入输出单元向用户发送消费账单，客户端用手机号直接查阅消费账单。
  3. 根据权利要求2所示的基于CN39码的交通智慧收费方法，其特征在于，所述第2组数据的流水号编码原则是：第1-2位为2位的类别代码，其中手机号码的类别号为00，第3-4位为2位的年份代码，第5-6位为2位的月份代码，第7-8位为2位的日期代码，第9-13位为5位的该日流水号代码,每天针对每个手机号提供100000个CN39码，按照顺序依次使用。
  4. 根据权利要求2所示的基于CN39码的交通智慧收费方法，其特征在于，客户端将第1组数据、第2组数据及第3组数据分为三行后给予存储，其存储方式为，第1组数据、第2组数据及第3组数据分下、上、中三行存储。
  5. 根据权利要求2所示的基于CN39码的交通智慧收费方法，其特征在于，客户端可自动或手动下载当天所需的N个CN39码。
  6. 根据权利要求2所示的基于CN39码的交通智慧收费方法，其特征在于，收费端的识读设备识读CN39码，将CN39传输到数据处理中心，数据处理中心认证CN39码是否归零，判断CN39码是否合法，合法的通过，不合法的给予警告提示并记录。
  7. 根据权利要求2所示的基于CN39码的交通智慧收费方法，其特征在于，收费端认证单元在收到收费端程序碎片处理单元传输过来的CN39’数据后，通过密码算法对其中的验证码解密运算，认证CN39’码是否正确。
PCT/CN2018/079222 2018-03-16 2018-03-16 基于cn39码的交通智慧收费系统及方法 WO2019174022A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2018/079222 WO2019174022A1 (zh) 2018-03-16 2018-03-16 基于cn39码的交通智慧收费系统及方法

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2018/079222 WO2019174022A1 (zh) 2018-03-16 2018-03-16 基于cn39码的交通智慧收费系统及方法

Publications (1)

Publication Number Publication Date
WO2019174022A1 true WO2019174022A1 (zh) 2019-09-19

Family

ID=67908696

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/079222 WO2019174022A1 (zh) 2018-03-16 2018-03-16 基于cn39码的交通智慧收费系统及方法

Country Status (1)

Country Link
WO (1) WO2019174022A1 (zh)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101996422A (zh) * 2009-08-14 2011-03-30 事必达科技股份有限公司 计程车自动化电子旅次收据系统及其方法
CN103186928A (zh) * 2011-12-29 2013-07-03 冯林 基于手机的乘车分段收费方法和系统
CN103778675A (zh) * 2014-01-21 2014-05-07 齐鲁工业大学 一种公交车分段收费装置、收费方法、射频卡及读卡器
CN107133792A (zh) * 2017-04-20 2017-09-05 王�华 一种利用移动终端支付的地铁支付系统及支付方法
CN107333262A (zh) * 2017-08-03 2017-11-07 于志 一种基于cn39码认证手机号码的系统及方法

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101996422A (zh) * 2009-08-14 2011-03-30 事必达科技股份有限公司 计程车自动化电子旅次收据系统及其方法
CN103186928A (zh) * 2011-12-29 2013-07-03 冯林 基于手机的乘车分段收费方法和系统
CN103778675A (zh) * 2014-01-21 2014-05-07 齐鲁工业大学 一种公交车分段收费装置、收费方法、射频卡及读卡器
CN107133792A (zh) * 2017-04-20 2017-09-05 王�华 一种利用移动终端支付的地铁支付系统及支付方法
CN107333262A (zh) * 2017-08-03 2017-11-07 于志 一种基于cn39码认证手机号码的系统及方法

Similar Documents

Publication Publication Date Title
CN108270571B (zh) 基于区块链的物联网身份认证系统及其方法
CN100533456C (zh) 安全代码生成方法和使用方法及用于其的可编程设备
US7568616B2 (en) Authentication methods and apparatus for vehicle rentals and other applications
CN101300808B (zh) 安全认证的方法和设置
CN102880960B (zh) 基于指纹识别手机的短信支付方法及系统
CN105229965B (zh) 设备真伪判定系统以及设备真伪判定方法
CN100388306C (zh) 用于验证数字邮资标记的有效性的方法
CN101662469B (zh) 基于USBKey网上银行交易信息认证的方法和系统
CN101860525B (zh) 电子授权状实现方法、智能终端、授权系统及验证终端
US20090187980A1 (en) Method of authenticating, authorizing, encrypting and decrypting via mobile service
JP3902440B2 (ja) 暗号通信装置
CN1529876A (zh) 使用对称密钥安全算法的金融信息输入方法及用于移动通信的商业交易系统
US20120191977A1 (en) Secure transaction facilitator
US20070074027A1 (en) Methods of verifying, signing, encrypting, and decrypting data and file
CN105052072A (zh) 远程认证和业务签名
CN102769623B (zh) 基于数字证书和生物识别信息进行双重认证的方法
CN202854880U (zh) 基于指纹识别手机的短信支付系统
CN106850638B (zh) 一种车载设备访问控制方法及系统
CN112769758B (zh) 一种基于区块链的可信物联网燃气表及本地和云端的可信方法
CN104322003A (zh) 借助实时加密进行的密码认证和识别方法
CN101145233A (zh) 数据密押交易系统、柜员认证系统、跨中心交易系统及其方法
CN106027457A (zh) 一种身份证信息传输方法和系统
US8631475B1 (en) Ordering inputs for order dependent processing
CN102521777B (zh) 一种实现远程信贷的方法及系统
CN107609878A (zh) 一种共享汽车的安全认证方法及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18909827

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18909827

Country of ref document: EP

Kind code of ref document: A1