WO2022188033A1

WO2022188033A1 - Data uploading method, data downloading method and related device

Info

Publication number: WO2022188033A1
Application number: PCT/CN2021/079784
Authority: WO
Inventors: 杨世昭; 王雪平; 孙金龙
Original assignee: 深圳市汇顶科技股份有限公司
Priority date: 2021-03-09
Filing date: 2021-03-09
Publication date: 2022-09-15
Also published as: CN114026820A

Abstract

Provided in the embodiments of the present application are a data uploading method, a data downloading method and a related device. The data uploading method comprises: acquiring access control data to be uploaded; sending a PIN to a server in response to an input of a user, wherein the PIN is used for verifying whether the identity of the user is legitimate; receiving first confirmation information sent by the server, and creating a random factor, wherein the first confirmation information is used for confirming whether the verification for the identity of the user is successful; determining a first secret key on the basis of the PIN and the random factor, and encrypting, on the basis of the first secret key, the access control data to be uploaded so as to obtain first data ciphertext; and uploading the first data ciphertext and the random factor to the server. Therefore, secure transmission of data is realized.

Description

Data upload method, data download method and related equipment

technical field

The embodiments of the present application relate to the technical field of information security, and in particular, to a method for uploading data, a method for downloading data, and related equipment.

Background technique

At present, with the increasingly powerful functions of mobile phones, the application of access control cards in mobile phones is becoming more and more common. Most of the high-end mobile phones on the market have built-in functions for installing access control cards and copying access control cards.

However, the following problems are usually encountered in the process of copying the access control card in the mobile phone:

When migrating the access control card data from one mobile phone to another mobile phone, it may be intercepted by attackers, which may result in the disclosure of access control card information. The access card information can be used to open the access control, which may cause property damage and personal safety hazards of the enterprise, which is extremely dangerous.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a method for uploading data, a method for downloading data, and related equipment, so as to realize safe migration of access control card data.

In a first aspect, the embodiments of the present application provide a data uploading method, which is applied to an electronic device, including: acquiring access control data to be uploaded; and sending a PIN to a server in response to a user's input, wherein the PIN is used to verify the user's Whether the identity is legal; receive the first confirmation information sent by the server, and create a random factor S, the first confirmation information is used to confirm whether the user identity verification is successful; determine the first key based on the PIN and the random factor S K, encrypting the access control data to be uploaded based on the first key K to obtain a first data ciphertext; uploading the first data ciphertext and the random factor S to the server. Thus, the secure uploading of the access control card data is realized.

In the above data uploading method, in order to verify the identity of the user, a possible implementation manner is that, before the acquiring the access control data to be uploaded, the method further includes:

sending a user registration request to the server, wherein the user registration request is used to register a user identity on the server, and the user registration request includes the PIN;

Receive second confirmation information sent by the server, where the second confirmation information is used to confirm whether the user's registration is successful.

In order to establish a secure channel to improve the security of data transmission, a possible implementation manner is that the electronic device includes a signature public key, the server includes a signature private key and a second private key, and further includes:

Obtain a signed first certificate, wherein the signed first certificate is obtained after the server signs the first certificate with the signing private key, the first certificate is issued by the server, and the first certificate includes the first public key;

Create a random number RA, and send a secure channel establishment request to the server, wherein the secure channel establishment request includes the random number RA and the signed first certificate;

Receive a random number RB, a random number ciphertext CRA and a signed second certificate sent by the server, wherein the random number RB is created by the server, and the random number ciphertext CRA is used by the server with a second key Obtained after EK encryption, the second key EK is determined based on the random number RA, the random number RB, the first public key and the second private key;

Use the signature public key to perform identity verification on the signed second certificate, and if the identity verification is passed, obtain a second public key in the second certificate, wherein the second public key is the same as the first public key. The second private key is a pair of asymmetric public and private keys;

Obtain a first private key, and determine a second key EK based on the random number RA, the random number RB, the first private key and the second public key, wherein the first private key and the The first public key is a pair of asymmetric public and private keys;

Use the second key EK to decrypt the random number ciphertext CRA to obtain a random number RA';

If the random number RA is consistent with the random number RA' obtained by decryption, a secure channel is established with the server, and the second key EK is determined as the session key of the secure channel.

In order to ensure the security of data uploading, a possible implementation manner is that, encrypting the access control data to be uploaded based on the first key K, and obtaining the first data ciphertext includes:

Encrypting the access control data to be uploaded based on the first key K to obtain a second data ciphertext;

The second data ciphertext is encrypted by using the second key EK to obtain the first data ciphertext.

Calculate a digest value based on the random factor S, and determine an initial vector based on the digest value;

The access control data to be uploaded is encrypted based on the first key K and the initial vector to obtain a first data ciphertext.

In a second aspect, an embodiment of the present application provides a data download method, the method includes: sending a data acquisition request to a server, where the data acquisition request is used to acquire a first data ciphertext; encapsulating a data packet and a random factor S, wherein the encapsulating data packet includes the first data ciphertext; obtaining a PIN, and determining a first key K based on the PIN and the random factor S; based on the first ciphertext The key K decrypts the encapsulated data packet to obtain the plaintext of the access control data. Thus, the secure download of the access control card data is realized.

In the above data downloading method, in order to verify the legitimacy of the user's identity, a possible implementation manner is that the data acquisition request includes a PIN, and the PIN is used to verify whether the user's identity is legal.

In order to improve the security of data download, a possible implementation manner is that the receiving the encapsulated data packet sent by the server includes:

Obtain the second key EK;

receiving the encrypted encapsulated data packet sent by the server;

The encrypted encapsulated data packet is decrypted using the second key EK to obtain an encapsulated data packet.

In order to realize normal writing of data plaintext, a possible implementation manner is that the encapsulated data packet further includes executable instructions, and the encapsulated data packet is decrypted based on the first key K to obtain access control data The plaintext includes:

Obtain the first data ciphertext in the encapsulated data packet, decrypt the first data ciphertext based on the first key K, and obtain the access control data plaintext;

Obtain executable instructions in the encapsulated data package, and perform a write operation on the plaintext of the access control data based on the executable instructions.

In a third aspect, an embodiment of the present application provides a chip to implement the aforementioned data uploading method, which is applied to an electronic device, and the chip includes:

The acquisition module is used to acquire the access control data to be uploaded;

a sending module, configured to send a PIN to the server in response to the user's input, wherein the PIN is used to verify whether the user's identity is legal;

a receiving module, configured to receive the first confirmation information sent by the server, create a random factor S, and the first confirmation information is used to confirm whether the verification of the user identity is successful;

an encryption module, configured to determine a first key K based on the PIN and the random factor S, and encrypt the access control data to be uploaded based on the first key K to obtain a first data ciphertext;

An uploading module, configured to upload the first data ciphertext and the random factor S to the server.

In one possible implementation manner, the chip further includes:

a registration module, configured to send a user registration request to the server, wherein the user registration request is used to register a user identity on the server, and the user registration request includes the PIN; Confirmation information, wherein the second confirmation information is used to confirm whether the registration of the user is successful.

In one possible implementation manner, the electronic device includes a signature public key, the server includes a signature private key and a second private key, and the chip further includes:

a certificate obtaining module, configured to obtain a signed first certificate, wherein the signed first certificate is obtained after the server signs the first certificate with the signing private key, and the first certificate is issued by the server, the first certificate includes a first public key;

a channel establishment module, configured to create a random number RA, and send a secure channel establishment request to the server, wherein the secure channel establishment request includes the random number RA and the signed first certificate;

In one possible implementation manner, the encryption module is further configured to encrypt the access control data to be uploaded based on the first key K to obtain a second data ciphertext; use the second key EK to pair The second data ciphertext is encrypted to obtain the first data ciphertext.

In one possible implementation manner, the encryption module is further configured to calculate a digest value based on the random factor S, and determine an initial vector based on the digest value; The access control data to be uploaded is encrypted to obtain the first data ciphertext.

In a fourth aspect, the present application further provides a chip to implement the aforementioned data downloading method, which is applied to an electronic device, and the chip includes:

a request module, configured to send a data acquisition request to the server, wherein the data acquisition request is used to acquire the first data ciphertext;

a download module, configured to receive an encapsulated data packet and a random factor S sent by the server, wherein the encapsulated data packet includes the first data ciphertext;

an acquisition module, configured to acquire a PIN, and determine a first key K based on the PIN and the random factor S;

A decryption module, configured to decrypt the encapsulated data packet based on the first key K to obtain access control data plaintext.

In one possible implementation manner, the data acquisition request includes a PIN, and the PIN is used to verify whether the user's identity is legal.

In one possible implementation manner, the download module is further configured to obtain a second key EK; receive an encrypted packaged data packet sent by the server; Decrypt to get the encapsulated data packet.

In one possible implementation manner, the encapsulated data packet further includes executable instructions, and the decryption module is further configured to obtain the first data ciphertext in the encapsulated data packet, based on the first key K pair Decrypt the first data ciphertext to obtain access control data plaintext; obtain executable instructions in the encapsulated data packet, and perform a write operation on the access control data plaintext based on the executable instructions.

In a fifth aspect, an embodiment of the present application provides an electronic device, including: a memory, a processor, and a computer program stored on the memory and executable on the processor, when the processor executes the computer program, the electronic device A method as described in the first aspect or the second aspect is performed.

In a sixth aspect, embodiments of the present application provide a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when it runs on a computer, causes the computer to execute as described in the first aspect or the second aspect Methods.

In a seventh aspect, an embodiment of the present application provides a computer program, which is used to execute the method described in the first aspect or the second aspect when the computer program is executed by a computer.

In a possible design, the program in the seventh aspect may be stored in whole or in part on a storage medium packaged with the processor, or may be stored in part or in part in a memory not packaged with the processor.

Description of drawings

Fig. 1 is the schematic diagram of symmetric encryption technology;

Fig. 2 is the schematic diagram of asymmetric encryption technology;

FIG. 3 is a schematic diagram of an application scenario architecture provided by an embodiment of the present application;

4 is a schematic flowchart of a data uploading method and a data downloading method provided by an embodiment of the present application;

FIG. 5 is an encryption flowchart provided by an embodiment of the present application;

6 is a flowchart for establishing a secure channel provided by an embodiment of the present application;

FIG. 7 is a decryption flowchart provided by the embodiment of the present application;

8 and 9 are schematic structural diagrams of chips provided by embodiments of the present application;

FIG. 10 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

The following describes in detail the embodiments of the present application, examples of which are illustrated in the accompanying drawings, wherein the same or similar reference numerals refer to the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary, and are intended to be used to explain the technical solutions of the present application, but should not be construed as limitations on the present application.

The data uploading method and the data downloading method, the electronic device, and the computer-readable storage medium of the embodiments of the present application are described below with reference to the accompanying drawings.

In order to clearly describe the data uploading method and the data downloading method provided by the embodiments of the present application, the encryption technology will be described first.

In the process of data transmission from the sender to the receiver, the data transmission parties do not want the transmitted data to be acquired by a third party, and it is convenient to use encryption technology to encrypt the data.

In the encryption process, the data to be transmitted is called the original text, and the cipher text can be obtained by encrypting the original text, and the cipher text is usually in the form of garbled characters. If the ciphertext is transmitted on an open channel, even if a third party intercepts the information, only the ciphertext can be obtained, but the original text cannot be obtained.

The sender uses encryption technology to encrypt the original text and sends the ciphertext to the receiver. Correspondingly, after receiving the ciphertext, the receiver needs to decrypt the ciphertext to restore the ciphertext to the original text, thereby realizing encrypted transmission of data from the sender to the receiver.

Encryption technology includes two important factors: encryption algorithm and key. The encryption algorithm calculates the original text and the key to obtain the ciphertext.

In the related art, encryption technology can be divided into two categories, one is symmetric encryption technology, and the other is asymmetric encryption technology.

FIG. 1 is a schematic diagram of symmetric encryption technology. As shown in Figure 1, in symmetric encryption technology, the same key is used for data encryption and decryption, that is, the sender uses the same key when encrypting and the receiver uses the same key when decrypting. Once the key is known to a third party, the intercepted ciphertext can be decrypted using the key, and the encryption technology is broken. Therefore, in symmetric encryption technology, the key can only be known by the sender and receiver, and different senders and receivers will use different keys during data transmission.

FIG. 2 is a schematic diagram of asymmetric encryption technology. As shown in Figure 2, in asymmetric encryption technology, data encryption and decryption are completed using a set of key pairs, and a set of keys includes a public key and a private key. The public key is disclosed to the public by the receiver, and the sender uses the public key disclosed by the receiver to encrypt the original text when transmitting data with the receiver. After receiving the ciphertext, the receiver decrypts the ciphertext using the private key corresponding to the public key. For the receiver, data transmission with multiple senders can be encrypted using a set of key pairs.

It should be noted that, unlike symmetric encryption technology, in asymmetric encryption technology, the public key and the private key form a set of key pairs, the public key and the private key are different, and the corresponding private key cannot be determined based on the public key.

In addition, similar to the symmetric encryption technology, in the asymmetric encryption technology, the public key is used for encryption, and the corresponding private key can be used for decryption. If the private key is used for encryption, the corresponding public key can also be used for decryption. That is to say, in a set of key pairs, the distinction between the public key and the private key lies not in whether they are used for encryption or decryption, but in whether they are open to the public. is called the private key.

At present, the functions of mobile phones are becoming more and more powerful, and the application of access control cards in mobile phones is becoming more and more common. Most of the high-end mobile phones on the market have the function of installing access control cards and copying access control cards. However, when the access control card data in one mobile phone is migrated to another mobile phone, the access control card information may be leaked due to possible attacks during the migration process. Therefore, there is an information security risk, which may cause economic losses to the enterprise. losses and safety hazards.

In order to solve the above problems, the embodiments of the present application propose a method for uploading data and a method for downloading data. After encrypting the access control card data to be migrated through a mobile phone, the data is sent to a server, and the access control card data is encrypted in another mobile phone. The data is downloaded, thereby completing the migration of the access control card data, which can ensure the safe transmission of the access control card data.

FIG. 3 is an application scenario diagram of an embodiment of the present application. As shown in FIG. 3 , the access control card 30 contains access control card data, and the access control card 30 may be a physical card (eg, an IC card or a chip card, etc.). The first device 311 and the first device 312 may be mobile terminals (eg, cell phones). The second device 32 may be a server. The first device 311 can read the access control card data from the access control card 30, encrypt the access control card data and upload it to the second device 32, and the first device 312 can download the encrypted access control card data from the second device 32, and upload the encrypted access control card data to the second device 32. The encrypted access control card data is decrypted to obtain the access control card data, thereby completing the secure migration of the access control card data.

It can be understood that, the above examples merely illustrate the scenario of access control card data, and do not constitute a limitation to the embodiments of the present application. In some embodiments, scenarios of other security data may also be included, that is, the above-mentioned access control card 30 may also be a physical card or device including other security data.

The mobile terminal may also be referred to as terminal equipment, user equipment (User Equipment, UE), access terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, wireless communication device, user agent, or user device. The mobile terminal may be a cellular telephone, a cordless telephone, a Personal Digital Assistant (PDA) device, a handheld device with wireless communication capabilities, a computing device or a handheld communication device, a handheld computing device, a satellite wireless device, and/or Other devices for communicating on wireless systems and next-generation communication systems, such as mobile terminals in 5G networks or mobile terminals in a future evolved Public Land Mobile Network (PLMN) network, etc. The mobile terminal may also be a wearable device. Wearable devices can also be called wearable smart devices, which are the general term for the intelligent design of daily wear and the development of wearable devices using wearable technology, such as glasses, gloves, watches, clothing and shoes. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothing or accessories. Wearable device is not only a hardware device, but also realizes powerful functions through software support, data interaction, and cloud interaction. In a broad sense, wearable smart devices include full-featured, large-scale, complete or partial functions without relying on smart phones, such as smart watches or smart glasses, and only focus on a certain type of application function, which needs to be used in conjunction with other devices such as smart phones. , such as various types of smart bracelets and smart jewelry that monitor physical signs.

The following description takes the access control card data as an example. FIG. 4 is a schematic flowchart of a data uploading method and a data downloading method provided by an embodiment of the present application. In order to facilitate the public to fully understand the complete scheme of this application, the steps that various roles and devices in the entire system such as the access control card 30, the first device 311, the first device 312, and the second device 32 need to be performed at different stages are listed according to the timeline. Incorporated into the description of the process, these stages include but are not limited to the user registration stage, device registration stage, data reading stage, data uploading stage and data downloading stage. It should be understood that for devices that implement data uploading or data downloading, In the normal data upload or data download process, it only needs to perform those steps that the terminal device (for example, the first device 311 or the first device 312 ) needs to perform in the process, that is, it can be understood that the The execution subject of the data uploading method or the data downloading method is mainly a terminal device. As shown in Figure 4, the method includes:

Step 401 , the first device 311 sends a user registration request to the second device 32 .

Specifically, the user may operate in an application (APP) of the first device 311 (eg, a mobile phone) to complete the user's identity registration on the second device 32 (eg, a server), where the second device 32 may Corresponding to the application, for example, the second device 32 may be a server providing the application service. Exemplarily, the user can open an application (APP) in the first device 311 , the application can be used to read the access card data in the access card 30 , and can send the access card data to the second device 32 . During specific implementation, the application may be a wallet application, or may be other types of applications having the same functions as described above, which are not particularly limited in this embodiment of the present application. Then, the user can input user information (for example, user account and password) and personal identification number (Personal Identification Number, PIN) in the above-mentioned application, and can click the registration function; it can be understood that the above-mentioned PIN can be a secret value, This PIN can be used to authenticate the user's identity. Optionally, the PIN may be hashed in the first device 311, thereby obtaining the hash value of the PIN. In response to the user's operation, the first device 311 may send a user registration request to the second device 32, where the user registration request may include the above-mentioned user information and PIN. It should be noted that, if the first device 311 obtains the hash value of the PIN by performing a hash operation on the PIN, the user registration request may also include user information and the hash value of the PIN.

Step 402 , the second device 32 feeds back confirmation information to the first device 311 .

Specifically, after receiving the user registration request from the first device 311, the second device 32 can obtain the user information and PIN in the user registration request, and can complete the user registration on the second device 32 based on the user information and PIN. register. In specific implementation, after receiving the user information and PIN in the above-mentioned user registration request, the second device 32 can create a user account based on the above-mentioned user information and PIN, and can store the above-mentioned user account and PIN in the local database, and then, The second device 32 may feed back confirmation information to the first device 311, and the confirmation information may be used to notify the first device 311 whether the user registration is successful. Exemplarily, the confirmation information may include success or failure. If the first device 311 receives the success message, it can confirm that the user registration is successful, and if the first device 311 receives the failure message, it can confirm that the user registration fails.

Optionally, if the above-mentioned user registration request includes the hash value of the user information and the PIN, the second device 32 can complete the registration of the user on the second device 32 based on the above-mentioned user information and the hash value of the PIN. For the process, reference may be made to the above-mentioned process of completing the registration on the second device 32 through the user information and the PIN, and details are not repeated here.

Step 403, the first device 311 obtains the signed security chip certificate CERT.SE.CA.

Specifically, the security chip certificate CERT.SE may be issued by the second device 32, and the security chip certificate CERT.SE may contain the SE public key PK.SE. The above-mentioned secure chip certificate CERT.SE can be used to negotiate the session key of the secure channel between the first device 311 and the second device 32, so as to establish the secure channel between the first device 311 and the second device 32. In addition, when the above-mentioned second device 32 issues the above-mentioned security chip certificate CERT.SE, it can also use the signature private key SK.CA to sign the above-mentioned security chip certificate CERT.SE, thereby obtaining the signed security chip certificate CERT.SE .CA.

During specific implementation, the first device 311 may send the SE public key PK.SE to the second device 32 in advance, and the second device 32 may generate the security chip certificate CERT.SE based on the above SE public key PK.SE, that is, The above-mentioned security chip certificate CERT.SE may contain the above-mentioned SE public key PK.SE. Next, the second device 32 can create a pair of asymmetric signature public and private keys, for example, the signature private key SK.CA and the signature public key PK.CA, wherein the signature private key SK.CA is used to verify the above-mentioned security chip certificate CERT.SE The signature is performed to obtain the signed security chip certificate CERT.SE.CA; the signature public key PK.CA is used to de-sign the above-mentioned signed security chip certificate CERT.SE.CA to verify the identity of the security chip certificate CERT.SE. Therefore, the second device 32 can use the above-mentioned signature private key SK.CA to sign the above-mentioned security chip certificate CERT.SE, and obtain the signed security chip certificate CERT.SE.CA. The first device 311 may preset the above-mentioned signed security chip certificate CERT.SE.CA in the security chip of the first device 311 when it leaves the factory.

In addition, a secure channel can also be established between the first device 312 and the second device 32 , that is, the first device 312 can also be preset in the security chip of the first device 312 when it leaves the factory. The signed security chip certificate CERT.SE.CA.

Step 404 , the first device 311 sends a read instruction to the access control card 30 to read the access control card data in the access control card 30 .

Specifically, the user can perform operations in the first device 311 to read the access control card data in the access control card 30 . Exemplarily, the user operates in an application (eg, a wallet application) in the first device 311 (eg, clicks on a control for reading access card data). In response to the user's operation, the first device 311 sends a read instruction to the access control card 30 to read the access control card data in the access control card 30 . In specific implementation, in response to the user's operation, the first device 311 can send a read instruction to the access control card 30 through the SE, so that the SE can read the access control card data in the access control card 30, and can read the obtained data. Access card data is stored in SE.

It should be noted that the access control card data stored in the access control card 30 may be plaintext data or ciphertext data, and the ciphertext data may be data encrypted with a preset key. After acquiring the above-mentioned ciphertext data, the first device 311 can decrypt it according to the preset key, thereby obtaining plaintext data. Therefore, whether the access control card data stored in the access control card 30 is in plaintext or ciphertext does not constitute a limitation on the embodiments of the present application. The embodiments of the present application are described by taking an example of finally reading the plaintext data of the access control card.

Further, after reading the access control card data in the access control card 30, the SE can also encapsulate the access control card data, thereby obtaining a data format that can be recognized and processed by the server.

Step 405 , the first device 311 sends a verification request to the second device 32 .

Specifically, after the first device 311 acquires the access control card data in the access control card 30, it can further verify whether the user's identity is legal. Exemplarily, an input box may be displayed on a display interface of an application (eg, a wallet application) of the first device 311, and the input box may be used to input user information and a PIN. The user can input user information and PIN in the above input box. In response to the user's input, the first device 311 may send a verification request to the second device 32, where the verification request may be used to verify whether the user's identity is legal, and the verification request includes user information and a PIN.

Optionally, the first device 311 may also perform a hash operation on the above-mentioned PIN, thereby obtaining a hash value of the PIN, that is, the above-mentioned verification request may include user information and a hash value of the PIN.

Step 406, the second device 32 receives the verification request sent by the first device 311, and verifies the user identity.

Specifically, after receiving the verification request sent by the first device 311, the second device 32 can obtain the user information and PIN in the above verification request, and can verify the user's identity based on the above user information and PIN to determine the user's identity. Whether the identity is legal.

Exemplarily, the second device 32 may query the local database based on the user information in the authentication request, so that the PIN corresponding to the user information may be found. Then, the PIN obtained by the above query can be compared with the PIN in the verification request. If the PIN obtained by the query is consistent with the PIN in the verification request, it can be determined that the user's identity is legal; if the PIN obtained by the query is consistent with the PIN in the verification request If the PINs are inconsistent, it can be determined that the user's identity is illegal.

Optionally, if the above verification request includes the user information and the hash value of the PIN, then the second device 32 can query in the local database based on the user information in the verification request, so that the PIN corresponding to the user information can be found. hash value. Next, the second device 32 can perform a hash operation on the hash value of the PIN corresponding to the user information obtained through the query, thereby obtaining the PIN corresponding to the user information obtained through the query; and can verify the PIN in the request. The PIN in the verification request can be obtained by hashing the hash value of . Then, the PIN corresponding to the user information obtained by the above query can be compared with the PIN in the verification request. If the PIN corresponding to the user information obtained by the query is consistent with the PIN in the verification request, the identity of the user can be determined. Legal; if the obtained PIN corresponding to the user information is inconsistent with the PIN in the verification request, it can be determined that the user's identity is illegal.

Step 407 , the second device 32 feeds back the verification result to the first device 311 .

Specifically, if the second device 32 determines that the user identity is valid, it can feed back a verification success message to the first device 311; if the second device 32 determines that the user identity is illegal, it can feed back a verification failure message to the first device 311.

In step 408, the first device 311 receives the verification result sent by the second device 32, encrypts the data of the access control card, and obtains the ciphertext of the access control card.

Specifically, after the first device 311 receives the verification result sent by the second device 32 and determines that the user identity verification is successful, it can encrypt the access card data, thereby obtaining the access card ciphertext.

In specific implementation, after receiving the verification result sent by the second device 32, the application of the first device 311 (for example, the wallet application) can call the interface of the SE and send a data request to the SE if it is determined that the user identity verification is successful. Obtain the ciphertext of the access control card, wherein the above data request may include a PIN. After receiving the above data request, the SE can obtain the PIN in the above data request, and can encrypt the access control card data in the SE according to the PIN, thereby obtaining the ciphertext of the access control card.

Now, the encryption process of the above-mentioned SE will be described in conjunction with Fig. 5. Fig. 5 is a flow chart of data encryption of the access control card, including the following sub-steps:

Step 4081, the SE creates a random factor S, and generates a first key K based on the random factor S and the PIN.

Specifically, SE can arbitrarily create a random factor S, where S can be any string of data. It can be understood that the data length of the random factor S can be arbitrarily specified. Next, the SE can use the S as the salt value, the PIN as the secret value, and generate the first key K through the KDF function. Preferably, the above KDF function may be PBKDF2. It can be understood that the above examples exemplarily show the manner of generating the first key by using the PBKDF2 function, which does not constitute a limitation on the embodiments of the present application. In some embodiments, other KDF functions may also be used to implement.

Step 4082, the SE generates an initial vector (Initial Vector, IV) based on the random factor S.

Specifically, the SE can use the SM3 algorithm to perform digest calculation on the random factor S, thereby obtaining a digest value. Then, the lower 16 bytes of the above digest value can be taken as an initial vector.

It should be noted that, the digest calculation algorithm in the embodiment of the present application may be any known digest calculation algorithm, which is not limited in the embodiment of the present application.

Step 4083, the SE encrypts the data of the access control card based on the first key K and the initial vector to obtain the ciphertext of the access control card.

Specifically, after the SE calculates and obtains the first key K and the initial vector, the SM4 algorithm can be used to encrypt the access control card data based on the first key K and the initial vector, and the encryption mode can be performed in the CBC mode.

Wherein, the length of the access control card data may be an integer multiple of 16 bytes. In the specific implementation, the access control card data can be encrypted in the following two ways.

way 1

Take all access control card data as a whole, and encrypt the data of 16 sectors uniformly. Exemplarily, the access control card data may be an access control card Data, and the data length of the Data may be 1024 bytes. After the Data is encrypted by the above-mentioned first key K and the initial vector, the access control card ciphertext Cipher can be obtained, and the length of the access control card ciphertext Cipher can also be 1024 bytes.

way 2

Divide all access control card data into 8 data blocks, each of which contains 2 sectors of data. Exemplarily, the access control card data may be Data1, Data2...DataN, where N=8, and the length of each data block may be 128 bytes. After the above-mentioned Data1, Data2...DataN are encrypted by the above-mentioned first key K and the initial vector, the corresponding access control card ciphertexts Cipher1, Cipher2...CipherN can be obtained, wherein the length of each access control card ciphertext Cipher can be is 128 bytes.

It should be noted that the encryption algorithm in the embodiment of the present application may be any known encryption algorithm, for example, AES, DES, etc., which is not limited in the embodiment of the present application. In addition, the foregoing encryption mode may also be any known encryption mode, for example, GCM, ECB, etc., which is not limited in this embodiment of the present application.

Step 409 , the first device 311 sends the ciphertext of the access control card and the random factor S to the second device 32 .

Specifically, after acquiring the ciphertext of the access control card, the first device 311 may send the ciphertext of the access control card and the random factor S to the second device 32 . In specific implementation, after the SE in the first device 311 encrypts the access control card data and obtains the ciphertext of the access control card, the ciphertext of the access control card and the random factor S can be sent to an application (for example, a wallet application). After the above-mentioned application receives the ciphertext of the access control card and the random factor S sent by the SE, it can send the above-mentioned ciphertext of the access control card and the random factor S to the second device 32.

Optionally, before the first device 311 sends the ciphertext of the access control card to the second device 32, a security channel may also be established between the first device 311 and the second device 32, wherein the security channel may be used to ensure the first Secure transmission of data between device 311 and second device 32 . Exemplarily, the first device 311 and the second device 32 may negotiate a session key before data transmission, and after negotiating to obtain the session key, use the session key to encrypt the transmitted data, and use the session key to encrypt the transmitted data. This ensures the security of data transmission.

During specific implementation, the above-mentioned secure channel may be established between an application (eg, a wallet application) in the first device 311 and the second device 32 . The establishment process of the above-mentioned security channel will now be described with reference to FIG. 6 . FIG. 6 is a flowchart of the establishment of the security channel, including the following sub-steps:

Step 4091, the application obtains the signed security chip certificate CERT.SE.CA in the SE.

Specifically, the application can call the interface of the SE, and obtain the signed security chip certificate CERT.SE.CA in the SE through the interface.

Step 4092, the application generates a random number RA.

The random number RA is used as the first random number.

Specifically, the order of step 4092 and step 4091 can be in no particular order. For example, step 4092 can be executed before step 4091, step 4092 can also be executed after step 4091, and step 4092 can also be executed simultaneously with step 4091. This application implements This example does not make any special restrictions.

Step 4093 , the application sends a secure channel establishment request to the second device 32 .

Specifically, after the application obtains the above random number RA and the signed security chip certificate CERT.SE.CA, it sends a secure channel establishment request to the second device 32 , and the secure channel establishment request can be used to establish a relationship between the above application and the second device 32 . The secure channel between the two, the secure channel establishment request may include the above random number RA and the signature secure chip certificate CERT.SE.CA.

Step 4094, the second device 32 receives the secure channel establishment request sent by the above application, verifies the secure channel establishment request, and generates feedback information based on the verification result.

Specifically, after receiving the secure channel establishment request sent by the above-mentioned application, the second device 32 obtains the random number RA and the signed security chip certificate CERT.SE.CA in the above-mentioned secure channel establishment request, and verifies the above-mentioned secure channel establishment request .

In specific implementation, the above verification method may be to verify the identity of the signed security chip certificate CERT.SE. Exemplarily, since the signed security chip certificate CERT.SE.CA is signed and issued by the second device 32, the local database of the second device 32 stores the signature public certificate corresponding to the above signed security chip certificate CERT.SE.CA. key PK.CA. Therefore, the second device 32 can perform identity verification on the above-mentioned signed security chip certificate CERT.SE.CA according to the above-mentioned signature public key PK.CA, if the above-mentioned signed security chip certificate CERT.SE.CA is authenticated by the above-mentioned signature public key PK.CA If the CA is correctly de-signed, it can be determined that the identity of the security chip certificate CERT.SE is the first device 311; if the de-signature of the above-mentioned signed security chip certificate CERT.SE.CA through the above-mentioned signature public key PK.CA fails, it can be determined that The identity of the security chip certificate CERT.SE is an illegal device.

Next, if the second device 32 determines that the identity of the security chip certificate CERT.SE is the first device 311, it can obtain the SE public key PK.SE in the security chip certificate CERT.SE, and can generate a random number RB, The random number RB is used as the second random number.

Then, the second device 32 can use the SM2 algorithm to calculate based on the random number RA, the random number RB, the SE public key PK.SE and the second device private key SK.SERVER to obtain the second key EK, where SK.SE. SERVER is the second device private key preset in the second device 32 .

It should be noted that the key generation algorithm in the embodiment of the present application may be any known key generation algorithm, which is not limited in the embodiment of the present application.

After the second device 32 obtains the above-mentioned second key EK, the above-mentioned random number RA can be encrypted by using the above-mentioned EK, thereby obtaining the random number ciphertext CRA. Preferably, the above-mentioned algorithm for encrypting the random number RA may be SM4, and the encryption mode may be ECB.

It should be noted that the encryption algorithm in the embodiment of the present application may be any known encryption algorithm, which is not limited in the embodiment of the present application. In addition, the encryption mode in the embodiment of the present application may be any known encryption algorithm except ECB, for example, CBC, GCM, etc., which is not limited in the embodiment of the present application.

Step 4095, the second device 32 sends feedback information to the application.

Specifically, the above feedback information may include the random number RB, the random number ciphertext CRA, and the signed second device certificate CERT.SERVER.CA. The above-mentioned signed second device certificate CERT.SERVER.CA may be obtained after the second device 32 signs the above-mentioned second device certificate CERT.SERVER using the private key signature SK.CA, and the above-mentioned second device certificate CERT.SERVER may include The second device public key PK.SERVER.

Step 4096, the application receives the feedback information sent by the second device 32, and forwards the feedback information to the SE.

Specifically, after receiving the feedback information sent by the second device 32, the application may forward the feedback information and the random number RA to the SE. During specific implementation, after receiving the feedback information sent by the second device 32, the application may completely forward the foregoing feedback information and the random number RA to the SE. Exemplarily, the above-mentioned application can forward the random number RB, the random number ciphertext CRA and the signed second device certificate CERT.SERVER.CA in the above-mentioned feedback information to the SE, in addition, the above-mentioned application can also send the above-mentioned random number RA to the SE. SE.

Step 4097, the SE receives the feedback information and random number RA forwarded by the application, performs identity verification on the signed second device certificate CERT.SERVER.CA in the above feedback information, and obtains the second device public key PK.SERVER.

Specifically, after receiving the feedback information forwarded by the above application, the SE obtains the signed second device certificate CERT.SERVER.CA in the above feedback information, and can perform identity verification on the above signed second device certificate CERT.SERVER.CA.

In a specific implementation, the above-mentioned way of verifying the signed second device certificate CERT.SERVER.CA may be to use the signature public key PK.CA to de-sign the above-mentioned signed second device certificate CERT.SERVER.CA to verify the second device certificate CERT.SERVER.CA. The identity of the device certificate CERT.SERVER. The signature public key PK.CA may be sent to the first device 311 by the second device 32 in advance. Exemplarily, if the above-mentioned SE uses the above-mentioned signature public key PK.CA to correctly de-sign the above-mentioned signed second device certificate CERT.SERVER.CA, then the identity of the second device certificate CERT.SERVER is a legal server, and the first device certificate CERT.SERVER can be obtained. The second device certificate CERT.SERVER; if the above-mentioned SE fails to de-sign the above-mentioned signed second device certificate CERT.SERVER.CA using the above-mentioned signature public key PK.CA, the second device certificate CERT.SERVER cannot be obtained, and it can be determined that the second device certificate CERT.SERVER cannot be obtained. The identity of the second device certificate CERT.SERVER is an illegal server.

Next, if the SE determines that the identity of the second device certificate CERT.SERVER is a legitimate server, the second device public key PK.SERVER in the second device certificate CERT.SERVER can be obtained.

Step 4098, the SE determines the session key of the secure channel.

Specifically, after obtaining the second device public key PK.SERVER, the SE can determine the second key EK based on the random number RA, the random number RB, the SE private key SK.SE, and the second device public key PK.SERVER, And a session key may be determined based on the above-mentioned second key EK, wherein the session key is used to encrypt and decrypt the data transmitted in the secure channel. In specific implementation, the above-mentioned way of determining the session key may be: according to the random number RA, the random number RB, the SE private key SK.SE and the second device public key PK.SERVER, calculate through the key agreement algorithm in the SM2 algorithm Get the second key EK. Next, the random number ciphertext CRA may be decrypted using the second key EK, thereby obtaining the random number RA, and the random number RA obtained by the decryption may be compared with the random number RA generated locally by the above application . If the random number RA obtained by the above decryption is consistent with the random number RA generated locally by the above application, a secure channel can be established between the first device 311 and the second device 32, and the above second key EK can be used as the above security The session key for the channel. If the random number RA obtained by the above decryption is inconsistent with the random number RA generated locally by the above application, the session key cannot be obtained, that is, the establishment of the secure channel between the first device 311 and the second device 32 fails.

It can be understood that the above-mentioned SE private key SK.SE and the above-mentioned SE public key PK.SE are a pair of asymmetric public and private keys, and the above-mentioned second device private key SK.SERVER and the above-mentioned second device public key PK.SERVER are a pair. Asymmetric public and private keys.

Step 4099 , based on the determined session key, send channel establishment response information to the second device 32 to establish a secure channel with the second device 32 .

Specifically, if the first device 311 determines the session key, it can feed back success information to the second device 32, thereby establishing a secure channel between the first device 311 and the second device 32, that is, the first device 311 can use the above-mentioned session key (for example, the second key EK) to re-encrypt the above-mentioned ciphertext of the access control card, and send the encrypted ciphertext of the access control card to the second device 32, so that the access control card data can be encrypted. double protection. For example, if Cipher is the cipher text of the access control card, the first device 311 can obtain the encrypted cipher text of the access control card Cipher_EK after re-encrypting the cipher text of the access control card with the second key EK.

If the first device 311 does not obtain the session key, the first device 311 may feed back failure information to the second device 32, where the failure message is used to notify the second device 32 that the establishment of the secure channel fails.

Step 410 , the first device 312 sends a data acquisition request to the second device 32 .

Specifically, after the access control card data is uploaded to the second device 32 . The first device 312 may send a data acquisition request to the second device 32 to acquire access control card data. Wherein, the data acquisition request may include user information and PIN.

It can be understood that the first device 311 can also send a data acquisition request to the second device 32 to acquire access control card data. The difference between the first device 311 and the first device 312 is that if the first device 311 just uploads the access card data to the second device 32, the first device 311 requests the second device 32 to download the access card data, because the user The user information and PIN have been input when uploading the above-mentioned access control card data, so the user does not need to input the above-mentioned user information and PIN when requesting to download the access control card data to the second device 32. The first device 311 can upload the above-mentioned access control card data according to the user. Create a data acquisition request with the user information and PIN entered at the time, and send the data acquisition request to the second device 32, thereby simplifying the user's operation

Optionally, before the first device 312 sends the data acquisition request to the second device 32, a secure channel may also be established between the first device 312 and the second device 32. The method for establishing the secure channel may refer to the method shown in FIG. 6 , which will not be repeated here.

Step 411, the second device 32 verifies the data acquisition request.

Specifically, after receiving the data acquisition request sent by the first device 312, the second device 32 can acquire the user information and PIN in the data acquisition request, and can perform verification based on the above user information and PIN, thereby determining the identity of the user is it legal. For example, if the PIN in the above data acquisition request is consistent with the PIN stored locally by the second device 32, it can be determined that the user's identity is legitimate; if the PIN in the above data acquisition request is inconsistent with the PIN stored locally by the second device 32, it can be It is determined that the user identity is illegal.

Optionally, if the above-mentioned data acquisition request is sent through a secure channel, the second device 32 can use the second key EK to decrypt the above-mentioned data acquisition request, and can obtain the data acquisition request after successfully decrypting the above-mentioned data acquisition request. user information and PIN.

Step 412, the second device 32 sends the encapsulated data packet and the random factor S to the first device 312 based on the verification result.

Specifically, if the second device 32 determines that the user's identity is legitimate, it can send the encapsulated data packet and the random factor S to the first device 312, where the encapsulated data packet can include the instruction and the ciphertext of the access control card. During specific implementation, the second device 32 may encapsulate the above-mentioned ciphertext of the access control card into data packets, wherein each encapsulated data packet may include an SE executable instruction and an access control card ciphertext.

It can be understood that the number of encapsulated data packets may be consistent with the number of ciphertexts of the access control card that have been stored in the second device 32 . Exemplarily, if the second device 32 receives only one ciphertext of the access control card (for example, Cipher), the second device 32 may encapsulate the cipher into a data packet. If the second device 32 receives N pieces of access control card ciphertext (for example, Cipher1, Cipher2...CipherN), the second device 32 may encapsulate the N pieces of access control card ciphertext into N data packets.

Now take N pieces of access control card ciphertext as an example to illustrate, Table 1 is the access control card ciphertext encapsulation table.

Table 1

封装数据包IDEncapsulation Packet ID	数据包内容packet content
封装数据包1encapsulated packet 1	指令1+密文Cipher1Instruction 1 + Cipher1
封装数据包2encapsulated packet 2	指令2+密文Cipher2Instruction 2 + Cipher2
……	……
封装数据包Nencapsulated packet N	指令N+密文CipherNInstruction N+ciphertext CipherN

As shown in Table 1, the ciphertext of the access control card includes N ciphertexts such as Cipher1, Cipher2...CipherN. Since data cannot be directly read and stored in SE, it is necessary to add SE-executable instructions (for example, instruction 1, instruction 2... instruction N, etc.) to each of the above ciphertexts. Next, the above-mentioned instruction and the corresponding ciphertext may be encapsulated, thereby obtaining N encapsulated data packets, that is, one encapsulated data packet corresponds to one instruction and one access control card ciphertext.

Next, the second device 32 may send each of the foregoing encapsulated data packets to the first device 312 in sequence. The order of sending may be in the order of the instructions.

It can be understood that when the second device 32 sends the above-mentioned encapsulated data packet to the first device 312, the above-mentioned encapsulated data packet may also be encrypted in the secure channel (for example, encrypted by using the second key EK), thereby The security of the above encapsulated data packet transmission can be guaranteed.

Step 413, the first device 312 receives the encapsulated data packet and the random factor S sent by the second device 32, processes the encapsulated data packet, and obtains and stores the access control card data.

Specifically, the first device 312 may receive the encapsulated data packet and the random factor S sent by the second device 32 through an application (eg, a wallet application). After the above-mentioned application receives the encapsulated data packet and the random factor S sent by the second device 32, it can send the PIN to the SE through a preset instruction, so that the SE can store the above-mentioned PIN.

Optionally, if the above-mentioned application receives the encrypted and encapsulated data packet sent by the second device 32 through the secure channel, the above-mentioned application can decrypt the above-mentioned encrypted and encapsulated data packet through the second key EK, thereby obtaining the encapsulated data packet.

Next, the above application may forward the received encapsulated data packets to the SE in sequence, and may send the random factor S to the SE. The sequence in which the application forwards the encapsulated data packets may be the sequence in which the encapsulated data packets are received. For example, if the above-mentioned application receives the encapsulated data packet 1 sent by the second device 32 at the earliest, the application may forward the encapsulated data packet 1 to the SE. Next, if the above-mentioned application receives the encapsulated data packet 2 sent by the second device 32, the application can forward the encapsulated data packet 2 to the SE, and so on.

After receiving the encapsulated data packet and the random factor S forwarded by the above application, the SE can obtain the ciphertext of the access control card in the encapsulated data packet, and can decrypt the above ciphertext of the access control card.

The above-mentioned decryption process will now be described in conjunction with FIG. 7, which is a flow chart of decryption, including the following sub-steps:

Step 4131, the SE generates a first key K based on the random factor S and the PIN.

Specifically, after obtaining the random factor S and the PIN, the SE can use the KDF function (for example, PBKDF2) to generate the first key K based on the random factor S and the PIN.

Step 4132, the SE determines an initial vector based on the random factor S.

Specifically, an algorithm (eg, SM3) can be used to calculate a digest value based on a random factor S, and the lower 16 bytes of the above digest value can be taken as an initial vector.

Step 4133, the SE decrypts based on the first key K and the initial vector to obtain access control card data.

Specifically, an algorithm (for example, SM4) can be used to decrypt the ciphertext of the access control card based on the first key K and the initial vector in the CBC mode, thereby obtaining the access control card data.

Next, the above-mentioned access control card data can be written into the SE through the instruction (eg, Write) in the above-mentioned encapsulated data packet, so that the task of copying the access control card data to the first device 312 can be completed.

In the embodiment of the present application, by securely encrypting the access control card data in one mobile phone and uploading it to the server, and downloading the ciphertext of the access control card from the server in another mobile phone, the security of the access control card data can be realized. Migration to improve the security of access card data transmission.

In order to implement the above embodiments, the embodiments of the present application further propose a chip, which is applied to an electronic device, and the electronic device may be the above-mentioned first device 311 or the first device 312 . FIG. 8 is a schematic structural diagram of a chip 80 according to an embodiment of the present application. As shown in FIG. 8 , the chip 80 includes: an acquisition module 81 , a transmission module 82 , a reception module 83 , an encryption module 84 and an upload module 85 ; wherein,

an acquisition module 81, used to acquire the access control data to be uploaded;

The sending module 82 is used to send a PIN to the server in response to the user's input, wherein the PIN is used to verify whether the user's identity is legal;

The receiving module 83 is configured to receive the first confirmation information sent by the server, and create a random factor S, and the first confirmation information is used to confirm whether the verification of the user identity is successful;

An encryption module 84, configured to determine a first key K based on the PIN and the random factor S, and encrypt the access control data to be uploaded based on the first key K to obtain a first data ciphertext;

The uploading module 85 is configured to upload the first data ciphertext and the random factor S to the server.

In one possible implementation manner, the chip 80 further includes: a registration module 86; wherein,

The registration module 86 is configured to send a user registration request to the server, wherein the user registration request is used to register a user identity on the server, and the user registration request includes the PIN; Second confirmation information, wherein the second confirmation information is used to confirm whether the registration of the user is successful.

In one possible implementation manner, the electronic device includes a signature public key, the server includes a signature private key and a second private key, and the chip 80 further includes: a channel establishment module 88; wherein,

A channel establishment module 88, configured to obtain a signed first certificate, wherein the signed first certificate is obtained after the server signs the first certificate with the signed private key, and the first certificate is issued by the server , the first certificate includes a first public key;

Use the second key EK to decrypt the random number ciphertext CRA to obtain a random number RA', and the random number RA' is used as the third random number;

In one possible implementation manner, the encryption module 84 is further configured to encrypt the access control data to be uploaded based on the first key K to obtain a second data ciphertext; use the second key EK The second data ciphertext is encrypted to obtain the first data ciphertext.

In one possible implementation manner, the encryption module 84 is further configured to calculate a digest value based on the random factor S, and determine an initial vector based on the digest value; based on the first key K and the initial vector pair The access control data to be uploaded is encrypted to obtain the first data ciphertext.

In order to realize the above-mentioned embodiments, an embodiment of the present application further proposes a chip, and FIG. 9 is a schematic structural diagram of a chip 90 provided by an embodiment of the present application. As shown in Figure 9, the chip 90 includes: a request module 91, a download module 92, an acquisition module 93 and a decryption module 94; wherein,

a request module 91, configured to send a data acquisition request to the server, wherein the data acquisition request is used to acquire the first data ciphertext;

A downloading module 92, configured to receive an encapsulated data packet and a random factor S sent by the server, wherein the encapsulated data packet includes the first data ciphertext;

an obtaining module 93, configured to obtain a PIN, and determine a first key K based on the PIN and the random factor S;

The decryption module 94 is configured to decrypt the encapsulated data packet based on the first key K to obtain the plaintext of the access control data.

In one possible implementation manner, the downloading module 92 is further configured to obtain a second key EK; receive an encrypted packaged data packet sent by the server; Decrypt to get the encapsulated data packet.

In one possible implementation manner, the encapsulated data packet further includes executable instructions, and the decryption module 94 is further configured to obtain the first data ciphertext in the encapsulated data packet, based on the first key K Decrypt the first data ciphertext to obtain access control data plaintext; obtain executable instructions in the encapsulated data packet, and perform a write operation on the access control data plaintext based on the executable instructions.

It should be understood that the division of each module of the chip shown in FIG. 8 and FIG. 9 above is only a division of logical functions, and may be fully or partially integrated into a physical entity in actual implementation, or may be physically separated. And these modules can all be implemented in the form of software calling through processing elements; they can also all be implemented in hardware; some modules can also be implemented in the form of software calling through processing elements, and some modules can be implemented in hardware. For example, the detection module may be a separately established processing element, or may be integrated in a certain chip of the terminal. The implementation of other modules is similar. In addition, all or part of these modules can be integrated together, and can also be implemented independently. In the implementation process, each step of the above-mentioned method or each of the above-mentioned modules can be completed by an integrated logic circuit of hardware in the processor element or an instruction in the form of software.

For example, the above modules may be one or more integrated circuits configured to implement the above methods, such as: one or more specific integrated circuits (Application Specific Integrated Circuit; hereinafter referred to as: ASIC), or, one or more microprocessors Digital Singnal Processor (hereinafter referred to as: DSP), or, one or more Field Programmable Gate Array (Field Programmable Gate Array; hereinafter referred to as: FPGA), etc. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (System-On-a-Chip; hereinafter referred to as: SOC).

FIG. 10 exemplarily shows a schematic structural diagram of an electronic device 100 provided by an embodiment of the present application, and the electronic device 100 may be the first device 311 or the first device 312 described above.

As shown in FIG. 10, the electronic device 100 may include a processor 110, an external memory interface 120, an internal memory 121, an antenna 1, an antenna 2, a mobile communication module 150, a wireless communication module 160, a display screen 194, and a subscriber identification module (subscriber). identification module, SIM) card interface 195, etc.

It can be understood that, the structures illustrated in the embodiments of the present invention do not constitute a specific limitation on the electronic device 100 . In other embodiments of the present application, the electronic device 100 may include more or less components than shown, or some components are combined, or some components are separated, or different components are arranged. The illustrated components may be implemented in hardware, software, or a combination of software and hardware.

The processor 110 may include one or more processing units, for example, the processor 110 may include an application processor (application processor, AP), a modem processor, a graphics processor (graphics processing unit, GPU), an image signal processor (image signal processor, ISP), controller, video codec, digital signal processor (digital signal processor, DSP), baseband processor, and/or neural-network processing unit (neural-network processing unit, NPU), etc. Wherein, different processing units may be independent devices, or may be integrated in one or more processors.

The controller can generate an operation control signal according to the instruction operation code and timing signal, and complete the control of fetching and executing instructions.

A memory may also be provided in the processor 110 for storing instructions and data. In some embodiments, the memory in processor 110 is cache memory. This memory may hold instructions or data that have just been used or recycled by the processor 110 . If the processor 110 needs to use the instruction or data again, it can be called directly from the memory. Repeated accesses are avoided and the latency of the processor 110 is reduced, thereby increasing the efficiency of the system.

The wireless communication function of the electronic device 100 may be implemented by the antenna 1, the antenna 2, the mobile communication module 150, the wireless communication module 160, the modulation and demodulation processor, the baseband processor, and the like.

Both antenna 1 and antenna 2 can be used to transmit and receive electromagnetic wave signals. Each antenna in electronic device 100 may be used to cover a single or multiple communication frequency bands. Different antennas can also be reused to improve antenna utilization. For example, the antenna 1 can be multiplexed into the diversity antenna of the wireless local area network. Of course, considering the simplicity of the design and the influence of other factors, each communication mode can also be equipped with a separate antenna. In other embodiments, the antenna may be used in conjunction with a tuning switch.

The mobile communication module 150 may provide wireless communication solutions including 2G/3G/4G/5G etc. applied on the electronic device 100 . The mobile communication module 150 may include at least one filter, switch, power amplifier, low noise amplifier (LNA) and the like. The mobile communication module 150 can receive electromagnetic waves from the antenna 1, filter and amplify the received electromagnetic waves, and transmit them to the modulation and demodulation processor for demodulation. The mobile communication module 150 can also amplify the signal modulated by the modulation and demodulation processor, and then turn it into an electromagnetic wave for radiation through the antenna 1 . In some embodiments, at least part of the functional modules of the mobile communication module 150 may be provided in the processor 110 . In some embodiments, at least part of the functional modules of the mobile communication module 150 may be provided in the same device as at least part of the modules of the processor 110 .

The wireless communication module 160 can provide applications on the electronic device 100 including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) networks), bluetooth (BT), global navigation satellites Wireless communication solutions such as global navigation satellite system (GNSS), frequency modulation (FM), near field communication (NFC), and infrared technology (IR). The wireless communication module 160 may be one or more devices integrating at least one communication processing module. The wireless communication module 160 receives electromagnetic waves via the antenna 2 , frequency modulates and filters the electromagnetic wave signals, and sends the processed signals to the processor 110 . The wireless communication module 160 can also receive the signal to be sent from the processor 110 , perform frequency modulation on it, amplify it, and convert it into electromagnetic waves for radiation through the antenna 2 .

In some embodiments, the antenna 1 of the electronic device 100 is coupled with the mobile communication module 150, and the antenna 2 is coupled with the wireless communication module 160, so that the electronic device 100 can communicate with the network and other devices through wireless communication technology. The wireless communication technology may include global system for mobile communications (GSM), general packet radio service (GPRS), code division multiple access (CDMA), broadband Code Division Multiple Access (WCDMA), Time Division Code Division Multiple Access (TD-SCDMA), Long Term Evolution (LTE), BT, GNSS, WLAN, NFC , FM, and/or IR technology, etc. The GNSS may include global positioning system (global positioning system, GPS), global navigation satellite system (global navigation satellite system, GLONASS), Beidou navigation satellite system (beidou navigation satellite system, BDS), quasi-zenith satellite system (quasi -zenith satellite system, QZSS) and/or satellite based augmentation systems (SBAS).

The electronic device 100 implements a display function through a GPU, a display screen 194, an application processor, and the like. The GPU is a microprocessor for image processing, and is connected to the display screen 194 and the application processor. The GPU is used to perform mathematical and geometric calculations for graphics rendering. Processor 110 may include one or more GPUs that execute program instructions to generate or alter display information.

Display screen 194 is used to display images, videos, and the like. Display screen 194 includes a display panel. The display panel can be a liquid crystal display (LCD), an organic light-emitting diode (OLED), an active-matrix organic light-emitting diode or an active-matrix organic light-emitting diode (active-matrix organic light). emitting diode, AMOLED), flexible light-emitting diode (flex light-emitting diode, FLED), Miniled, MicroLed, Micro-oLed, quantum dot light-emitting diode (quantum dot light emitting diodes, QLED) and so on. In some embodiments, the electronic device 100 may include one or N display screens 194 , where N is a positive integer greater than one.

Internal memory 121 may be used to store computer executable program code, which includes instructions. The internal memory 121 may include a storage program area and a storage data area. The storage program area can store an operating system, an application program required for at least one function (such as a sound playback function, an image playback function, etc.), and the like. The storage data area may store data (such as audio data, phone book, etc.) created during the use of the electronic device 100 and the like. In addition, the internal memory 121 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, universal flash storage (UFS), and the like. The processor 110 executes various functional applications and data processing of the electronic device 100 by executing instructions stored in the internal memory 121 and/or instructions stored in a memory provided in the processor.

The SIM card interface 195 is used to connect a SIM card. The SIM card can be contacted and separated from the electronic device 100 by inserting into the SIM card interface 195 or pulling out from the SIM card interface 195 . The electronic device 100 may support 1 or N SIM card interfaces, where N is a positive integer greater than 1. The SIM card interface 195 can support Nano SIM card, Micro SIM card, SIM card and so on. Multiple cards can be inserted into the same SIM card interface 195 at the same time. The types of the plurality of cards may be the same or different. The SIM card interface 195 can also be compatible with different types of SIM cards. The SIM card interface 195 is also compatible with external memory cards. The electronic device 100 interacts with the network through the SIM card to implement functions such as call and data communication. In some embodiments, the electronic device 100 employs an eSIM, ie: an embedded SIM card. The eSIM card can be embedded in the electronic device 100 and cannot be separated from the electronic device 100 .

Embodiments of this specification provide a non-transitory computer-readable storage medium, where the non-transitory computer-readable storage medium stores computer instructions, and when the computer instructions are executed on a computer, the computer instructions cause the computer to execute The data uploading method and the data downloading method provided by the embodiments shown in FIG. 1 to FIG. 7 of this specification.

In the embodiments of the present application, "at least one" refers to one or more, and "multiple" refers to two or more. "And/or", which describes the association relationship of the associated objects, indicates that there can be three kinds of relationships, for example, A and/or B, which can indicate the existence of A alone, the existence of A and B at the same time, and the existence of B alone. where A and B can be singular or plural. The character "/" generally indicates that the associated objects are an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, and c may represent: a, b, c, a and b, a and c, b and c or a and b and c, where a, b, c may be single, or Can be multiple.

Those of ordinary skill in the art can realize that the units and algorithm steps described in the embodiments disclosed herein can be implemented by a combination of electronic hardware, computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of this application.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the above-described systems, devices and units may refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

In the several embodiments provided in this application, if any function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (Read-Only Memory; hereinafter referred to as: ROM), Random Access Memory (Random Access Memory; hereinafter referred to as: RAM), magnetic disk or optical disk and other various A medium on which program code can be stored.

The above are only specific embodiments of the present application. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be covered by the protection scope of the present application. The protection scope of the present application shall be subject to the protection scope of the claims.

Claims

A data uploading method, applied to electronic equipment, is characterized in that, comprising:

Get access control data to be uploaded;

In response to the user's input, send a personal identification number PIN to the server, wherein the PIN is used to verify whether the user's identity is legal;

Receive the first confirmation information sent by the server, create a random factor, and the first confirmation information is used to confirm whether the verification of the user identity is successful;

Determine a first key based on the PIN and the random factor, and encrypt the access control data to be uploaded based on the first key to obtain a first data ciphertext;

Upload the first data ciphertext and the random factor to the server.
The method according to claim 1, wherein before acquiring the access control data to be uploaded, the method further comprises:

sending a user registration request to the server, wherein the user registration request is used to register a user identity on the server, and the user registration request includes the PIN;

Receive second confirmation information sent by the server, where the second confirmation information is used to confirm whether the user's registration is successful.
The method according to claim 1, wherein the electronic device comprises a signature public key, the server comprises a signature private key and a second private key, and the method further comprises:

Obtain a signed first certificate, wherein the signed first certificate is obtained after the server signs the first certificate with the signing private key, the first certificate is issued by the server, and the first certificate includes the first public key;

Create a first random number, and send a secure channel establishment request to the server, wherein the secure channel establishment request includes the first random number and the signed first certificate;

Receive a second random number, a random number ciphertext and a signed second certificate sent by the server, wherein the second random number is created by the server, and the random number ciphertext is used by the server with a second key Obtained after encryption, the second key is determined based on the first random number, the second random number, the first public key and the second private key;

Use the signature public key to perform identity verification on the signed second certificate, and if the identity verification is passed, obtain a second public key in the second certificate, wherein the second public key is the same as the first public key. The second private key is a pair of asymmetric public and private keys;

Obtain a first private key, and determine a second key based on the first random number, the second random number, the first private key, and the second public key, where the first private key and all The first public key is a pair of asymmetric public and private keys;

Decrypting the random number ciphertext using the second key to obtain a third random number;

If the first random number is consistent with the third random number obtained by decryption, a secure channel is established with the server, and the second key is determined as the session key of the secure channel.
The method according to claim 3, wherein the encrypting the access control data to be uploaded based on the first key to obtain the first data ciphertext comprises:

Encrypting the access control data to be uploaded based on the first key to obtain a second data ciphertext;

The second data ciphertext is encrypted using the second key to obtain the first data ciphertext.
The method according to claim 1, wherein the encrypting the access control data to be uploaded based on the first key to obtain the first data ciphertext comprises:

Calculate a digest value based on the random factor, and determine an initial vector based on the digest value;

The access control data to be uploaded is encrypted based on the first key and the initial vector to obtain a first data ciphertext.
A method for downloading data, comprising:

sending a data acquisition request to the server, wherein the data acquisition request is used to acquire the first data ciphertext;

receiving an encapsulated data packet and a random factor sent by the server, wherein the encapsulated data packet includes the first data ciphertext;

obtaining a PIN, and determining a first key based on the PIN and the random factor;

The encapsulated data packet is decrypted based on the first key to obtain access control data plaintext.
The method according to claim 6, wherein the data acquisition request includes a PIN, and the PIN is used to verify whether the user's identity is legal.
The method according to claim 6, wherein the receiving the encapsulated data packet sent by the server comprises:

Get the second key;

receiving the encrypted encapsulated data packet sent by the server;

Decrypt the encrypted encapsulated data packet using the second key to obtain an encapsulated data packet.
The method according to claim 6, wherein the encapsulated data packet further comprises executable instructions, and the decrypting the encapsulated data packet based on the first key to obtain the plaintext of the access control data comprises:

obtaining the first data ciphertext in the encapsulated data packet, and decrypting the first data ciphertext based on the first key to obtain access control data plaintext;

Obtain executable instructions in the encapsulated data package, and perform a write operation on the plaintext of the access control data based on the executable instructions.
A chip, applied to an electronic device, characterized in that it is used for executing the method according to any one of claims 1-9.
An electronic device, characterized by comprising the chip of claim 10 .