CN101917216A - System and method for realizing safe mobile application by adopting Bluetooth intelligent card - Google Patents

Abstract

The invention offers a system and a corresponding method for realizing safe mobile application by adopting a Bluetooth non-contact intelligent card. The system comprises a mobile terminal, a Bluetooth non-contact intelligent card module and a background host computer, wherein the Bluetooth non-contact intelligent card module comprises a dual-interface intelligent card, a main controller, a Bluetooth communication assembly, a power supply assembly, a power switch and a card base support, the main controller is used for controlling the communication between the dual-interface intelligent card and the Bluetooth communication assembly and the communication between the Bluetooth communication assembly and the mobile terminal, the mobile terminal is communicated with the background host computer through a mobile communication network, finally completes communication and interaction between the dual-interface intelligent card and the mobile terminal, and also completes safe communication and interaction between the dual-interface intelligent card and the background host computer so as to realize the safe mobile application based on the intelligent card. The system of the invention has the advantages of creditability, safety and lower cost.

Description

A kind of Bluetooth intelligent card that adopts realizes that safety moves the system and method for using

Technical field

The present invention relates to the smart card security technical field, more specifically, relate to a kind of contactless smart card of band function of Bluetooth communication that adopts to realize the system and method for safe mobile application.

Background technology

Smart card mainly is the cpu chip card, because its inside possesses independently microprocessor chip, its fail safe gains public acceptance, thereby is used for fields such as identification, the means of payment, encrypting and decrypting and secure information storage in a large number.

In China, along with the Golden Card Program industry-by-industry that deepens continuously, the smart card issued volume surpasses 10,000,000,000, is mainly used in industries such as identity card, telecommunications, finance, public transport, campus, social security, medical treatment, become people live in the middle of an indispensable part.

Continuous development along with smart card techniques, except contact type intelligent card, the open environment of Java card and many application safeties standard of global platform have also occurred, made a plurality of Secure Application can be present in simultaneously on the sheet smart card, can bring more facility to people.But because smart card itself also lacks man-machine interface and communication capacity at present, the distribution of a plurality of application and management become the problem that is difficult to solve on the smart card, make the target of one card for multiple uses be difficult to realize.

On the other hand, personal digital assistant device, especially the mobile phone terminal technical development is rapid, and sales volume is huge, and popularity rate is very high.The near-field communication technology, promptly the NFC technology is the new technology that mobile phone is combined with multi-application smart card, utilizes the online function of mobile phone terminal, for the smart card distribution and the management of using provide new effective means more, has broad application prospects.

But the NFC mobile phone is the novel mobile phone that has antenna, and this novel mobile phone needs the long development time, needs a large amount of customized ability of common carrier to popularize.Be not applied confirm and the accepting extensively of people before, the enthusiasm of mobile phone terminal manufacturer and common carrier exploitation and popularization NFC mobile phone is not high.In addition, for the storage mobile phone, the neither one effective method combines itself and smart card especially.

Therefore, mobile phone terminal is difficult to combine with smart card at present, makes mobile application such as on-the-spot mobile phone card-brushing operation and mobile phone remote transaction lack safety guarantee, has hindered application and development such as mobile-phone payment.

Summary of the invention

The technical problem to be solved in the present invention is the system and method that the realization mobile application security of a kind of convenience and economy is provided for portable terminal.

For achieving the above object, one aspect of the present invention provides a kind of system, comprises portable terminal, bluetooth non-contact intelligent card module and background host computer, described bluetooth non-contact intelligent card module comprises double-interface smart card, master controller, the Bluetooth communication assembly, power supply module, mains switch and Ka Ji support, wherein:

Described double-interface smart card, it is the smart card assembly that possesses the 13.56Mhz contactless communication interface that meets the ISO14443 standard simultaneously and meet the contact interface of ISO7816 standard, it is an independently information process unit, be used for depositing safely user's information, and can be safely in unit inter-process user profile;

Described Bluetooth communication assembly adopts 2.4Ghz communication frequency and mobile terminal device to carry out radio communication according to Bluetooth protocol;

Described power supply module is used for to double-interface smart card, master controller and Bluetooth communication assembly power supply;

Described card base supports, is that each assembly for above-mentioned bluetooth non-contact intelligent card module provides firm product encapsulation;

Described master controller is used to control between described Bluetooth communication assembly and the described double-interface smart card and communicates by letter, and Bluetooth communication assembly and communications of Mobile Terminals, finishes the communication between smart card and the mobile phone;

Described portable terminal is the information terminal apparatus that is used for mobile data applications, possess information processing, mobile communication, function of Bluetooth communication and human-machine interface function, communicate by letter with background host computer by mobile communications network, finish the secure communication of double-interface smart card and background host computer, to realize safe mobile application based on smart card.

In the said system, described portable terminal is a mobile phone terminal.

In the said system, described double-interface smart card is the smart card that meets the JavaCard standard.

In the said system, described portable terminal is communicated by letter with background host computer by WLAN.

In the said system, described Bluetooth communication assembly and master controller are integrated.

According to a further aspect in the invention, also provide a kind of method of the realization safe mobile application based on said system, comprised the following steps:

Described master controller in the described bluetooth non-contact intelligent card module makes between described double-interface smart card and the described Bluetooth communication assembly and communicates by letter;

Described portable terminal is by function of Bluetooth communication and described bluetooth contactless smart card module communication;

Secure Application in application software on the described portable terminal and the described double-interface smart card is mutual;

Described background host computer is by mobile communications network and described communication of mobile terminal, thereby sets up data channel with the Secure Application in the described double-interface smart card;

Finish of the safety management of described background host computer to application of IC cards, and the operation of the secure interactive of background application and application of IC cards.

In the said method, also comprise step:

The SIM/UIM card binding of the common carrier in described bluetooth non-contact intelligent card module and the described portable terminal.

In the said method, also comprise step:

Secure Application in the described double-interface smart card can be finished the operation of swiping the card of near field payment by the noncontact interface, and provides the safety certification operation by contact interface for long-range mobile application.

In the said method, also comprise step:

Described background host computer can be used smart card security by mobile communications network safely and download in the described double-interface smart card.

This method can be various mobile application, comprises the on-site payment of mobile e-business and employing mobile phone, and comprehensive high level security solution is provided, and it has the following advantages:

1, secure and trusted

The present invention has realized combining of smart card techniques and portable terminal, and the safety that makes various application on the portable terminal can utilize smart card to provide is supported, becomes the higher application of degree of safety and confidence level.Such as present Mobile banking not as the support of the net shield that contains smart card of computer, so can only finish the function of part Web bank, and adopt Mobile banking of the present invention, just can use the digital certificate the same, realize the mobile banking service of the safety of Full Featured movable type with Web bank.

2, economical and practical

Because what the present invention adopted is the bluetooth contactless smart card, does not need to transform existing portable terminal, or uses the novel NFC terminal of the band antenna of higher cost, so greatly reduce the cost that portable terminal combines with smart card.On the other hand, the operation owing to swipe the card in employing mobile phone of the present invention scene, be by bank and public transport all the contactless communication technology of the 13.56Mhz of accepted standard finish, so saved the social cost of disposal environment change, can be not only fast but also economize popularizing that ground promotes that various mobile securities use.

3, be widely used

Based on the multi-functional characteristic of mobile phone terminal and the security feature of smart card, the present invention can be used to various people's daily uses based on mobile phone, Mobile banking for example, mobile phone card-brushing, mobile phone is taken pubic transport, mobile phone shopping online, mobile phone booking, the handset identities authentication, the mobile phone gate inhibition is by controlling or the like with mobile phone remote.

Description of drawings

Fig. 1 adopts the bluetooth contactless smart card to move the system architecture diagram of using to realize safety.

Fig. 2 is the cut-away view of bluetooth non-contact intelligent card module.

Fig. 3 adopts the method flow diagram of bluetooth contactless smart card to realize that mobile security is used.

Embodiment

In order to make purpose of the present invention, technical scheme and advantage clearer,, the mobile security of the concrete case study on implementation according to the present invention used further describe below in conjunction with accompanying drawing.Should be appreciated that concrete example described herein only in order to explanation the present invention, and be not used in qualification the present invention

Existing contactless smart card generally contains antenna, adopts the contactless communication controller part and the intelligent card chip part of 13.56Mhz frequency.Intelligent card chip can be installed and support the safety card operating systems of using more, by the contactless communication interface, accepts the POS machine with the outside and communicates alternately then, the scene of the finishing application of swiping the card.The initial distribution and the follow-up management of each application in the contactless smart card, can only finish by on-the-spot card reader, like this, make troubles for the application distribution and the management of the smart card that involves a plurality of application publishers, hinder the smart card popularizations of using more, increased social cost.

In addition, the development need portable terminal of mobile e-business provides security guarantee, but inconvenience such as existing mobile phone terminal are used for the USB net shield that includes safety chip of computer.

Contactless smart card combines with portable terminal, and the paste card mode that can adopt special-shaped card and portable terminal to be pasted together can not be utilized the application in the data channel management smart card of portable terminal like this; Can also adopt the NFC technology, smart card is integrated into portable terminal inside, or utilize the mode of the communication intelligent card of common carrier, so just need exploitation to have the novel NFC mobile phone of 13.56Mhz short-range communication antenna.

The present invention is connected by bluetooth with mobile terminal device by adopting bluetooth non-contact intelligent card module, thereby a kind of system that can guarantee to move the safety of using on existing portable terminal is provided.As shown in Figure 1.This system mainly is made up of following components: portable terminal, bluetooth non-contact intelligent card module and background host computer.

Portable terminal 101 is portable messaging devices, is used for people's liaison anywhere or anytime, also can finish the data application function of online or off line, possesses man-machine interface, mobile communications network communication function and function of Bluetooth communication.

Background host computer 102 is backstage computer applications systems that the on-line Application service is provided for portable terminal 101.Portable terminal 101 is set up data communication by mobile communications network withbackground host computer 102 and is connected.Operate in the application software on theportable terminal 101, can carry out alternately with the background host computer application system.

Bluetooth non-contactintelligent card module 103 is the non-contact intelligent card modules that have function of Bluetooth communication, can set up data communication withportable terminal 102 by function of Bluetooth communication and be connected.Need carry out the equipment pairing according to the Bluetooth communication standard when initially connecting between the two, follow-up connection needs only when the two all has the power supply power supply and just is provided with from being dynamically connected according to matching.

The inside of bluetooth non-contactintelligent card module 103 is formed as shown in Figure 2, comprises double-interface smart card, master controller, and the Bluetooth communication assembly, power supply module, mains switch and Ka Ji support.

Double-interfacesmart card 202 is the smart card assemblies that possess the contactless communication interface of the employing 13.56Mhz frequency that meets the ISO14443 standard simultaneously and meet the contact interface of ISO7816 standard, possess antenna, independently information process unit and safety data space, can deposit user's information safely, and safely in unit inter-process user profile.

Bluetoothcommunication assembly 203 contains Bluetooth control chip and the antenna of carrying out Bluetooth communication protocol, can establish a communications link according to Bluetooth communication standard and other bluetooth equipment.

Master controller 204 is microprocessors, is connected with Bluetoothcommunication assembly 203 with double-interfacesmart card 202 respectively by serial line interface, finishes the conversion of intelligent card interface agreement and Bluetooth communication protocol.

Power supply module 205 contains battery and charging unit, is used for to double-interfacesmart card 202,master controller 204 and 203 power supplies of Bluetooth communication assembly.

Mains switch 206 is used for controlling the mains switch of bluetooth non-contactintelligent card module 103, possesses the function that timing automatic is closed.

The card base supports 201 each assemblies for above-mentioned bluetooth contactless smart card that firm product encapsulation is provided.

According to an embodiment of safe mobile application system of the present invention, the user operates themains switch 206 on the bluetooth non-contactintelligent card module 103, makespower supply module 205 be 103 power supplies of bluetooth non-contact intelligent cardmodule.Master controller 204 in the bluetooth non-contactintelligent card module 103 is 8-bit microprocessors, is connected with the serial line interface of the contact of double-interfacesmart card 202 respectively by serial port, adopts the command format of ISO7816 agreement to carry out exchanges data; Be connected with the serial port of Bluetoothcommunication assembly 203 simultaneously, adopt Bluetooth communication protocol to carry out exchanges data, thereby finish double-interfacesmart card 202 by ISO7816 agreement and outside communicating by letter.

Bluetoothcommunication assembly 203 is set up Bluetooth wireless communication withportable terminal 101 and is connected, control and protocol conversion throughmaster controller 204, make double-interfacesmart card 202 can set up the data path of smartcard command withportable terminal 101, so just realized combining closely of application of IC cards and portable terminal application, made that the application on the portable terminal can utilize smart card to ensure safety.

After double-interfacesmart card 202 andportable terminal 101 are set up data and are connected, on the one hand, mobile communication function byportable terminal 101,background host computer 102 can be set up data with double-interfacesmart card 202 and be connected, thereby can application of IC cards be issued in the double-interfacesmart card 202 safely according to the global platform standard of smart card, and finish follow-up application of IC cards life cycle management.Simultaneously, double-interfacesmart card 202 can also provide security service for the remote application betweenportable terminal 101 and thebackground host computer 102, as digital signature, data encryption feature.

On the other hand, application software on theportable terminal 101 can be directly and double-interfacesmart card 202 mutual, finish the selection application of IC cards and send the operation that smart card APDU orders, trading activity thereby swipe the card in management double-interfacesmart card 202 and outside scene of accepting the POS machine.Simultaneously, the data in the double-interfacesmart card 202 directly be inquired about and be read to the application software on theportable terminal 101 can according to authority levels, and the smart card security application of finishing off line, as generating dynamic password.

Persons of ordinary skill in the art may appreciate that described portable terminal can be a mobile phone terminal.

Persons of ordinary skill in the art may appreciate that described double-interface smart card can be the smart card that card operating system meets the JavaCard standard.

Persons of ordinary skill in the art may appreciate that described portable terminal can communicate by letter with background host computer by WLAN.

Persons of ordinary skill in the art may appreciate that described Bluetooth communication assembly can be integrated with master controller.

Said system can ensure and move the fail safe of using.Now take advantage of the example that is applied as of public transport, describe with mobile phone card-brushing.

In China, existing more than 100 city adopted non-contacting mass transit card to take subway or bus, and people be as long as can ride once swiping the card, not only fast but also safety.These card major parts are Mifare cards, and small part is the CPU smart card.In these cards, deposit the inside number of the account of public transport payment system and the authentication secret of process of exchange safely, thereby can pass through the contactless communication interface, mutual with public transport card-reading terminal facility, finish the operation by bus of deducting fees.

The use of existing mass transit card is to carry out hair fastener in public transport card sending mechanism inside earlier, i.e. the initialization that public transport is used and individualized writes number of the account and key information in the card safely, is dispensed into each mass transit card commercial networks then; When the user bought mass transit card, card is on-the-spot to be write the amount of money in the card by supplementing terminal security ground with money purchasing, and finishes and supplements with money; The user just can swipe the card by bus with mass transit card like this.

But existing mass transit card is purchased card and supplemented with money all and will go to handle to the public transport site, and is very inconvenient.Each relatively independent mass transit card system of self-operating one cover of each city can not use with striding in addition, has arrived each city, needs to buy the mass transit card in local city.The public transport of cross-region is general, because the key difference is difficult to realize.

Adopt the present invention, can and supplement with money in the air in the aerial download that has the safety that realizes mass transit card on the mobile phone now.At first, the user obtains bluetooth non-contact intelligent card module and itself and mobile phone terminal is done Bluetooth pairing setting through buying or being given, and contains contactless smart card and antenna in this module, and function of Bluetooth communication is arranged.The user starts the switch of bluetooth non-contact intelligent card module, makes that the smart card in the module can be communicated by letter with its mobile phone terminal by bluetooth, passes through the switching of the public transport applications client on its mobile phone terminal, and then finishes secure communication with the public transport background system.At this moment, the user can select to download mass transit card, the encrypted tunnel in the module between smart card and the public transport background system, transaction flow handling procedure, personalized number of the account and key etc. that public transport is used, be installed in the smart card in the module, finish the aerial downloading process of mass transit card.

After the user downloads to its bluetooth non-contact intelligent card module by its mobile phone terminal with mass transit card, because contactless communication interface and antenna that the smart card in the module has the 13.56Mhz frequency have simultaneously been got on the bus so just can swipe the card.Certainly before the bankcard consumption, need supplement with money earlier.At this moment, the user can also supplement with money easily by linking to each other with background host computer in the air except going to the site with supplementing with money terminal supplements with money.

Persons of ordinary skill in the art may appreciate that in said system and only use as an example with mass transit card, and unrestricted.According to other embodiments of the invention, also can be swipe the card bank card application, stored value card application, ticketing service application, trade company's member card application of class etc. of scene, and the mobile phone of remote payment class is transferred accounts, mobile phone refund, mobile phone shopping etc., needs to adopt the application that smart card combines with portable terminal.

Based on one aspect of the present invention, the invention also discloses a kind of method of the realization mobile application security that combines based on smart card techniques and portable terminal technology.Mainly comprise following key step as shown in Figure 3:

At first, from step 301, the user opens the mains switch 206 of bluetooth non-contactintelligent card module 103, is module for power supply, connects step 302 below;

In step 302,103master controller 204 is set up the data channel between double-interface card 202 and theBluetooth communication assembly 203 by serial line interface in the bluetooth non-contact intelligent card module, connects step 303 below;

In step 303,master controller 204 controlBluetooth communication assemblies 203 are set up bluetooth communication channel with theportable terminal 101 of outside; Before communication for the first time, need set up the Bluetooth pairing relation, connect step 304 below;

In step 304, double-interfacesmart card 202 can with the application direct communication on theportable terminal 101, application on theportable terminal 101 can be operated double-interfacesmart card 202, select application of IC cards, and according to authorizing application system, security services such as data encryption or data signature are provided by application of IC cards, have ensured the fail safe of mobile application, connect step 305 below;

In step 305, double-interfacesmart card 202 is with after client application on theportable terminal 101 is connected, if according to application requirements, judging whether needs to connect background host computer, if need not need to connect then connect step 307 process ends; Connect if desired and then connect step 306;

In step 306, double-interfacesmart card 202 is directly communicated by letter withbackground host computer 102 byportable terminal 101 and is carried out data interaction, finishes the interactive operation of application specifies, finishes to step 307.

Persons of ordinary skill in the art may appreciate that said method can also comprise the following steps:

Bluetooth non-contactintelligent card module 103 is when being issued to the user, with the SIM/UIM card binding of common carrier in theportable terminal 101;

Bluetooth non-contactintelligent card module 103 by the client application in theportable terminal 101, is bound checking withbackground host computer 102 and is activated before use.

Persons of ordinary skill in the art may appreciate that said method can also comprise the following steps:

Secure Application in the double-interfacesmart card 202 can be finished the operation of swiping the card of near field payment by the noncontact interface, and provides the safety certification operation by contact interface for long-range mobile application.

Persons of ordinary skill in the art may appreciate that said method can also comprise the following steps:

Background host computer 102 can be used smart card security by mobile communications network safely and download in the described double-interfacesmart card 202.

Be example with Mobile banking's digital signature applications below, describe.

The user of existing Mobile banking depends on simple user name encrypted code method, can add that further phone number registers and discern inspection in advance, but can't prevent to reside in the attack of the malice trojan horse program of smart mobile phone inside to username and password.Bank is commonly called as the digital signature equipment of net shield for the computer user granting, but the net shield is given the mobile phone cellphone subscriber.

Adopt method of the present invention, bank utilizes the fail safe of bluetooth non-contact intelligent card module, and the digital signature applications that the net shield is such is from being issued to the double-interface smart card in the air, and the user utilizes the cellular network shield, can finish with computer on the same wholesale money transfer transactions.Concrete grammar is as follows:

The user opens the power supply of bluetooth non-contact intelligent card module, and double-interface card in the module and master controller start ready; Master controller connects by serial line interface control double-interface smart card and Bluetooth communication assembly then; Like this, cell-phone customer terminal just can carry out data interaction by Bluetooth communication and double-interface smart card.The user selects the download of bank's cellular network shield from client application, before this, provides rule according to bank's net shield, user applies the cellular network shield, user's cell-phone number has been registered by bank, and has notified the user with the licencing key that the net shield is used with the password envelope; The user inputs after corresponding bank-user name and the password etc., the cell-phone customer terminal smart card of ining succession on the one hand, link to each other with background host computer system of bank by mobile communications network on the one hand, form the pass-through channel of safety, like this, bank's cellular network shield is used and can be downloaded to safely in the middle of the double-interface smart card, and preferred, method for down loading can adopt the global platform technical specification of smart card industry.

When the user carries out wholesale when transferring accounts with Mobile banking, can use by calling mobile phone net shield, transaction content is carried out digital signature.

By above description taken together with the accompanying drawings, one of ordinary skill in the art will appreciate that, the present invention has made full use of smart card security technology and the bluetooth communication capability in the bluetooth non-contact intelligent card module, in conjunction with the mobile communication ability of portable terminal and good client user interface, the security mechanism that provides for the application of portable terminal, avoided the security risk of mobile application effectively, alleviated the investment burden of service providers such as bank external net shield on mobile phone, had than the large economy benefit.

Should be noted that and understand, under the situation that does not break away from the desired the spirit and scope of the present invention of accompanying Claim, can make various modifications and improvement the present invention of foregoing detailed description.Therefore, the scope of claimed technical scheme is not subjected to the restriction of given any specific exemplary teachings.

Claims (9)

1. safe mobile application system that adopts the bluetooth contactless smart card, comprise portable terminal, bluetooth non-contact intelligent card module and background host computer, described bluetooth non-contact intelligent card module comprises double-interface smart card, master controller, the Bluetooth communication assembly, power supply module, mains switch and Ka Ji support, wherein:

Described double-interface smart card, it is the smart card assembly that possesses the 13.56Mhz contactless communication interface that meets the ISO14443 standard simultaneously and meet the contact interface of ISO7816 standard, it is an independently information process unit, be used for depositing safely user's information, and can be safely in unit inter-process user profile;

Described Bluetooth communication assembly adopts 2.4Ghz communication frequency and mobile terminal device to carry out radio communication according to Bluetooth protocol;

Described master controller is used to control between described Bluetooth communication assembly and the described double-interface smart card and communicates by letter, and Bluetooth communication assembly and communications of Mobile Terminals, finishes the communication between smart card and the mobile phone;

Described portable terminal is the information terminal apparatus that is used for mobile data applications, possess information processing, mobile communication, function of Bluetooth communication and human-machine interface function, communicate by letter with background host computer by mobile communications network, finish the secure communication of double-interface smart card and background host computer, to realize safe mobile application based on smart card.

2. system according to claim 1 is characterized in that described portable terminal is a mobile phone terminal.

3. system according to claim 2 is characterized in that, described double-interface smart card is the smart card that meets the JavaCard standard.

4. system according to claim 2 is characterized in that described portable terminal is communicated by letter with background host computer by WLAN.

5. system according to claim 2 is characterized in that, described Bluetooth communication assembly and master controller are integrated.

6. the method based on the realization safe mobile application of the described system of claim 1 comprises the following steps:

Described master controller makes between described double-interface smart card and the described Bluetooth communication assembly and communicates by letter;

Described portable terminal is by the described bluetooth contactless smart card of function of Bluetooth communication module communication;

Secure Application in application software on the described portable terminal and the described double-interface smart card is mutual;

Described background host computer is by mobile communications network and described communication of mobile terminal, thereby sets up data channel with the Secure Application in the described double-interface smart card;

Finish of the safety management of described background host computer to application of IC cards, and the operation of the secure interactive of background application and application of IC cards.

7. method according to claim 6 is characterized in that, also comprises step:

The SIM/UIM card binding of the common carrier in described bluetooth non-contact intelligent card module and the described portable terminal.

8. method according to claim 6 is characterized in that, also comprises step:

Secure Application in the described double-interface smart card can be finished the operation of swiping the card of near field payment by the noncontact interface, and provides the safety certification operation by contact interface for long-range mobile application.

9. method according to claim 6 is characterized in that, also comprises step:

Described background host computer can be used smart card security by mobile communications network safely and download in the described double-interface smart card.

Images