Mobile phone intelligent card, mobile phone terminal, system and method that the aerial circle of stored value card is depositedTechnical field
The present invention is based on mobile communications network and Internet technology, relate in particular to mobile phone intelligent card, mobile phone terminal, system and method that the aerial circle of stored value card is deposited.
Background technology
Development along with mobile payment; The electronization of means of payment and mobile are inevitable inexorable trends; Mobile payment combines the convenience that moves and the independence of E-Payment, and huge mobile phone user and bank card user are that the development of mobile payment provides good basis.Mobile payment mainly is based on the RF-UIM of mobile phone intelligent card and the mobile-phone payment of UIMPASS, utilizes these two kinds of technology just can realize various on-the-spot mobile payment services based on mobile phone.
Aerial circle deposit system plays important effect as the of paramount importance subsystem of mobile payment in mobile payment.
Circle deposit promptly be with the consumer from bank account, claim at ordinary times cash be placed on the mode of consuming payment in the pocket become with the money in consumer's bank account directly circle deposit on (depositing in) IC wafer; That is stored value card arranged; So, the consumer just exempts the risk of carrying cash small change, loss, counterfeit money, being robbed.The fund that circle is deposited is that the individual carries out bankcard consumption mostly under specific consumer environment.Current sphere is deposited the main mode of transaction has self-service circle to deposit to transfer accounts (swipe the card, signatory) and backstage (automatically, manual) dual mode of transferring accounts in batches.
Aerial circle deposit system is by the payment carrier that depends on intelligent mobile phone card; Deposit for mobile phone offline e wallet circle; It all is that load carrier through each self-application carries out associated electrical wallet circle and deposits that the circle of present mobile phone electronic wallet is deposited, and must use specific separately circle to deposit facility and could realize that the stored value card circle deposits.Circle can realize after depositing through mobile phone to payment account consume, supplement with money, e-commerce operations such as inquiry, the line correlation service management of going forward side by side.
The aerial circle of traditional approach has the problem of following several respects:
Mechanisms such as mobile operator, bank finance mechanism all need dispose special-purpose separately circle and deposit facility, realize that cost is big, and lack convenience;
If banking system does not provide circle deposit system, then can not realize enclosing the business of depositing;
Only be directed against single source of funds, independent aerial circle deposit system;
For the multiple hand call payment system of how tame bank or how tame operator and other source of funds sides,, brought the difficulty of management POS to trade company even also need set up POS accepting terminal separately to identical trade company.
Summary of the invention
Seeing that more than, the present invention proposes mobile phone intelligent card, mobile phone terminal, the system and method that the aerial circle of stored value card is deposited.
The method that the aerial circle of the stored value card that the present invention proposes is deposited may further comprise the steps:
The offline e wallet circle that in mobile phone intelligent card, writes at least one source of funds is deposited application, and when obtaining the application that the user selected, the prompting user imports circle and deposits the amount of money and trading password;
It is that the circle of which offline e purse application is deposited business that inquiry applicating category sign indicating number, applicating category sign indicating number are used to distinguish;
Whether inquiry has unacknowledged transaction record; If no, circle is deposited the amount of money, applicating category sign indicating number and aerial circle deposit the platform Number for access and be encapsulated in the upstream data note, send to aerial circle and deposit platform; If have, unacknowledged transaction record before in said upstream data note, also encapsulating;
When aerial circle is deposited platform and is received the upstream data note, the upstream data note is resolved verification, call the application corresponding system through external interface, application system verification circle is deposited the amount of money and trading password, withholds;
Aerial circle is deposited platform and is encapsulated descending circle and deposit the result, and wherein additional withhold result, MAC2 and MAC are sent to corresponding mobile phone intelligent card through Short Message Service Gateway;
When the descending circle of cell phone intelligent card receiver is deposited the result, checking MAC2 and MAC, deciphering and verification serial number add money to stored value card later, deposit in the confirmation indication at circle and enclose and deposit the result, circle is deposited confirmation be packaged into data SMS and send to aerial circle and deposit platform;
Deposit confirmation based on circle, judge whether that circle deposits successfully, if success accomplishes circle and deposit, if unsuccessful, aerial circle is deposited platform and is called the application corresponding system through external interface and enclose to deposit and just dashing.
Further, the method that the aerial circle of said stored value card is deposited, wherein, unacknowledged transaction record before in said upstream data note, also encapsulating, further comprising the steps of:
If reaching, unacknowledged before transaction record sets the bar number; Mobile phone intelligent card is deposited platform initiation circle to aerial circle and is deposited synchronously; Unacknowledged transaction record before the encapsulation also in said upstream data note, receive that aerial circle is deposited the circle of platform and deposited synchronized result after, initiate the next time circle and deposit request;
Set the bar number if unacknowledged before transaction record reaches, directly send the also encapsulation upstream data note of unacknowledged transaction record before.
Further, the method that the aerial circle of said stored value card is deposited wherein, is directly sent the also encapsulation upstream data note of unacknowledged transaction record before, and is further comprising the steps of:
Aerial circle is deposited platform and is received the upstream data note, if the transaction that needs affirmation is arranged, then carries out trade confirmation, and handles this circle and deposit request, returns circle and deposits the result;
Mobile phone intelligent card is received to enclose and is deposited the result, the transaction record that deletion has been confirmed.
Further, the method that the aerial circle of said stored value card is deposited, wherein, unacknowledged transaction record before in said upstream data note, also encapsulating, further comprising the steps of:
The data length of unacknowledged transaction record reaches in limited time before, and the mobile phone intelligent card request is supplemented with money synchronously, the Transaction Information of preserving is sent to aerial circle deposit platform;
When the aerial circle of cell phone intelligent card receiver is deposited supplementing synchronized result with money and identifying success synchronously of platform, initiate to enclose next time the request of depositing.
Further, the method that the aerial circle of said stored value card is deposited also comprises following at least arbitrary encryption and decryption operation:
Mobile phone intelligent card is deposited platform the upstream data note is deciphered upstream data SMS encryption, aerial circle; Perhaps
Mobile phone intelligent card deposits to circle that confirmation is encrypted, aerial circle is deposited platform this circle is deposited the confirmation deciphering.
The method that the aerial circle of the stored value card that the present invention proposes is deposited may further comprise the steps:
The offline e wallet circle that in mobile phone intelligent card, writes at least one source of funds is deposited application, and when obtaining the application that the user selected, the prompting user imports circle and deposits the amount of money and trading password;
It is that the circle of which offline e purse application is deposited business that inquiry applicating category sign indicating number, applicating category sign indicating number are used to distinguish;
Whether inquiry has unacknowledged transaction record; If no, circle is deposited the amount of money, applicating category sign indicating number and aerial circle deposit the platform Number for access and be encapsulated in the upstream data note, send to aerial circle and deposit platform; If have, unacknowledged transaction record before in said upstream data note, also encapsulating;
Deposit the descending circle of platform and deposit the result when mobile phone intelligent card receives aerial circle; Checking MAC2 and MAC, deciphering and verification serial number add money to stored value card later; Deposit in the confirmation indication circle at circle and deposit the result; Circle is deposited confirmation be packaged into data SMS and send to aerial circle and deposit platform, accomplish the aerial circle of stored value card and deposit.
The system that the aerial circle of the stored value card that the present invention proposes is deposited comprises that mobile phone intelligent card, aerial circle deposit platform and application system, wherein:
Mobile phone intelligent card comprises:
Message unit; Be disposed at the offline e wallet circle that writes at least one source of funds and deposit application; Obtain the application of having selected through mobile phone UTK menu mode; The prompting user imports circle and deposits the amount of money and trading password, sends circle to card operating system and deposits initialization directive, deposits to carry in the initialization directive to enclose at this circle and deposits the amount of money and selected application;
Card operating system; Be disposed at the corresponding relation that stores between application and the applicating category sign indicating number; Receive circle and deposit initialization directive; Inquiry applicating category sign indicating number; It is that the circle of which offline e purse application is deposited business that the applicating category sign indicating number is used to distinguish; Whether inquiry has unacknowledged transaction record; If do not have; Circle is deposited the amount of money, applicating category sign indicating number and aerial circle to be deposited the platform Number for access and is encapsulated in the upstream data note; Send to aerial circle and deposit platform; If have, unacknowledged transaction record before in said upstream data note, also encapsulating sends to the data SMS Dispatching Unit; Receive the aerial descending circle of depositing platform that encloses and deposit the result; Checking MAC2 and MAC, deciphering and verification serial number add money to stored value card later; Deposit in the confirmation indication circle at circle and deposit the result, circle is deposited confirmation be packaged into data SMS and send to the data SMS Dispatching Unit;
The data SMS Dispatching Unit, the data SMS that is disposed at the card operating system encapsulation sends to Short Message Service Gateway, deposits the platform Number for access by Short Message Service Gateway according to the aerial circle in the data SMS, is distributed to aerial circle and deposits platform; Depositing platform from aerial circle receives descending circle and deposits the result and send to card operating system; Receiving circle from card operating system deposits confirmation and sends to aerial circle and deposit platform;
Aerial circle is deposited platform and is comprised:
Application processing unit is disposed at and receives the upstream data note that Short Message Service Gateway sends, and the data note is resolved verification, calls the application corresponding system through external interface; Encapsulate descending circle and deposit the result, wherein additional withhold result, MAC2 and MAC are sent to corresponding data SMS Dispatching Unit through Short Message Service Gateway; The circle that receives mobile phone intelligent card is deposited confirmation, judges whether that circle deposits successfully, if success then accomplishes circle and deposit, if unsuccessful, then call the application corresponding system through external interface and encloses to deposit and just dashing;
External interface comprises at least one interface, is disposed at application system and docks;
Application system is disposed at the verification circle and deposits the amount of money and trading password, and the result that will withhold after withholing returns to application processing unit.
Further, the system that the aerial circle of said stored value card is deposited, wherein:
Said card operating system before unacknowledged transaction record reach when setting bar and counting; Depositing platform initiation circle through the data SMS Dispatching Unit to aerial circle deposits synchronously; Unacknowledged transaction record before in said upstream data note, also encapsulating; After receiving that aerial circle is deposited the circle of platform and deposited synchronized result, initiate the next time circle and deposit request; Before unacknowledged transaction record do not reach when setting bar and counting, directly send the also encapsulation upstream data note of unacknowledged transaction record before.
Further, the system that the aerial circle of said stored value card is deposited, wherein:
Said card operating system before the data length of unacknowledged transaction record reach in limited time, request is supplemented with money synchronously, through said data SMS Dispatching Unit the Transaction Information of preserving is sent to aerial circle and deposits platform; Receive aerial circle deposit platform supplementing synchronized result and sign success synchronously with money the time, initiate the next time circle and deposit request.
Further, the system that the aerial circle of said stored value card is deposited, wherein:
Said card operating system is deciphered the upstream data note upstream data SMS encryption, application processing unit; Perhaps
Said card operating system deposits to circle that confirmation is encrypted, application processing unit is deposited the confirmation deciphering to this circle.
The mobile phone intelligent card that the present invention proposes is used for that to deposit platform mutual with aerial circle, carries out the circle of the stored value card of at least one source of funds is deposited, and comprising:
Message unit; Be disposed at the offline e wallet circle that writes at least one source of funds and deposit application; Obtain the application of having selected through mobile phone UTK menu mode; The prompting user imports circle and deposits the amount of money and trading password, sends circle to card operating system and deposits initialization directive, deposits to carry in the initialization directive to enclose at this circle and deposits the amount of money and selected application;
Card operating system; Be disposed at the corresponding relation that stores between application and the applicating category sign indicating number; Receive circle and deposit initialization directive; Inquiry applicating category sign indicating number; It is that the circle of which offline e purse application is deposited business that the applicating category sign indicating number is used to distinguish; Whether inquiry has unacknowledged transaction record; If do not have; Circle is deposited the amount of money, applicating category sign indicating number and aerial circle to be deposited the platform Number for access and is encapsulated in the upstream data note; Send to aerial circle and deposit platform; If have, unacknowledged transaction record before in said upstream data note, also encapsulating sends to the data SMS Dispatching Unit; Receive the aerial descending circle of depositing platform that encloses and deposit the result; Checking MAC2 and MAC, deciphering and verification serial number add money to stored value card later; Deposit in the confirmation indication circle at circle and deposit the result, circle is deposited confirmation be packaged into data SMS and send to the data SMS Dispatching Unit;
The data SMS Dispatching Unit, the data SMS that is disposed at the card operating system encapsulation sends to Short Message Service Gateway, deposits the platform Number for access by Short Message Service Gateway according to the aerial circle in the data SMS, is distributed to aerial circle and deposits platform; Depositing platform from aerial circle receives descending circle and deposits the result and send to card operating system; Receiving circle from card operating system deposits confirmation and sends to aerial circle and deposit platform.
The mobile phone terminal that the present invention proposes comprises aforesaid mobile phone intelligent card.
The present invention is based on mobile communications network and Internet technology, utilize mobile phone,, bank, public transport and other multiple payment accounts enclosed deposit through short message, UTK menu mode.
The present invention adopts modularized design; Be prone to dispose; Provide standard interface to link to each other with third party's platform; Have efficient, quick, safe, easy-to-use, as to be prone to expansion characteristics; Not only support many source of funds to insert; Also can very easily system be expanded and upgrade, so that to the support of some other payment carrier.The approach such as the stored value card that fast, does not receive space-time region restriction is supplemented with money, related account is transferred accounts that provide users with the convenient have greatly made things convenient for the use of user to the mobile payment related service.
Description of drawings
In conjunction with accompanying drawing subsequently, what from following detailed description, may be obvious that draws above-mentioned and other purposes, characteristic and advantage of the present invention.In the accompanying drawings:
Fig. 1 illustrates the system architecture synoptic diagram that the aerial circle of stored value card is deposited in the embodiment of the invention, and this system comprises mobile phoneintelligent card 1, circle is depositedplatform 2 andapplication system 3 in the air.
Fig. 2 illustrates the method flow synoptic diagram that the aerial circle of stored value card is deposited in the embodiment of the invention.
Embodiment
To at length discuss hereinafter, the disclosure can adopt the embodiment of the embodiment of complete hardware, complete software or comprise the form of both embodiment of hardware and software element.Software implementation of the present disclosure can be including, but not limited to firmware, resident software, microcode or the like.
Fig. 1 illustrates the system architecture synoptic diagram that the aerial circle of stored value card is deposited in the embodiment of the invention, and this system comprises mobile phoneintelligent card 1, circle is depositedplatform 2 andapplication system 3 in the air.Wherein, Mobile phoneintelligent card 1, for example RFID UIM can comprisemessage unit 11,card operating system 12 and dataSMS Dispatching Unit 13; Aerial circle is depositedplatform 2 and can be comprisedapplication processing unit 21,external interface 22 andSystem Management Unit 23, and concrete structure is also shown in Fig. 1.To combine Fig. 1 below, various piece will be elaborated.
First embodiment
Message unit 11 is disposed at the offline e wallet circle that writes at least one source of funds in advance and deposits application; Write the stored value card circle deposit application examples in this way with the prior copy of the relative program of each application in the message unit 11 of mobile phone intelligent card; Perhaps also can download in the mobile phone intelligent card, comprise download or remote download etc. from this locality through the mode of downloading.Certainly, also can accomplish the operation that writes relative program through other mode of this area.The stored value card circle is deposited application examples such as bank's application, public transport application, the application of welfare card, mobile operator application and other application etc.; After writing the stored value card circle and depositing application; In the UTK of mobile phone terminal menu, show the application that has write, select to use through mobile phone UTK (user identification application development instrument) menu mode.UTK is appreciated that to be the order of one group of exploitation value-added service, and a kind of small-sized programming language can be used for developing mobile phone intelligent card UTK menu and operation sheet operating system etc.For example write public transport and use, show that in the UTK menu this public transport uses, the user can select public transport to use to enclose to deposit.Message unit 11 prompting users import circle and deposit the amount of money and trading password, and this trading password is used to enclose the business of depositing and is provided with, and can guarantee to enclose the security of depositing.This trading password can be transaction (payment) password of source of funds side, corresponding to each application system, and during for example bank uses, the payment of bank card password that bank requires user's input to enclose to deposit etc.Send circle by message unit 11 to card operating system 12 and deposit initialization directive, deposit to carry in the initialization directive to enclose at this circle and deposit the amount of money and selected application.
Card operating system 12 is cell phone intelligent card operation systems (COS) that mobile phone intelligent card itself has, and incard operating system 12, stores the corresponding relation between application and the applicating category sign indicating number.
When UIM is stuck in each initiation charging request; The go forward data message of n Successful Transaction or failed transactions of capital band; When the UIM card is received the descending load value data note (descending circle is deposited the result) of a correspondence; Show that empty circle platform received the upstream request of UIM card, promptly empty circle platform the is treated preceding Transaction Information several times that carries in the upstream request, at this time the UIM card just can be deleted the Transaction Information of having confirmed.
Card operating system 12 receives after circle deposits initialization directive frommessage unit 11, at first whether has unacknowledged transaction record in the inquirying card, if do not have, explain that transaction before is all successful.Set the bar number if unacknowledged transaction record is arranged and reach, for example 3 below be that example describes with 3, still, it will be understood by those skilled in the art that said just for example, can change setting bar number.When reaching 3, then do not allow this time circle to deposit transaction, must initiate circle and deposit synchronously, receive that aerial circle is deposited the circle of platform and deposited synchronized result after, could allow the next request of depositing of enclosing.If do not reach 3, then allow to initiate this time to enclose to deposit transaction, and N bar transaction record (<=3) before subsidiary; After empty circle platform is received,, then carry out trade confirmation if the transaction that needs affirmation is arranged; And handle this circle and deposit request; Return circle then and deposit the result, card is received to enclose and is deposited after the result, the transaction record that deletion has been confirmed.
Receive the restriction of short message length; The length of the preceding Transaction Information several times that carries in the request msg that the UIM card sends is conditional; At this time go up in limited time (tentative at present is 3), just do not allow the UIM card to continue to initiate charging request if the preceding length of trading information data several times that the UIM card is preserved arrives.At this moment the user must do and once supplement synchronous operation with money, and the Transaction Information that the UIM card is preserved sends to aerial circle and deposits platform, and aerial circle is deposited and returned to result of UIM card after platform is received, can be with the Transaction Information deletion of storage after the UIM card is received.
The synchronic command of supplementing with money that the UIM card is initiated is when the 4th user clicks the UTK menu (3 times all not receiving the recharging result instruction perhaps receives the recharging result instruction for 1 time and do not receive the recharging result instruction for 2 times), must carry out synchronous operation by UIM card prompting user.This moment, the UIM card must be deposited after synchronized result instruction and result's sign of platform be success synchronously receiving aerial circle, but just run user next time supplement operation with money.If before the sync response command reception, the situation that the UIM card resets appears, and the UIM after resetting cannot carry out and supplement operation with money, receives sync response only or initiates to supplement with money synchronic command once more.The user can also pass through online recharge, and this is that the UIM card is received supplementing with money after the triggering command of empty circle platform transmission, and the UIM card then encloses the request of depositing according to the same flow process of manual click UTK menu.
Card operating system 12 is deposited the application query applicating category sign indicating number of selecting in the initialization directive based on circle; It is that the circle of which offline e wallet is deposited business that the applicating category sign indicating number is used to distinguish, and promptly can confirm based on the applicating category sign indicating number and uses corresponding external interface and application system.The aerial circle that UTK is write is in advance deposited platform Number for access (being meant the Short Message Service Gateway access code), applicating category sign indicating number and circle and is deposited the amount of money and be encapsulated in the data SMS; The aerial circle of depositingplatform 2 appointments according to mobile phoneintelligent card 1 and aerial circle is deposited the transaction standard and is encapsulated, and sends to dataSMS Dispatching Unit 13.
DataSMS Dispatching Unit 13 sends to Short Message Service Gateway through OTA (Over The Air, the aerial transmission) short message channel with the data SMS ofcard operating system 12 encapsulation.Short Message Service Gateway receives the upstream data note that dataSMS Dispatching Unit 13 sends, and deposits the platform Number for access according to the aerial circle in the data SMS, is distributed to aerial circle anddeposits platform 2, is deposited theapplication processing unit 21 ofplatform 2 by aerial circle and handles.
Application processing unit 21 receives after the upstream data note; After the parsing of data note, verification, deciphering,, convert applied business to and handle message through protocol conversion; Callapplication corresponding system 3 through external interface; Theapplication system 3 checkout transaction amount of money and trading passwords are withholdd, and return results is given application processing unit 21.For example, the user selects public transport to use, and it is 30 yuan that circle is deposited the amount of money, then calls the public transport application system through external interface and therefrom deducts 30 yuan and be punched into stored value card so that mobile phone terminal will be withholdd.
External interface 22 comprises at least one interface, is disposed atapplication system 3 to dock, for example; Using aerial transaction interface through bank docks with banking system; Use aerial transaction interface through public transport and dock,, dock with the mobile operator operation system through the aerial transaction interface of mobile operator through aerial transaction interface of welfare card and welfare card business system docking with the public transport operation system; Use aerial transaction interface through other and dock with other application systems, or the like.
System Management Unit 23 is used for system management, application management, card management and security service management etc.
Application system 3 receives circle fromexternal interface 22 and deposits the amount of money, deposit the amount of money according to circle and withhold, and the result that will withhold returns toapplication processing unit 21.
Application processing unit 21 receives the result that withholds; Transaction Information deposited in record this time circle; Stateful transaction is set to source of funds and withholds successfully, deposits the phone number of initialization directive and adds the data SMS head according to sending circle, deposits the transaction order according to aerial circle and is packaged into after descending circle deposits the result data messaging format; Calculate MAC2 and MAC, append to descending circle and deposit in the result data note.This descending circle is deposited the form of result through data SMS be sent to Short Message Service Gateway, Short Message Service Gateway is according to the phone number of note head, and distributing data note to corresponding mobile phone is about to descending circle and deposits the result and send to dataSMS Dispatching Unit 13.
MAC is for preventing that aerial data SMS from being distorted the check code that adds, and is the data note to be carried out 3DES encrypt the check code that generates.MAC2 is used for the aerial circle of 1 pair of mobile phone intelligent card to depositplatform 2 and carry out validity checking, and the data of MAC2 comprise information such as dealing money, trade date and exchange hour.Above-mentioned encryption, calculating MAC2 and MAC can adopt method of the prior art.
DataSMS Dispatching Unit 13 sends data SMS tocard operating system 12, bycard operating system 12 invoke user recognition application developing instruments (UTK).UTK judges whether to deposit the result for descending circle according to the applicating category sign indicating number of data SMS head, if then by UTK descending circle is deposited the result and send to cardoperating system 12.
Card operating system 12 receives descending circle and deposits the result, based on the key that writes through 3DES calculate MAC2 and descending in the MAC2 comparison, then verify like unanimity and to pass through.Checking MAC2 and MAC obtain the association key data decryption, upgrade the stored value card data, upgrade transaction details.Be verification MAC2 and MAC; Deciphering; The verification serial number adds money to stored value card later; And deposit in the confirmation indication circle at circle and deposit successfully; Otherwise the indication circle is deposited unsuccessful; Circle is deposited confirmation be packaged into data SMS and send to dataSMS Dispatching Unit 13, dataSMS Dispatching Unit 13 receives circle and deposits confirmation and send toapplication processing unit 21.
Application processing unit 21 receives circle from Short Message Service Gateway and deposits confirmation, judges whether to enclose to deposit successfully, if success; Then accomplishing circle deposits; If unsuccessful then call the application corresponding system and enclose to deposit to dash and just operate, put down account and handle, assurance account amount of money consistance through external interface.
The present invention utilizes mobile phone intelligent card to have the characteristics of computing power; Deposit through the stored value card circle that in mobile phone intelligent card, writes corresponding different source of funds and to use and to generate the UTK menu, make the cellphone subscriber through mobile phone terminal safety, realize that the stored value card circle deposits business fast by the mode of data SMS.Automatically reconciliation is just being dashed automatically, and is being carried out the account transfer of financial resources whenever and wherever possible, has good convenience.
Fund circle in the mobile payment of the present invention is deposited the many source of funds of business support, supports many card vendors to insert, and has good extendability.In addition, it is mutual to deposit platform through mobile phone terminal and aerial circle, has avoided the source of funds quadrate part to affix one's name to the trouble at a plurality of POS terminal.
Second embodiment
The present invention can also carry out the bidirectional encipher authentication; One card one is close; Two-way mobile phone intelligent card and the aerial circle of being meant deposited platform; Mobile phoneintelligent card 1 is depositedplatform 2 with aerial circle and is write identical key, carries out encryption and decryption, and performed encryption and decryption operation can comprise following arbitrary to operation at least: 1) 1 pair of upstream data SMS encryption of mobile phone intelligent card, aerial circle are deposited 2 pairs of upstream data notes deciphering of platform; 2) 1 pair of circle of mobile phone intelligent card is deposited the confirmation encryption, aerial circle is deposited 2 pairs of these circles of platform and deposited the confirmation deciphering.The present invention also has the abnormality processing function, and is safe.To combine various piece to describe below.
1) 1 pair of circle of mobile phone intelligent card deposits that initialization directive is encrypted,aerial circle deposits 2 pairs of circles of platform and deposit the process of initialization directive deciphering and be:
Card operating system 12 uses association key that the upstream data note is carried out 3DES and encrypts, through dataSMS Dispatching Unit 13, mail to aerial circle via Short Message Service Gateway anddeposit platform 2.
Application processing unit 21 receives the upstream data note of encrypting and add MAC that Short Message Service Gateway sends; Connect encryption equipment according to the applicating category sign indicating number and obtain association key; The integrality of the data that acknowledge receipt of through the MAC verification after the verified, is resolved the upstream data note of having encrypted.Continue to carry out the circle identical and deposit operation with first embodiment.
2) 1 pair of circle of mobile phone intelligent card deposits that confirmation is encrypted,aerial circle deposits 2 pairs of these circles of platform and deposit the process of confirmation deciphering and be:
Card operating system 12 generates circle and deposits confirmation, obtains key and circle is deposited confirmation encrypts, and calculate MAC, deposits the packaged circle of transaction standard according to the aerial circle of both sides' appointment and deposits confirmation, returns to mobile phone UTK; Mobile phone UTK deposits the platform Number for access and is encapsulated in the data SMS writing aerial circle in the card in advance, sends to Short Message Service Gateway through the OTA short message channel.
Application processing unit 21 judges whether that circle deposits successfully, can deposit the transaction standard according to aerial circle and resolve the command header that circle is deposited confirmation, judges that circle deposits the classification of application, and circle is deposited confirmation and comprised that the cell phone intelligent collar deposits information such as result, transaction journal number; Confirm whether be that circle is deposited confirmation, obtain key if then connect encryption equipment, encryption equipment is positioned at aerial circle and deposits platform according to the type field of command header, key is exactly a mobile phoneintelligent card 1 and aerial circle is deposited the unified key of platform 2.Based on the key that writes to circle deposit related data carry out 3DES calculate MAC and up in MAC comparison, as unanimity then verification pass through.Come the integrality of judgment data through verification MAC, after the verified, obtain decruption key and decipher circle and deposit confirmation; If the circle deposit confirmation show the circle deposit successfully; Then revise circle and deposit stateful transaction and deposit successfully,, then call the circle ofoperation system 3 to deposit towards positive interface if circle is deposited failure for circle; The rollback transaction, the modification circle is deposited stateful transaction and is rollback.
Data SMS among the present invention adopts the bidirectional encipher authentication mode, and packet all adds check code MAC and prevents data tampering, and wherein sensitive data all adopts 3DES to encrypt to guarantee data security.Mobile phone intelligent card also will be used for association key that aerial circle deposits and encrypt the key district that is written to mobile phone intelligent card after disperseing through 3DES with the physics card number of mobile phone card.
Fig. 2 illustrates the method flow synoptic diagram that the aerial circle of stored value card is deposited in the embodiment of the invention.
The offline e wallet circle that writes at least one source of funds instep 201, in mobile phone intelligent card is deposited application, and when obtaining the application that the user selected, the prompting user imports circle and deposits the amount of money and trading password.
Atstep 202, inquiry applicating category sign indicating number, it is that the circle of which offline e purse application is deposited business that the applicating category sign indicating number is used to distinguish.
Instep 203, inquiry whether unacknowledged transaction record is arranged, if do not have, execution instep 204, otherwise execution instep 205.
Deposit the amount of money, applicating category sign indicating number and aerial circle atstep 204, Jiang Quan and deposit the platform Number for access and be encapsulated in the upstream data note, send to aerial circle and deposit platform, continue execution instep 206.
Deposit the amount of money, applicating category sign indicating number atstep 205, Jiang Quan, unacknowledged transaction record and aerial circle are deposited the platform Number for access and are encapsulated in the upstream data note before, send to aerial circle and deposit platform, continue execution instep 206.
Instep 206, when aerial circle is deposited platform and received the upstream data note, the upstream data note is resolved verification, call the application corresponding system through external interface, application system verification circle is deposited the amount of money and trading password, withholds.
Deposit platform atstep 207, aerial circle and encapsulate descending circle and deposit the result, wherein additional withhold result, MAC2 and MAC are sent to corresponding mobile phone intelligent card through Short Message Service Gateway.
Deposit the result instep 208, when the descending circle of cell phone intelligent card receiver; Checking MAC2 and MAC, deciphering and verification serial number add money to stored value card later; Deposit in the confirmation indication circle at circle and deposit the result, circle is deposited confirmation be packaged into data SMS and send to aerial circle and deposit platform.
Instep 209, deposit confirmation based on circle, judge whether that circle deposits successfully, if success accomplishes circle and deposit, if unsuccessful, aerial circle is deposited platform and is called the application corresponding system through external interface and enclose to deposit and just dashing.
As conclusion, should notice that those skilled in the art will be apparent to make many variations and modification to preferred embodiment, and not break away from principle of the present invention in fact describing in detail.This variation and modification are included within the described scope of the present invention of appended claims.