CN102693455A

Movatterモバイル変換

Info

Publication number: CN102693455A
Application number: CN2012101347621A
Authority: CN
Inventors: 陈思; 张升蓉
Original assignee: Wuhan Tianyu Information Industry Co Ltd
Current assignee: Wuhan Tianyu Information Industry Co Ltd
Priority date: 2012-05-04
Filing date: 2012-05-04
Publication date: 2012-09-26
Anticipated expiration: 2032-05-04
Also published as: CN102693455B

Abstract

The invention discloses a fully automatic system and a method of data preparation based on a financial IC card, and relates to the technical field of financial IC card personalization. The system comprises a foreground, a data base and a background, wherein the foreground includes a portal displaying module used for providing a manual configuration interface; a WEB management module used for importing a public template, configuring various templates and systematic parameters, and storing the templates and parameters in the data base; the background includes a card-making data processing module used for acquiring card-making data and generating a card-making request task; a task scheduling module used for splitting each card-making request task into atomic tasks; an atomic task processing module used for acquiring at least IC card secret-key certificate information from a secret-key management server to generate personalization data; and a data preparation file generating module used for merging personalization data to generate data preparation files, and delivering the data preparation files into different personalization servers according to target addresses. According to the invention, manual copy operation is not needed, workload and cost are reduced, man-made risks are reduced, and data security of a bank IC card is strengthened.

Description

A kind of data based on financial IC card are prepared fully automatic system and method

Technical field

The present invention relates to the individualized technical field of financial IC card, specifically is that a kind of data based on financial IC card are prepared fully automatic system and method.

Background technology

Along with economy, development of science and technology, chip card has been penetrated into the every nook and cranny in our life, in a plurality of industry fields such as finance, telecommunications, public transport, government utility, social security, and the figure of the chip card that is seen everywhere.Along with all kinds of cards popularizing at home, increasing sector application need be integrated with financial application, so, will become bright spot gradually in conjunction with bank's IC-card of sector application.Chip card is used more, and the application that is about to a plurality of difference in functionalitys is placed on the same card sheet.Along with the increase of using on the IC-card, also increased the kind of fabrication data.

Traditional fabrication mode is: by the people with the fabrication copying data to CD, again with the data upload in the CD to the personalized service device, destroy CD at last.This fabrication mode relies on manually-operated, and or not a place, this process can prolong the personalized cycle of IC-card usually for the place of copies data and personalized service device, and workload is big and cost is higher; Simultaneously, the CD of copy is if any loss, and data are revealed easily, with the risk that increases bank's IC-card data security.

Summary of the invention

To the defective that exists in the prior art; The object of the present invention is to provide a kind of data to prepare fully automatic system and method based on financial IC card; Adopt and obtain the mode that the fabrication data-switching becomes the data document automatically, do not need artificial copy function, reduce workload and cost; Reducing the people is the risk that causes, and strengthens bank's IC-card safety of data.

For reaching above purpose, the present invention provides a kind of data based on financial IC card to prepare fully automatic system, is connected with a fabrication data server, Key Management server, an a plurality of personalized service device network respectively; Said data based on financial IC card are prepared fully automatic system and are comprised foreground, database and backstage, and said foreground comprises that door represents module, is used to provide the human configuration interface; The WEB administration module is used to import common template, configuration applying template, configuration output template and systematic parameter, and deposits database in; Said backstage comprises: the fabrication data processing module is used for obtaining the fabrication data from the fabrication data server, and generates fabrication request task; Task scheduling modules is used for each fabrication request task is split into atomic task; The atomic task processing module is used for said atomic task and obtains IC-card key certificate information generation personal data at least from Key Management server; Data document generation module is used for said personal data generated data document, and according to target the address sends to different personalized service devices.

On the basis of technique scheme, said fabrication data processing module regularly obtains a collection of fabrication data from the fabrication data server according to the time cycle of configuration, and task scheduling modules is according to the time cycle regular batch processing fabrication request task of configuration.

On the basis of technique scheme, said fabrication request module comprises interface module, regularly sends fabrication request of data message to the fabrication data server as client.

The present invention also provides a kind of data based on said system to prepare full-automatic method; Comprise the steps: the time cycle that the fabrication data are obtained in the S1. configuration; Dispose the address of at least one personalized service device, and land the WEB administration module, configuration applying template and configuration output template; S2. the fabrication data processing module obtains a collection of fabrication data according to the time cycle from the fabrication data server, and generates a collection of fabrication request task, leaves fabrication data and corresponding fabrication in database; S3. task scheduling modules is regularly obtained all fabrication request tasks according to the time cycle from database, finds corresponding fabrication data by fabrication request task, and batch processing fabrication data generate a plurality of atomic tasks; When S4. atomic task is carried out, obtain IC-card symmetric key certificate information at least, generate personal data from Key Management server; S5. will merge from all personal datas of same fabrication request task, generate the data document,, the data document is transferred to corresponding individualized main frame according to system configuration parameter.

On the basis of technique scheme, among the said S1, the method for configuration applying template and output template is specially:

S11. the template that defines from import the IC-card finance norms through the WEB administration module;

S12. design output template, design different IC-card data document templates;

S13. according to common template customized application template, to be associated with an output template simultaneously.

On the basis of technique scheme, the step of fabrication data generation atomic task is among the said S3:

S31. inquire about the fabrication data key, extract 3 key values of fabrication data;

S32. read the fabrication data, circulation is deciphered by row;

S33. judge whether the fabrication data read end, will carry out the file that deciphering accomplishes and be put into database as pending file, entering S34 if read end; Do not finish if read, return S32;

S34. whether also have the fabrication data in the judgment data storehouse, if then return S31; If not, then get into S35;

S35. read a pending file from database, call the API that Key Management server provides, file body is deciphered;

S36 resolves above-mentioned pending file name, inquires about its corresponding applying template information, according to applying template resolution file body, splits into atomic task.

On the basis of technique scheme, the concrete steps among the said S35 are:

S351. task scheduling modules and said Key Management server connect, and from database, read the transmission security key with the Key Management server reservation;

S352. produce random number, calculate session key by transmission security key and random number;

S353. produce message, message is divided into heading and message body, and heading comprises random number, the atomic task processing module to the content of the Key Management server request of sending as the message body;

S354. send message and give Key Management server,, then retransmit message, until success if send failure;

S355. the message that task scheduling modules receives and the decruption key management server returns.

On the basis of technique scheme, among the said S5, data document treatment scheme is:

S51. from database, obtain play, temporal information that process is carried out at least, generate the progress information of destination file;

S52. the arrival process that judges whether is carried out the play point, if arrive, gets into S53; Otherwise get into S59;

S53. generate the mission bit stream of destination file from data base querying;

S54. from Query Result, read a mission bit stream,, get into S55 if read success; Unsuccessful as if reading, get into S56;

S55. judge this moment, whether mission bit stream was all accomplished, and did not accomplish if having all, returned S54; If all accomplish, get into S59;

S56. call the function that generates destination file,, get into S57 if destination file generates successfully; Otherwise get into S58;

S57. upgrading corresponding task status is: destination file generates to be accomplished;

S58. upgrading corresponding task status is: destination file generates unusual;

S59. finish this poll and get into sleep state.

Beneficial effect of the present invention is:

1. obtain the mode that the fabrication data-switching becomes the data document automatically, do not need manually-operated, can reduce labor workload greatly, improved the personalized efficient of IC-card, reducing the people is the risk that causes.

2. system of the present invention adopts the modularization exploitation, clear in structure, and the system building cost is low; Can also improve the preparation speed of data through increasing the operation quantity of disparate modules.

3. the present invention meets the PBOC2.0 of People's Bank of China codes and standards fully; Product is followed the security system standard of national Password Management office; The card data that support standard debt-credit note, small amount payment, electronic cash etc. are used are prepared and management.

Description of drawings

Fig. 1 is the embodiment of the invention is prepared fully automatic system based on the data of financial IC card application network figure;

Fig. 2 is that the embodiment of the invention is prepared full-automatic system diagram based on the data of financial IC card;

Fig. 3 is the process flow diagram that the data that the present invention is based on financial IC card are prepared full-automatic method;

Fig. 4 is the process flow diagram that the fabrication data generate atomic task among Fig. 3;

Fig. 5 is the API that calls Key Management server among Fig. 4 and the provide process flow diagram to the file body deciphering;

Fig. 6 is a data document processing flow chart among Fig. 3.

Reference numeral: foreground 1, door representmodule 11,WEB administration module 12, database 2, backstage 3, fabrication data processing module 31, task scheduling modules 32, atomic task processing module 33, data document generation module 34.

Embodiment

Below in conjunction with accompanying drawing and embodiment the present invention is done further explain.

As shown in Figure 1, prepare the application network figure of fully automatic system for the data that the present invention is based on financial IC card.The data that the present invention is based on financial IC card are prepared the pattern that fully automatic system is supported a fabrication data server, a plurality of personalized service devices, guarantee the safety of communication process file and complete.The data preparation system externally with between a fabrication data server, Key Management server, a plurality of personalized service device is connected through network.WEB interface configurations systematic parameter and the template of user through PC etc.The data preparation system regularly obtains the fabrication data from the fabrication data server by the time of configuration, and the application key management server is deciphered, and the data document that generates is dealt into a corresponding peopleization server by the destination address that disposes.Key Management server, each personalized service device all are provided with encryption equipment.

As illustrated in fig. 1 and 2, the data preparation fully automatic system that the present invention is based on financial IC card comprises foreground 1, database 2 and backstage 3, and said foreground 1 comprises that door represents module 11, is used to provide the human configuration interface; WEB administration module 12 is used to import common template, configuration applying template, output template and systematic parameter, and deposits database 2 in; Said common template is normalized template of each card tissue or industry organization's definition, applying template for for specific card sending mechanism on specific common template, revise part territory section and accomplish, be its personalized customization service; Output template is a data document template.Said backstage 3 comprises: fabrication data processing module 31, regularly obtain a collection of fabrication data from the fabrication data server according to the time cycle of configuration, and generate fabrication request task; Task scheduling modules 32 is used for each fabrication request task is split into atomic task according to the time cycle regular batch processing fabrication request task of configuration; Atomic task processing module 33 is used for said atomic task and obtains IC-card key certificate information generation personal data at least from Key Management server; Data document generation module 34 is used for said personal data generated data document, and according to target the address sends to different personalized service devices.

Wherein, Said fabrication data processing module 31 comprises interface module, regularly sends fabrication request of data message to the fabrication data server in order to conduct, after the fabrication data server is received request; The fabrication data several times response message return; Last response message has end mark, shows that the fabrication data have been sent to finish, in order to generate a collection of fabrication task.Said atomic task is handled 33 of moulds and is also comprised interface module; When carrying out atomic task; Send the request message obtain the IC-card key information to Key Management server, Key Management server is received information such as returning the IC-card key certificate after the request, in order to generate the data document.Said data document generation module 34 comprises interface module equally, when the fabrication task is accomplished, sends the data document to the personalized service device, and the personalized service device receives that the data document can begin IC-card is individualized.

As shown in Figure 3, the flow process that the data that the present invention is based on financial IC card are prepared full-automatic method is following:

S1. dispose the time cycle of obtaining the fabrication data, dispose the address of at least one personalized service device, and land the WEB administration module, configuration applying template and configuration output template.

S2. the fabrication data processing module obtains a collection of fabrication data according to the time cycle from the fabrication data server, and generates a collection of fabrication request task, leaves fabrication data and corresponding fabrication in database.

S3. task scheduling modules is regularly obtained all fabrication request tasks according to the time cycle from database, finds corresponding fabrication data by fabrication request task, and batch processing fabrication data generate a plurality of atomic tasks.

When S4. atomic task is carried out, obtain IC-card symmetric key certificate information at least, generate personal data from Key Management server.

S5. will merge from all personal datas of same fabrication request task, generate the data document,, the data document is transferred to corresponding individualized main frame according to system configuration parameter.

Among the said S1, the method for configuration applying template and output template is specially:

S11. the template that defines from import the IC-card finance norms through the WEB administration module.

S12. design output template, design different IC-card data document templates.

As shown in Figure 4, the step of fabrication data generation atomic task is among the said S3:

S31. inquire about the fabrication data key, extract 3 key values of fabrication data, extract the key value of key1, key2, key3 in the present embodiment;

S32. read the fabrication data, circulation is deciphered by row.

S33. judge whether the fabrication data read end, will carry out the file that deciphering accomplishes and be put into database as pending file, entering S34 if read end; Do not finish if read, return S32.

S34. whether also have the fabrication data in the judgment data storehouse, if then return S31; If not, then get into S35.

S35. read a pending file from database, the API (Application Programming Interface, API) that calling KMS (Key Management Service, key management services) device provides deciphers file body.Task scheduling modules can read pending file from database always, after once reading, hit or miss, carries out reading again, to guarantee reading pending file in real time at once.

As shown in Figure 5, in the present embodiment, the concrete steps that the API that calling Key Management server among the S35 provides is deciphered file body are:

S351. task scheduling modules and said Key Management server connect, and from database, read the transmission security key TK with the Key Management server reservation.

S352. produce random number R andreq, calculate session key TKreq by transmission security key TK and random number R andreq.

S353. produce message, message is divided into heading and message body, and heading comprises said random number R andreq; When atomic task is carried out; The atomic task processing module is sent request to Key Management server, and the content of this request is as the message body, and promptly session key TKreq encrypts as the message body.

S354. send message and give Key Management server,, then retransmit message, until success if send failure.

S355. Key Management server decrypts the message body with random number R andreq and transmission security key TK, returns information such as corresponding IC key certificate.The message format that returns is identical with the message format of above-mentioned transmission; Be divided into heading and message body equally; And interior data with send message in the request msg of carrying corresponding; Heading comprises the random number R andrse that Key Management server produces at random, calculates session key TKres by transmission security key TK and random number R andrse, and information such as IC-card key certificate are encrypted as the message body with TKres.Task scheduling modules receives the message that Key Management server returns, decrypted message.

As shown in Figure 6, among the said S5, data document treatment scheme is:

S51. from database, information such as the play that the process of obtaining is carried out, time generate the progress information of destination file.

S52. the arrival process that judges whether is carried out the play point, if arrive, gets into S53; Otherwise get into S59.

S53. generate the mission bit stream of destination file from data base querying.

S54. from Query Result, read a mission bit stream,, get into S55 if read success; Unsuccessful as if reading, get into S56.

S55. judge this moment, whether mission bit stream was all accomplished, and did not accomplish if having all, returned S54; If all accomplish, get into S59.

S56. call the function that generates destination file,, get into S57 if destination file generates successfully; Otherwise get into S58.

S57. upgrading corresponding task status is: destination file generates to be accomplished.

S58. upgrading corresponding task status is: destination file generates unusual.

S59. finish this poll and get into sleep state.

The present invention is not limited to above-mentioned embodiment, for those skilled in the art, under the prerequisite that does not break away from the principle of the invention, can also make some improvement and retouching, and these improvement and retouching also are regarded as within protection scope of the present invention.The content of not doing in this instructions to describe in detail belongs to this area professional and technical personnel's known prior art.

Claims

1. the data based on financial IC card are prepared fully automatic system, are connected with a fabrication data server, Key Management server, an a plurality of personalized service device network respectively; Said data based on financial IC card are prepared fully automatic system and are comprised foreground, database and backstage, it is characterized in that:

Said foreground comprises that door represents module, is used to provide the human configuration interface; The WEB administration module is used to import common template, configuration applying template, configuration output template and systematic parameter, and deposits database in;

Said backstage comprises: the fabrication data processing module is used for obtaining the fabrication data from the fabrication data server, and generates fabrication request task; Task scheduling modules is used for each fabrication request task is split into atomic task; The atomic task processing module is used for said atomic task and obtains IC-card key certificate information generation personal data at least from Key Management server; Data document generation module is used for said personal data generated data document, and according to target the address sends to different personalized service devices.

2. the data based on financial IC card as claimed in claim 1 are prepared fully automatic system; It is characterized in that: said fabrication data processing module regularly obtains a collection of fabrication data from the fabrication data server according to the time cycle of configuration, and task scheduling modules is according to the time cycle regular batch processing fabrication request task of configuration.

3. the data based on financial IC card as claimed in claim 1 are prepared fully automatic system, and it is characterized in that: said fabrication request module comprises interface module, regularly send fabrication request of data message to the fabrication data server as client.

4. the data based on claim 1 are prepared full-automatic method, it is characterized in that, comprise the steps:

S1. dispose the time cycle of obtaining the fabrication data, dispose the address of at least one personalized service device, and land the WEB administration module, configuration applying template and configuration output template;

S2. the fabrication data processing module obtains a collection of fabrication data according to the time cycle from the fabrication data server, and generates a collection of fabrication request task, leaves fabrication data and corresponding fabrication in database;

S3. task scheduling modules is regularly obtained all fabrication request tasks according to the time cycle from database, finds corresponding fabrication data by fabrication request task, and batch processing fabrication data generate a plurality of atomic tasks;

When S4. atomic task is carried out, obtain IC-card symmetric key certificate information at least, generate personal data from Key Management server;

5. the data based on financial IC card as claimed in claim 4 are prepared full-automatic method, it is characterized in that: among the said S1, the method for configuration applying template and output template is specially:

S11. import the common template that defines in the IC-card finance norms through the WEB administration module;

S12. design output template, design different IC-card data document templates;

6. the data based on financial IC card as claimed in claim 4 are prepared full-automatic method, it is characterized in that: the step of fabrication data generation atomic task is among the said S3:

S32. read the fabrication data, circulation is deciphered by row;

7. the data based on financial IC card as claimed in claim 6 are prepared full-automatic method, it is characterized in that: the concrete steps among the said S35 are:

8. the data based on financial IC card as claimed in claim 4 are prepared full-automatic method, it is characterized in that: among the said S5, data document treatment scheme is:

S59. finish this poll and get into sleep state.