CN101771680B - Method for writing data to smart card, system and remote writing-card terminal - Google Patents

Abstract

The invention relates to the field of smart cards, in particular to a technology for safely and remotely writing data into smart cards. The present invention provides a method and system for writing data to a smart card, and a remote card writing terminal. The method includes: after the card writing client performs calculations on the card writing component to obtain the characteristic value of the card writing component, the characteristic value Send to the remote card writing server; the remote card writing server verifies the card writing component according to the characteristic value; if the verification is passed, after sending the user data of the card writing component to the card writing component through the card writing client, the card writing Component writes user data to the smart card. Because the remote card writing server can verify whether the card writing component has been tampered with according to the characteristic value before sending the user data to the card writing component, thereby preventing the card writing component from being tampered with and improving the security of remotely writing user data to the smart card.

Description

A method, system and remote card writing terminal for writing data to smart card

technical field

The invention relates to the field of smart cards, in particular to a technology for safely and remotely writing data into smart cards. the

Background technique

A smart card is a programmable card with a built-in microprocessor and a storage unit. Due to its high security, smart cards are widely used in various fields. In the mobile communication network, the SIM card is also a kind of smart card that stores a variety of data, including the card original data written in advance by the card manufacturer and the network parameters and data written by the mobile operator to the user (such as the access key Ki, IMSI number, etc.). the

Generally speaking, the user data of the SIM card is written by the card manufacturer, and then sent to the operator for sale. In order to facilitate the operator to develop customers and reduce the operator's card inventory, it is possible to write blank cards in the business hall and write user data to blank cards remotely. As shown in Figure 1, the remote card writing system can write smart cards (such as SIM cards) through the remote card writing terminal in the business hall. The remote card writing terminal obtains user data (including network parameters and personal data) from the remote card writing server. data, etc.), complete the card writing operation through the card writer. Since blank cards come from multiple card vendors, and the card writing instructions of each card vendor are quite different, each card vendor needs to provide a corresponding card writing component on the client side for card writing operations. the

The prior art card writing system is shown in Figure 2, which includes a card writing component and a card writing client located at a remote card writing terminal, as well as a remote card writing server and a data management server. The card writing process includes the following steps:

S201. The operator inserts a blank card into the card writer, the card writing client reads and judges the card vendor information of the blank card, and the card writing client judges whether there is a card writing component corresponding to the card vendor locally, and if not, submits it to the card vendor The information is sent to the remote card writing server, requesting to download the card writing component corresponding to the card manufacturer. the

S202. After receiving the request, the remote card writing server downloads the corresponding card vendor's card writing component to the card writing client. the

S203. In order to ensure that the card writing component is not abused, the card writing component needs to authenticate the remote card writing server:

S204, the card writing component generates a random number Rc and sends it to the remote card writing server through the card writing client;

S205. The remote card writing server uses the authentication key and the uploaded random number Rc to calculate the authentication result through an encryption algorithm and sends it to the card writing client;

S206. The card writing client calls the authentication function Authentication() of the card writing component to calculate the authentication code AuthCode;

S207. The card writing client compares the authentication result with the AuthCode, and if they are the same, the authentication is passed; otherwise, the prompting process is terminated. the

S208. If the authentication is passed, the card writing client requests the remote card writing server to obtain personalized data (ie user data), such as Ki (core key, Key Identifier), IMSI (International Mobile Subscriber Identity, International Mobile Subscriber) Identity), PIN (Personal Identification Number, Personal Identification Number), PIN2 (second layer PIN code), PUK1 (PIN unlock code PIN Unlock Key), PUK2 (second layer PUK), etc. the

S209. The remote card writing server obtains the personalized data from the data management system and returns it to the card writing client. the

S210. The card writing client calls the card writing function of the card writing component by using the personalized data as input to complete the card writing operation. the

Since the card writing client is not in a specific computer room and is in an unsafe environment, the card writing component may be tampered with, resulting in a card writing error, thereby bringing security risks to the user data written into the smart card. the

Contents of the invention

The embodiment of the present invention provides a method and system for writing data into a smart card, which prevents the card writing component from being tampered with and improves the security of remotely writing user data into the smart card. the

A method of writing user data to a smart card, comprising:

The card writing client performs hash HASH operation on the binary code of the card writing component, and after obtaining the feature value of the card writing component, sends the feature value to the remote card writing server;

The remote card writing server verifies the card writing component according to the obtained characteristic value; if the verification is passed, the user data of the card writing component is sent to the card writing client;

After the card writing client transfers the user data to the card writing component, the card writing component writes the user data to the smart card;

Wherein, before the remote card writing server sends the user data of the card writing component to the card writing client, it further includes: the remote card writing server generates a random number Rs and sends it to the card writing client, so After the card writing client passes the random number Rs to the card writing component, the card writing component performs encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and the card writing component passes the The card writing client returns the first encryption operation result to the remote card writing server, and the remote card writing server authenticates the card writing component according to the first encryption operation result. the

A system for writing user data to a smart card, comprising:

A remote card writing terminal, which includes a card writing client and a card writing component. After the card writing client performs a hash HASH operation on the binary code of the card writing component to obtain a feature value, the feature value is sent;

The remote card writing server is used to verify the card writing component according to the received characteristic value; if the verification is passed, send the user data of the card writing component to the card writing client;

After the card writing client transfers the user data to the card writing component, the card writing component writes the user data to the smart card;

The remote card writing server is also used to generate a random number Rs and send it to the card writing client before sending the user data of the card writing component to the card writing client; and according to the returned first encryption operation As a result, the card writing component is authenticated;

The card writing component is also used to obtain the random number Rs through the card writing client, perform encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and return the result of the first encryption operation through the card writing client. Describe the result of the first encryption operation. the

A remote card writing terminal, including: a card writing client and a card writing component;

After the card writing client performs hash HASH operation on the binary code of the card writing component to obtain the feature value, the feature value is sent to the remote card writing server; and the written card returned by the remote card writing server The user data of the card component is passed to the described card writing component;

The card writing component writes the user data to the smart card;

Description of drawings

The card writing component is also used to obtain the random number Rs generated by the remote card writing server through the card writing client, perform encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and pass the The card writing client returns the first encryption operation result; the remote card writing server authenticates the card writing component according to the first encryption operation result. the

In the embodiment of the present invention, since the characteristic value is calculated for the card writing component on the client side and sent to the remote card writing server, the remote card writing server can verify whether the card writing component has been tampered with according to the characteristic value before sending the user data to the card writing component ; If the verification is passed, the remote card writing server sends the user data to the card writing component, thereby preventing the card writing component from being tampered with and improving the security of remotely writing user data to the smart card. the

Because the remote card writing server also authenticates the card writing component before sending the user data to the card writing component, thereby further ensuring the legitimacy of the card writing component and improving the security of remotely writing user data to the smart card. the

Since the user data transmitted between the remote card writing server and the card writing component is fully encrypted, even the card writing client cannot obtain the plaintext user data, thereby further ensuring the security of remotely writing user data. the

Fig. 1 is the schematic diagram of the remote card writing system of prior art;

Detailed ways

Fig. 2 is the block diagram of the remote card writing system of prior art;

Fig. 3 is the flow chart of the method for writing user data to the smart card in Embodiment 1 of the present invention;

Fig. 4 is the schematic diagram of user data intercepted by the shell program in the remote card writing system of the prior art;

FIG. 5 is a flowchart of a method for writing user data into a smart card according to Embodiment 2 of the present invention. the

The remote card writing server provided by the embodiment of the present invention can verify the card writing component, so as to ensure that the card writing component has not been tampered with before sending user data to the remote card writing terminal. In addition, the embodiment of the present invention also provides a scheme for encrypting user data throughout, thereby further improving the security of writing user data into the smart card. the

The present invention provides two specific embodiments; wherein, embodiment one is a specific scheme in which the remote card writing server authenticates and authenticates the card writing component; Authentication, and the specific scheme of remote card writing after the remote card writing server authenticates the card writing component. the

Embodiment one

Embodiment 1 of the present invention provides a flow chart of the method for authenticating the card writing component and writing the card by the remote card writing server, as shown in Figure 3, including the following steps:

S301. The card writing client sends an authentication request to a remote card writing server. the

The remote card writing server authenticates the card writing component according to the authentication request:

S302. The remote card writing server generates a random number Rs, and transmits the random number Rs to the card writing component through the card writing client. the

S303. The card writing component uses the random number Rs and the authentication key to obtain the authentication code AuthCode (that is, the result of the encryption operation) of the data through an encryption algorithm, and feeds it back to the card writing client. the

S304. The card writing client calculates the feature value of the called card writing component, and sends the feature value together with the AuthCode to the remote card writing server. the

For example, the card writing client can use the HASH (hash) algorithm to calculate the feature value. The following takes the characteristic value calculated by the HASH algorithm——hash value as an example to illustrate. The card writing client performs the HASH algorithm operation on the card writing component (that is, operates on the binary code of the card writing component). Value - the hash value will also change. Therefore, the remote card writing server can ensure that the card writing component has not been tampered with by verifying the hash value. the

S305. The remote card writing server uses the authentication key and the saved random number Rs to calculate the result, and compares it with the AuthCode uploaded by the card writing client; if they are the same, the authentication is passed, otherwise the prompt process is terminated. the

Both the remote card writing server and the card writing component store the authentication key corresponding to the card writing component. To realize the authentication of the remote card writing server to the card writing component, it is not the above-mentioned method; those skilled in the art can use some other specific authentication methods according to the technical content disclosed in the embodiment of the present invention to realize the remote card writing server. For the authentication of the card component, various authentication methods will not be listed here. the

S306. The remote card writing server compares the hash value of the card writing component, and verifies that the card writing component has not been tampered with, otherwise the prompting process is terminated. the

The remote card writing server compares the saved hash value of the card writing component with the hash value sent by the card writing client. If they are the same, it indicates that the card writing component has not been tampered with and the verification is passed. the

It should be pointed out here that the operation of the card writing client on the feature value of the card writing component and sending the feature value to the remote card writing server, and the process of the remote card writing server verifying the card writing component based on the feature value does not depend on The remote card writing server authenticates the card writing component; that is, the card writing client calculates the characteristic value of the card writing component, and the remote card writing server verifies the card writing component according to the characteristic value, which can be independent of the remote A step in which the card writing server authenticates the card writing component. the

Since the remote card writing server can determine whether the card writing component has been tampered with or replaced in the process of verifying the characteristic value of the card writing component sent by the card writing client, even if the remote card writing server does not authenticate the card writing component It can also prevent the card writing component from being tampered with, and improve the security of remotely writing user data to the smart card. Of course, in order to further improve the security of remotely writing user data to the smart card, the above-mentioned step of authenticating the card writing component by the remote card writing server can also be added. the

After the remote card writing server authenticates and verifies the card writing component successfully, the card writing operation is performed. In order to further ensure the security of user data transmission, the user data can be encrypted throughout the entire process. Here, the Ki value in the encrypted user data is used as an example to describe Specific solutions (those skilled in the art can easily obtain the whole-process encryption method for other user data according to the technical content disclosed in the embodiment of the present invention):

S307. The remote card writing server acquires corresponding user data from the data management system. the

S308, the remote card writing server calculates the encryption key skey=hash (Rs, authentication key) according to the random number Rs and the authentication key, where hash is a safe hash algorithm, such as SHA (Secure Hash Algorithm, Secure Hash Algorithm) algorithm, etc. Those skilled in the art may also use other algorithms to calculate the encryption key skey. the

S309. Use the skey to encrypt Ki to obtain EKi, and send EKi and other user data to the card writing client. the

S310. After receiving the user data, the card writing client uses EKi and other user data as input parameters to call the card writing function of the card writing component, that is, the card writing client passes EKi and other user data to the Write card components. the

S311. The card writing component calculates the encryption key skey=hash(Rs, authentication key), where hash is a secure hash algorithm (such as SHA1, etc.), uses the skey to decrypt EKi to obtain Ki, and completes the card writing operation. the

Those skilled in the art can understand that although in the above description, the steps of the method are described sequentially for ease of understanding, it should be noted that the sequence of the steps is not strictly limited. the

In the prior art, even if there is SSL encrypted transmission between the remote card writing server and the remote card writing terminal, the user data will be decrypted after reaching the remote card writing terminal; when the card writing client sends the user data to the card writing component are transmitted in clear text. If a shell program is illegally installed outside the card writing component, the user data can be intercepted by the shell program (as shown in FIG. 4 ), thereby copying the user data. And adopt the method of step S308-S311 of the embodiment of the present invention, because the user data that writes the card client end to receive is also encrypted, and decryption is finished in the writes the card assembly, therefore, has prevented shell program from intercepting, duplicating user data, It further improves the security of remote writing user data. the

In the embodiment of the present invention, since the characteristic value (such as a hash value) is calculated on the client side for the card writing component and sent to the remote card writing server, the remote card writing server can verify the written value according to the hash value before sending the user data to the card writing component. Whether the card component has been tampered with; if the verification is passed, the remote card writing server will send the user data to the card writing component, thereby preventing the card writing component from being tampered with and improving the security of remotely writing user data to the smart card. the

Because the remote card writing server also authenticates the card writing component before sending the user data to the card writing component, thereby further ensuring the legitimacy of the card writing component and improving the security of remotely writing user data to the smart card. the

Since the user data transmitted between the remote card writing server and the card writing component is fully encrypted by skey, even the card writing client cannot know the user data in clear text, thus further ensuring the security of remotely writing user data. the

Example two

Before the remote card writing server authenticates the card writing component, the card writing component may first authenticate the remote card writing server. The flowchart of authentication and card writing process is shown in Figure 5, including the following steps:

S501. The card writing component authenticates the remote card writing server: the card writing component generates a random number Rc and sends it to the remote card writing server through the card writing client. the

S502. The remote card writing server uses the authentication key and the uploaded random number Rc to calculate an authentication and encryption result through an encryption algorithm and sends it down to the card writing client. the

S503. The card writing component uses the authentication key and the random number Rc to calculate the authentication code AuthCode' (that is, the encrypted operation result). the

S504. The card writing client compares the authentication and encryption result with the AuthCode', and if they are the same, the authentication is passed; otherwise, the prompting process is terminated. the

S505. After the card writing component authenticates the remote card writing server, the card writing client sends an authentication request to the remote card writing server. the

S506. The remote card writing server generates a random number Rs, and transmits the random number Rs to the card writing component through the card writing client. the

S507. The card writing component uses the random number Rs and the authentication key to obtain the authentication code AuthCode (that is, the encryption operation result) of the data through an encryption algorithm, and feeds it back to the card writing client. the

S508. The card writing client calculates a characteristic value (such as a hash value) of the called card writing component, and sends the hash value together with the AuthCode to the remote card writing server. the

S509. The remote card writing server uses the authentication key and the saved random number Rs to calculate the result, and compares it with the AuthCode uploaded by the card writing client. If they are the same, the authentication is passed, otherwise the prompt process is terminated. the

The aforementioned authentication key and the authentication key may be the same key, or may be a symmetric key. the

S510. The remote card writing server compares the hash value of the card writing component, and verifies that the card writing component has not been tampered with, otherwise the prompting process is terminated. the

After the authentication and verification of the card writing component is successful, the card writing operation is performed. In order to further ensure the transmission security of user data, the user data can be encrypted in the whole process. Here, the Ki value in the encrypted user data is used as an example to describe the specific solution (for other users A person skilled in the art can easily obtain the whole process encryption method of data according to the technical content disclosed in the embodiment of the present invention):

S511. The remote card writing server acquires corresponding user data from the data management system. the

S512. The remote card writing server calculates an encryption key skey=hash(Rs, Rc, authentication key) according to the random numbers Rs, Rc and the authentication key. the

S513. Use the skey to encrypt Ki to obtain EKi, and send EKi and other user data to the card writing client. the

S514. After receiving the user data, the card writing client uses the EKi and the personalization data as input parameters, and calls the card writing function of the card writing component. the

S515. The card writing component calculates the encryption key skey=hash(Rs, authentication key), where hash is a secure hash algorithm (such as SHA, etc.), uses the skey to decrypt EKi to obtain Ki, and completes the card writing operation. the

In the embodiment of the present invention, since the characteristic value (such as a hash value) is calculated on the client side for the card writing component and sent to the remote card writing server, the remote card writing server can verify the written value according to the hash value before sending the user data to the card writing component. Whether the card component has been tampered with; if the verification is passed, the remote card writing server will send the user data to the card writing component, thereby preventing the card writing component from being tampered with and improving the security of remotely writing user data to the smart card. the

Because the remote card writing server also authenticates the card writing component before sending the user data to the card writing component, thereby further ensuring the legitimacy of the card writing component and improving the security of remotely writing user data to the smart card. the

Since the user data transmitted between the remote card writing server and the card writing component is fully encrypted by skey, even the card writing client cannot know the user data in clear text, thus further ensuring the security of remotely writing user data. the

Those skilled in the art can understand that although in the above description, the steps of the method are described sequentially for ease of understanding, it should be noted that the sequence of the steps is not strictly limited. the

Those of ordinary skill in the art can understand that all or part of the steps in the method of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, such as: ROM/RAM, Diskettes, CDs, etc. the

It can also be understood that the device structures shown in the drawings or embodiments are only schematic and represent logical structures. Where modules shown as separate components may or may not be physically separate, and components shown as modules may or may not be physical modules. the

The above is only a preferred embodiment of the present invention, it should be pointed out that for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications should also be It is regarded as the protection scope of the present invention. the

Claims (14)

1. A method for writing user data to a smart card, characterized in that, comprising: The card writing client performs hash HASH operation on the binary code of the card writing component, and after obtaining the feature value of the card writing component, sends the feature value to the remote card writing server; The remote card writing server verifies the card writing component according to the obtained feature value; if the verification is passed, the user data of the card writing component is sent to the card writing client; After the card writing client transmits the user data to the card writing component, the card writing component writes the user data to the smart card; Wherein, before the remote card writing server sends the user data of the card writing component to the card writing client, it further includes: the remote card writing server generates a random number Rs and sends it to the card writing client, so After the card writing client passes the random number Rs to the card writing component, the card writing component performs encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and the card writing component passes the The card writing client returns the first encryption operation result to the remote card writing server, and the remote card writing server authenticates the card writing component according to the first encryption operation result. 2. The method according to claim 1, further comprising: before the remote card writing server sends the user data of the card writing component to the card writing client: The remote card writing server generates a key skey according to the random number Rs and an authentication key, and uses the skey to encrypt the user data; and Before the described card writing component writes user data to the smart card, it also includes: The card writing component generates the skey according to the random number Rs and the authentication key, and uses the skey to decrypt the received user data. 3. The method according to claim 1, wherein, before the remote card writing server authenticates the card writing component, further comprising: The card writing component authenticates the remote card writing server. 4. The method according to claim 3, wherein the card writing component authenticates the remote card writing server, specifically comprising: The card writing component generates a random number Rc and sends it to the remote card writing server through the card writing client; The remote card writing server performs encryption and calculation according to the random number Rc and the authentication key to obtain a second encryption operation result, and returns the second encryption operation result through the card writing client; The card writing component authenticates the remote card writing server according to the second encryption operation result. 5. The method according to claim 4, further comprising: before the remote card writing server sends the user data of the card writing component to the card writing client: The remote card writing server generates a key skey according to the random number Rs, the random number Rc and the authentication key, and uses the skey to encrypt the user data; and Before the described card writing component writes user data to the smart card, it also includes: The card writing component generates the skey according to the random number Rs, the random number Rc and the authentication key, and uses the skey to decrypt user data. 6. A system for writing user data to a smart card, characterized in that it comprises: A remote card writing terminal, which includes a card writing client and a card writing component. After the card writing client performs a hash HASH operation on the binary code of the card writing component to obtain a feature value, the feature value is sent; The remote card writing server is configured to verify the card writing component according to the received characteristic value; if the verification is passed, send the user data of the card writing component to the card writing client; After the card writing client transmits the user data to the card writing component, the card writing component writes the user data to the smart card; The remote card writing server is also used to generate a random number Rs and send it to the card writing client before sending the user data of the card writing component to the card writing client; and according to the returned first encryption operation As a result, the card writing component is authenticated; The card writing component is also used to obtain the random number Rs through the card writing client, perform encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and return the result of the first encryption operation through the card writing client. Describe the result of the first encryption operation. 7. The system of claim 6, wherein: The remote card writing server is also used to generate a key skey according to the random number Rs and an authentication key before sending the user data to the card writing client, and use the skey to authenticate the user Data is encrypted; and The card writing component is also used to generate the skey according to the random number Rs and the authentication key, and use the skey to decrypt the received user data. 8. The system according to claim 6, wherein the card writing component is also used for authenticating the remote card writing server. 9. The system of claim 8, wherein: The card writing component is specifically used to generate a random number Rc and send it to the remote card writing server through the writing card client; perform authentication; The remote card writing server performs encrypted calculation according to the random number Rc and the authentication key to obtain the second encryption operation result, and returns the second encryption operation result through the card writing client. 10. The system of claim 9, wherein: The remote card writing server is also used to generate a key skey according to the random number Rs, the random number Rc and the authentication key before sending the user data to the card writing client, and use the skey encrypt said user data; and The card writing component is further configured to generate the skey according to the random number Rs, the random number Rc and the authentication key, and use the skey to decrypt the received user data. 11. A remote card writing terminal, characterized in that it comprises: a card writing client and a card writing component; After the card writing client performs a hash HASH operation on the binary code of the card writing component to obtain a feature value, the feature value is sent to a remote card writing server; and the written card returned by the remote card writing server The user data of the card component is passed to the described card writing component; The card writing component writes the user data into the smart card; The card writing component is also used to obtain the random number Rs generated by the remote card writing server through the card writing client, perform encryption calculation according to the random number Rs and the authentication key to obtain the first encryption operation result, and pass the The card writing client returns the first encryption operation result; the remote card writing server authenticates the card writing component according to the first encryption operation result. 12. The terminal according to claim 11, characterized in that, The card writing component is also used to generate a key skey according to the random number Rs and the authentication key, and use the skey to decrypt the received user data; the user data received by the card writing component is obtained by the The remote card writing server encrypts the skey generated according to the random number Rs and the authentication key. 13. The terminal according to claim 11, characterized in that, The card writing component is also used to generate a random number Rc and send it to the remote card writing server through the writing card client; Authenticate. 14. The terminal according to claim 13, characterized in that, The card writing component is also used to generate a key skey according to the random number Rs, the random number Rc and the authentication key, and use the skey to decrypt the received user data; the user received by the card writing component The data is encrypted by the skey generated by the remote card writing server according to the random number Rs, the random number Rc and the authentication key.

Images