CN103186798B - A kind of IC card production test system - Google Patents

Abstract

The invention relates to an IC card production test system. The IC card production test system includes: a testing device for testing the IC card; an authentication device for authenticating the IC card; a control device for controlling the testing device and the authentication device, and The authentication information of the IC card is transmitted to the authentication device and the authentication information of the authentication device is transmitted to the IC card. The IC card production test system of the present invention can prevent the key data of the IC card from being stolen through the authentication of the identity of the IC card by the authentication device, improves the safety of the protection of the key data of the IC card in the production environment, and is easy to operate. Moreover, the IC card production test system of the present invention can detect the power-on current of the IC card, prevent the IC card or test device from being damaged by the excessive current, and play a good short-circuit protection function.

Description

A kind of IC card production test system

technical field

The invention relates to the communication field, in particular to an IC card production and testing system.

Background technique

SD card is a new generation memory device based on semiconductor flash memory, which is widely used in portable devices, such as digital cameras, mobile phones, multimedia players, etc. At present, various new SD cards continue to appear, such as RFID-SD cards with radio frequency functions, SD-KEYs with encryption functions, etc., which have been applied in real life. SD cards need to be tested before shipment. This test is called production test. After the test, download COS (CardOperating System, card operating system) to the SD card that has passed the test, especially RFID-SD with new functions, SD-KEY, etc. need to download several COS, and COS is generally the key data in the card, which needs to be protected to prevent the key data from being stolen by others. However, the protection of key data in the current production environment is mainly carried out by systems and designated production sites, and the security and operability are relatively poor.

Like the SD card, other IC cards (such as SIM cards) also have the same problem, that is, there are security risks in the protection of the key data of the IC card in the production environment, and the operability is relatively poor.

Contents of the invention

The technical problem to be solved by the present invention is to provide an IC card production and testing system to improve the security of the key data protection of the IC card in the production environment.

For solving the above-mentioned technical problems, the present invention proposes a kind of IC card production test system, comprising:

A test device for testing the IC card;

An authentication device for authenticating the IC card;

A control device for controlling the testing device and the authentication device, and transferring the authentication information of the IC card to the authentication device and the authentication information of the authentication device to the IC card

Further, the above-mentioned IC card production and testing system may also have the following characteristics, the authentication device is a USB-KEY.

Further, the above-mentioned IC card production and testing system may also have the following features, the control device is a computer.

Further, the above-mentioned IC card production testing system can also have the following characteristics, and the authentication device includes:

The authentication module is used to receive the authentication information of the IC card and process the authentication information;

Recording module, used for recording the test result of described test device to IC card, test result is the quantity of qualified IC card, test result is the quantity of unqualified IC card and the total amount of IC card tested by described test device;

The authorization module is used to save the authorized production quantity of the IC card, calculate the difference between the authorized production quantity and the total amount of IC cards tested by the test device recorded by the recording module, and when the difference is not zero, the IC Authorize the production of the card;

The safe storage module is used to receive and store the confidential data of the IC card.

Further, the above-mentioned IC card production test system can also have the following characteristics, and the test device includes:

The current detection module is used to detect the power-on current of the IC card;

The card reader is used to transfer the data sent by the IC card to the control device, and transfer the data sent by the control device to the IC card;

The main control module is used to control the current detection module and the card reader.

Furthermore, the above-mentioned IC card production and testing system may also have the following features, the main control module, the current detection module and the card reader are arranged on the same circuit board.

Further, the above-mentioned IC card production and testing system may also have the following features, the main control module and the current detection module are arranged on the first circuit board, the card reader is arranged on the second circuit board, and the first The second circuit board is connected to the first circuit board through pins.

Further, the above-mentioned IC card production test system can also have the following characteristics, and the test device also includes:

A switch, used to power on or off the card reader under the control of the main control module;

The interface extension part is used for connecting the IC card and the card reader.

Further, the above-mentioned IC card production test system can also have the following characteristics, the test device also includes a USB hub, and the USB hub is used to connect the main control module and the control device, and connect the card reader and the control device.

Further, the above-mentioned IC card production and testing system may also have the following features: the number of the current detection modules is one or more, and the number of the card readers is equal to the number of the current detection modules.

Further, the above-mentioned IC card production test system can also have the following characteristics, the IC card is a smart card or a memory card, the smart card is a SIM card, USIM card or UIM card, and the memory card is an SD card, TF card or MMC Card.

The IC card production test system of the present invention can prevent the key data of the IC card from being stolen through the authentication of the identity of the IC card by the authentication device, improves the safety of the protection of the key data of the IC card in the production environment, and is easy to operate. Moreover, the IC card production test system of the present invention can detect the power-on current of the IC card, prevent the IC card or the test device from being damaged by the excessive current, and play a very good short-circuit protection function.

Description of drawings

Fig. 1 is the structural block diagram of IC card production test system in the embodiment of the present invention;

Fig. 2 is a kind of structural block diagram of test device 110 in Fig. 1;

FIG. 3 is another structural block diagram of the testing device 110 in FIG. 1;

FIG. 4 is a structural block diagram of the authentication device 120 in FIG. 1;

Fig. 5 is a flow chart of authentication of the IC card production test system in the embodiment of the present invention.

detailed description

The principles and features of the present invention are described below in conjunction with the accompanying drawings, and the examples given are only used to explain the present invention, and are not intended to limit the scope of the present invention.

Fig. 1 is the structural block diagram of IC card production test system in the embodiment of the present invention. As shown in FIG. 1 , in this embodiment, the IC card production testing system 10 includes a testing device 110 , an authentication device 120 and a control device 130 . Wherein, the test device 110 is used to test the IC card, the authentication device 120 is used to authenticate the IC card, and the control device 130 is used to control the test device 110 and the authentication device 120, and transmit the authentication information of the IC card to the authentication The device 120 and transmits the authentication information of the authentication device 120 to the IC card.

Communication between the control device 130 and the test device 110 can be performed through a USB interface. Communication between the control device 130 and the authentication device 120 may also be performed through a USB interface. The IC card to be tested can communicate with the test device 110 through the 7816 interface. When the IC card to be tested is an SD card, the SD card can communicate with the testing device 110 through the SD interface.

Wherein, the testing device 110 may be a DUT (Device Under Test, device testing) board.

Wherein, the authentication device 120 may be a USB-KEY, and the USB-KEY is a widely used encryption key, which can protect the key data of the IC card. FLASH is generally used to access data inside the USB-KEY, and FLASH has a lifespan, generally about 100,000 times. When using USB-KEY as an authentication device, a specific algorithm can be designed to make full use of each block of FLASH so as to increase the service life of USB-KEY.

Wherein, the control device 130 may be a computer, such as a PC.

Wherein, the IC card may be a smart card such as a SIM card, a USIM card, or a UIM card, or may be a memory card such as an SD card, a TF card, or an MMC (multimedia card) card. Moreover, the IC card can be a standard IC card or an extended IC card with new functions. For example, the SD card can be a standard SD card, or an extended SD card with new functions such as RFID-SD card and SD-KEY. RFID means Radio Frequency Identification.

The test content performed by the test device 110 may be determined according to the specific type and specific structure of the IC card. The testing device 110 can test each hardware module in the IC card. The user can write the test program according to the specific type and concrete structure of the IC card to be tested, and store it in the control device 130. Before testing, the test program is transmitted to the test device 110 by the control device 130, that is, the test device 110 from The test program is downloaded in the control device 130 .

In particular, for extended IC cards such as radio frequency IC cards (such as RFID-SD cards, RFID-SIM cards) with radio frequency functions, the test device 110 has added the function of current detection, which can complete the current test of the IC card in various states . Through the current detection, it can play a very good short-circuit protection effect on the hardware circuit of the IC card. After the IC card is connected with the IC card production test system of the present invention, the IC card production test system first detects the power-on current of the IC card, if the power-on current is abnormal, the IC card can be powered off to prevent the excessive current from affecting the tested The IC card or the test device 110 can cause damage, especially for short-circuited IC cards.

The user can also write the key data download program according to the specific type of the IC card to be tested, and store it in the control device 130. Before testing, the key data download program is transmitted to the authentication device 120 by the control device 130, that is, the authentication device 120 downloads a key data download program from the control device 130 . After the testing of the IC card by the testing device 110, the authentication device 120, under the control of the control device 130, carries out identity authentication to the IC card, whether the test IC card is legal, and after confirming that the IC card is legal, the key data downloading program is started, and The ciphertext of key data (such as COS data) is downloaded to the IC card, and the IC card decrypts the ciphertext after receiving it, and writes the obtained plaintext into the card. In this way, the plaintext of the key data will not appear outside the inside of the card, which ensures the security of the key data. If the authenticating device 120 judges that the IC card is invalid after authenticating the IC card, it will not download the key data to the IC card. It can be seen that the authentication by the authentication device 120 improves the security of the protection of the key data of the IC card in the production environment, and ensures the safe download of the key data of the IC card. The authentication of the IC card by the authentication device 120 may be one-way authentication of the IC card by the authentication device 120, or two-way authentication between the authentication device 120 and the IC card. The authentication method and encryption algorithm used in the authentication device 120 may adopt any available authentication method and encryption algorithm. During the authentication process, the authentication information between the authentication device 120 and the IC card is transmitted through the control device 130 .

FIG. 2 is a structural block diagram of the testing device 110 in FIG. 1 . As shown in FIG. 2 , in this embodiment, the test device 110 may include a current detection module 111 , a card reader 112 and a main control module 113 . Wherein, the current detecting module 111 is used for detecting the power-on current of the IC card. The card reader 112 is used to transfer the data sent by the IC card to the control device 130, and transfer the data sent by the control device 130 to the IC card. The main control module 113 is used to control the current detection module 111 and the card reader 112 . The communication between the current detection module 111 and the main control module 113 can be performed through the SPI interface. The card reader 112 may be connected to the main control module 113 through a switch.

In an embodiment of the present invention, the main control module 113, the current detection module 111 and the card reader 112 may be arranged on the same circuit board.

In another embodiment of the present invention, the main control module 113 and the current detection module 111 are arranged on the first circuit board, the card reader 112 is arranged on the second circuit board, and the second circuit board and the first circuit board are plugged into each other. pin connection. In this way, if the card reader breaks down due to a problem, the card reader can be replaced in time and conveniently without replacing the entire test device, which not only reduces the test cost but also improves the test efficiency.

FIG. 3 is another structural block diagram of the testing device 110 in FIG. 1 . The testing device 110 shown in FIG. 3 is used for testing the SD card.

As shown in FIG. 3 , compared with the testing device shown in FIG. 2 , in this embodiment, the testing device 110 may further include a switch 114 . The switch 114 is used to power on or off the card reader 112 under the control of the main control module 113 . The switch 114 is connected to the card reader 112 through an I/O pin, and the switch 114 is also connected to the main control module 113 through an I/O pin. The card reader 112 is connected to the control device 130 through a USB-HUB. When working, the control device 130 (such as a PC) directly controls the card reader 112 to operate on the SD card. Once the control device 130 detects that a certain card reader 112 is working abnormally, the control device 130 will send a command to the main control module 113, and then the main control module 113 analyzes the command sent by the control device 130. After the analysis, the control module 113 passes the control The switch 114 powers on the corresponding card reader 112 again. In this way, the stable operation of the test device 110 is ensured, and the reliability of the test device 110 is improved.

As shown in Figure 3 again, compared with the testing device shown in Figure 2, in the present embodiment, testing device 110 can also comprise SD card interface extension part 115, for example SD card interface extension part 115 can be SD card interface pin . The SD card interface extension part 115 is used for connecting the SD card and the card reader 112 . One end of the SD card interface extension part 115 is connected to the SD interface of the card reader 112, and the other end is connected to the SD card. The accommodating space of testing device 110 is limited, if there is no SD card interface extension part 115, SD card will be directly inserted on the card reader 112 of testing device 110 when testing, will certainly further reduce the accommodating space of testing device 110 like this , and the operation is inconvenient, especially in the case that the test device 110 includes multiple card readers 112, this disadvantage is even more obvious. With the SD card interface extension unit 115, the SD card interface extension unit 115 can extend the interface of the card reader 112 to the outside of the test device 110, and the SD card can be connected to the SD card interface extension unit 115 during testing. The SD card interface extension part 115 is connected with the card reader 112, which increases the convenience of operation.

As shown in Figure 3 again, compared with the test device shown in Figure 2, in the present embodiment, the test device 110 can also include a USB HUB (hub) 116, and the USB HUB 116 is used to connect the main control module 113 and the control device 130, And connect the card reader 112 and the control device 130 . The number of USB interfaces of the control device 130 is limited, so the number of card readers 112 that can be connected is also limited, which greatly limits the test efficiency, because the more the number of card readers 112 that can be connected with the control device 130, the more SD cards that can be tested simultaneously. The more cards there are. The USB HUB 116 can expand the number of USB interfaces of the control device 130, so that the control device 130 can be connected to multiple card readers 112 at the same time, so multiple SD cards can be tested at the same time, which improves the test efficiency.

As shown in Figure 3 again, compared with the test device shown in Figure 2, in this embodiment, there are 8 groups of current detection modules 111 and card readers 112 (the number of current detection modules 111 and card readers 112 is consistent), Each set of current detection module 111 and card reader 112 can test one SD card, so the test device 110 shown in FIG. 3 can test 8 SD cards at the same time, which improves the test efficiency. The number of switches 114 and the number of SD card interface extension components 115 are consistent with the number of card readers 112 . In other embodiments of the present invention, any number of groups of current detection modules 111 and card readers 112 may be provided in the test device 110 as required, rather than being limited to the specific number of 8 groups in this embodiment.

The test device that is used to test SIM card or other IC card also can adopt the structure of test device 110 in Fig. 3, just need to change the SD card interface extension part in Fig. 3 into the IC card interface extension of corresponding IC card Components, such as used for SIM card testing, need to change the SD card interface extension part in Figure 3 to the SIM card interface extension part.

FIG. 4 is a structural block diagram of the authentication device 120 in FIG. 1 . As shown in FIG. 4, in this embodiment, the authentication device 120 may include an authentication module 121, and the authentication module 121 is configured to receive authentication information of the IC card and process the authentication information. The identity authentication function of the authentication device 120 has been described above, and will not be repeated here.

As shown in Figure 4 again, in the present embodiment, authentication device 120 can also comprise recording module 122, and recording module 122 is used for recording the test result of described test device to IC card, and test result is qualified IC card quantity, test result. is the number of unqualified IC cards and the total amount of IC cards tested by the testing device.

As shown in Fig. 4 again, in the present embodiment, authentication device 120 can also comprise authorization module 123, and authorization module 123 is used for preserving the authorized production quantity of IC card, calculates the authorized production quantity and recording module 122 records through tested device 110 The difference value of the total amount of IC cards tested, and when the difference value is not zero, the production of IC cards is authorized. For example, if the production of 1000 IC cards is authorized this time, if the total number of IC cards tested by the testing device 110 recorded by the recording module 122 is 1000, subsequent production will not be performed.

As shown in FIG. 4 , in this embodiment, the authentication device 120 may further include a secure storage module 124 for receiving and storing confidential data of the IC card, such as key data of the IC card. The ciphertext of the key data of the IC card can be put into the safe storage module 124 first, and then be exported from the safe storage module 124 when downloading, so that the key data of the IC card has been protected more safely, and it is more convenient IC card data update.

Taking the SD card production and testing system composed of USB-KEY, DUT board and PC as an example, the authentication process of the IC card production and testing system of the present invention is illustrated below.

Fig. 5 is a flow chart of authentication of the IC card production test system in the embodiment of the present invention. Before authentication, connect the USB-KEY to the PC. As shown in Figure 5, in the present embodiment, the certification process of the SD card production test system includes:

Step 501, the PC waits for the SD card to be installed on the DUT board;

Step 502, the PC judges whether the SD card has been installed on the DUT board, if so, executes step 503, otherwise executes step 501;

Step 503, the PC reads the number of SD cards in the USB-KEY;

Step 504, the PC judges whether the number of SD cards in the USB-KEY is greater than 0, if so, execute step 505, otherwise execute step 501;

Step 505, the PC downloads the authentication program and sends the authentication command to the SD card;

Step 506, the SD card generates a first random number after receiving the authentication command;

Step 507, the SD card sends the generated first random number to the PC;

Step 508, the PC sends the first random number to the USB-KEY;

Step 509, the USB-KEY itself generates a second random number, which is combined with the first random number of the SD card and then encrypted to obtain the first ciphertext;

Step 510, the USB-KEY transmits the first ciphertext to the PC;

Step 511, after receiving the first ciphertext, the PC forwards it to the SD card;

Step 512, after the SD card receives the first ciphertext, it decrypts the first ciphertext, and then judges whether there is a first random number in the decrypted plaintext, if so, execute step 513, otherwise execute step 501;

Step 513, the SD card replaces the first random number in the decrypted plaintext with 0, re-encrypts the plaintext to obtain the second ciphertext, and forwards the second ciphertext and the judgment result of step 512 to the PC;

Step 514, the PC judges whether the authentication of the SD card passes after receiving the second ciphertext and the judgment result of step 512;

Step 515, if the authentication of the SD card is passed, then execute step 516, otherwise execute step 501;

Step 516, the PC forwards the second ciphertext to the USB-KEY;

Step 517, the USB-KEY decrypts the second ciphertext, and judges whether there is a second random number in the decrypted plaintext, and if so, the authentication is passed;

Step 518, the USB-KEY sends the authentication result to the PC;

Step 519, the PC forwards the received USB-KEY authentication result to the SD card;

Step 520, the SD card judges the authentication result of the USB-KEY, and makes a final authentication result. If the authentication result of the USB-KEY is certified, the final authentication result is certified, otherwise the final authentication result is not certified;

Step 521, the SD card returns the final authentication result to the PC;

Step 522, the PC judges the final authentication result, if it passes, then executes step 523, otherwise executes step 501;

Step 523, the PC controls to download the ciphertext of the key data to the SD card, and the SD card decrypts the ciphertext after receiving it, and writes the obtained plaintext data into the FLASH of the SD card itself;

Step 524, if the download is successful, the PC reduces the number of qualified SD cards in the USB-KEY by 1, otherwise, if the download fails, the PC adds 1 to the number of unqualified SD cards.

The authentication key used in the process shown in Figure 5 is solidified into the USB-KEY and SD card in advance. If the data security level is relatively high, or the SD card is inconvenient to solidify the key in advance, a dynamic key can be used. The random number generated by the dynamic key is different each time, so the authentication key is different each time, so the data security level will be higher. After the authentication with USB-KEY is completed, the authentication program in the SD card can be erased, which not only ensures the safe download of key data on the SD card, but also does not occupy the storage space of the final SD card user.

In other embodiments of the present invention, an appropriate authentication algorithm may be selected according to the security level requirements of the IC card and the processor performance of the IC card.

As can be seen from the above, the IC card production test system of the present invention can prevent the key data of the IC card from being stolen through the identity authentication of the IC card by the authentication device, and improve the safety of the protection aspect of the key data of the IC card in the production environment, and Easy to operate. Moreover, the IC card production test system of the present invention can detect the power-on current of the IC card, prevent the IC card or test device from being damaged by the excessive current, and play a good short-circuit protection function.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (10)

1. A kind of IC card production testing system, is characterized in that, comprises: A test device for testing the IC card; The authentication device is used to authenticate the IC card; the authentication device includes: An authentication module, configured to receive authentication information of the IC card and process the authentication information; Recording module, used for recording the test result of described test device to IC card, test result is the quantity of qualified IC card, test result is the quantity of unqualified IC card and the total amount of IC card tested by described test device; The authorization module is used to save the authorized production quantity of the IC card, calculate the difference between the authorized production quantity and the total amount of IC cards tested by the test device recorded by the recording module, and when the difference is not zero, the IC Authorize the production of the card; A safe storage module, used to receive and store the confidential data of the IC card; The authentication device is also used to authenticate the IC card under the control of the control device, and test whether the IC card is legal. After confirming that the IC card is legal, the key data download program is started, and the ciphertext of the key data is downloaded to the IC card. , the IC card decrypts the ciphertext after receiving it, and writes the obtained plaintext inside the card; The control device is used to control the test device and the authentication device, and transmit the authentication information of the IC card to the authentication device and the authentication information of the authentication device to the IC card. 2. IC card production test system according to claim 1, is characterized in that, described authentication device is USB-KEY. 3. IC card production test system according to claim 1, is characterized in that, described control device is computer. 4. IC card production testing system according to claim 1, is characterized in that, described testing device also comprises: The current detection module is used to detect the power-on current of the IC card; The card reader is used to transfer the data sent by the IC card to the control device, and transfer the data sent by the control device to the IC card; The main control module is used to control the current detection module and the card reader. 5. The IC card production and testing system according to claim 4, wherein the main control module, the current detection module and the card reader are arranged on the same circuit board. 6. IC card production test system according to claim 4, is characterized in that, described main control module and described current detection module are arranged on the first circuit board, and described card reader is arranged on the second circuit board , the second circuit board is connected to the first circuit board through pins. 7. IC card production testing system according to claim 4, is characterized in that, described testing device also comprises: A switch, used to power on or off the card reader under the control of the main control module; The interface extension part is used for connecting the IC card and the card reader. 8. IC card production test system according to claim 4, is characterized in that, described testing device also comprises USB hub, and described USB hub is used for connecting described main control module and described control device, and connects described card reader and the control unit. 9. IC card production test system according to claim 4, is characterized in that, the number of described current detection module is one or more, and the number of described card reader is equal to the number of described current detection module. 10. IC card production testing system according to claim 1, is characterized in that, described IC card is smart card or memory card, and described smart card is SIM card, USIM card or UIM card, and described memory card is SD card, TF card or MMC card.