CN1320841C - Special net terminal and method for carrying out special net communication by network - Google Patents

Abstract

The present invention relates to a private network terminal and a method for the private network terminal to communicate through the network. The private network terminal includes a CPU unit, a sending module and a receiving module. Get the file identification of the special file written to the card and judge the type of the card, and read the user information by interacting with the card data; the encryption algorithm module is used to use the encryption algorithm when the card is a dedicated network card Encrypt the sent file information; the decryption algorithm module, when the card is a dedicated network card, is used to use the decryption algorithm to decrypt the received encrypted information and then output it. The private network terminal and the method for the private network terminal to realize communication through the network of the present invention identify the private network card by reading and judging the file identification of the special file, and perform encryption on the information sent by the private network user, and perform decryption on the received information without re- In the case of network construction, the communication security of mobile private network users has been realized.

Description

A private network terminal and a method for the private network terminal to communicate through the network

technical field

The invention relates to the field of mobile communication, in particular to the secure communication of private network in the field of mobile communication.

Background technique

In order to realize the confidentiality of communication of mobile private network users without large-scale adjustment of the mobile network providing services, it is necessary to provide private network mobile terminals (hereinafter referred to as private network terminals) and private network cards.

According to the definition of the file structure of R-UIM (Removable User Identity Module) DF (dedicated file) and EF (basic file) in the TIA/EIA/IS-820 specification and the GSM11.11 specification, the file number is used for Addresses or identifies a specific file, represented by a hexadecimal code of two bytes. Among them, 7F25 is the file identifier of the CDMA special file, 7F20 is the file identifier of the GSM special file, and 7F26-7F2F are reserved file identifiers.

At present, in order to realize the confidential communication of the private network, the following methods are mainly used:

Software command handshake: through the private network terminal and the card to send handshake signals to each other, to realize the distinction of private network users;

Hardware-specific field reading: set specific fields on ordinary cards for use by private network users.

However, the existing solutions have the following problems:

Software command handshake, design of private network terminal and private network card handshake command requires a long development cycle, considerable changes to the current terminal and card, and there may be a risk of leaks;

However, by reading hardware-specific fields, there is currently no very suitable reserved field on the GSM SIM card and CDMA UIM card for the distinction of private network users.

Contents of the invention

The purpose of the present invention is to provide a private network terminal and a method for the private network terminal to realize communication through the network, so as to realize the communication confidentiality of the mobile private network users without rebuilding the network.

In order to achieve the above object, the present invention provides a private network terminal, including a CPU unit, a sending module and a receiving module, which also includes:

A file identification identification module of a special file, used to read the file identification of the special file written to the card and determine the type of the card, and read user information by interacting with the card data;

An encryption algorithm module, when the card is a special network card, is used to encrypt the sent file information by using an encryption algorithm;

The decryption algorithm module, when the card is a dedicated network card, is used to use the decryption algorithm to decrypt the received encrypted information and then output it.

The above-mentioned private network terminal, wherein, the file identifier identification module of the special file is specifically used to read the file identifier of the special file written to the card, when the file identifier of the special file is 7F26 to 7F2F When any one of them is used, it is judged that the card is a private network card, and at the same time, user information is read through data interaction with the private network card.

In the private network terminal above, when the file identifier of the dedicated file is 7F20 or 7F25, the file identifier identification module of the dedicated file is also used to shield the encryption algorithm module and the decryption algorithm module.

In order to better achieve the above object, the present invention also provides a method for a private network terminal to realize communication through a network, which includes the following steps:

The file identification identification step of the special file, the file identification identification module of the special file reads the file identification written in the special file of the card and judges the type of the card, and simultaneously reads the user information by interacting with the card data;

The file information encryption step, when the card is a private network card, and when the private network terminals communicate, the encryption algorithm module encrypts the sent file information using an encryption algorithm;

In the sending step, the sending module transmits the encrypted file information to the called private network terminal through the network;

In the receiving step, the called private network terminal uses the receiving module to receive the encrypted information sent by the calling private network terminal through the network;

In the file information decryption step, when the card is a private network card and the private network terminals communicate, the decryption algorithm module uses the decryption algorithm to decrypt the received encrypted information and then outputs it.

The above-mentioned method for a private network terminal to realize communication through a network, wherein, the step of identifying the file identifier of the special file specifically performs the following operations:

Read the file identification of the special-purpose file written into the card, when the file identification of the special-purpose file is any one of 7F26 to 7F2F, judge that the card is a dedicated network card, and simultaneously pass the connection with the special network card Data interaction reads user information.

The method for the above-mentioned private network terminal to realize communication through the network, wherein, when the file identifier of the special file is 7F20 or 7F25, only the file identifier identification step, the sending step and the receiving step of the special file are executed, and the receiving step is directly output and received received information.

The private network terminal and the method for the private network terminal to realize communication through the network of the present invention identify the private network card by reading and judging the file identification of the special file, and perform encryption on the information sent by the private network user, and perform decryption on the received information without re- The construction of the network has realized the communication confidentiality of the mobile private network users.

Description of drawings

FIG. 1 is a schematic diagram of the file system of the private network card of the present invention.

Detailed ways

The private network terminal of the present invention includes conventional modules such as the CPU module of the existing mobile phone, sending and receiving modules, and also includes the following parts in addition:

The file identification identification module of the special file is used to read and judge the file identification of the special file written into the special network card. When the file identification of the special file is any one of 7F26 to 7F2F, the file identification identification module of the special file judges The card is a dedicated network card, and reads user information through data interaction with the dedicated network card. In the embodiment of the present invention, 7F2D is selected, as shown in Figure 1;

Encryption algorithm module, when the card is a private network card, use the encryption algorithm to encrypt the sent file information when the private network terminal communicates;

Decryption algorithm module, when the card is a dedicated network card, use the decryption algorithm to decrypt the received encrypted file information and output it;

The sending and receiving module transmits the encrypted information to the called private network terminal through the network, and at the same time receives the encrypted information sent by the calling private network through the network.

The above modules are all connected with the CPU module.

The method for the private network terminal of the present invention to realize communication through the network comprises the following steps:

The file identification identification step of special file, the file identification identification module of special file reads and writes the file identification of the special file of dedicated network card and judges, when the file identification of special file is any one in 7F26 to 7F2F, the special file's The file identification identification module judges that the card is a special network card, and reads user information through data interaction with the special network card, and selects 7F2D in the embodiment of the present invention;

In the file information encryption step, when the card is a private network card to realize communication between private network terminals, the encryption algorithm module encrypts the file information using an encryption algorithm;

In the sending step, the sending module transmits the encrypted information to the called private network terminal through the network;

In the receiving step, the receiving module receives the encrypted information sent by the calling private network terminal through the network;

In the file information decryption step, the decryption algorithm module uses the decryption algorithm to decrypt the received encrypted information and then outputs it.

When the called user is an ordinary user, the private network encrypted communication cannot make a successful call, because the terminal of the called user cannot decrypt the encrypted information.

When the private network terminal of the present invention uses a common card, the file identification module of the special file judges that the card is not a private network card, shields the encryption algorithm module and the decryption algorithm module, and is equivalent to a common terminal.

Certainly, the present invention also can have other multiple embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and deformations according to the present invention, but these corresponding Changes and deformations should belong to the scope of protection of the appended claims of the present invention.

Claims (6)

1. A private network terminal, comprising a CPU unit, a sending module and a receiving module, characterized in that it also includes: The file identification recognition module of the special file is used to read the file identification of the special file written to the card and judge the type of the card, and read user information by interacting with the card data; the file identification of the special file It is the file identification in the TIA/EIA/IS-820 specification and the GSM11.11 specification, including the file identification of the CDMA special file, the file identification of the GSM special file and the reserved file identification; when the file identification of the card is the reserved file identification , it is judged as a private network card; An encryption algorithm module, when the card is a special network card, is used to encrypt the sent file information by using an encryption algorithm; The decryption algorithm module, when the card is a dedicated network card, is used to use the decryption algorithm to decrypt the received encrypted information and then output it. 2. The private network terminal according to claim 1, wherein the file identifier of the dedicated file is any one of reserved file identifiers 7F26 to 7F2F. 3. The private network terminal according to claim 1, characterized in that, when the file identifier of the GSM special file is 7F20 or the file identifier of the CDMA special file is 7F25, the file identifier identification module of the special file also It is used to shield the encryption algorithm module and the decryption algorithm module. 4. The method for realizing communication by a private network terminal through a network according to claim 1, characterized in that it comprises the following steps: The file identification identification step of the special file, the file identification identification module of the special file reads the file identification written into the special file of the card and judges the type of the card, and reads the user information by interacting with the card data at the same time; The file identification of the special file is the file identification in the TIA/EIA/IS-820 specification and the GSM11.11 specification, including the file identification of the CDMA special file, the file identification of the GSM special file and the reserved file identification; when the file identification of the card When the file identification is reserved, it is judged as a dedicated network card; The file information encryption step, when the card is a private network card, and when the private network terminals communicate, the encryption algorithm module encrypts the sent file information using an encryption algorithm; In the sending step, the sending module transmits the encrypted file information to the called private network terminal through the network; In the receiving step, the called private network terminal uses the receiving module to receive the encrypted information sent by the calling private network terminal through the network; In the file information decryption step, when the card is a private network card, when communicating between private network terminals, the decryption algorithm module uses the decryption algorithm to decrypt the received encrypted information and then outputs it. 5. The method for realizing communication by a private network terminal through a network according to claim 4, wherein the step of identifying the file identifier of the special file specifically performs the following operations: Read the file identification of the special-purpose file written into the card, when the file identification of the special-purpose file is any one of the reserved file identification 7F26 to 7F2F, judge that the card is a dedicated network card, and simultaneously pass the The private network card data interactively reads user information. 6. The method for realizing communication by a private network terminal through a network according to claim 4 or 5, characterized in that, when the file identifier of the GSM special file is 7F20 or the file identifier of the CDMA special file is 7F25, only Execute the file identification identification step, the sending step and the receiving step of the special file, and directly output the received information after the receiving step.

Images