CN102547681A - Intelligent key device and identity authentication method - Google Patents

Abstract

The invention provides an intelligent key device, which includes a short-distance communication module, a first SIM card interface, a second SIM card interface, a CPU, a security component, and a memory. The CPU is respectively connected with the short-distance communication module, the first SIM card interface, the second SIM card interface, the security component and the storage. The key device cooperates with the mobile terminal with Internet access function to complete the identity authentication of online banking transactions. Or the smart key device cooperates with the mobile terminal, the wireless communication device, the network terminal and the server to complete the identity authentication of the online banking transaction. When using the technical scheme of the invention for identity authentication, the mobile terminal can also display the operation details and operation details to the operator in real time, which enhances the operator's participation and safety in the identity authentication process.

Description

An intelligent key device and identity authentication method

technical field

The invention relates to the communication field, in particular to a novel intelligent key device and an authentication method for identity authentication using the intelligent key device.

Background technique

In the current daily life, with the development of online banking and the popularization of security awareness, KEY (smart key), as a digital certificate storage medium for operator identity authentication, is widely used in user identity authentication of online banking in the banking system. , corporate financial personnel online tax declaration, online corporate electronic tax payment and other multi-field identity confirmation.

Along with the development of the communication industry, mobile terminals have gradually become one of the necessary personal belongings for people. In this way, online banking users must carry USB smart keys and mobile terminals in daily life to complete online banking transactions. This increases the complexity and cost of the online banking user's operations. Moreover, the USB identity authentication devices currently on the market must cooperate with computers to complete online banking transactions. Due to many insecure factors in the open Internet, when users conduct online transactions through the Internet, the security of financial applications is reduced. Online banking transactions cannot intuitively display the transaction process and details to users, and users lack participation and operability, which gradually fails to meet people's requirements.

Contents of the invention

The object of the present invention is to provide an intelligent key device with convenient use and high operation safety factor, and a method for authentication using the device.

As an aspect of the technical solution of the present invention, a smart key device is provided, including a short-distance communication module, a first SIM card interface, a second SIM card interface, a CPU, a security component, and a storage device,

The CPU is respectively connected to the short-distance communication module, the first SIM card interface, the second SIM card interface, the security component, and the storage;

The first SIM card interface communicates with the mobile terminal outside the smart key device; the second SIM card interface communicates with the SIM card in the mobile terminal; the short-distance communication module implements the smart key device. The short-distance wireless communication of the key device; the security component digitally signs and/or encrypts the operation information of the user of the smart key device.

Further, the short-distance communication module also has a communication distance control function, which is used to control the wireless communication distance of the short-distance communication module.

Further, the short-distance communication module is one or more of 2.4GHz RFID, Bluetooth, infrared, Zigbee, and WIFI communication modules.

Further, the operation information includes transfer account number, transfer amount, and transfer time.

Further, the smart key device is provided with at least one accommodating cavity, and the SIM card is assembled into the accommodating cavity.

As another aspect of the technical solution of the present invention, an identity authentication method is also provided. The above-mentioned smart key device is assembled into a mobile terminal, and the identity authentication is performed according to the following steps:

Step 1, the smart key device establishes communication with an external server through the second SIM card interface and/or the short-distance communication module;

Step 2, the smart key device reads legal user identity information stored in its internal storage, and performs user identity authentication on the user identity information input via the mobile terminal;

Step 3: The first SIM card interface of the smart key device receives the operation information sent by the mobile terminal, and returns the received operation information to the mobile terminal through the first SIM card interface for confirmation ;

Step 4, the smart key device waits to receive confirmation information returned by the mobile terminal;

Step 5, after the smart key device receives the confirmation information returned by the mobile terminal, the security component digitally signs and encrypts the operation information, and sends The distance communication module sends it to the server for operation authentication.

Further, in the first step, the second SIM card interface inside the smart key device establishes communication with the server through the SIM card in the mobile terminal.

Further, in the first step, the short-distance communication module inside the smart key device establishes communication with the server through a wireless communication device and a network terminal;

The wireless communication device includes a first interface, a second interface, and a signal conversion module, and the signal conversion module is respectively connected to the first interface and the second interface;

The first interface is connected to the network terminal, the second interface receives the encrypted operation information sent by the smart key device, and sends it to the network through the signal conversion module and the first interface terminal, sent by the network terminal to the server for operation authentication.

Further, the first interface is one or more of USB interface, SD interface, MMC interface; and/or, the first interface is one of 2.4GHz RFID, bluetooth, infrared, Zigbee, WIFI interface one or more kinds;

The second interface is one or more of 2.4GHz RFID, Bluetooth, infrared, Zigbee, and WIFI interfaces.

Further, in the second step, the user identity information is a PIN code.

Further, the mobile terminal receives the operation information returned by the smart key device, displays it to the operator through the STK menu or software with interface display function, and the operator confirms it.

The beneficial effects of the present invention are: provide an intelligent key device and authentication method for online transaction identity authentication in a wireless communication mode, so that not only the identity authentication of online transactions can be completed when the mobile terminal has the Internet access function, but also in the mobile terminal When the terminal does not have the Internet access function or the Internet access function is limited, the smart key device of the present invention can also be used to complete the identity authentication of online transactions. In addition, when using the technical scheme of the present invention for identity authentication, the mobile terminal can also display the operation details and operation details to the operator in real time, which enhances the operator's participation and safety in the identity authentication process.

Description of drawings

Fig. 1 is a schematic diagram of the appearance and structure of the smart key device of the present invention;

Fig. 2 is a schematic diagram of the composition of the smart key device of the present invention;

3 is a schematic diagram of the composition of the wireless communication device in the present invention;

Fig. 4 is a schematic flow chart of the first kind of identity authentication method of the present invention;

Fig. 5 is a schematic flow chart of the second identity authentication method of the present invention.

Detailed ways

The principles and features of the present invention are described below in conjunction with the accompanying drawings, and the examples given are only used to explain the present invention, and are not intended to limit the scope of the present invention.

As one aspect of the technical solution of the present invention, a smart key device 12 is provided, the outline structure diagram of which is shown in FIG. , together with the smart key device 12, is assembled into a mobile terminal (such as a mobile phone), and cooperates with the mobile terminal to complete identity authentication. Wherein, the shape and size of the smart key device 12 can be the same as the shape and size of a standard SIM card (such as an ID-1 card); Matching can be designed with reference to the requirements of Micro SIM cards and other related products.

The smart key device 12 of the present invention is introduced in detail below. As shown in FIG. distance communication module. The CPU 300 is respectively connected to the first SIM card interface 100 , the second SIM card interface 200 , the security component 400 , the storage 500 and the short-distance communication module. The second SIM card interface 200 is connected to the SIM card in the mobile terminal outside the smart key device 12, and the second SIM card interface 200 communicates with the external server through the SIM card in the mobile terminal. The short-distance communication module is used to realize the communication between the smart key device and the server. When the smart key device 12 is assembled into the mobile terminal, the first SIM card interface 100 receives the user identity information and operation information sent by the mobile terminal: the first SIM card interface 100 sends the received user identity information to the CPU 300 for user Identity authentication: the first SIM card interface 100 sends the operation information to the mobile terminal for confirmation, then sends the operation information to the security component 400 for digital signature and encryption, and then sends the operation information to the server for operation authentication. Wherein, the security component 400 is configured to digitally sign and encrypt the operation information according to the control of the CPU 300 , and send the encrypted operation information to the second SIM card interface 200 and/or the short-distance communication module via the CPU 300 . The storage 500 is used for storing legal user identity information, and cooperates with the CPU 300 to perform user identity authentication. Data between the second SIM card interface 200 and the first SIM card interface 100 is transparently transmitted through the CPU 300 . The smart key device 12 of the present invention can not only complete the identity authentication of online transactions when the mobile terminal has the Internet access function, but also complete the identity authentication of online transactions when the mobile terminal does not have the Internet access function or the Internet access function is limited. From the three aspects of user identity authentication, operation confirmation, and operation authentication, the identity of the operator who conducts online transactions is authenticated, and the relevant operation actions of online transactions are finally completed.

Further, the short-range communication module 600 is one or more of 2.4GHz RFID, Bluetooth, infrared, Zigbee, and WIFI communication modules.

Further, the short-distance communication module 600 also has a communication distance control function, which is used to control the distance of the short-distance communication module 600 for wireless communication. In order to improve the security of online transactions performed by the smart key device 12 with short-distance communication function of the present invention, the communication distance of the smart key device 12 is limited to ensure the security of online transactions.

As another aspect of the technical solution of the present invention, an identity authentication method is also provided, the above-mentioned smart key device is assembled into a mobile terminal, and the identity authentication is performed according to the following steps,

Step 1, establishing communication between the smart key device and the external server;

Step 2, the smart key device reads the legal user identity information stored inside it, and performs user identity authentication on the user identity information input via the mobile terminal;

Step 3, the smart key device receives the operation information sent by the mobile terminal, and returns the received operation information to the mobile terminal for confirmation;

Step 4, the smart key device waits for the mobile terminal to return confirmation information;

Step 5: After receiving the confirmation information returned by the mobile terminal, the smart key device digitally signs and encrypts the operation information, and sends it to the server for operation authentication.

Step 1 of the above identity authentication method, the establishment of communication between the smart key device and the external server can be implemented in the following two ways:

The first implementation manner is: the second SIM card interface inside the smart key device establishes communication with the server through the SIM card in the mobile terminal. When adopting this method to establish communication and further conduct identity authentication for online transactions, the mobile terminal must have the function of surfing the Internet.

The second implementation method is: the short-distance communication module inside the smart key device establishes communication with the server through the wireless communication device and the network terminal. When the mobile terminal does not have the Internet access function or cannot perform online operations due to network restrictions, the smart key device 12 is assembled into the mobile terminal, the wireless communication device 800 is connected to the network terminal 900, and the wireless communication device 800 communicates with the server through the network terminal 900 , the wireless communication device 800 also performs wireless communication with the smart key device 12 . Thus, data transfer between the smart key device 12 and the server is realized.

As shown in FIG. 3 , the wireless communication device 800 includes a first interface 801 , a second interface 803 , and a signal conversion module 802 , and the signal conversion module 802 is connected to the first interface 801 and the second interface 803 respectively. The first interface 801 is connected to the network terminal 900, the second interface 803 receives the encrypted operation information sent by the smart key device 12, sends it to the network terminal 900 through the signal conversion module 802 and the first interface 801, and is sent by the network terminal 900 to the server for operation authentication.

After the user enters the user identity information (such as the user's account number, account password, etc.) After the authentication of the user's identity, the externally input operation information received by the mobile terminal is sent to the smart key device 12. Afterwards, the operation information is fed back to the mobile terminal for confirmation. Only after receiving the confirmation information input by the mobile terminal, the smart key device 12 will digitally sign and encrypt the operation information, and send it to the wireless communication device 800 by wireless communication.

The second interface 803 of the wireless communication device 800 receives the above-mentioned encrypted operation information, and after the protocol conversion is performed by the signal conversion module 802, it is sent to the network terminal 900 through the first interface 801 by means of wired communication or wireless communication, and then the network terminal 900 The encrypted operation information is sent to the server, and the server completes the operation authentication, and then completes the operation actions corresponding to the operation information.

The first interface 801 of the wireless communication device 800 is one or more of a USB interface, an SD interface, and an MMC interface capable of connecting communication; and/or, the first interface 801 of the wireless communication device 800 is a non-connectable One or more of 2.4GHz RFID, Bluetooth, infrared, Zigbee, and WIFI interfaces for communication. The second interface 803 of the wireless communication device 800 may be one or more of 2.4GHz RFID, Bluetooth, infrared, Zigbee, and WIFI interfaces.

Further, the user identity information may be a PIN code, that is, the mobile terminal receives an externally input PIN code, and completes user identity authentication by verifying the PIN code. The operation information includes the transfer account number, transfer amount, and transfer time, that is, the server authenticates the operator by verifying the above aspects of the operation information.

Taking online shopping payment as an example, the process of using the smart key device of the present invention for identity authentication is briefly introduced below. It mainly includes the following two identity authentication methods,

As shown in Figure 4, when the mobile terminal has the function of surfing the Internet, the process of the smart key device 12 of the present invention performing identity authentication is as follows:

Firstly, the operator enters his user identity information through the mobile terminal, such as the user's account number, account password, etc., and then waits for identity authentication using the technical solution of the present invention, and then completes the transfer payment operation.

Secondly, the operator enters the PIN code through the mobile terminal, and sends it to the CPU 300 via the first SIM card interface 100, and the CPU 300 invokes the legal PIN code stored in the memory 500, and compares the input PIN code. If the PIN code is authenticated, Then return the authentication qualified information to the mobile terminal, and the mobile terminal will display it to the operator. If the PIN code authentication fails, the transfer operation will be terminated.

Then, after the operator receives the information that the PIN code is certified as qualified, he then enters the operation information (such as the account number of the transfer, the amount of the transfer, the time of the transfer) through the mobile terminal; after the smart key device 12 receives the above operation information, in order to prevent the If the information of the operator's interests is maliciously tampered with, the smart key device 12 returns the received operation information to the mobile terminal for display and confirmation. After receiving the operation information returned by the smart key device, the mobile terminal can display it to the operator through the STK menu or other software with interface display function, waiting for the operator to confirm.

Finally, after the smart key device 12 receives the confirmation information returned by the mobile terminal, its internal security calculation module performs digital signature and data encryption on the operation information according to the control signal sent by the CPU300; The CPU 300 and the second SIM card interface 200 are sent to the SIM card in the mobile terminal, and then the encrypted operation information is sent to the background server of the relevant operator through the mobile network; the encrypted user identity information is decrypted by the background server, and the Its legality is verified. If the operation is certified as qualified, the background server will complete the relevant purchase and payment operation actions (such as online transfer from the bank designated by the operator, confirmation of order completion, etc.) according to the operation information sent. online transaction. If the operation authentication fails, the transfer operation will be terminated.

As shown in Figure 5, when the mobile terminal cannot realize the function of surfing the Internet, the process of identity authentication by the smart key device of the present invention is as follows:

In this implementation mode, the mobile terminal activates the wireless communication function of the smart key device 12 according to the prompt of the STK menu or other software with an interface display function, that is, establishes a wireless communication channel with the wireless communication device 800 through the short-distance communication module 600, thereby using The wireless communication device 800 and the network terminal 900 (such as a computer) communicate with the server to complete the online transfer transaction. After the communication channel is established, the specific working process of this authentication method is the same as that of the first type of identity authentication performed by the smart key device 12 . In this method, since the smart key device 12 in the mobile terminal cannot directly communicate with the server through the network, the communication between the smart key device 12 and the server is realized by setting the wireless communication device 800 and the network terminal 900 . Wherein, the wireless communication device 800 can be connected and communicate with the network terminal 900 (such as a computer) in two ways of contact connection or wireless connection. Through the wireless communication mode between the wireless communication device 800 and the smart key device 12, the transmission of operation authentication information is realized, and finally the online transfer transaction is completed according to the first method of identity authentication of the smart key device 12, which will not be repeated here. .

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (11)

1. an intelligent key apparatus is characterized in that, comprises short-range communication module, the first SIM interface, the second SIM interface, CPU, security component, holder,

Said CPU links to each other with said holder with said short-range communication module, the said first SIM interface, the said second SIM interface, said security component respectively;

The outside portable terminal of said first SIM interface and said intelligent key apparatus communicates; SIM in said second SIM interface and the said portable terminal communicates; Said short-range communication module realizes the short-distance wireless communication of this intelligent key apparatus; Said security component to intelligent key apparatus user's operation information carry out digital signature with or encryption.

2. according to the described intelligent key apparatus of claim 1, it is characterized in that said short-range communication module also has the communication distance controlled function, be used to control the distance that said short-range communication module is carried out radio communication.

3. according to the described intelligent key apparatus of claim 1, it is characterized in that said short-range communication module is one or more in 2.4GHz RFID, bluetooth, infrared, Zigbee, the WIFI communication module.

4. according to the described intelligent key apparatus of claim 1, it is characterized in that said operation information comprises the number of the account of transferring accounts, the amount of money of transferring accounts, transfer accounts the time.

5. according to the described intelligent key apparatus of claim 1, it is characterized in that,

Said intelligent key apparatus is provided with at least one container cavity, and said SIM is fitted into said container cavity.

6. an identity identifying method is characterized in that,

The arbitrary described intelligent key apparatus of claim 1 to 5 is fitted into portable terminal, carries out authentication according to following steps:

Step 1, said intelligent key apparatus is communicated by letter through setting up between the second SIM interface and/or short-range communication module and the external server;

Step 2, said intelligent key apparatus read legal user's identity information of preserving in its interior magazine, and the user's identity information via said portable terminal input is carried out user's authentication;

Step 3, the first SIM interface of said intelligent key apparatus receives the operation information that said portable terminal sends, and the said operation information that will receive is back to said portable terminal affirmation through the said first SIM interface;

Step 4, said intelligent key apparatus wait for that receiving said portable terminal returns confirmation;

Step 5; After said intelligent key apparatus receives the affirmation information that said portable terminal returns; By security component said operation information is carried out digital signature and encryption, and be sent to said server through said second SIM interface and/or said short-range communication module and carry out authenticating operation.

7. according to the described identity identifying method of claim 6, it is characterized in that,

In said step 1, the inner said second SIM interface of said intelligent key apparatus is set up with said server through the SIM in the said portable terminal and is communicated by letter.

8. according to the described identity identifying method of claim 6, it is characterized in that,

In said step 1, the said short-range communication module that said intelligent key apparatus is inner is communicated by letter with said server foundation with the network terminal through radio communication device;

Said radio communication device comprises first interface, second interface, signal conversion module, and said signal conversion module links to each other with said second interface with said first interface respectively;

Said first interface links to each other with the said network terminal; Said second interface receives the operation information after the encryption that said intelligent key apparatus sends; Be sent to the said network terminal through said signal conversion module and said first interface, be sent to said server by the said network terminal and carry out authenticating operation.

9. according to the described identity identifying method of claim 8, it is characterized in that said first interface is one or more in USB interface, SD interface, the MMC interface; And/or said first interface is one or more in 2.4GHz RFID, bluetooth, infrared, Zigbee, the WIFI interface;

Said second interface is one or more in 2.4GHz RFID, bluetooth, infrared, Zigbee, the WIFI interface.

10. according to the described identity identifying method of claim 6, it is characterized in that in the said step 2, said user's identity information is a PIN code.

11. according to claim 6,7,8 or 9 described identity identifying methods, it is characterized in that,

Said portable terminal receives the said operation information that said intelligent key apparatus returns, and the software that perhaps has the interface display function through the STK menu shows to the operator, is confirmed by the operator.

Images