CN106803820A - Verification method, IC tag, SIM card or secure digital card - Google Patents

Abstract

The present invention provides a verification method based on time information, an integrated circuit patch, a user identification module card or a secure digital card. The verification method based on time information includes the following steps: obtaining time information from an external device; obtaining data from a storage unit of a security chip; and generating a verification code according to the data and time information.

Description

Authentication method, integrated circuit patch, subscriber identity module card or secure digital card

technical field

The present invention relates to a verification method in a mobile device, an integrated circuit patch, a subscriber identity module card or a secure digital card, and in particular to a verification method based on time information, a method with time-based information Integrated circuit patch, subscriber identity module card or secure digital card with authentication function.

Background technique

With the development of mobile device technology, various services can be provided on the mobile device. For example, a user may utilize a mobile device as a tool for security services or authentication purposes for payment services or access control. In this situation, authentication mechanisms on mobile devices become more and more important. General authentication mechanisms, such as dynamic password (OTP), time-based dynamic password (Time-basedOTP), count-based dynamic password (Counter-based OTP) or open challenge and response authentication algorithm (OATH challenge response algorithm), are widely used.

Contents of the invention

The invention relates to a verification method based on time information, an integrated circuit patch, a user identification module card or a security digital card. The verification method of the present invention can generate a verification code according to a data and a time information obtained from an external device.

According to an embodiment of the present invention, a verification method based on time information is provided. The verification method based on time information includes the following steps. Obtain time information from an external device. A data is obtained from a storage unit of a security chip. A verification code is generated according to the data and time information.

According to another embodiment of the present invention, an integrated circuit is provided. The integrated circuit includes a security chip. The safety chip includes a time information acquisition unit, a storage unit and a verification unit. The time information obtaining unit is used for obtaining time information from an external device. The storage unit is used to store data. The verification unit is used for generating a verification code according to the data and time information.

In order to have a better understanding of the above-mentioned and other aspects of the present invention, the preferred embodiments are specifically cited below, together with the accompanying drawings, and described in detail as follows:

Description of drawings

FIG. 1A illustrates an integrated circuit chip according to an embodiment of the present invention by showing a first surface.

FIG. 1B illustrates an integrated circuit die according to an embodiment of the present invention by showing a second surface.

FIG. 2 illustrates an integrated circuit patch, a SIM card and a mobile device according to an embodiment of the present invention.

FIG. 3 is a diagram illustrating the relationship between an IC chip, a SIM card, a mobile device and a server according to an embodiment of the present invention.

FIG. 4 is a schematic diagram of a security chip according to an embodiment of the present invention.

FIG. 5 is a flowchart of a verification method based on time information according to an embodiment of the present invention.

FIG. 6 is a flowchart of step S101 according to an embodiment of the present invention.

FIG. 7 is a schematic diagram of a time information obtaining unit and a mobile device according to an embodiment of the present invention.

FIG. 8 is a schematic diagram of a SIM card according to an embodiment of the present invention.

FIG. 9 is a schematic diagram of a secure digital card according to an embodiment of the invention.

FIG. 10 illustrates a secure digital card and a mobile device according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating the relationship among a security chip, a secure digital card, a mobile device and a server according to an embodiment of the present invention.

【Symbol Description】

100: integrated circuit patch

101: circuit board

103: Security chip

105: First pad

107: Second pad

S1: first surface

S2: second surface

200: SIM card

300: mobile device

301: SIM card slot

303: SD card slot

400: network

500: server

600: SD card

1031: Time information acquisition unit

1032: storage unit

1033: verification unit

T1: time information

D1: Information

A1: verification code

S101, S103, S105, S1011, S1013, S1015: step process

CT: current time

CZ: current time zone

L1: location information

detailed description

The following examples are provided for detailed description, and the examples are only used as examples for illustration and will not limit the scope of protection of the present invention. In addition, the drawings in the embodiments omit unnecessary elements to clearly show the technical characteristics of the present invention.

FIG. 1A illustrates an integrated circuit patch 100 according to an embodiment of the present invention by showing a first surface S1. The integrated circuit patch 100 includes a circuit board 101 , a security chip 103 and a plurality of first pads 105 . The first pads 105 are located on the first surface S1 of the circuit board 101 . The security chip 103 is disposed on the first surface S1 of the circuit board 101 .

FIG. 1B illustrates the IC chip 100 according to an embodiment of the present invention by showing a second surface S2. The second surface S2 is located opposite to the first surface S1. The integrated circuit chip 100 further includes a plurality of second pads 107 located on the second surface S2 of the circuit board 101 . Although, as shown in FIG. 1A, the security chip 103 is disposed on the first surface S1 of the circuit board 101, the security chip 103 may also be disposed on the second surface of the circuit board 101 based on the function or application of the integrated circuit patch 100. on S2.

FIG. 2 illustrates an integrated circuit patch 100 , a subscriber identity module (Subscriber Identity Module, SIM) card 200 and a mobile device 300 according to an embodiment of the present invention. Please refer to FIG. 1A , FIG. 1B and FIG. 2 , the first pad 105 is, for example, used to connect to the mobile device 300 , and the second pad 107 is, for example, used to connect to the SIM card 200 . The security chip 103 can communicate with the mobile device 300 through the first pad 105 , and communicate with the SIM card 200 through the second pad 107 . The SIM card 200 includes a storage unit, which can store the personal information of the account holder, including the user's mobile phone number, address book, short message, and other data. The integrated circuit patch 100 can be pasted on the SIM card 200 and put into the SIM card slot 301 of the mobile device 300 along with the SIM card 200 .

Please refer to FIG. 3 . FIG. 3 shows a relationship diagram among the integrated circuit patch 100 , the SIM card 200 , the mobile device 300 and the server 500 according to an embodiment of the present invention. The mobile device 300 can communicate with the server 500 through the network 400 . The server 500 can be an authentication server. In one embodiment, the security chip 103 can generate a verification code, and can send the verification code to the server 500 to execute a verification procedure. In another embodiment, the security chip 103 can generate a verification code, and can display the verification code on the screen of the mobile device 300 . Then, the user can input the verification code into a computer system (not shown) connected to the server 500 to execute the verification procedure.

FIG. 4 is a schematic diagram of the security chip 103 according to an embodiment of the present invention. The security chip 103 includes a time information acquisition unit 1031 , a storage unit 1032 and a verification unit 1033 .

The time information obtaining unit 1031 is used for obtaining information from the mobile device 300 . For example, the time information obtaining unit 1031 can be a processing chip, a storage medium storing a plurality of program codes, and/or a circuit, capable of obtaining information from the mobile device 300 .

The storage unit 1032 is used for storing data. For example, the storage unit 1032 can be a read only memory (ROM).

The verification unit 1033 is used for processing data and generating data. For example, the verification unit 1033 can be a processing chip, a storage medium storing a plurality of program codes, and/or a circuit, capable of processing data and generating data.

The security chip 103 can generate a verification code A1 according to the data D1 received from the storage unit 1032 and the time information T1 obtained from the mobile device 300 . Data D1 includes a key, personal data or other confidential data. The operation of the security chip 103 is illustrated by the flowchart of FIG. 5 .

Please refer to FIG. 5 , which is a flow chart of a verification method based on time information according to an embodiment of the present invention. In step S101 , please refer to FIG. 4 and FIG. 5 , the time information obtaining unit 1031 obtains time information T1 from an external device (such as the mobile device 300 ). In one embodiment, the time information obtaining unit 1031 is connected to a memory of the mobile device 300 . Further, please refer to FIG. 6 and FIG. 7 , FIG. 6 shows a flow chart of step S101 according to an embodiment of the present invention. Step S101 includes steps S1011 to S1015. FIG. 7 shows a schematic diagram of the time information obtaining unit 1031 and the mobile device 300 according to an embodiment of the present invention.

In step S1011 , the time information obtaining unit 1031 receives a current time CT and a current time zone CZ recorded in an external device (such as the mobile device 300 ). For example, the current time CT and the current time zone CZ are recorded in the memory of the mobile device 300 , and the time information obtaining unit 1031 receives the current time CT and the current time zone CZ from the memory of the mobile device 300 .

In step S1013, the time information acquiring unit 1031 corrects the current time zone CZ by acquiring a piece of location information L1. First, the time information acquiring unit 1031 acquires the location information L1. The location information L1 can be a time zone where a base station is located, hereinafter referred to as "base station time zone". The mobile device 300 receives a base station time zone signal from the base station. For example, if the base station is located in "Taiwan, China", the mobile device 300 receives the mobile country code of "Taiwan, China" from the base station, that is, the location information L1 is the standard time zone "+8".

Furthermore, the time information obtaining unit 1031 sends a command to the mobile device 300 to request the location of the base station, and then the time information obtaining unit 1031 uses the location information to obtain the time zone of the base station from the look-up table. The base station time zone corresponds to where the base station is located. For example, if the location is "Taiwan, China", the standard time zone "+8" can be searched out from the table lookup. In one embodiment, the time information obtaining unit 1031 does not send a command to the mobile device 300 to request the location of the base station, but the user interface of the mobile device 300 receives the local time zone. In this embodiment, the local time zone is entered by the user through the user interface.

Then, the time information obtaining unit 1031 corrects the current time zone CZ according to the location information L1 to obtain the correct time zone. In one embodiment, the time information obtaining unit 1031 judges whether the current time zone CZ obtained in step S1011 should be corrected according to the location information L1, and if the current time zone CZ needs to be corrected, the time information obtaining unit 1031 corrects the current time zone CZ according to the location information L1 .

For example, the time information acquiring unit 1031 compares the current time zone CZ with the base station time zone. If the current time zone CZ is consistent with the base station time zone, the time information obtaining unit 1031 does not need to correct the current time zone CZ. If the current time zone CZ is inconsistent with the base station time zone, the time information obtaining unit 1031 corrects the current time zone CZ. If the current time zone CZ is "+7" and the time zone "+8" obtained by the base station is inconsistent, the time information obtaining unit 1031 corrects the current time zone CZ "+7" to the correct time zone "+8".

In step S1015, the time information acquiring unit 1031 generates Universal Time Coordinated (UTC) as time information T1 according to the current time CT and the correct time zone. For example, when the current time CT is "13:00" and the correct time zone is "+8", the time information obtaining unit 1031 generates the UTC time "05" according to the current time CT "13:00" and the correct time zone "+8". :00".

Since the current time zone CZ received by the mobile device 300 may be wrong, the UTC time generated in step S1015 will also be wrong. In order to generate accurate UTC time, the time information obtaining unit 1031 corrects the current time zone CZ according to the location information L1 to obtain the correct time zone. This results in an accurate UTC time based on the correct time zone.

In one embodiment, in step S101 , the time information acquiring unit 1031 may be connected to the user interface of the mobile device 300 to acquire the time information T1 . The user interface can be a touch screen, a keyboard, a microphone, or a combination thereof. For example, the user can input time information T1 through the touch screen, and the time information obtaining unit 1031 receives the time information T1 from the touch screen.

In one embodiment, in step S101 , the time information obtaining unit 1031 may be connected to the wireless module of the mobile device 300 to obtain time information T1 . The wireless module can be a Near Field Communication (NFC) module, a Wi-Fi module, a Bluetooth (Bluetooth) module, or a Quick Response code (QR code) module. For example, the user can use the NFC module of the mobile device 300 to read the NFC identifier to obtain the time information T1, or receive the time information T1 from other mobile devices. Then, the time information obtaining unit 1031 receives the time information T1 from the NFC module.

Step S103 , the verification unit 1033 receives data D1 from the storage unit 1032 , and the data D1 includes a key, personal information or other confidential information. For example, the verification unit 1033 is connected to the storage unit 1032, and receives data D1 from the storage unit 1032, including keys, personal data or other confidential information.

In step S105, the verification unit 1033 generates a verification code A1 according to the data D1 and the time information T1. For example, the verification unit 1033 is connected to the time information obtaining unit 1031 and receives the time information T1 from the time information obtaining unit 1031 . Next, the verification unit 1033 generates a verification code A1 according to the data D1 and the time information T1. After the verification code A1 is generated, the verification code A1 is sent to the server 500 to execute the verification procedure.

FIG. 8 is a schematic diagram of a SIM card 200 according to an embodiment of the present invention. In one embodiment, the security chip 103 can be integrated into the SIM card 200 so that the SIM card 200 has a verification function based on time information, and steps S101 to S105 and steps S1011 to S1015 can be executed. For example, after the security chip 103 is integrated into the SIM card 200 , the SIM card 200 includes a time information obtaining unit 1031 , a storage unit 1032 and a verification unit 1033 . The storage unit 1032 stores data, and the datagram includes keys, personal information of account holders, including phone numbers, address books, short messages, and other confidential data. The details of executing steps S101 to S105 and steps S1011 to S1015 by the SIM card 200 are similar to the details of executing steps S101 to S105 and steps S1011 to S1015 by the security chip 103 .

FIG. 9 is a schematic diagram of a Secure Digital (SD) card 600 according to an embodiment of the present invention. In one embodiment, the security chip 103 can be integrated into the SD card 600 so that the SD card 600 has a verification function based on time information, and steps S101 to S105 and steps S1011 to S1015 can be executed. For example, after the security chip 103 is integrated into the SD card 600 , the SD card 600 includes a time information acquisition unit 1031 , a storage unit 1032 and a verification unit 1033 . The storage unit 1032 stores data, and the data includes keys, personal information or other confidential data. Details of the SD card 600 executing steps S101 to S105 and steps S1011 to S1015 are similar to those of the security chip 103 executing steps S101 to S105 and steps S1011 to S1015 .

FIG. 10 illustrates an SD card 600 and a mobile device 300 according to an embodiment of the present invention. The mobile device 300 includes an SD card slot 303 . The security chip 103 is integrated into the SD card 600 , and the SD card 600 can be put into the SD card slot 303 of the mobile device 300 .

Please refer to FIG. 11 . FIG. 11 shows a relationship diagram among the security chip 103 , the SD card 600 , the mobile device 300 and the server 500 according to an embodiment of the present invention. The security chip 103 is integrated into the SD card 600 . The mobile device 300 can communicate with the server 500 through the network 400 . Server 500 may be an authentication server. In one embodiment, the security chip 103 can generate a verification code, and can send the verification code to the server 500 to execute the verification procedure. In another embodiment, the security chip 103 can generate a verification code and display it on the screen of the mobile device 300 . Then, the user can input the verification code into a computer system (not shown) connected to the server 500 to execute the verification procedure.

In summary, although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Those skilled in the art to which the present invention belongs may make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention should be determined by what is defined by the claims.

Claims (15)

1. a kind of verification method based on temporal information, it is characterised in that including：

A temporal information is obtained from an external device (ED)；

A data are received from a memory cell of a safety chip；And

An identifying code is produced according to the data and the temporal information.

2. verification method according to claim 1, wherein obtaining time letter from the external device (ED) In the step of breath, including：

A current time and a current time zone of the receiving record in the external device (ED)；

By obtaining a position information correction current time zone, to obtain a correct time zone；And

One universal time (UTC) is produced according to the correct time zone and the current time.

3. verification method according to claim 2, the wherein positional information are a base station time zone, And the base station time zone corresponds to the place that a base station is located.

4. verification method according to claim 1, wherein obtaining time letter from the external device (ED) In the step of breath, including：

One user interface is provided；And

The temporal information is received from the user interface.

5. verification method according to claim 1, wherein obtaining time letter from the external device (ED) In the step of breath, including：

The temporal information is received from a wireless module of the external device (ED).

6. verification method according to claim 1, the wherein external device (ED) are a mobile device.

7. a kind of integrated circuit, it is characterised in that with the authentication function based on temporal information, should Integrated circuit includes：

One safety chip, including：

One temporal information acquisition unit, to obtain a temporal information from an external device (ED)；

One memory cell, is used to store a data；And

One authentication unit, is used to receive the data from the memory cell, and according to the data and The temporal information produces an identifying code.

8. integrated circuit according to claim 7, the wherein integrated circuit are integrated circuit patch Piece, the integrated circuit also includes：

One circuit board, with a first surface and a second surface, the second surface is in the first surface Reverse side；

Multiple first connection pads, positioned at, being used to connect the external device (ED) on the first surface；And

Multiple second connection pads, positioned at, being used to connect a subscriber identification module (SIM) on the second surface Card；

Wherein the safety chip is set on the board, and the safety chip is used to first be connect by those Pad is linked up with the external device (ED), and is linked up by those second connection pads and the subscriber identification module card.

9. integrated circuit according to claim 7, the wherein integrated circuit are a user's identification mould Block card, and the datagram includes a key, telephone number, short message.

10. integrated circuit according to claim 7, the wherein integrated circuit are a secure digital (SD) block, and the datagram includes a key, personal information or confidential information.

11. integrated circuits according to claim 7, the wherein external device (ED) are a mobile device.

12. integrated circuits according to claim 7, wherein the temporal information acquisition unit are received Current time in the external device (ED) of record and a current time zone, by obtaining a positional information school The just current time zone, to obtain a correct time zone and be produced according to the correct time zone and the current time A raw universal time.

When 13. integrated circuits according to claim 12, the wherein positional information are a base station Area, and the base station time zone corresponds to the place that a base station is located.

14. integrated circuits according to claim 7, wherein the temporal information acquisition unit are connected To a user interface, and the temporal information is received from the user interface.

15. integrated circuits according to claim 7, wherein the temporal information acquisition unit are connected To a wireless module of the external device (ED), and the temporal information is received from the wireless module.