CN106845300A - A kind of secure readers and safe card reading method - Google Patents

Abstract

The invention discloses a safe card reader and a safe card reading method, belonging to the field of card reader equipment. The secure card reader includes a card reading module and a data transmission module for connecting with a terminal device for data transmission, the card reading module includes a contact card reading unit and a non-contact card reading unit, and the card reader also includes The security module and the control module for controlling the working mode of the card reading module, the contact card reading unit and the non-contact card reading unit are respectively connected with the control module, and the control module is connected with the data transmission module through the security module. The secure card reader and the secure card reading method provided in the embodiments of the present invention provide a hardware-level security guarantee for the interactive data between the card reader and the terminal device through the security module and the control module, and solve the problem of card reader The problem of easy leakage of interactive data with terminal equipment ensures the security of data transmission between the two.

Description

A kind of safe card reader and safe card reading method

technical field

The invention relates to the field of card reader equipment, in particular to a safe card reader and a safe card reading method.

Background technique

An IC card is made into a card form by embedding a microelectronic chip into a card base conforming to the ISO 7816 standard. According to the communication interface, IC cards are divided into contact IC cards, non-contact IC cards and dual-interface cards (both contact and non-contact communication interfaces). As an IC card reading and writing device, card readers can also be divided into contact IC card readers, non-contact IC card readers and long-distance card readers. The communication mode between the IC card and the reader can be contact or non-contact. The card reader reads the information in the IC card through a contact/non-contact method, and then uploads the data to the terminal device through Bluetooth, USB or infrared. At present, when the card reader uploads data to the terminal device, the data transmission process is generally transmitted in plain text, which has a low safety factor and may easily lead to data leakage, especially when transmitting data by Bluetooth.

Contents of the invention

In view of the defects existing in the prior art, the object of the present invention is to provide a safe card reader and a safe card reading method, through which the card reader and the card reading method can effectively ensure the security of data transmission between the card reader and the terminal equipment sex.

In order to achieve the above object, the technical solution adopted in the present invention is: a secure card reader, including a card reading module and a data transmission module for connecting with a terminal device for data transmission, the card reading module includes a contact card reader The unit and the non-contact card reading unit also include a security module and a control module for controlling the working mode of the card reading module, and the contact card reading unit and the non-contact card reading unit are respectively connected with the control module, and the control module passes through The security module is connected with the data transmission module.

Further, in the above-mentioned secure card reader, the security module includes an encryption and decryption unit.

Further, in the secure card reader as described above, the security module further includes a terminal device verification unit for conducting two-way security authentication with the terminal device.

Further, in the secure card reader as described above, the security module further includes a device information storage unit for storing terminal device related information, and the terminal device related information includes the unique identifier of the terminal device

Further, in the above-mentioned secure card reader, the security module is a security element SE.

Further, a security card reader as described above also includes a power management module for supplying power to each module of the security card reader, the power management module includes a power supply module and a voltage conversion module, and the power supply module converts voltage The module is connected with each module of the card reader.

Further, for a secure card reader as described above, the data transmission module includes at least one of the following modules:

USB communication module, Bluetooth communication module, infrared communication module, Wifi communication module.

Further, in the above-mentioned secure card reader, the control module is the main control chip MCU.

An embodiment of the present invention also provides a secure card reading method based on the secure card reader, comprising the following steps:

The control module of the card reader controls the contact type card reading unit or the non-contact type card reading unit to read the first data on the IC card, and send the first data to the security module;

The security module encrypts the first data, and sends the encrypted ciphertext to the terminal device through the data transmission module;

The security module of the card reader receives the second data issued by the terminal device through the data transmission module, decrypts the second data, and sends the decrypted plaintext to the control module;

The control module controls the contact type card reading unit or the non-contact type card reading unit to complete the operation on the IC card according to the decrypted plaintext.

Further, in the secure card reading method described above, before data interaction between the card reader and the terminal device, it also includes:

The card reader performs two-way authentication with the terminal device through the security module, and after the two-way authentication passes, the card reader performs data interaction with the terminal device.

The beneficial effect of the present invention is that: the secure card reader and the secure card reading method provided in the embodiment of the present invention provide hardware-level security for the data exchanged between the card reader and the terminal device through the security module and the control module. Guaranteed to solve the problem that the interactive data between the card reader and the terminal device is easy to leak. In addition, in another embodiment of the present invention, before the card reader and the terminal device perform data interaction, the two-way security verification between the two can be completed based on the security module to further ensure the legitimacy of the connected card reader or terminal device , ensuring the security of data transmission.

Description of drawings

Fig. 1 is a schematic structural view of a secure card reader provided in a specific embodiment of the present invention;

FIG. 2 is a schematic structural view of a security module in a specific embodiment of the present invention;

3 is a schematic structural view of a secure card reader provided in a specific embodiment of the present invention;

Fig. 4 is a schematic flowchart of a secure card reading method provided in a specific embodiment of the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

Fig. 1 shows a schematic structural view of a secure card reader provided in an embodiment of the present invention, as can be seen from the figure, the secure card reader 100 includes a card reader module 110 and is used to connect with a terminal device 200 A data transmission module 120 for data transmission, the card reading module 110 includes a contact card reading unit 111 and a non-contact card reading unit 110, wherein the secure card reader 110 also includes a security module 130 and is used to control the reading The control module 140 of the working mode of the card module 110 , the contact card reading unit 111 and the contactless card reading unit 112 are respectively connected with the control module 140 , and the control module 140 is connected with the data transmission module 120 through the security module 130 . Wherein, the working mode of the card reading module 110 is contact card reading or non-contact card reading.

The security card reader 100 provided by the present invention, through the security module 130, makes the interaction data between the card reader and the terminal device 200 need to be processed by the security module 130, which solves the problem of the interaction between the two. The problem of insecure data transmission. Wherein, the interaction data includes the information in the card read by the card reader through the contact card reader unit 111 or the contactless card reader unit 112, or the operation instruction or other information that the terminal device 200 needs to send to the card. Data information.

The terminal device 200 includes, but is not limited to, a smart phone, a PC, and a server.

In an embodiment of the present invention, the data transmission module 120 includes at least one of the following modules: a USB communication module, a Bluetooth communication module, an infrared communication module, and a Wifi communication module.

In practical applications, one or more of the above-mentioned data transmission modules can be selected according to needs, so that different communication modes can be selected between the terminal device 200 and the secure card reader 100 according to the requirements of practical application scenarios. In addition, after the secure card reader 100 is connected to the terminal device 200 through the data transmission module 120, the terminal device can also provide working power for the card reader through the data transmission module 120, that is, the working power of the card reader can be provided by the terminal device 200 Provide, for example, a PC can provide working power for the card reader through the USB interface.

In one embodiment of the present invention, the security module 130 includes an encryption and decryption unit 131, as shown in FIG. Encrypt or decrypt the interaction data between them. Wherein, the specific key data stored in the encryption and decryption unit 121 is determined by a specific encryption and decryption method agreed between the card reader and the terminal device 200, and the specific encryption and decryption method can be selected according to actual needs.

In an embodiment of the present invention, the security module 130 may further include a terminal device verification unit 132 for performing two-way security authentication with the terminal device 200, as shown in FIG. 2 .

Using the solution in this embodiment, before the secure card reader 100 and the terminal device 200 perform interactive data transmission, the two-way authentication between the two can be completed through the terminal device verification unit 132. Only when the two-way authentication passes, can the subsequent Transmission of interactive data. Through the terminal device verification unit 132, security verification is performed on both the terminal device and the secure card reader, thereby ensuring the legitimacy of the card reader and the terminal device for data transmission.

In an embodiment of the present invention, the security module 130 may further include a device information storage unit 133 for storing terminal device-related information, the terminal device-related information includes the unique identifier of the terminal device, such as the serial number of the device or Other IDs. At this time, the terminal device verification unit 132 can perform two-way authentication with the terminal device based on the device-related information stored in the device information storage unit 133, that is, the terminal device-related information is used as a parameter for two-way authentication, because the terminal device The information is unique, so this method ensures that a terminal device corresponds to a unique authentication parameter in the two-way authentication process.

It should be noted that the specific implementation method of two-way authentication is an existing technology, and the specific two-way authentication method to be selected can be selected according to actual needs. Two-way authentication schemes and user settings are determined.

In actual operation, the security module 130 may directly select the security element SE. The control module 140 can be implemented directly by selecting the main control chip MCU.

In one embodiment of the present invention, the secure card reader 100 may also include a power management module 150 for supplying power to each module of the secure card reader, as shown in FIG. 3 , wherein the power management module 150 includes a power supply module 151 and a voltage conversion module 152, and the power supply module 151 is connected to each module of the card reader through the voltage conversion module 152.

In this embodiment, the secure card reader 100 is an active card reader, and the power management module 150 is used for each module of the card reader (including the control module 140, the security module 130, the data transmission module 120, the contact reader The card unit 111) provides power, wherein the power module 151 includes but not limited to a rechargeable battery, and the voltage conversion module 152 is used to convert the voltage of the power module 151 into the working voltage required by each module.

An embodiment of the present invention also provides a secure card reading method based on the above secure card reader, as shown in Figure 4, the method may mainly include the following steps:

Step S2: the control module of the card reader controls the contact type card reading unit or the non-contact type card reading unit to read the first data on the IC card, and send the first data to the security module;

Step S3: the security module encrypts the first data, and sends the encrypted ciphertext to the terminal device through the data transmission module;

Step S4: The security module of the card reader receives the second data sent by the terminal device through the data transmission module, decrypts the second data, and sends the decrypted plaintext to the control module;

Step S5: The control module controls the contact card reading unit or the non-contact card reading unit to complete the operation on the IC card according to the decrypted plaintext.

After the card reader is connected to the terminal device through the data transmission module, after the card reader reads the first data in the IC, it encrypts the read first data and then sends it to the terminal device, and the terminal device sends the data to the IC through the card reader. When the card sends the second data, the second data is also encrypted data, and a security module is required to decrypt it first and then complete the operation on the IC card according to the plaintext of the second data. It can be seen that no matter the data uploaded by the card reader or the data sent by the terminal equipment, it needs to be processed by the security module to ensure the security of data transmission.

It should be noted that the above sequence of steps S2 to S5 is not unique, and the sequence may be different according to different application scenarios. For example, when it is necessary to operate the security application or other information in the IC card, if only the terminal device sends an operation instruction to the IC through the card reader, the method may only include steps S3 and S4, or it may be The terminal device first sends data to the card reader, and the card reader returns response data to the card reader after completing the operation according to the sent data. At this time, the steps of the method are steps S3, S4, S1 and S2.

In an embodiment of the present invention, when the card reader includes a terminal device verification unit, before data interaction between the card reader and the terminal device, the card reading method may further include:

Step S1: the card reader performs two-way authentication with the terminal device through the security module;

Before the card reader and the terminal device perform data interaction (the card reader uploads data to the terminal device or the terminal device sends data to the card reader), the two-way authentication of the two is first performed. After the two-way authentication is passed, the card reader and the terminal Only devices can exchange data. Through two-way authentication, it is ensured that the card reader and the terminal device for data interaction are legal devices, further improving the security of data interaction.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (10)

1. a kind of secure readers, including card reading module (110) and for being connected what is carried out data transmission with terminal device (200) Data transmission module (120), the card reading module (110) includes contact card reading unit (111) and contactless card reading unit (112), it is characterised in that：Also include security module (130) and the control mould for controlling the mode of operation of card reading module (110) Block (140), contact card reading unit (111) and contactless card reading unit (112) are connected with control module (140) respectively, institute Control module (140) is stated to be connected with data transmission module (120) by security module (130).

2. a kind of secure readers according to claim 1, it is characterised in that：The security module (130) is including adding solution Close unit (131).

3. a kind of secure readers according to claim 2, it is characterised in that：The security module (130) also includes using In the terminal device authentication unit (132) that bidirectional safe certification is carried out with terminal device (200).

4. a kind of secure readers according to claim 3, it is characterised in that：The security module (130) also includes using In the device information storage unit (133) of storage terminal device relevant information, the terminal device relevant information sets including terminal Standby unique mark.

5. according to a kind of secure readers that one of Claims 1-4 is described, it is characterised in that：The security module (130) is Safety element SE.

6. according to a kind of secure readers that one of Claims 1-4 is described, it is characterised in that：Also include being used to read safety The power management module (150) that each module of card device is powered, the power management module (150) is including power module (151) and voltage transformation module (152), power module (151) passes through voltage transformation module (150) and connects with each module of card reader Connect.

7. a kind of secure readers according to claim 6, it is characterised in that：The data transmission module (120) includes With at least one in lower module：

Usb communication module, bluetooth communication, infrared communication module, Wifi communication modules.

8. a kind of secure readers according to claim 6, it is characterised in that：The control module (140) is master control core Piece MCU.

9. a kind of safe card reading method based on one of claim 1 to 8 secure readers, comprises the following steps：

The control module control contact card reading unit of card reader or contactless card reading unit read the first data on IC-card, And by the first data is activation to security module；

The security module is encrypted to first data, and the ciphertext after encryption is sent to by data transmission module Terminal device；

The second data that the security module of card reader is issued by data transmission module receiving terminal apparatus, to second data It is decrypted, and the plaintext after decryption is sent to control module；

Control module is completed to IC-card according to the plaintext after decryption, control contact card reading unit or contactless card reading unit Operation.

10. a kind of safe card reading method according to claim 9, it is characterised in that：Enter between card reader and terminal device Before row data interaction, also include：

Card reader carries out two-way authentication by the security module and terminal device, after two-way authentication passes through, card reader and end End equipment carries out data interaction.